Arch Linux

rican-linux

Member

Registered: 2014-11-16

Posts: 66

[SOLVED] Gnome - Files nextcloud drive fails tls error

I have add nextcloud to my gnome online account. I get the error "HTTP error:Unacceptable TLS certificate". I am using Let's Encrypt for SSL cert. I downloaded the cert from the browser and added per the instructions in The Arch Wiki. I can verify the system trusts the cert by running this command.

gnutls-cli nextcloud.tncoffee.net < /dev/null 
Processed 174 CA certificate(s).
Resolving 'nextcloud.tncoffee.net:443'...
Connecting to '192.168.254.102:443'...
- Certificate type: X.509
- Got a certificate list of 1 certificates.
- Certificate[0] info:
 - subject `CN=nextcloud.tncoffee.net', issuer `CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US', serial 0x03959d48823ef3451babcf42011f7fc26dad, RSA key 2048 bits, signed using RSA-SHA256, activated `2017-05-26 16:50:00 UTC', expires `2017-08-24 16:50:00 UTC', pin-sha256="Lv+Z+XZ26ATv6e3siwH4N1w481mRR3MedLz7M6Bs6sM="
	Public Key ID:
		sha1:a49d18807979aa08ff0395e32dd732459d015b8d
		sha256:2eff99f97676e804efe9edec8b01f8375c38f3599147731e74bcfb33a06ceac3
	Public Key PIN:
		pin-sha256:Lv+Z+XZ26ATv6e3siwH4N1w481mRR3MedLz7M6Bs6sM=
	Public key's random art:
		+--[ RSA 2048]----+
		|   o..  .oo=     |
		|  o o.. .oE .    |
		|   . +..o        |
		|.   =  *..       |
		|.o + oooS        |
		|. + o = .        |
		|   o o o         |
		|    o            |
		|     .           |
		+-----------------+e

- Status: The certificate is trusted. 
- Description: (TLS1.2)-(ECDHE-RSA-SECP256R1)-(AES-256-GCM)
- Session ID: 4A:7B:35:D9:D9:ED:23:E8:E4:F3:E6:F7:22:68:54:63:EC:C9:E2:CF:FB:5E:0C:F4:1E:D6:50:53:41:9D:01:14
- Ephemeral EC Diffie-Hellman parameters
 - Using curve: SECP256R1
 - Curve size: 256 bits
- Version: TLS1.2
- Key Exchange: ECDHE-RSA
- Server Signature: RSA-SHA256
- Cipher: AES-256-GCM
- MAC: AEAD
- Compression: NULL
- Options: extended master secret, safe renegotiation,
- Handshake was completed

- Simple Client Mode: 

I rebooted my machine and I still got the error. I then added the Let's Encrpyt root certs to the trust list and verified the install.

 trust list | grep -C 2 "Let's Encrypt" 
pkcs11:id=%c5%b1%ab%4e%4c%b1%cd%64%30%93%7e%c1%84%99%05%ab%e6%03%e2%25;type=cert
    type: certificate
    label: Let's Encrypt Authority X2
    trust: anchor
    category: authority
--
pkcs11:id=%a8%4a%6a%63%04%7d%dd%ba%e6%d1%39%b7%a6%45%65%ef%f3%a8%ec%a1;type=cert
    type: certificate
    label: Let's Encrypt Authority X1
    trust: anchor
    category: authority

I rebooted again and still got the same error. I even tried remove and add again the online account and still it gives me the error. What can I be missing?

Thanks!

Last edited by rican-linux (2017-06-01 07:46:00)

rican-linux

Member

Registered: 2014-11-16

Posts: 66

Re: [SOLVED] Gnome - Files nextcloud drive fails tls error

UPDAATE

I needed to edit vhost file on apache to present the fullchain.pem file. This resolved the SSL errors. The on the client side I needed to install davfs2 and in the /etc/davfs2/davfs2.conf and set 'use_locks 0'. I was able to manually mount the drive but the option in files still is not working. Will try rebooting to see if that changes anything.

rican-linux

Member

Registered: 2014-11-16

Posts: 66

Re: [SOLVED] Gnome - Files nextcloud drive fails tls error

Issue is fixed, I found the solution here!

Last edited by rican-linux (2017-06-01 07:45:34)