Collabora Online: cURL error 60: SSL certificate problem

ā„¹ļø Support šŸ“„ Collabora
#1

Hey!

Iā€™ve got this error Please ask your administrator to add ca-chain.cert.pem to the ca-bundle.crt, for example ā€œcat /etc/loolwsd/ca-chain.cert.pem >> /resources/config/ca-bundle.crtā€ . The exact error message was: cURL error 60: SSL certificate problem: self signed certificate in certificate chain

Iā€™m sure that my bundle file is correct, because Iā€™ve use the same conf for other site.

My config looks like this

SSLCertificateFile /etc/apache2/ssl/mycert.cer
SSLCertificateChainFile /etc/apache2/ssl/mycert.ca-bundle
SSLCertificateKeyFile /etc/apache2/ssl/mycert.key

Here SSLCertificateChainFile /etc/apache2/ssl/mycert.ca-bundle my chain with root CA.

How can I fixed this error?

p.s. The same config works fine for https://nextcloud.mydomain.com

#2

Search the forums, this is a dup. apps.owncloud.com has certificate issues.

#3

You want to say that my bundle is incorrect?

#4

https://help.nextcloud.com/search?q=curl%20error%2060

#5

There are no clear solution.

I donā€™t use letā€™s encrypt. I used other CA center. And as I said before my bundle works fine in other Apache domain. Thatā€™s why I think that bundle is ok.

There is only one option to check wopi_url

But what is wopi_url and and how can i check this option?

#6

TL;DR: owncloud misconfigured their server certificate, you can however switch to the new app store :wink:

#7

Add your /etc/apache2/ssl/mycert.ca-bundle to /resources/config/ca-bundle.crt in your nextcloud directory as described in error text.

#8

Is it new repository
https://apps.nextcloud.com/apps/richdocuments ?

If itā€™s new, there is no possibility to download Collabora Online :(. 404 error.

From other side I donā€™t have APP repository in my nextcloud admin panel.

#9

I donā€™t think that itā€™s good idea to create this path for one bundle file /resources/config/

But I tried. Still doesnā€™t help.

#10

Iā€™ve added this to config file
ā€™appstoreurlā€™ => ā€˜https://apps.nextcloud.com/api/v0ā€™,

My APP store appeared.
But there is no Collabora Online app.

#11

How can I switch to new repository?
Does anyone work in Nextcloude with Collabora?

#12

Hi,

I have generated the certificates using the procedure at the below link:
https://jamielinux.com/docs/openssl-certificate-authority/index.html

After their generation, at nextcloud server, I needed to add the ca-chain.cert.pem file into the resources/config/ca-bundle.crt (at http(s) server home directory used by nextcloud). Below an example:

#copy chain cert into the nextcloud directory:
cat /etc/ssl/certs/ca-chain.cert.pem >> /var/www/nextcloud/resources/config/ca-bundle.crt

The ca-chain.cert.pem is generated as described on above link and sent to the nextcloud server.

Br.
Eduardo