ExpressLRS / ExpressLRS-Configurator

Cross platform configuration & build tool for the ExpressLRS radio link
GNU General Public License v3.0
595 stars 130 forks source link

When using a self-signed certificate to locally reverse proxy GitHub, an error may occur. #558

Open yblpoi opened 1 year ago

yblpoi commented 1 year ago

Problem description

Due to the stringent regulatory measures on the Chinese internet, it's common to access GitHub locally using a self-signed CA certificate for reverse proxy. This approach allows us to access GitHub through a browser successfully while also introducing certain issues. When in a locally reversed proxy state, the ExpressLRS-Configurator encounters the following error: "request to https://api.github.com/repos/ExpressLRS/ExpressLRS/releases?per_page=100 failed, reason: unable to verify the first certificate."

Problem Screenshot

11c51583e154349fb31e13282b208d7

Suggestion

Generally, when using a self-signed certificate for local reverse proxy, it's necessary to add the generated certificate to the system's trusted certificate list. This step is required for both Linux and Windows systems. Therefore, it's recommended that the ExpressLRS-Configurator utilize the system's certificate trust list, or alternatively, provide an option for users to choose between using the built-in SSL certificate mode or the system's trusted certificate list.

Digression

Due to my limited English proficiency, a lot of the content has been completed with the assistance of translation software. I hope you can bear with me and understand. Users from mainland China really need to address this issue. This way, it can greatly ensure a higher success rate for compilation. We hope that you can resolve the issues we've encountered. We sincerely wish the project continued success and improvement.

jurgelenas commented 1 year ago

You could add --ignore-certificate-errors switch to app flags.

What OS are you using? Windows?

yblpoi commented 12 months ago

windows