ngrok icon indicating copy to clipboard operation
ngrok copied to clipboard

x509: certificate signed by unknown authority

Open siddiq-rehman opened this issue 8 years ago • 16 comments

Hi,

While I am trying to run the ngrok file, I am getting the error as "x509: certificate signed by unknown authority". Earlier it was working fine. Currently I am working under proxy.

Config.YML file:

region: ap console_ui: true compress_conn: false http_proxy: "http://myproxy:8080" inspect_db_size: 50000000 log_level: info log_format: json log: D:/NGROK/ngrok.log root_cas: trusted update: true update_channel: stable web_addr: localhost:4040

@inconshreveable requesting you to help on this issue

siddiq-rehman avatar May 04 '17 09:05 siddiq-rehman

Did you self-sign your certificates? If so, you'll need to add trust_host_root_certs: false to your configuration, in addition to have built the client using your self-signed cert.

tomasdev avatar Oct 19 '17 18:10 tomasdev

@tomasdev i have the same issue, your method doesn't work.

huanz avatar Jan 04 '18 06:01 huanz

+1

Fed29 avatar Feb 28 '18 09:02 Fed29

Hi

To my understanding this issue occurs when proxy blocks ngrok domain.

Regards Siddiq Rehman

On 28-Feb-2018, at 2:32 PM, Federico Angaramo [email protected] wrote:

+1

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or mute the thread.

siddiq-rehman avatar Mar 04 '18 06:03 siddiq-rehman

The cause of this issue is as @siddiq-rehman stated, if your proxy blocks the URL, ngrok gets a response back which it doesn't expect, which is a response from the proxy with a self-signed cert.

jordantogether avatar Sep 18 '18 10:09 jordantogether

+1..

surfjedi avatar Sep 27 '18 20:09 surfjedi

Anyone manage to figure out how to bypass this?

azaeng04 avatar Jul 02 '19 14:07 azaeng04

The current version of ngrok configuration no longer has trust_host_root_certs. It may have been updated to root_cas. I fixed the x509 issue by setting root_cas: host. Perhaps this could help @azaeng04

mrGrigg avatar Sep 09 '19 20:09 mrGrigg

None of them works for me

riponbanik avatar Dec 19 '19 03:12 riponbanik

The current version of ngrok configuration no longer has trust_host_root_certs. It may have been updated to root_cas. I fixed the x509 issue by setting root_cas: host. Perhaps this could help @azaeng04

where do you set this?

RahulKantheti avatar Feb 19 '20 16:02 RahulKantheti

@FLASH-99 In the config file https://ngrok.com/docs#config-location if there isn't one there, just create one and put root_cas: host at line 1.

mrGrigg avatar Feb 19 '20 16:02 mrGrigg

Hi To my understanding this issue occurs when proxy blocks ngrok domain. Regards Siddiq Rehman On 28-Feb-2018, at 2:32 PM, Federico Angaramo @.***> wrote: +1 — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or mute the thread.

I have self hosted the ngrokd server on aws. still i am getting this issue. also I am getting hits via proxy public IP address but not able to connect from client to server. Any work arounds?

tango-j avatar May 06 '20 13:05 tango-j

The current version of ngrok configuration no longer has trust_host_root_certs. It may have been updated to root_cas. I fixed the x509 issue by setting root_cas: host. Perhaps this could help @azaeng04

Were you working behind the client? did u use self-signed cert? did u self host the server or using ngrok domain itself

tango-j avatar May 06 '20 13:05 tango-j

In the yml file, change root_cas: host to root_cas: trusted Worked for me

keytrap-x86 avatar Jul 08 '20 14:07 keytrap-x86

None of these methods help. I am using the latest version of ngrok

susenj avatar Aug 28 '20 08:08 susenj

Latest docs for locating your ngrok.yml file: https://ngrok.com/docs/ngrok-agent/config#default-locations

None of these methods helped for me either and my ngrok version at the time was 3.1.1.

The root cause was a proxy had silently been implemented. The solution was for the proxy admin to whitelist traffic to and from ngrok.

garethbrickman avatar Jan 14 '23 03:01 garethbrickman

Thank you for opening this issue! As of April 2016, the ngrok service has permanently moved to https://ngrok.com/. To join the community and file bug reports or feature enhancements for the ngrok agent, please go to https://github.com/ngrok/ngrok.

This repository is no longer actively maintained and will be archived soon to reduce confusion with the latest ngrok versions. We thank you for the continued support of ngrok and look forward to seeing you over at ngrok.com and the ngrok Community Repo.

russorat avatar May 08 '24 19:05 russorat