Collabora Online: cURL error 60: SSL certificate problem

koval 2016-11-23 11:22:01 UTC #1

Hey!

I've got this error Please ask your administrator to add ca-chain.cert.pem to the ca-bundle.crt, for example "cat /etc/loolwsd/ca-chain.cert.pem >> /resources/config/ca-bundle.crt" . The exact error message was: cURL error 60: SSL certificate problem: self signed certificate in certificate chain

I'm sure that my bundle file is correct, because I've use the same conf for other site.

My config looks like this

SSLCertificateFile /etc/apache2/ssl/mycert.cer
SSLCertificateChainFile /etc/apache2/ssl/mycert.ca-bundle
SSLCertificateKeyFile /etc/apache2/ssl/mycert.key

Here SSLCertificateChainFile /etc/apache2/ssl/mycert.ca-bundle my chain with root CA.

How can I fixed this error?

p.s. The same config works fine for https://nextcloud.mydomain.com

BernhardPosselt 2016-11-23 12:27:06 UTC #2

Search the forums, this is a dup. apps.owncloud.com has certificate issues.

koval 2016-11-23 12:35:16 UTC #3

You want to say that my bundle is incorrect?

BernhardPosselt 2016-11-23 12:52:32 UTC #4

https://help.nextcloud.com/search?q=curl%20error%2060

koval 2016-11-23 13:57:34 UTC #5

There are no clear solution.

I don't use let's encrypt. I used other CA center. And as I said before my bundle works fine in other Apache domain. That's why I think that bundle is ok.

There is only one option to check wopi_url

But what is wopi_url and and how can i check this option?

BernhardPosselt 2016-11-23 14:29:51 UTC #6

TL;DR: owncloud misconfigured their server certificate, you can however switch to the new app store

keir_ru 2016-11-23 14:43:32 UTC #7

Add your /etc/apache2/ssl/mycert.ca-bundle to /resources/config/ca-bundle.crt in your nextcloud directory as described in error text.

koval 2016-11-23 15:11:23 UTC #8

Is it new repository
https://apps.nextcloud.com/apps/richdocuments ?

If it's new, there is no possibility to download Collabora Online :(. 404 error.

From other side I don't have APP repository in my nextcloud admin panel.

koval 2016-11-23 15:18:21 UTC #9

I don't think that it's good idea to create this path for one bundle file /resources/config/

But I tried. Still doesn't help.

koval 2016-11-23 15:55:46 UTC #10

I've added this to config file
'appstoreurl' => 'https://apps.nextcloud.com/api/v0',

My APP store appeared.
But there is no Collabora Online app.

koval 2016-11-27 23:51:05 UTC #11

How can I switch to new repository?
Does anyone work in Nextcloude with Collabora?

eduardoefb 2017-09-13 03:08:44 UTC #12

Hi,

I have generated the certificates using the procedure at the below link:
https://jamielinux.com/docs/openssl-certificate-authority/index.html

After their generation, at nextcloud server, I needed to add the ca-chain.cert.pem file into the resources/config/ca-bundle.crt (at http(s) server home directory used by nextcloud). Below an example:

#copy chain cert into the nextcloud directory:
cat /etc/ssl/certs/ca-chain.cert.pem >> /var/www/nextcloud/resources/config/ca-bundle.crt

The ca-chain.cert.pem is generated as described on above link and sent to the nextcloud server.

Br.
Eduardo