boyle / 2018-measure-stress

Using machine learning to investigate sympathetic activation of the autonomic nervous system (SAANS) during the treatment of mild traumatic brain injury, chronic pain, and post-traumatic stress disorder.
3 stars 1 forks source link

SSL Certificate not trusted #21

Closed fcharih closed 5 years ago

fcharih commented 5 years ago

It appears that the Let's Encrypt SSL Certificate is not trusted when requests are made outside of the browser. I experience issues with both curl and inside the app when I make requests at the login endpoint.

Output of a cURL request:

$ curl 'https://saans.ca/auth/login' \
-H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' \
-H 'Accept-Language: en-CA,en-US;q=0.7,en;q=0.3'\
-H 'Content-Type: application/x-www-form-urlencoded' \
--data 'username=fcharih&password=<mypassword>'

curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
fcharih commented 5 years ago

This seems relevant: https://community.letsencrypt.org/t/some-browser-say-certificate-is-not-trusted/28766/7

boyle commented 5 years ago

https://github.com/galeone/letsencrypt-lighttpd The hint for me: missing ssl.ca-file = "/etc/lighttpd/fullchain.pem"