Solved Mailtrain issue with RSS feed from Wordpress, both on the same Cloudron server

[EggEek]

Hi !

I have an issue with Mailtrain since few days, the RSS feed campaigns have an error "Feed error: certificate has expired" when it tries to get the feed from a instance of Wordpress on the same Cloudron server. As far I see the certificates looks good, maybe it's linked to the fact that the embeded certifactes in Mailtrain still have the old DST Root CA X3 in it ? So Mailtrain couldn't check the new Let's encrypt certificate ?

Do you know how I can check that and how can I update that on the Mailtrain instance ?

Thanks a lot in advance !

[fbartels]

@eggeek you can't update this on your own, as the path in the container is read only. In the end this requires either an app update, and updated base image or (and this would have other benefits) just let the containers mount /etc/ssl from the host.

[EggEek]

@fbartels Thanks for your response. I'm not sure if it's related to that root certificate expiration, I just think it's linked because it was working begining of last week and today I see this error message.

I just don't know how to mount that local folder on this instance, do you know where I can find any documentation on that ?

[fbartels]

I am afraid its not possible to mount arbitrary folders into an app. Currently its only possible to mount pre-defined folders into /media.

So mounting of /etc/ssl (or updating the certs in the app) would need to be something that either @nebulon or @girish need to take care of.

[nebulon]

@fbartels you are probably raising a valid point about the freshness of the certs coming from ca-certificates package. So the /etc/ssl mounting trick might be quite useful.

In this case however I am not so sure this is the issue, at least it didn't solve it refreshing that. Also other clients like curl have no issue to connect to an external site. So I think this is somehow related to the node10 version we have to use since the last stable mailtrain version we use is so old.

[jdaviescoates]

@nebulon said in Mailtrain issue with RSS feed from Wordpress, both on the same Cloudron server:

the last stable mailtrain version we use is so old

It looks like there has been a V2 available for quite some time now, perhaps time to package that up?

This is the latest release:
https://github.com/Mailtrain-org/mailtrain/releases/tag/v2.20210609.0

[girish]

I wonder if this is because older node releases have trouble with the newer Let's Encrypt authority ? Related to https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/

[micmc]

@girish said in Mailtrain issue with RSS feed from Wordpress, both on the same Cloudron server:

I wonder if this is because older node releases have trouble with the newer Let's Encrypt authority ? Related to https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/

Could be, or at least something's related as you already know we're experiencing the same now with Joplin, which is preventing synchronization.

Andy

[nebulon]

@jdaviescoates right, only last time I checked, it was a complete rewrite without a migration path. So essentially like a new project sharing the name. So might be worth looking at again, but that wont fix this immediate issue.

[jdaviescoates]

@nebulon true, it is a rewrite and won't solve this immediate issue, but it should still be packaged. I created a separate thread about that here:

https://forum.cloudron.io/topic/5769/time-to-package-mailtrain-v2

[nebulon]

So to further update on this, I've started testing with node 10 and the SSL issue goes away, however our tests have found a new issue regarding file uploads for the mosaic email editor....sigh. So I am debugging this now for a bit.

[nebulon]

I've released custom patched version now which should fix the issue.