Collabora Online: cURL error 60: SSL certificate problem

koval · November 23, 2016, 11:22am

Hey!

I’ve got this error Please ask your administrator to add ca-chain.cert.pem to the ca-bundle.crt, for example “cat /etc/loolwsd/ca-chain.cert.pem >> /resources/config/ca-bundle.crt” . The exact error message was: cURL error 60: SSL certificate problem: self signed certificate in certificate chain

I’m sure that my bundle file is correct, because I’ve use the same conf for other site.

My config looks like this

SSLCertificateFile /etc/apache2/ssl/mycert.cer
SSLCertificateChainFile /etc/apache2/ssl/mycert.ca-bundle
SSLCertificateKeyFile /etc/apache2/ssl/mycert.key

Here SSLCertificateChainFile /etc/apache2/ssl/mycert.ca-bundle my chain with root CA.

How can I fixed this error?

p.s. The same config works fine for https://nextcloud.mydomain.com

BernhardPosselt · November 23, 2016, 12:27pm

Search the forums, this is a dup. apps.owncloud.com has certificate issues.

koval · November 23, 2016, 12:35pm

You want to say that my bundle is incorrect?

BernhardPosselt · November 23, 2016, 12:52pm

https://help.nextcloud.com/search?q=curl%20error%2060

koval · November 23, 2016, 1:57pm

There are no clear solution.

I don’t use let’s encrypt. I used other CA center. And as I said before my bundle works fine in other Apache domain. That’s why I think that bundle is ok.

There is only one option to check wopi_url

But what is wopi_url and and how can i check this option?

BernhardPosselt · November 23, 2016, 2:29pm

TL;DR: owncloud misconfigured their server certificate, you can however switch to the new app store

keir_ru · November 23, 2016, 2:43pm

Add your /etc/apache2/ssl/mycert.ca-bundle to /resources/config/ca-bundle.crt in your nextcloud directory as described in error text.

koval · November 23, 2016, 3:11pm

Is it new repository
https://apps.nextcloud.com/apps/richdocuments ?

If it’s new, there is no possibility to download Collabora Online :(. 404 error.

From other side I don’t have APP repository in my nextcloud admin panel.

koval · November 23, 2016, 3:18pm

I don’t think that it’s good idea to create this path for one bundle file /resources/config/

But I tried. Still doesn’t help.

koval · November 23, 2016, 3:55pm

I’ve added this to config file
’appstoreurl’ => ‘https://apps.nextcloud.com/api/v0’,

My APP store appeared.
But there is no Collabora Online app.

koval · November 27, 2016, 11:51pm

How can I switch to new repository?
Does anyone work in Nextcloude with Collabora?

eduardoefb · September 13, 2017, 3:08am

Hi,

I have generated the certificates using the procedure at the below link:
https://jamielinux.com/docs/openssl-certificate-authority/index.html

After their generation, at nextcloud server, I needed to add the ca-chain.cert.pem file into the resources/config/ca-bundle.crt (at http(s) server home directory used by nextcloud). Below an example:

#copy chain cert into the nextcloud directory:
cat /etc/ssl/certs/ca-chain.cert.pem >> /var/www/nextcloud/resources/config/ca-bundle.crt

The ca-chain.cert.pem is generated as described on above link and sent to the nextcloud server.

Br.
Eduardo