Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

untrusted certificate on apps.owncloud.com #1105

Closed
dh-connect opened this issue Nov 23, 2016 · 15 comments

Comments

Projects
None yet
5 participants
@dh-connect
Copy link

commented Nov 23, 2016

don't know if this is right here, but my OC can't access the oc app store, reason seems to be the certificate:

Could not get application: cURL error 60: SSL certificate problem: unable to get local issuer certificate

wget https://apps.owncloud.com:
ERROR: The certificate of ‘apps.owncloud.com’ is not trusted.
ERROR: The certificate of ‘apps.owncloud.com’ hasn't got a known issuer.

@ghost

This comment has been minimized.

Copy link

commented Nov 23, 2016

Hi,

the correct issue tracker would be https://github.com/owncloud/appstore-issues/issues but i think we can keep that in here.

We noticed the issue itself also at central: https://central.owncloud.org/t/curl-60-certificate-issue-with-appstore/4115

Seems it is caused by the move to Let's Encrypt yesterday. The server is not sending a correct certificate chain:

https://www.ssllabs.com/ssltest/analyze.html?d=apps.owncloud.com

and so curl and wget seems to show the issue where Firefox is happily accessing https://apps.owncloud.com

Maybe @danimo can help here to fix the server so it is sending the correct certificate chain.

@PVince81

This comment has been minimized.

Copy link
Member

commented Nov 23, 2016

@PVince81 PVince81 changed the title untrusted certificate untrusted certificate on apps.owncloud.com Nov 23, 2016

@JKawohl

This comment has been minimized.

Copy link
Contributor

commented Nov 23, 2016

@dercorn is on it afaik

@dercorn

This comment has been minimized.

Copy link

commented Nov 23, 2016

@PVince81 @jnweiger @DeepDiver1975 @Kawohl @danimo @felixboehm I fixed the certificate for https://apps.owncloud.com. Please verify.

@ghost

This comment has been minimized.

Copy link

commented Nov 23, 2016

@dercorn Thanks for having a look into that. It seems apps.owncloud.com is still not sending a correct certificate chain as seen on https://www.ssllabs.com/ssltest/analyze.html?d=apps.owncloud.com

@dercorn

This comment has been minimized.

Copy link

commented Nov 23, 2016

@RealRancor @felixboehm @jnweiger I fixed apps.owncloud.com and it now has an A+ rating :)

@ghost

This comment has been minimized.

Copy link

commented Nov 23, 2016

Really great, thanks!!! Confirmed that this issue is now fixed. 👯

@ghost

This comment has been minimized.

Copy link

commented Nov 23, 2016

@dercorn @DeepDiver1975

Need to bump this again, seems api.owncloud.com still has that problem:

https://www.ssllabs.com/ssltest/analyze.html?d=api.owncloud.com

@DeepDiver1975 DeepDiver1975 reopened this Nov 23, 2016

@ghost

This comment has been minimized.

Copy link

commented Nov 23, 2016

Btw. funny to see that the NextCloud guys instantly pointing fingers like "properly hosted platform" and similar: nextcloud/server#2269, strukturag/nextcloud-spreedme#61 (One linked above).

🙊

@dh-connect

This comment has been minimized.

Copy link
Author

commented Nov 24, 2016

I can confirm that the new certificate works now, but I still get the error in oc from the app store:
Error core Could not get application: cURL error 60: SSL certificate problem: unable to get local issuer certificate

I also installed a new instance of OC without apps with a fresh config file,
but still the ssl problem in oc.

could anyone confirm that the certificate works with the oc app store? Thank you.

@ghost

This comment has been minimized.

Copy link

commented Nov 24, 2016

@JKawohl

This comment has been minimized.

Copy link
Contributor

commented Nov 24, 2016

should be fixed by now

@ghost

This comment has been minimized.

Copy link

commented Nov 24, 2016

@Kawohl Confirmed. https://www.ssllabs.com/ssltest/analyze.html?d=api.owncloud.com shows no issues anymore and the oC internal appstore is also showing the Categories and App updates again. 👍

@JKawohl

This comment has been minimized.

Copy link
Contributor

commented Nov 24, 2016

Thanks @dercorn @RealRancor

@JKawohl JKawohl closed this Nov 24, 2016

@dh-connect

This comment has been minimized.

Copy link
Author

commented Nov 24, 2016

works, great job!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.