druidfi / stonehenge

Multi-project local development environment & toolset on Docker
MIT License
61 stars 6 forks source link

NET::ERR_CERT_AUTHORITY_INVALID after stonehenge first install #50

Closed carlotodeschini closed 3 years ago

carlotodeschini commented 3 years ago

Just after running $ make up if I try to access to treafik dashboard page using HTTPS I get a NET::ERR_CERT_AUTHORITY_INVALID error from browser. I can see the root CA in my "/etc/ssl/certs" dir and I can find the CA in Chrome and Firefox environment. I'm running ubuntu 20.04 and docker 20.10.7. What I'm missing? Thanks, tode

back-2-95 commented 3 years ago

@carlotodeschini can you check with your browser what kind if information it gives about the certificate?

Something likes this when I click the lock on Chrome and get Certificate information:

CleanShot 2021-08-05 at 12 48 31

carlotodeschini commented 3 years ago

Thank you, I've already checked and I found the TRAEFIK default certificate. So I substituted this certificate with the one created for my test domain into file "stonehenge/traefik/traefik.dynamic.yml" and now is working correctly. Is this correct? tode

back-2-95 commented 3 years ago

Ah, are you using your own custom domain? I mean other than docker.so ?

carlotodeschini commented 3 years ago

Yes, I'm using "todell.lan" domain because we have a catchall rule into our internal DNS. Something like *.todell.lan -> "desktop_IP_with_Stonehenge"

back-2-95 commented 3 years ago

Ok then your changes in stonehenge/traefik/traefik.dynamic.yml are correct. I'd like to have it so that conf would not be needed to change in the future.

carlotodeschini commented 3 years ago

I'd like to have it so that conf would not be needed to change in the future.

Sorry I don't get your request...

back-2-95 commented 3 years ago

Sorry, no request there =)

I was just thinking that it would be great if stonehenge/traefik/traefik.dynamic.yml would not be needed to edit at all when using custom domain.

carlotodeschini commented 3 years ago

Ok, yes, I agree with that :thumbsup: