#1672  LDAP auth throw CertificateException
Closed
Biro, Csaba Attila opened 5 months ago

Hi All

I have a configured Generic LDAP as external authentication, which is succeed on test, and I can login on the web interface without any issue. But if I try to clone (https) I got server error as response "The requested URL returned error: 500" In the server-log, I can find this as a reason:"javax.net.ssl.SSLHandshakeException: None of the TrustManagers trust this certificate chain"

The /opt/onedev/conf/trust-certs folder is mount and filled with the proper certs based on the documentation

server-log.txt

Robin Shen commented 5 months ago

It is odd that web UI works but clone nog working. Are you doing this with same user?

Biro, Csaba Attila commented 5 months ago

It is odd that web UI works but clone nog working. Are you doing this with same user?

I tried with the same user. I don't really suspect the user, it looks more like then the web interface is not using the same folder to trust certs than git server behind the scenes, but I don't looked into the source code yet, so it is just a guess.

Robin Shen commented 5 months ago

None of the TrustManagers trust this certificate chain

This message indicates that dns name stored in your self-signed certificate not matching dns name of the ldap server you specified.

OneDev still checks dns name even if tell it to trust self-signed certificate.

Robin Shen commented 5 months ago

Please disregard my previous message. This does not necessarily mean a dns name issue.

I tested locally and clone without any issues once trusted the certificate.

Robin Shen changed state to 'Closed' 5 months ago
Previous Value Current Value
Open
Closed
Robin Shen commented 5 months ago

Closing as unable to reproduce.

issue 1 of 1
Type
Question
Priority
Normal
Assignee
Labels
No labels
Issue Votes (0)
Watchers (3)
Reference
onedev/server#1672
Please wait...
Page is in error, reload to recover