Printing does not work on Ubuntu 22.04 - cups-pki-invalid

[Sami Pietila]

After upgrading to 22.04 printing did not work. There is cups-pki-invalid error and printer goes to paused state.

ProblemType: Bug
DistroRelease: Ubuntu 22.04
Package: cups 2.4.1op1-1ubuntu4
Uname: Linux 5.17.7-051707-generic x86_64
ApportVersion: 2.20.11-0ubuntu82
Architecture: amd64
CasperMD5CheckResult: pass
CupsErrorLog: Error: [Errno 13] Permission denied: '/var/log/cups/error_log'
CurrentDesktop: ubuntu:GNOME
Date: Sun May 15 15:34:47 2022
EcryptfsInUse: Yes
InstallationDate: Installed on 2021-10-12 (214 days ago)
InstallationMedia: Ubuntu 21.10 "Impish Indri" - Daily amd64 (20211010)
Lpstat: device for HP_Color_LaserJet_M552_5F80BF: implicitclass://HP_Color_LaserJet_M552_5F80BF/
MachineType: ASUSTeK COMPUTER INC. ROG Strix G513QY_G513QY
Papersize: a4
PpdFiles: Error: command ['fgrep', '-H', '*NickName', '/etc/cups/ppd/HP_Color_LaserJet_M552_5F80BF.ppd'] failed with exit code 2: grep: /etc/cups/ppd/HP_Color_LaserJet_M552_5F80BF.ppd: Permission denied
ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-5.17.7-051707-generic root=UUID=ff964c9b-ce92-4334-8759-9d785a262c60 ro rootflags=subvol=@ quiet splash vt.handoff=7
SourcePackage: cups
UpgradeStatus: Upgraded to jammy on 2022-04-24 (21 days ago)
dmi.bios.date: 03/29/2022
dmi.bios.release: 5.19
dmi.bios.vendor: American Megatrends International, LLC.
dmi.bios.version: G513QY.318
dmi.board.asset.tag: ATN12345678901234567
dmi.board.name: G513QY
dmi.board.vendor: ASUSTeK COMPUTER INC.
dmi.board.version: 1.0
dmi.chassis.asset.tag: No Asset Tag
dmi.chassis.type: 10
dmi.chassis.vendor: ASUSTeK COMPUTER INC.
dmi.chassis.version: 1.0
dmi.ec.firmware.release: 0.81
dmi.modalias: dmi:bvnAmericanMegatrendsInternational,LLC.:bvrG513QY.318:bd03/29/2022:br5.19:efr0.81:svnASUSTeKCOMPUTERINC.:pnROGStrixG513QY_G513QY:pvr1.0:rvnASUSTeKCOMPUTERINC.:rnG513QY:rvr1.0:cvnASUSTeKCOMPUTERINC.:ct10:cvr1.0:sku:
dmi.product.family: ROG Strix
dmi.product.name: ROG Strix G513QY_G513QY
dmi.product.version: 1.0
dmi.sys.vendor: ASUSTeK COMPUTER INC.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Sami Pietila (sampie)]

I found an old printer certificate from /etc/cups/ssl/ folder. Deleting the certificate made cups to download the new one from printer and now printing seems to work. Perhaps cups does not update the certificates.

[Nicolas Hasbun A. (nhasbun)]

Deleting the certificate also worked for me.

To do this user needs admin privileges. I guess this breaks basic printing functionality for regular users.

This is my printer: HP_Smart_Tank_530_series_21D133

[Richard Ayotte (rich-ayotte)]

Glad I found this bug report. Deleting the cert fixed the problem for me as well. I'm not sure why the cert changed and it would be nice to be notified that it changed and to be offered the option to have it replaced.

[Tim Urberg (n-tim-i)]

This worked for me as well with an HP OfficeJet Pro 9025.

[Jean-Francois Dockes (jean-francois-dockes)]

One more confirmation: deleting the certificate on the client computer also worked for me.Thanks a lot to Samie ! Canon printer.

[Paul Mitchell (paul-j-mitchell)]

Further confirmation, deleting a certificate file (dated Sept 2nd) got printing working again.
Printer Xerox B230 (probably not relevant, I'm guessing)

[Tamas Toth (tamas-toth-ebola)]

I can confirm, that deleting the cert. also solve my printing problem on 22.10!

[Karocyt (karocyt)]

Works for me too on 22.04 (for a Canon TS8350 on the network)

[Balthazart (andre2310)]

Deleting the certificate works for me on 22.10
I have a Canon TS6350

[Noah (kloudalpha)]

This issue is still present on 23.04, resolved by deleting old certificate.

[Dan Andreșan (danyer)]

Same, ubuntu 23.04, Epson ET-8500 printer, old certificate was from November, deleted it then I was able to print (and a new certificate appeared).

[Robert (robrwo)]

I am affected by this bug for a Xerox B230, I'd the printer is shut off and restart. Deleting the certificate fixes it.

[Zephyr (pasha-pivo)]

I wonder if there is a method or a script which can be run automatically to check printer status and remove the certificate if something is wrong?