All scripts fail to load from the server

Prerequisites

[X] Did you read the README?
[X] Are you running the latest version?
[X] Did you search other issues to see if this problem was already reported?

Description

Whenever I try to load Arc in my browser, everything is shown as offline in the UI and the web console just shows a ton of warnings. Upon initially loading the HTTPS page with the self-signed cert, Arcd shows a TLS failure and then fails to work after that, even after restarting and generating new certificates. http2: server: error reading preface from client 127.0.0.1:55903: remote error: tls: bad certificate

Environment

Please provide:

Config:

{
"address": "127.0.0.1",
"port": 443,
"secret": "",
"certificate": "~/arcd-certificate.pem",
"key": "~/arcd-key.pem",
"username": "",
"password": "",
"database": "~/db",
"token_duration": 50,
"compression": true,
"scheduler": {
    "enabled": true,
    "period": 10,
    "reports": {
        "enabled": false,
        "rate_limit": 60,
        "filter": [ "login_ok", "login_ko", "token_ko", "update", "record_expired" ],
        "to": "youremail@gmail.com",
        "smtp":{
            "address": "smtp.gmail.com",
            "port": 587,
            "username": "youremail@gmail.com",
            "password": "your smtp password"
        },
        "pgp": {
            "enabled": true,
            "keys":{
                "private": "~/server.private.key.asc",
                "public": "~/my.public.key.asc"
            }
        }
    }
},
"backups": {
    "enabled": false,
    "period": 1800,
    "folder": "/some/backup/path/",
    "run": "scp arc-backup.tar user@backup-server:/media/arc_backup/"
}
}

Windows 10 Pro 64-Bit and Firefox Nightly 63.0a1

Browser Log:

Loading failed for the <script> with source “https://127.0.0.1/js/version.js”. 127.0.0.1:21:1
Loading failed for the <script> with source “https://127.0.0.1/js/crash.js”. 127.0.0.1:22:1
Loading failed for the <script> with source “https://127.0.0.1/js/libs/jquery/jquery.min.js”. 127.0.0.1:24:1
Loading failed for the <script> with source “https://127.0.0.1/js/libs/jquery/jquery.editable.js”. 127.0.0.1:25:1
Loading failed for the <script> with source “https://127.0.0.1/js/libs/jquery/jquery.timeago.js”. 127.0.0.1:26:1
Loading failed for the <script> with source “https://127.0.0.1/js/libs/jquery/jquery-sortable.js”. 127.0.0.1:27:1
Loading failed for the <script> with source “https://127.0.0.1/js/libs/jquery/jq-ajax-progress.min.js”. 127.0.0.1:28:1
Loading failed for the <script> with source “https://127.0.0.1/js/libs/bootstrap/bootstrap.bundle.min.js”. 127.0.0.1:30:1
Loading failed for the <script> with source “https://127.0.0.1/js/libs/bootstrap/bootstrap-datetimepicker.min.js”. 127.0.0.1:31:1
Loading failed for the <script> with source “https://127.0.0.1/js/libs/angular/angular.min.js”. 127.0.0.1:32:1
Loading failed for the <script> with source “https://127.0.0.1/js/libs/ace/ace.js”. 127.0.0.1:34:1
Loading failed for the <script> with source “https://127.0.0.1/js/libs/ace/ext-modelist.js”. 127.0.0.1:35:1
Loading failed for the <script> with source “https://127.0.0.1/js/api.js?v=2”. 127.0.0.1:37:1
Loading failed for the <script> with source “https://127.0.0.1/js/encoding.js”. 127.0.0.1:38:1
Loading failed for the <script> with source “https://127.0.0.1/js/aes_cbc.js”. 127.0.0.1:39:1
Loading failed for the <script> with source “https://127.0.0.1/js/aes.js”. 127.0.0.1:40:1
Loading failed for the <script> with source “https://127.0.0.1/js/entries/base.js”. 127.0.0.1:41:1
Loading failed for the <script> with source “https://127.0.0.1/js/entries/input.js”. 127.0.0.1:42:1
Loading failed for the <script> with source “https://127.0.0.1/js/entries/url.js”. 127.0.0.1:43:1
Loading failed for the <script> with source “https://127.0.0.1/js/entries/text.js”. 127.0.0.1:44:1
Loading failed for the <script> with source “https://127.0.0.1/js/entries/file.js”. 127.0.0.1:45:1
Loading failed for the <script> with source “https://127.0.0.1/js/entries/password.js”. 127.0.0.1:46:1
Loading failed for the <script> with source “https://127.0.0.1/js/entries/markdown.js”. 127.0.0.1:47:1
Loading failed for the <script> with source “https://127.0.0.1/js/entries/checkbox.js”. 127.0.0.1:48:1
Loading failed for the <script> with source “https://127.0.0.1/js/entries/html.js”. 127.0.0.1:49:1
Loading failed for the <script> with source “https://127.0.0.1/js/entries/btcaddr.js”. 127.0.0.1:50:1
Loading failed for the <script> with source “https://127.0.0.1/js/entries/otp.js”. 127.0.0.1:51:1
Loading failed for the <script> with source “https://127.0.0.1/js/entries/code.js”. 127.0.0.1:52:1
Loading failed for the <script> with source “https://127.0.0.1/js/entries.js”. 127.0.0.1:53:1
Loading failed for the <script> with source “https://127.0.0.1/js/record.js”. 127.0.0.1:54:1
Loading failed for the <script> with source “https://127.0.0.1/js/notify.js”. 127.0.0.1:55:1
Loading failed for the <script> with source “https://127.0.0.1/js/app.js”. 127.0.0.1:56:1
[Show/hide message details.] ReferenceError: $ is not defined[Learn More] 127.0.0.1:125:19

