{"record":{"id":"69e3defc733678c5","repo":"fluent/fluentd","slug":"cert-path-does-not-contain-a-valid-certificate-69e3de","errorCode":null,"errorMessage":"cert_path does not contain a valid certificate","messagePattern":"cert_path does not contain a valid certificate","errorType":"exception","errorClass":"Fluent::ConfigError","httpStatus":null,"severity":"error","filePath":"lib/fluent/plugin_helper/socket.rb","lineNumber":213,"sourceCode":"\n        if block\n          begin\n            block.call(sock)\n          ensure\n            sock.close rescue nil\n          end\n        else\n          sock\n        end\n      end\n\n      def socket_certificates_from_file(path)\n        data = File.read(path)\n        pattern = Regexp.compile('-+BEGIN CERTIFICATE-+\\r?\\n(?:[^-]*\\r?\\n)+-+END CERTIFICATE-+\\r?\\n?', Regexp::MULTILINE)\n        list = []\n        data.scan(pattern) { |match| list << OpenSSL::X509::Certificate.new(match) }\n        if list.length == 0\n          raise Fluent::ConfigError, \"cert_path does not contain a valid certificate\"\n        end\n        list\n      end\n\n      def self.tls_verify_result_name(code)\n        case code\n        when OpenSSL::X509::V_OK then 'V_OK'\n        when OpenSSL::X509::V_ERR_AKID_SKID_MISMATCH then 'V_ERR_AKID_SKID_MISMATCH'\n        when OpenSSL::X509::V_ERR_APPLICATION_VERIFICATION then 'V_ERR_APPLICATION_VERIFICATION'\n        when OpenSSL::X509::V_ERR_CERT_CHAIN_TOO_LONG then 'V_ERR_CERT_CHAIN_TOO_LONG'\n        when OpenSSL::X509::V_ERR_CERT_HAS_EXPIRED then 'V_ERR_CERT_HAS_EXPIRED'\n        when OpenSSL::X509::V_ERR_CERT_NOT_YET_VALID then 'V_ERR_CERT_NOT_YET_VALID'\n        when OpenSSL::X509::V_ERR_CERT_REJECTED then 'V_ERR_CERT_REJECTED'\n        when OpenSSL::X509::V_ERR_CERT_REVOKED then 'V_ERR_CERT_REVOKED'\n        when OpenSSL::X509::V_ERR_CERT_SIGNATURE_FAILURE then 'V_ERR_CERT_SIGNATURE_FAILURE'\n        when OpenSSL::X509::V_ERR_CERT_UNTRUSTED then 'V_ERR_CERT_UNTRUSTED'\n        when OpenSSL::X509::V_ERR_CRL_HAS_EXPIRED then 'V_ERR_CRL_HAS_EXPIRED'\n        when OpenSSL::X509::V_ERR_CRL_NOT_YET_VALID then 'V_ERR_CRL_NOT_YET_VALID'","sourceCodeStart":195,"sourceCodeEnd":231,"githubUrl":"https://github.com/fluent/fluentd/blob/dd45c6e18dc7be33b5e5a0f0767bf46307ff5626/lib/fluent/plugin_helper/socket.rb#L195-L231","documentation":"Error \"cert_path does not contain a valid certificate\" thrown in fluent/fluentd.","triggerScenarios":"Thrown at lib/fluent/plugin_helper/socket.rb:213 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"dd45c6e18dc7be33b5e5a0f0767bf46307ff5626","analyzedAt":"2026-08-21T16:22:07.332Z","schemaVersion":2},"datasetVersion":"2026-08-21T18:17:14.833Z"}