richdocuments icon indicating copy to clipboard operation
richdocuments copied to clipboard

Adding Certificate to ca-bundle.crt has no effect

Open ip6li opened this issue 8 years ago • 4 comments

Steps to reproduce:

  • install collabora office
  • run docker container
  • get certificate with echo | openssl s_client -connect localhost:9980
  • add certificate data returned from command above to resources/config/ca-bundle.crt

After click to office following message appears:

Collabora Online: SSL-Zertifikat ist nicht installiert.

Bitten Sie Ihren Administrator die ca-chain.cert.pem zum ownCloud ca-bundle.crt hinzuzufügen. Z.B. "cat /etc/loolwsd/ca-chain.cert.pem >> /resources/config/ca-bundle.crt". Die genaue Fehlermeldung war:cURL error 60: SSL certificate problem: self signed certificate in certificate chain

Expected behaviour: Certificate should be accepted.

ip6li avatar Feb 03 '17 10:02 ip6li

Are you copying certificate from docker collabora container? You should add to resources/config/ca-bundle.crt same cert you use in apache2 or nginx ...

Mysterycz avatar Feb 06 '17 10:02 Mysterycz

Hello, I get the "Access denied" message in owncloud.

I use the nginx reverse proxy to access to oc container and also to access the collabora container.

I use letsencrypt with test option enabled, and trying to add to owncloud/resources/config/ca-bundle.crt the generated certs in /etc/nginx/certs ( the same certs nginx use) does not solve the "Access denied" message. Even I get a new error in oc web ui saying the server has no Internet connection.

Please, any help or hint would be very much appreciated. Thanks

orboan avatar Feb 23 '17 10:02 orboan

README.md says:

You have to add the CA cert manually to ownCloud trusted cert storage: cat ca-chain.cert.pem >> owncloud/resources/config/ca-bundle.crt

Where can I find ca-chain.cert.pem?

danielberlin avatar Mar 15 '17 12:03 danielberlin

@danielberlin I found it inside the collabora office docker container folder ( {container-id}/rootfs/etc/loolwsd/ )

trexguo avatar Mar 31 '17 05:03 trexguo