Printing does not work anymore - printer error cups-pki-invalid

[DerPatrick]

I have a Lexmark MC3224dwe printer and print via WiFi. Everything used to work fine. But then printing suddenly didn't work anymore. When I try to print a document I always get the error message "Printer 'Lexmark_MC3224dwe':'cups-pki-invalid'". I think an update broke something. Does anyone have an idea what could be the root cause and how to fix it?

My system configuration:

Code: Select all

System:
  Kernel: 5.15.0-83-generic x86_64 bits: 64 compiler: gcc v: 11.4.0 Desktop: MATE 1.26.0 wm: marco
    dm: LightDM Distro: Linux Mint 21.2 Victoria base: Ubuntu 22.04 jammy
Machine:
  Type: Laptop System: TUXEDO product: N2x0WU v: N/A serial: <superuser required>
    Chassis: No Enclosure type: 10 serial: <superuser required>
  Mobo: TUXEDO model: N2x0WU serial: <superuser required> UEFI: American Megatrends v: 5.12
    date: 01/29/2018
Battery:
  ID-1: BAT0 charge: 35.8 Wh (100.0%) condition: 35.8/45.3 Wh (79.0%) volts: 16.8 min: 15.1
    model: Notebook BAT serial: <filter> status: Full
CPU:
  Info: quad core model: Intel Core i7-8550U bits: 64 type: MT MCP arch: Coffee Lake rev: A cache:
    L1: 256 KiB L2: 1024 KiB L3: 8 MiB
  Speed (MHz): avg: 2399 high: 2400 min/max: 400/4000 cores: 1: 2400 2: 2400 3: 2400 4: 2400
    5: 2400 6: 2400 7: 2396 8: 2397 bogomips: 31999
  Flags: avx avx2 ht lm nx pae sse sse2 sse3 sse4_1 sse4_2 ssse3 vmx
Graphics:
  Device-1: Intel UHD Graphics 620 vendor: CLEVO/KAPOK driver: i915 v: kernel ports: active: eDP-1
    empty: DP-1, DP-2, HDMI-A-1, HDMI-A-2, HDMI-A-3 bus-ID: 00:02.0 chip-ID: 8086:5917
  Device-2: Chicony USB2.0 Camera type: USB driver: uvcvideo bus-ID: 1-6:3 chip-ID: 04f2:b59e
  Display: x11 server: X.Org v: 1.21.1.4 compositor: marco v: 1.26.0 driver: X:
    loaded: modesetting unloaded: fbdev,vesa gpu: i915 display-ID: :0 screens: 1
  Screen-1: 0 s-res: 1920x1080 s-dpi: 96
  Monitor-1: eDP-1 model: Chi Mei Innolux res: 1920x1080 dpi: 158 diag: 353mm (13.9")
  OpenGL: renderer: Mesa Intel UHD Graphics 620 (KBL GT2) v: 4.6 Mesa 23.0.4-0ubuntu1~22.04.1
    direct render: Yes
Audio:
  Device-1: Intel Sunrise Point-LP HD Audio vendor: CLEVO/KAPOK driver: snd_hda_intel v: kernel
    bus-ID: 00:1f.3 chip-ID: 8086:9d71
  Sound Server-1: ALSA v: k5.15.0-83-generic running: yes
  Sound Server-2: PulseAudio v: 15.99.1 running: yes
  Sound Server-3: PipeWire v: 0.3.48 running: yes
Network:
  Device-1: Intel Wireless 8265 / 8275 driver: iwlwifi v: kernel pcie: speed: 2.5 GT/s lanes: 1
    bus-ID: 01:00.0 chip-ID: 8086:24fd
  IF: wlp1s0 state: up mac: <filter>
  Device-2: Realtek RTL8111/8168/8411 PCI Express Gigabit Ethernet vendor: CLEVO/KAPOK
    driver: r8169 v: kernel pcie: speed: 2.5 GT/s lanes: 1 port: e000 bus-ID: 02:00.1
    chip-ID: 10ec:8168
  IF: enp2s0f1 state: down mac: <filter>
Bluetooth:
  Device-1: Intel Bluetooth wireless interface type: USB driver: btusb v: 0.8 bus-ID: 1-5:2
    chip-ID: 8087:0a2b
  Report: hciconfig ID: hci0 rfk-id: 0 state: down bt-service: enabled,running rfk-block:
    hardware: no software: yes address: <filter>
Drives:
  Local Storage: total: 953.87 GiB used: 94.26 GiB (9.9%)
  ID-1: /dev/nvme0n1 vendor: Samsung model: SSD 960 PRO 1TB size: 953.87 GiB speed: 31.6 Gb/s
    lanes: 4 serial: <filter> temp: 37.9 C
Partition:
  ID-1: / size: 250.92 GiB used: 34.71 GiB (13.8%) fs: ext4 dev: /dev/nvme0n1p2
