Let's Encrypt CA

[murgero]

Has anyone gotten cloudron's let's encrypt working with the new CA? I have some devices that reject my cert (mainly linux devices) cause of the CA.

[girish]

@murgero Which version of Ubuntu are you having trouble with? And does the check fail only on the browser or also in the CLI (for example via curl ?)

For old installations, you have to add the new LE root cert manually. See https://blog.mcfisch.com/linux/Fixing-Outdated-LetsEncrypt-Root-CA-Certificate/ . For recent ones, I think the ca-certificates package brings in the new root cert.

[murgero]

@girish my instance is on 18.04 - but I've tried on personal computers with 20.04 and Arch linux as well that have the issue. I can't build a custom app cause cli throughs an error.

[girish]

@murgero oh, that might just be a nodejs issue. Recently, I think mailtrain also needed to be updated for exactly that. Which node version are you using? Does curl work btw? curl https://my.domain.com i mean.

[murgero]

@girish I'll update node - cloudron npm package is updated though as a note.

[murgero]

@girish Damn, now im getting Failed to login: Cannot destructure property 'rejectUnauthorized' of 'options' as it is undefined.

[girish]

@murgero which node version ? We use 14.17.6 . Also, did curl work?

[murgero]

@girish Sorry for the late reply - curl works and node is 14.18.1

[girish]

@murgero Can you check if cloudron cli is version 4.12.4 as well?

[murgero]

@girish It is.

[girish]

@murgero only thing I can think of is that maybe it is trying to read some obsolete config files. Maybe rm ~/.cloudron.json .

[girish]

@murgero I suspect the exception is coming from https://git.cloudron.io/cloudron/cloudron-cli/-/blob/master/src/actions.js#L255 . That function is called from https://git.cloudron.io/cloudron/cloudron-cli/-/blob/master/src/actions.js#L309 (you can see the error message in the line after). If you know some nodejs, maybe you can debug that to see why it thinks options is undefined.