Error with TLS Client Certificates enabled

ℹ️ Support
1

Hello,

i have a working installation under https://cloud.domain.com/

nextcloud
nextcloud557×578 14.7 KB

As soon as I enable Client Certificates for the cloud subdomain just like for other subdomains, I encounter an error:

Your web server is not yet properly set up to allow file synchronization, because the WebDAV interface seems to be broken. To allow this check to run you have to make sure that your webserver can connect to itself. Therefor it must be able to resolve and connect to at least one its trusted_domains or the overwrite.cli.url.

nextcloud_error
nextcloud_error1506×668 72.5 KB

The only difference is the switch to ssl_verify_client on; in nginx, which works for all other vhosts.

Any ideas on what I can do to resolve this issue? No errors are written to nextclouds log.

nginx.conf server block - Pastebin.com
config.php - Pastebin.com

Best wishes

cyan

2

I have updated to version 29.0.4, but the issue persists:

  • No errors with ssl_verify_client off;
  • Errors occur with ssl_verify_client on;

Is this nginx related ? I have followed the configuration guidelines provided in the official Nextcloud documentation closely.

Any insights or suggestions would be greatly appreciated.

3

The setup checks run server-side. So the server will need to have a client cert issued to it I suppose and then the internal Nextcloud HTTP client will need to be configured to use it.

I assume that Nextcloud is otherwise functioning, correct? As in your clients with certs can connect to Nextcloud just fine?

4

Thank you for your reply.

Clients can download and upload files without problems from the web UI (after selecting their certificate once in the browser).

However using the Windows Client results in a 400 error.

400 Bad Request

No required SSL certificate was sent