This server has no working internet connection. 27.0.1

zafer · July 23, 2023, 3:46am

Nextcloud version 27.0.0 was working normally,
I upgraded to version 27.0.1 and this error appeared.
OS: ubuntu 23.04
How can I solve the problem.

zafer · July 24, 2023, 6:50am

Solution:
I have the data/files_external/rootcerts.crt file size 0,
i deleted this file i copied one of the old copies, problem solved

dosch · August 3, 2023, 8:16pm

do you have an idea how to solve this if you do not have an old copy?

I have the same issue.

tflidd · August 3, 2023, 9:01pm

Ideally, you have a backup of your data folder.

Perhaps if you delete it, it will be regenerated. There is a function for this and Nextcloud is not shipped with a version of it:

github.com

nextcloud/server/blob/9a7e2b15580578b4de3eb36808dc466a9fd6b976/lib/private/Security/CertificateManager.php#L127


      
          				return true;
          			}
          		}
          		closedir($handle);
          		return false;
          	}
          
          
	/**
          	 * create the certificate bundle of all trusted certificated
          	 */
          	public function createCertificateBundle(): void {
          		$path = $this->getPathToCertificates();
          		$certs = $this->listCertificates();
          
          
		if (!$this->view->file_exists($path)) {
          			$this->view->mkdir($path);
          		}
          
          
		$defaultCertificates = file_get_contents(\OC::$SERVERROOT . '/resources/config/ca-bundle.crt');
          		if (strlen($defaultCertificates) < 1024) { // sanity check to verify that we have some content for our bundle
          			// log as exception so we have a stacktrace

I only found old references that this problem existed (/data/files_external/rootcerts.crt empty after update · Issue #4978 · nextcloud/server · GitHub), it’s perhaps time to open a bug report.

It’s just a textfile with all public certificates that you systems accepts. There is a guide to create this:

##
## Bundle of CA Root Certificates
##
## Certificate data from Mozilla as of: Tue May 30 03:12:04 2023 GMT
##
## This is a bundle of X.509 certificates of public Certificate Authorities
## (CA). These were automatically extracted from Mozilla's root certificates
## file (certdata.txt).  This file can be found in the mozilla source tree:
## https://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt
##
## It contains the certificates in PEM format and therefore
## can be directly used with curl / libcurl / php_curl, or with
## an Apache+mod_ssl webserver for SSL client authentication.
## Just configure this file as the SSLCACertificateFile.
##
## Conversion done with mk-ca-bundle.pl version 1.29.
## SHA256: c47475103fb05bb562bbadff0d1e72346b03236154e1448a6ca191b740f83507

dosch · August 4, 2023, 12:08pm

just checked the file, and it was not empty at all. Far from it. I pasted the contents here:

https://zerobin.net/?706c4090d6fb8879#rcInGsoE7+K6xbmz/+j/ARBar33jsFKyU35VZTMF1C8=

tflidd · August 5, 2023, 1:15pm

Ok, then your problem is different.