Certificate Packages using the wrong IP Address

FreeTAKTeam / FreeTakServer

Situational Awareness Server compatible with TAK clients

Eclipse Public License 2.0

611 stars 163 forks source link

Certificate Packages using the wrong IP Address #684

Open TLeggett68 opened 3 months ago

TLeggett68 commented 3 months ago

Probably not an issue per say. While using ZeroTier, generated certificates are being created with the servers physical IP and not the ZeroTier assigned IP for that device. Is there a work around to force the use of the ZT IP? All IP addresses within the config.py point towards the ZT assigned IP. The UI Data package IP has no effect on the IP Address in the certificate.

TLeggett68 commented 3 months ago

Just wanted to add, all IP addresses in the MainConfig.yaml also point towards the zero tier device IP as well. Im not sure why FTS still associates the device IP. If i navigate to zerotierIP:5000 from outside the local network, i can access the UI.

naman108 commented 1 month ago

hey there, sorry for the delay, if you update to version 2.2.1 and set the following variables in your /opt/FTSConfig.yaml file

Addresses:
  FTS_DP_ADDRESS=[YOUR ZT IP]
  FTS_USER_ADDRESS=[YOUR ZT IP]

simply restart your server, regenerate your certificates and then they should contain your ZT IP.

nir2602 commented 1 month ago

Hey @TLeggett68 , have you tried implementing the fix above yet?

TLeggett68 commented 3 weeks ago

@nir2602 I have not tried it yet. I’ll give it a shot tonight or tomorrow and report back. Thank you for taking the time to check it out.