Dear openSUSE community, I already mentionned this problem two months ago: lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/PXBOKSJWEZZ73BN5YIXXSOPZT3N7PXI4/ Unfortunatelly I still can't manage to trust a self-signed certificate using the update-ca-certificates command. The context is GNU Health & Apache installed using Ansible. Any feedback/help would be much appreciated! Here is how to reproduce: Install Ansible pip3 install ansible-core export PATH=$PATH:/home/username/.local/bin Clone Repo (remove spaces between https, link was considered phishing) git clone h t t p s://gitlab.com/geraldwiese/gnuhealth-automatic-deployment.git cd gnuhealth-automatic-deployment/ Execute Playbooks (first might take 10minutes) ansible-playbook gnuhealth.yml -c local -e my_user=`whoami` -K ansible-playbook desktop.yml -c local -e my_user=`whoami` -K Run GNU Health Client & try to connect (leave connection informations unchanged) gnuhealth-client → Error 404 Trust cert properly and try HTTPS sudo cp fetch/gnuhealth-selfsigned.crt /etc/pki/trust/anchors/ sudo update-ca-certificates -v → Nothing updated, still facing error sudo mv /etc/pki/trust/anchors/gnuhealth-selfsigned.crt /etc/pki/trust/anchors/gnuhealth-selfsigned.pem sudo update-ca-certificates -v → Nothing updated, still facing error Trust cert the ugly way, remove config (seems necessary at least partial, don’t know why) cat fetch/gnuhealth-selfsigned.crt | sudo tee -a /var/lib/ca-certificates/ca-bundle.pem rm -r ~/.config/gnuhealth/ gnuhealth-client Enter connection informations: Host: localhost:443 Database: health User name: admin → connection should work I also tried removing the config directory after running update-ca-certificates but this doesn’t work either. And I know I could connect directly to GNU Health locally without HTTPS/Apache but I want to test it in order to add the option to trust selfsigned certificates to the Ansible playbooks for the case of having client & server on different systems. Am I missing something or is this actually a bug? Best Gerald
participants (1)
-
Gerald Wiese