  ID-2: /boot/efi size: 511 MiB used: 6.2 MiB (1.2%) fs: vfat dev: /dev/nvme0n1p1
  ID-3: /home size: 685.36 GiB used: 59.55 GiB (8.7%) fs: ext4 dev: /dev/nvme0n1p3
Swap:
  ID-1: swap-1 type: file size: 2 GiB used: 0 KiB (0.0%) priority: -2 file: /swapfile
USB:
  Hub-1: 1-0:1 info: Hi-speed hub with single TT ports: 12 rev: 2.0 speed: 480 Mb/s
    chip-ID: 1d6b:0002
  Device-1: 1-5:2 info: Intel Bluetooth wireless interface type: Bluetooth driver: btusb
    rev: 2.0 speed: 12 Mb/s chip-ID: 8087:0a2b
  Device-2: 1-6:3 info: Chicony USB2.0 Camera type: Video driver: uvcvideo rev: 2.0
    speed: 480 Mb/s chip-ID: 04f2:b59e
  Hub-2: 2-0:1 info: Super-speed hub ports: 6 rev: 3.0 speed: 5 Gb/s chip-ID: 1d6b:0003
  Hub-3: 3-0:1 info: Hi-speed hub with single TT ports: 2 rev: 2.0 speed: 480 Mb/s
    chip-ID: 1d6b:0002
  Hub-4: 4-0:1 info: Super-speed hub ports: 2 rev: 3.1 speed: 10 Gb/s chip-ID: 1d6b:0003
Sensors:
  System Temperatures: cpu: 48.0 C pch: 40.0 C mobo: N/A
  Fan Speeds (RPM): N/A
Repos:
  Packages: apt: 2797
  No active apt repos in: /etc/apt/sources.list
  Active apt repos in: /etc/apt/sources.list.d/cisofy-lynis.list
    1: deb https: //packages.cisofy.com/community/lynis/deb/ stable main
  Active apt repos in: /etc/apt/sources.list.d/google-chrome.list
    1: deb [arch=amd64] https: //dl.google.com/linux/chrome/deb/ stable main
  Active apt repos in: /etc/apt/sources.list.d/official-package-repositories.list
    1: deb http: //packages.linuxmint.com victoria main upstream import backport
    2: deb http: //archive.ubuntu.com/ubuntu jammy main restricted universe multiverse
    3: deb http: //archive.ubuntu.com/ubuntu jammy-updates main restricted universe multiverse
    4: deb http: //archive.ubuntu.com/ubuntu jammy-backports main restricted universe multiverse
    5: deb http: //security.ubuntu.com/ubuntu/ jammy-security main restricted universe multiverse
  Active apt repos in: /etc/apt/sources.list.d/skype-stable.list
    1: deb [arch=amd64] https: //repo.skype.com/deb stable main
  Active apt repos in: /etc/apt/sources.list.d/spotify.list
    1: deb http: //repository.spotify.com stable non-free
Info:
  Processes: 259 Uptime: 4h 20m Memory: 31.22 GiB used: 2.42 GiB (7.8%) Init: systemd v: 249
  runlevel: 5 Compilers: gcc: 11.4.0 alt: 11/12 Client: Unknown python3.10 client inxi: 3.3.13

[karlchen]

Hello, DerPatrick.

The most likely root cause is an obsolete certificate file in /etc/cups/ssl/.
Please, cf. this Launchpad bug thread: https://bugs.launchpad.net/ubuntu/+sour ... ug/1973441
The most concise solution can be found in this post: https://www.linuxquestions.org/question ... 175724683/
Hopefully, that solution will work for your as well.

Regards,
Karl

[DerPatrick]

Hello Karl,

Thanks for your help.
I deleted the certificate in /etc/cups/ssl/. Then I restarted the cups service and I also restarted my printer (power cycle) and tried to print a document again. But unfortunately no new certificate file is created in /etc/cups/ssl/ (/etc/cups/ssl/ stays empty) and I still get the error message "printer error cups-pki-invalid".

Any other ideas?

Regards,
Patrick

[breversa]

I have two friends for whom I do computer maintenance who regularly encounter that issue.

Deleting the certificate in /etc/cups/ssl works, but the issue eventually appears again. Is there no permanent solution?