CollaboraOnline / Docker-CODE

Dockerfile and scripts to generate CODE Docker image
147 stars 67 forks source link

SSL Woes when using vpn #58

Open develroo opened 5 years ago

develroo commented 5 years ago

So I have a public Nextcloud server which is also on a private VPN and I want to connect back to a WOPI server as a docker on the same private VPN but I am going crazy with the same errors all the time.

Everything seems fine until I connect then I get reams of this message


wsd-00029-00039 2019-01-21 23:36:16.087841 [ websrv_poll ] ERR  Socket #22 SSL BIO error: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca (0: Success)| ./net/SslSocket.hpp:281
wsd-00029-00039 2019-01-21 23:36:16.087954 [ websrv_poll ] ERR  Error while handling poll for socket #22 in websrv_poll: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca| ./net/Socket.hpp:570
wsd-00029-00039 2019-01-21 23:36:16.120082 [ websrv_poll ] ERR  Socket #23 SSL BIO error: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca (0: Success)| ./net/SslSocket.hpp:281
wsd-00029-00039 2019-01-21 23:36:16.120359 [ websrv_poll ] ERR  Error while handling poll for socket #23 in websrv_poll: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca| ./net/Socket.hpp:570
wsd-00029-00039 2019-01-21 23:36:16.176061 [ websrv_poll ] ERR  Socket #22 SSL BIO error: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca (0: Success)| ./net/SslSocket.hpp:281
wsd-00029-00039 2019-01-21 23:36:16.176240 [ websrv_poll ] ERR  Error while handling poll for socket #22 in websrv_poll: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca| ./net/Socket.hpp:570
wsd-00029-00039 2019-01-21 23:36:16.236206 [ websrv_poll ] ERR  Socket #22 SSL BIO error: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca (0: Success)| ./net/SslSocket.hpp:281
wsd-00029-00039 2019-01-21 23:36:16.236334 [ websrv_poll ] ERR  Error while handling poll for socket #22 in websrv_poll: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca| ./net/Socket.hpp:570

No I did set up an alternative nginx config on the nextcloud server so it is listening over the VPN with a self signed cert of the IP address for the VPN and likewise I spun up the docker with the same IP but for the other end.

So what unknown ca is it talking about and are self signed certs not supported in which can I run it without SSL at all because it is only going over my VPN in the first place?

I have been at this for days now and it is just grinding me down. Their ought to be a simple way to do this surely?

Thank in advance.

koehdaniel commented 4 years ago

Same problem when I try to save the Collabora Server URL in my nextcloud settings: Could not establish connection to the Collabora Online server

wsd-00006-00035 2020-05-21 16:28:31.503620 [ websrv_poll ] ERR  Socket #25 SSL BIO error: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca (0: Success)| ./net/SslSocket.hpp:291
wsd-00006-00035 2020-05-21 16:28:31.504059 [ websrv_poll ] ERR  Error while handling poll for socket #25 in websrv_poll: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca| net/Socket.cpp:308

Warm regards Daniel