cups-pki-expired

[Sami Pietila]

The printer always goes to stopped state in Ubuntu 20.04. Print properties window has status message saying: "cups-pki-expired". I have HP color laserjet m552, which Ubuntu discovers directly from the local network and configures automatically.

ProblemType: Bug
DistroRelease: Ubuntu 20.04
Package: cups 2.3.1-9ubuntu1.1
ProcVersionSignature: Ubuntu 5.4.0-40.44-generic 5.4.44
Uname: Linux 5.4.0-40-generic x86_64
ApportVersion: 2.20.11-0ubuntu27.3
Architecture: amd64
CasperMD5CheckResult: skip
CurrentDesktop: ubuntu:GNOME
Date: Tue Jul 7 14:40:00 2020
InstallationDate: Installed on 2019-11-03 (247 days ago)
InstallationMedia: Ubuntu 19.10 "Eoan Ermine" - Release amd64 (20191017)
Lpstat: device for HP_Color_LaserJet_M552_5F80BF_: implicitclass://HP_Color_LaserJet_M552_5F80BF_/
MachineType: LENOVO 81H1
Papersize: a4
PpdFiles: Error: command ['fgrep', '-H', '*NickName', '/etc/cups/ppd/HP_Color_LaserJet_M552_5F80BF_.ppd'] failed with exit code 2: grep: /etc/cups/ppd/HP_Color_LaserJet_M552_5F80BF_.ppd: Permission denied
ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-5.4.0-40-generic root=UUID=7f92666a-65f8-485e-b998-046c2c596aa5 ro rootflags=subvol=@ quiet splash vt.handoff=7
SourcePackage: cups
UpgradeStatus: Upgraded to focal on 2020-03-28 (100 days ago)
dmi.bios.date: 08/17/2018
dmi.bios.vendor: LENOVO
dmi.bios.version: 8PCN45WW
dmi.board.asset.tag: NO Asset Tag
dmi.board.name: LNVNB161216
dmi.board.vendor: LENOVO
dmi.board.version: SDK0J40700 WIN
dmi.chassis.asset.tag: NO Asset Tag
dmi.chassis.type: 10
dmi.chassis.vendor: LENOVO
dmi.chassis.version: Lenovo ideapad 530S-14ARR
dmi.modalias: dmi:bvnLENOVO:bvr8PCN45WW:bd08/17/2018:svnLENOVO:pn81H1:pvrLenovoideapad530S-14ARR:rvnLENOVO:rnLNVNB161216:rvrSDK0J40700WIN:cvnLENOVO:ct10:cvrLenovoideapad530S-14ARR:
dmi.product.family: ideapad 530S-14ARR
dmi.product.name: 81H1
dmi.product.sku: LENOVO_MT_81H1_BU_idea_FM_ideapad 530S-14ARR
dmi.product.version: Lenovo ideapad 530S-14ARR
dmi.sys.vendor: LENOVO

[Roland Roland (cyrin)]

Same here. Newly installed Linux Mint 20 XFCE, Xerox 7225 printer. Driver installed, printing stops with "cups-pki-expired" message.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[polzin (polzin)]

Same here, with a Dell Color MFP E525w.

This page https://gwolf.org/2020/05/certified-printer-fumes.html suggest that it has to do with an expired ssl certificate of the printer. If a check my printers certificate it has expired one year ago. After upgrading from ubuntu 18.04 to 20.20 it stopped working.

[Mike Burdette (mikeburd)]

i am having the same issue on my HP Deskjet 3630

[clement (vulcanoo)]

Hello i have the same problem with HP printer envy 4720 since i upgraded to linux mint 20.1

[amir shkedy (amirsh314)]

The same problem with HP DeskJet 3830 ubuntu 20.04.02

[Nyyr (nyyr1)]

Have you tried putting

AllowExpiredCerts Yes

into /etc/cups/client.conf ?

I had the same issue with Xerox WorkCentre 7220 and this did the trick. The printer's TLS certificate expired:

openssl x509 -in /var/spool/cups/tmp/.cups/ssl/<printer.crt> -text

showed:
            Not After : Aug 28 16:18:54 2021 GMT

[Sami Pietila (sampie)]

I think the solution should be something that does not require editing files under /etc.

Perhaps printing should prompt a question if the document should be printed in case the printer certificate has expired.

[sokolov (daniel-sokolov)]

I'm affected with a Dell printer that suddenly started throwing this error.

I tried adding the file client.conf to /etc/cups as suggested by Nyyr, but that didn't help. Maybe the

AllowExpiredCerts Yes

has to go into a different .conf file in that folder?

[Roy Pardee (roy-pardee)]

@sokolov--I also have a Dell printer & I think I have fixed the problem by adding that AllowExpiredCerts option that @Nyyr mentioned, via the GUI settings dialog. As I recall the steps were:

settings -> printers -> Additional Printer settings
right-click on affected printer (for me Dell_Color_MFP_E525w etc.) -> properties
click 'job options' category on left
scroll all the way to the bottom, where it says "To add a new option, enter its name in the box below and click to add." Type `AllowExpiredCerts` (without the back-ticks) and click 'Add'
enter the value 'true' for this new option.

After doing that, I could print a test page.

[Thomas Kalinowski (thomaskalinowski)]

I tried adding the option 'AllowExpiredCerts' and setting it 'true'. It did not change anything for me: The printer state is set to 'Stopped' with status message 'cups-pki-expired' as soon as I send a job.

[Aaron (theeyes-99)]

Same error; same printer; same issue as Thomas above.

WORKED AROUND by creating client.conf in /etc/cups and adding

AllowExpiredCerts Yes

but obviously this is not user-friendly.

[gatopeich (gatoguan-os)]

AllowExpiredCerts WORKAROUND worked for me too

$ echo "AllowExpiredCerts Yes" | sudo tee /etc/cups/client.conf

Thanks!