OPNsense Forum

English Forums => General Discussion => Topic started by: newbee on September 11, 2021, 04:00:25 am

Title: nginx config TLS error
Post by: newbee on September 11, 2021, 04:00:25 am

Hi

I amhaving trouble connecting to VM (running on esxi vmware). I get the following error in the logs:

Code: [Select]

1 upstream SSL certificate verify error: (18:self signed certificate) while SSL handshaking to upstream, client: 192.168.1.11, server: cloud.ellsium.com, request: "GET / HTTP/2.0", upstream: "https://192.168.1.10:443/", host: "cloud.ellsium.com"
i have installed nextcloud vm, without setting up local certbot, instead using tls cert using snake oil and have tried an openssl cert on the local VM, if i do http only, local vm and opnsense nginx then nextcloud appears to work to a degree, certs dont give errors but no tls i gues. The main cert is managed by lets encrypt on opensense. I have a fixed IP and a registered domain. I can load nextcloud and it appears to be fine except using it on WAN side breaks so im guessing the SSL is still not correct. Is there a way to connect the opnsense letencrypt cert to the VM?

Title: Re: nginx config TLS error
Post by: Fright on September 11, 2021, 07:25:33 am

hi
upstream SSL certificate verify error: (18:self signed certificate) while SSL handshaking to upstream
if there is no need to verify the upstream cert, then you can simply disable this option:
Edit Upstream (advanced mode "on")->TLS: Verify Certificate

Title: Re: nginx config TLS error
Post by: newbee on September 11, 2021, 11:47:05 am

Hi,

I took off this option. Still getting black opnsense request denied and the same error. Thank you for help its been a month of this jumping back and forth between ha proxy and nginx. cant find the issue.

Title: Re: nginx config TLS error
Post by: newbee on September 11, 2021, 12:08:38 pm

Ok this worked after i set the upstream server port back to 443. Wow thank you!