Closed markusdd closed 4 years ago
it looks like 192.168.1.226 is connecting using the Server IP and not using the server hostname...
Hence the:
no certificate available for ''
Simply put: There is no certificate for hostname Null
I did some more research... It is a bug with Caddy and Self-signed certificates.
To use a self signed certificate, you need to set default-SNI.
I already made an issue with it, but @danb35 doesn't want to fix it: https://github.com/danb35/freenas-iocage-nextcloud/issues/89
I was unwilling to mess with the upstream rc script, which this fix would have required, under Caddy v1. Under Caddy v2, this is an option that can be set in the Caddyfile. It's present and documented in the caddyv2 branch.
Ok, this https thing drives me crazy.
Was checking caddy logs why I'm getting SSL_ERROR_INTERNAL_ERROR_ALERT from Firefox, and this weird webserver won't serve me the self signed certificate.
Rationale: This is a test instance, but already with real names/adresses. I use a traefik proxy which takes care of letsencrypt etc, so I just want a self signed cert internally. With letsenecrypt the whole setup does not work (because it can't behind the proxy), but with self-signed cert everything starts up nicely.
Just can't access the page either using the name (traefik returns 'Bad Gateway' which means no proper response) or the IP. When I use the IP Firefox gives me this weird SSL ERROR.
Any idea? I don't know much about webservers, just that I hate them ;) (and that stuff like nextcloud NEVER works the first time because of s*** like this)
Anyway, thanks a lot for providing this script, works great except this one 'small' issue, which I guess is because of this caddy server.
Settings used: