LDAP auth throw CertificateException (OD-1672)

Hi All

I have a configured Generic LDAP as external authentication, which is succeed on test, and I can login on the web interface without any issue. But if I try to clone (https) I got server error as response "The requested URL returned error: 500" In the server-log, I can find this as a reason:"javax.net.ssl.SSLHandshakeException: None of the TrustManagers trust this certificate chain"

The /opt/onedev/conf/trust-certs folder is mount and filled with the proper certs based on the documentation

server-log.txt

Activities

Robin Shen commented 2 years ago

It is odd that web UI works but clone nog working. Are you doing this with same user?
Biro, Csaba Attila commented 2 years ago

It is odd that web UI works but clone nog working. Are you doing this with same user?

I tried with the same user. I don't really suspect the user, it looks more like then the web interface is not using the same folder to trust certs than git server behind the scenes, but I don't looked into the source code yet, so it is just a guess.
Robin Shen commented 2 years ago

None of the TrustManagers trust this certificate chain

This message indicates that dns name stored in your self-signed certificate not matching dns name of the ldap server you specified.

OneDev still checks dns name even if tell it to trust self-signed certificate.
Robin Shen commented 2 years ago

Please disregard my previous message. This does not necessarily mean a dns name issue.

I tested locally and clone without any issues once trusted the certificate.
Robin Shen changed state to 'Closed' 2 years ago
Previous Value Current Value
Open

Closed
Robin Shen commented 2 years ago

Closing as unable to reproduce.
Login to comment

Previous Value	Current Value
Open	Closed

Type	Question
Priority	Normal
Assignee	Robin Shen
Labels	No labels

Issue Votes (0)

Watchers (3)

Reference

OD-1672