cockpit-project / cockpit

Cockpit is a web-based graphical interface for servers.
http://www.cockpit-project.org/
GNU Lesser General Public License v2.1
11.16k stars 1.11k forks source link

Cockpit fails to connect on HTTPS through Let's Encrypt and Certbot + Nginx Reverse Proxy on DuckDNS subdomain #20565

Open remivoire opened 4 months ago

remivoire commented 4 months ago

Issue:

Cockpit works on a non-HTTPS site with port 9090, but fails to connect when using HTTPS with Let's Encrypt and Certbot + Nginx Reverse proxy to use it with a DuckDNS subdomain.

Error is as follows which appears on the web interface when I log in with my details:

Connection failed There was an unexpected error while connecting to the machine. Messages related to the failure might be found in the journal: journalctl -u cockpit

Steps to reproduce:

  1. Install Cockpit on a machine.
  2. Install nginx and configure a reverse proxy to create a subdomain for DuckDNS. (for example, cockpit.yourdomain.duckdns.org)
  3. Configure HTTPS using Let's Encrypt and Certbot on a DuckDNS subdomain.
  4. Attempt to access Cockpit via HTTPS.

Expected Behavior:

Cockpit should connect and load the interface over HTTPS.

Actual Behavior:

image Cockpit loads the interface over the domain, but can't go beyond login with the above error message.

Version of Cockpit

314-1

Where is the problem in Cockpit?

None

Server operating system

Ubuntu

Server operating system version

24.04 LTS

What browsers are you using?

Chrome, Edge, Brave

System log

Jun 08 03:15:26 ip-172-31-1-26 systemd[1]: Starting cockpit.service - Cockpit Web Service...
Jun 08 03:15:26 ip-172-31-1-26 systemd[1]: Started cockpit.service - Cockpit Web Service.
Jun 08 03:15:26 ip-172-31-1-26 cockpit-tls[1644]: cockpit-tls: gnutls_handshake failed: A TLS fatal alert has been received.
Jun 08 03:15:27 ip-172-31-1-26 cockpit-tls[1644]: cockpit-tls: gnutls_handshake failed: A TLS fatal alert has been received.
Jun 08 03:15:29 ip-172-31-1-26 cockpit-tls[1644]: cockpit-tls: gnutls_handshake failed: A TLS fatal alert has been received.
Jun 08 03:15:29 ip-172-31-1-26 cockpit-tls[1644]: cockpit-tls: gnutls_handshake failed: A TLS fatal alert has been received.
Jun 08 03:15:30 ip-172-31-1-26 cockpit-tls[1644]: cockpit-tls: gnutls_handshake failed: A TLS fatal alert has been received.
Jun 08 03:15:30 ip-172-31-1-26 cockpit-tls[1644]: cockpit-tls: gnutls_handshake failed: A TLS fatal alert has been received.
Jun 08 03:15:30 ip-172-31-1-26 cockpit-tls[1644]: cockpit-tls: gnutls_handshake failed: A TLS fatal alert has been received.
Jun 08 03:15:30 ip-172-31-1-26 cockpit-tls[1644]: cockpit-tls: gnutls_handshake failed: A TLS fatal alert has been received.
Jun 08 03:15:30 ip-172-31-1-26 cockpit-tls[1644]: cockpit-tls: gnutls_handshake failed: A TLS fatal alert has been received.
Jun 08 03:15:37 ip-172-31-1-26 cockpit-tls[1644]: cockpit-tls: gnutls_handshake failed: A TLS fatal alert has been received.
Jun 08 03:15:37 ip-172-31-1-26 cockpit-tls[1644]: cockpit-tls: gnutls_handshake failed: A TLS fatal alert has been received.
Jun 08 03:15:37 ip-172-31-1-26 cockpit-tls[1644]: cockpit-tls: gnutls_handshake failed: A TLS fatal alert has been received.
Jun 08 03:15:37 ip-172-31-1-26 cockpit-tls[1644]: cockpit-tls: gnutls_handshake failed: A TLS fatal alert has been received.
Jun 08 03:15:38 ip-172-31-1-26 cockpit-tls[1644]: cockpit-tls: gnutls_handshake failed: A TLS fatal alert has been received.
Jun 08 03:15:38 ip-172-31-1-26 cockpit-tls[1644]: cockpit-tls: gnutls_handshake failed: A TLS fatal alert has been received.
Jun 08 03:16:47 ip-172-31-1-26 cockpit-tls[1644]: cockpit-tls: gnutls_handshake failed: A TLS fatal alert has been received.
Jun 08 03:16:47 ip-172-31-1-26 cockpit-tls[1644]: cockpit-tls: gnutls_handshake failed: A TLS fatal alert has been received.
Jun 08 03:16:47 ip-172-31-1-26 cockpit-tls[1644]: cockpit-tls: gnutls_handshake failed: A TLS fatal alert has been received.
Jun 08 03:16:47 ip-172-31-1-26 cockpit-tls[1644]: cockpit-tls: gnutls_handshake failed: A TLS fatal alert has been received.
Jun 08 03:17:08 ip-172-31-1-26 cockpit-tls[1644]: cockpit-tls: gnutls_handshake failed: A TLS fatal alert has been received.
Jun 08 03:27:50 ip-172-31-1-26 cockpit-tls[1644]: cockpit-tls: gnutls_handshake failed: A TLS fatal alert has been received.
Jun 08 03:27:50 ip-172-31-1-26 cockpit-tls[1644]: cockpit-tls: gnutls_handshake failed: A TLS fatal alert has been received.
Jun 08 03:27:52 ip-172-31-1-26 cockpit-tls[1644]: cockpit-tls: gnutls_handshake failed: A TLS fatal alert has been received.
heavymp commented 2 weeks ago

i Have same problem with NPM and Authentik