Getting Cert Expired message for Github Enterprise but can't tell what cert

[andytinkham]

I have a script witten in Ruby with the octokit gem. The script connects to our Github Enterprise server, retrieves a list of repos from a specific organization, and then does stuff for each repo. The script has worked for a long time, until last week. I'm now getting an error when the script tries to connect to our Github Enterprise server in the octokit org_repos method: connect_nonblock': SSL_connect returned=1 errno=0 state=error: certificate verify failed (certificate has expired) (OpenSSL::SSL::SSLError)

This seems like a straightforward error, but I can't seem to track down what certificate has expired. The stacktrace includes a call to perform_with_redirection, but I see no evidence that a redirect is occurring. Here's what I've tried...

• Load https:// in a browser and looked at the cert - it's valid and not expired
• Load https:///api/v3/ in a browser and looked at the cert - it's valid (and the same cert as at the root)
• Verified my personal access token is valid
• Updated octokit gem to the latest version
• Tried the gh command line tool and that worked to retrieve a list of repos for the organization
• ran `curl -i --request GET --url https:///api/v3/orgs//repos --header "Authorization: Bearer " - gives me a 200 response code and a list of org repos as expected. No redirect detected.

If it matters, I'm on a mac, running Ventura 13.5 and Ruby 3.0.5. I'm using octokit 7.0.0 (though I had the same failure with 6.1.1 as well. 6.1.1 had previously worked.).

The script also access Github.com orgs and works correctly there - it's just the GitHub Enterprise server.

Given the absence of a redirect and the only place the failure is occurring is specifically in the octokit usage, I'm at a loss for what else to look at. Any suggestions for things I can check to see where I need to (or need to get my IT team to) change something to make this work again?