spesmilo / electrumx

Alternative implementation of spesmilo/electrum-server
MIT License
441 stars 353 forks source link

"certificate verify failed: unable to get local issuer certificate" #187

Closed DrekiDegga closed 2 years ago

DrekiDegga commented 2 years ago

I have been running a public electrumx server for a while just for fun at node.degga.net:50002. It seems to work fine and I can connect to it using any of my devices and it seems to get a fair amount of traffic.

I got an SSL certificate from letsencrypt for it using certbot and set it to only use SSL.

I just tried to download and install electrum on a fresh install of debian on a new laptop but the electrum wallet application refuses to connect to my electrum server here on the lan with me.

I turned logging on on the local client and this is the output I'm getting.

I'm pretty sure I have a genuine copy of electrum wallet app, I verified the GPG signatures using keys i already had in my keyring.

Since this is a fresh install of electrum wallet I don't know why it would have saved certificates on file for my server. perhaps It got a bad certificate from another server?

It seems unlikely that there is a MITM attack currently happening since the server is on the LAN with me.

20220619T141201.096905Z | INFO | network | connecting to node.degga.net:50002:s as new interface 20220619T141201.205230Z | WARNING | interface.[node.degga.net:50002] | Cannot connect to main server due to SSL error (maybe cert changed compared to "/home/dreki/.electrum/certs/node.degga.net"). Exc: ConnectError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)')) 20220619T141201.206728Z | INFO | network | couldn't launch iface node.degga.net:50002:s -- CancelledError()

All of my other devices are still working with the server okay so I believe something is wrong on the client side.