MSYS_NT-10.0 2.10.0(0.325/5/3) 2018-04-23 03:21 x86_64 Msys

Debug Log

[2018-07-17 15:55:17]  INF  arcd v1.3.0 (windows amd64) is starting ...
[2018-07-17 15:55:17]  INF  Loading configuration from config.json ...
[2018-07-17 15:55:17]  WAR  Creating database C:\Users\User\db ...
[2018-07-17 15:55:17]  DBG  Loading index from 'C:\Users\User\db' ...
[2018-07-17 15:55:17]  DBG    dbNextId=0
[2018-07-17 15:55:17]  INF  0 B of records loaded in 3.9956ms.
[2018-07-17 15:55:17]  DBG  Starting scheduler with a period of 10s ...
[2018-07-17 15:55:17]  IMP  Backups are disabled.
[2018-07-17 15:55:17]  DBG  Scheduler started with a 10s period.
[2018-07-17 15:55:17]  DBG  Checking for newer versions ...
[2018-07-17 15:55:17]  IMP  TLS certificate fingerprint is (fingerprint here)
[2018-07-17 15:55:17]  DBG  Loading web application from C:\Users\User\Downloads\arc_1.3.0_windows_amd64\arc ...
[2018-07-17 15:55:17]  DBG  Loading manifest from C:\Users\User\Downloads\arc_1.3.0_windows_amd64\arc/manifest.json ...
[2018-07-17 15:55:17]  INF  Running on https://127.0.0.1:443/ ...
[2018-07-17 15:55:17]  DBG  Location header = 'https://github.com/evilsocket/arc/releases/tag/v1.3.0'
[2018-07-17 15:55:17]  DBG  Latest version is '1.3.0'
[2018-07-17 15:55:17]  DBG  No updates available.

Steps to Reproduce

Download binary release of Arc and setup config
Run arcd.exe -config config.json -app arc
Open the IP from your config in a browser, look for the TLS failure in the arcd console and the failure to load scripts in the web UI.

Expected behavior: Arc to load properly and to be able to create new items or even to login. Actual behavior: Arc fails to load any of the scripts needed to operate.

evilsocket / arc