keguira
commented
1 year ago I don't think it's a GLPI error.
Certificate validation and TLS handshake are on client side.
On windows, chromium based browsers uses windows keystore. Keys are stored at different levels (user, machine, etc..) and maintained automatically with updates.
On Windows 10, GoDaddy is in the User CA Store (i can see it with the command certutil -Silent -Split -User -Store CA) just like Let's Encrypt.
It seems that you are using Postman : the issue is on Postman side and how it handles TLS 1.2 handshake. Here is a solution from their community forum : https://community.postman.com/t/how-to-add-tls-1-2-version-in-postman/1670
SilvaFernando
github-actions[bot]
Code of Conduct
Is there an existing issue for this?
Version
10.0.9
Bug description
I'm using GLPI 10.0.9 with SSL Certificate provided by Go Daddy, but on Web Interface I don't have any trouble in access:
But if I try to send an API request I have an error on TLS 1.2:
I'm testing using a Let's Encrypt certificate and I don have any problem, I tried activate TLS support using this: https://apache.tutorials24x7.com/blog/how-to-enable-tls-1-2-and-tls-1-3-in-apache-web-server
Do you have some ideas to help me solve this?
Relevant log output
No response
Page URL
https://MyDNS
Steps To reproduce
Just use a Go DAddy certificate on Apache
Your GLPI setup information
Instruções de instalação e configuração
Server
Operating system: Linux 3bf19f3b9f94 4.18.0-348.20.1.el8_5.x86_64 #1 SMP Thu Mar 10 20:59:28 UTC 2022 x86_64 PHP 8.1.20 fpm-fcgi (Core, PDO, Phar, Reflection, SPL, SimpleXML, Zend OPcache, apcu, bz2, calendar, cgi-fcgi, ctype, curl, date, dom, exif, fileinfo, filter, ftp, gd, gettext, hash, iconv, imap, intl, json, ldap, libxml, mbstring, mysqli, mysqlnd, openssl, pcre, pdo_mysql, pdo_sqlite, posix, selinux, session, shmop, snmp, soap, sockets, sodium, sqlite3, standard, sysvmsg, sysvsem, sysvshm, tokenizer, xml, xmlreader, xmlrpc, xmlwriter, xsl, zip, zlib) Setup: max_execution_time="30" memory_limit="128M" post_max_size="20M" safe_mode="" session.save_handler="files" upload_max_filesize="20M" Software: Apache/2.4.37 (AlmaLinux) () Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.82 Server Software: Percona Server (GPL), Release 22, Revision 7e301439b65 Server Version: 8.0.30-22 Server SQL Mode: STRICT_TRANS_TABLES,NO_ZERO_IN_DATE,NO_ZERO_DATE,ERROR_FOR_DIVISION_BY_ZERO,NO_ENGINE_SUBSTITUTION Parameters: glpi@db-glpi-10.0.8-Dev/glpi Host info: db-glpi-10.0.8-Dev via TCP/IP PHP version (8.1.20) is supported. Sessions configuration is OK. Allocated memory is sufficient. mysqli extension is installed. Following extensions are installed: dom, fileinfo, filter, libxml, json, simplexml, xmlreader, xmlwriter. curl extension is installed. gd extension is installed. intl extension is installed. zlib extension is installed. The constant SODIUM_CRYPTO_AEAD_XCHACHA20POLY1305_IETF_NPUBBYTES is present. Database engine version (8.0.30) is supported. No files from previous GLPI version detected. The log file has been created successfully. Write access to /var/lib/glpi/files/_cache has been validated. The directory could not be created in /etc/glpi. Write access to /var/lib/glpi/files/_cron has been validated. Write access to /var/lib/glpi/files/data-documents has been validated. Write access to /var/lib/glpi/files/_dumps has been validated. Write access to /var/lib/glpi/files/_graphs has been validated. Write access to /var/lib/glpi/files/_lock has been validated. Write access to /var/lib/glpi/files/_pictures has been validated. Write access to /var/lib/glpi/files/_plugins has been validated. Write access to /var/lib/glpi/files/_rss has been validated. Write access to /var/lib/glpi/files/_sessions has been validated. Write access to /var/lib/glpi/files/_tmp has been validated. Write access to /var/lib/glpi/files/_uploads has been validated. For security reasons, SELinux mode should be Enforcing. Web server root directory configuration seems safe. Sessions configuration is secured. OS and PHP are relying on 64 bits integers. exif extension is installed. ldap extension is installed. openssl extension is installed. Following extensions are installed: bz2, Phar, zip. Zend OPcache extension is installed. Following extensions are installed: ctype, iconv, mbstring, sodium. The directory could not be created in /usr/share/glpi/marketplace. Access to timezone database (mysql) is not allowed.GLPI constants
Libraries
SQL replicas
Notifications
Plugins list
formcreator Name: Form Creator Version: 2.14.0-dev State: Installed / not activated Install Method: ManualAnything else?
No response