When trying to run a security scan, the scanner says “Host not found”. It used to work in the past (> 6 months ago). I now upgraded to 31.0.6 and it doesn’t work anymore.
Everything else is working fine. I can access my nextcloud from the internet from both, mobile and pc clients as well as webdav. To access it, I use an address like cloud.mydomain.ch. My server is behind a firewall that only lets Ports 22, 80 and 443 through. And only TCP protocol. Also only IPv4. DNS entries haven’t changed in years.
My status.php returns: https://cloud.mydomain.ch/status.php
{“installed”:true,“maintenance”:false,“needsDbUpgrade”:false,“version”:“31.0.6.2”,“versionstring”:“31.0.6”,“edition”:“”,“productname”:“Nextcloud”,“extendedSupport”:false}
Thus my questions:
Is the security scan working for others? Can somebody confirm?
What preconditions does the security scan need to reach my host?
Ok, I got it to work (and I still got my A+ rating ): I entered the following URL in the security scanner’s input prompt: https://cloud.mydomain.ch/status.php
Instead of only (as I did in the past years):
cloud.mydomain.ch
Same issue here. Three different instances. All selfhosted. 1 = v31.x and 2 = v30.x. Before I could write cloud.domain.tld. Now i must write https://cloud.domain.tld/status.php.
This works as workaround. But its not a real solution, I think.
I can now also reproduce the problem. Since there is no project for this on GitHub, I’ll take the liberty of pinging two (presumably) Nextcloud employees here
The strange thing is that it works with some installations, but not with others. I don’t see any request in the server’s access log. So I wonder if it’s a DNS problem? But everything looks ok from my point of view. IPv4 and IPv6 works. DNSSEC works also. And that it suddenly affects so many seems more like a problem on the part of scan.nextcloud.com.
EDIT: DNS problem does not seem right to me as it works with /status.php.
I have the same issue since (I think) upgrading to v31. I host NC on rpi, there’s an nginx reverse proxy between the NC instance and the world.
As with the other posters: in the past I could just plop down my NC address to scan, now I need to append /status.php for it to work.
It’s a minor inconvenience, but might be indicative of a larger issue.
): I entered the following URL in the security scanner’s input prompt:
