search

MarcelCoding / jitsi-openid

Jitsi OpenID is an authentication adapter that allows Jitsi to authorize users with OpenID Connect.
GNU Affero General Public License v3.0
30 stars 4 forks source link

Add option for own CA certificate #320

Open small1 opened 3 weeks ago

small1 commented 3 weeks ago

On some networks they run their own CA. That is not always signed upstream.

It would be good with an option to the docket container to copy a ca certificate and update the ca trusted certs

MarcelCoding commented 3 weeks ago

Would it be "enough" to just use the system certificate authorities? Then everyone would be able to customize it with an custom docker file e.g.:

https://stackoverflow.com/questions/42292444/how-do-i-add-a-ca-root-certificate-inside-a-docker-image#42292623 (did not verify if this works)

With a base image of mine?

small1 commented 3 weeks ago

It would yes. We tried with our customers setup we got parts in and we could see the ca updated. But we still got certificate unverified error.

MarcelCoding commented 3 weeks ago

Could you perhaps try the version from here: https://github.com/MarcelCoding/jitsi-openid/actions/runs/10497409906 (as you know, I currently do not have a jitsi and I need to override transitive dependencies and i don't know yet if this changes the behavior as expected.)

small1 commented 3 weeks ago

Hmmm It seems like it still failes the connect to adfs with the information unknown issuer. We can provide access to jitsi for you we do have quite a few tests running :) Extception is this test which is on an internal network so that will be hard. But general access to jitsi and some kind of openid auth can be arranged.

MarcelCoding commented 3 weeks ago

That would be a solution to continue. What kind of access do you mean? Feel free to write it to me via mail. (me at m4rc3l dot de)