Mac Tahoe Nextcloud Client "Keines der Zertifikate konnte verifiziert werden"

Hi all,

My self-hosted next cloud server is running since years and all my clients work fine. There is a certbot certificate on the server and it is valid.

Some weeks ago, I got a new mac system ( laptop, I am usually using linux) it is latest mac tahoe) and my nextcloud client refuses the connection. And I can not solve it.

It sure has something to do with the log file error

“Das Zertifikat des Ausstellers eines lokal gefundenen Zertifikats konnte nicht gefunden werden”

What did I do?

I installed the latest nextcloud client on my mac os and I can start it. I add my link to the nextcloud website (https://fqdn)

Actually I use the german next cloud client and it shows an error message

“Sichere Verbindung zur Server https://fqdn fehlgeschlagen.”

I did some research and tried to add the certificate in local keyring app but the error is still the same. I think, this is a mac/key/ssl error and nothing with nextcloud, but I am not sure. Can anyone help or advise here?

thanks in advance

Florian

I tried to use shell commmand and get a better error message

SslHandshakeFailedError:  “Der Server erzwingt strenge Transportsicherheit und akzeptiert nur vertrauenswürdige Zertifikate.”  : can be caused by a webserver wanting SSL client certificates
2025-11-25 11:10:23:829 \[ warning nextcloud.sync.networkjob /Volumes/builds/34591/macos-34591/src/libsync/abstractnetworkjob.cpp:219 \]: QNetworkReply::SslHandshakeFailedError “Der Server erzwingt strenge Transportsicherheit und akzeptiert nur vertrauenswürdige Zertifikate.” QVariant(Invalid)
2025-11-25 11:10:23:829 \[ info nextcloud.sync.accessmanager /Volumes/builds/34591/macos-34591/src/libsync/accessmanager.cpp:72 \]:       2 “” “https://fqdn/status.php” has X-Request-ID “0c7a9d3c-3f3c-48da-a3a2-a54778053efa”
2025-11-25 11:10:23:829 \[ info nextcloud.sync.networkjob /Volumes/builds/34591/macos-34591/src/libsync/abstractnetworkjob.cpp:368 \]:    OCC::CheckServerJob created for “https://fqdn” + “status.php” “OCC::OwncloudSetupWizard”
2025-11-25 11:10:23:888 \[ info nextcloud.sync.account /Volumes/builds/34591/macos-34591/src/libsync/account.cpp:619 \]:  ssl errors “SSL-Errors happened for url  "https://fqdn/status.php\” \\tError in  QSslCertificate(Version="3", SerialNumber="06:38:e1:f4:df:e0:3f:2a:d5:8f:fa:fa:b3:98:d7:56:20:b9", Digest="52jOy9wEn29YXvJIJlwUaQ==", Issuer="R12", Subject="fqdn", AlternativeSubjectNames=QMultiMap((QSsl::DnsEntry, "fqdn")), EffectiveDate=QDateTime(2025-11-11 07:03:49.000 UTC Qt::UTC), ExpiryDate=QDateTime(2026-02-09 07:03:48.000 UTC Qt::UTC)) : "Das Zertifikat des Ausstellers eines lokal gefundenen Zertifikats konnte nicht gefunden werden" ( "Das Zertifikat des Ausstellers eines lokal gefundenen Zertifikats konnte nicht gefunden werden" ) \\n \\tError in  QSslCertificate(Version="3", SerialNumber="06:38:e1:f4:df:e0:3f:2a:d5:8f:fa:fa:b3:98:d7:56:20:b9", Digest="52jOy9wEn29YXvJIJlwUaQ==", Issuer="R12", Subject="fqdn", AlternativeSubjectNames=QMultiMap((QSsl::DnsEntry, "fqdn")), EffectiveDate=QDateTime(2025-11-11 07:03:49.000 UTC Qt::UTC), ExpiryDate=QDateTime(2026-02-09 07:03:48.000 UTC Qt::UTC)) : "Keines der Zertifikate konnte verifiziert werden" ( "Keines der Zertifikate konnte verifiziert werden" ) \\n "
2025-11-25 11:10:23:888 \[ info nextcloud.sync.account /Volumes/builds/34591/macos-34591/src/libsync/account.cpp:620 \]:  QList(QSslCertificate(Version=“3”, SerialNumber=“06:38:e1:f4:df:e0:3f:2a:d5:8f:fa:fa:b3:98:d7:56:20:b9”, Digest=“52jOy9wEn29YXvJIJlwUaQ==”, Issuer=“R12”, Subject=“fqdn”, AlternativeSubjectNames=QMultiMap((QSsl::DnsEntry, “fqdn”)), EffectiveDate=QDateTime(2025-11-11 07:03:49.000 UTC Qt::UTC), ExpiryDate=QDateTime(2026-02-09 07:03:48.000 UTC Qt::UTC)))
2025-11-25 11:10:23:888 \[ info nextcloud.sync.account /Volumes/builds/34591/macos-34591/src/libsync/account.cpp:631 \]:  “SSL-Errors happened for url  "https://fqdn/status.php\” \\tError in  QSslCertificate(Version="3", SerialNumber="06:38:e1:f4:df:e0:3f:2a:d5:8f:fa:fa:b3:98:d7:56:20:b9", Digest="52jOy9wEn29YXvJIJlwUaQ==", Issuer="R12", Subject="fqdn", AlternativeSubjectNames=QMultiMap((QSsl::DnsEntry, "fqdn")), EffectiveDate=QDateTime(2025-11-11 07:03:49.000 UTC Qt::UTC), ExpiryDate=QDateTime(2026-02-09 07:03:48.000 UTC Qt::UTC)) : "Das Zertifikat des Ausstellers eines lokal gefundenen Zertifikats konnte nicht gefunden werden" ( "Das Zertifikat des Ausstellers eines lokal gefundenen Zertifikats konnte nicht gefunden werden" ) \\n \\tError in  QSslCertificate(Version="3", SerialNumber="06:38:e1:f4:df:e0:3f:2a:d5:8f:fa:fa:b3:98:d7:56:20:b9", Digest="52jOy9wEn29YXvJIJlwUaQ==", Issuer="R12", Subject="fqdn", AlternativeSubjectNames=QMultiMap((QSsl::DnsEntry, "fqdn")), EffectiveDate=QDateTime(2025-11-11 07:03:49.000 UTC Qt::UTC), ExpiryDate=QDateTime(2026-02-09 07:03:48.000 UTC Qt::UTC)) : "Keines der Zertifikate konnte verifiziert werden" ( "Keines der Zertifikate konnte verifiziert werden" ) \\n " Certs not trusted by user decision, returning.
2025-11-25 11:10:23:888 \[ warning nextcloud.sync.networkjob /Volumes/builds/34591/macos-34591/src/libsync/abstractnetworkjob.cpp:180 \]: SslHandshakeFailedError:  “Der Server erzwingt strenge Transportsicherheit und akzeptiert nur vertrauenswürdige Zertifikate.”  : can be caused by a webserver wanting SSL client certificates

What rating do you get when you test your server with SSL Labs?

  1. Open https://www.ssllabs.com/ssltest/
  2. Paste your Nextcloud URL and click “submit”
  3. Wait for the result

Hi,

I get an error, obviously an issue with my certificate :distorted_face:

| Revocation status | Validation error
CRL ERROR: IOException occurred
| | | |
|----|----|----|----|----|
| |

I was not aware of it. I check to fix it, and get up to you again.

cheers

Florian