Host Server with self signed certificate


#1

Hello

I set up a self hosted turtl server and everything seemed to work fine as long as I connect via unencrypted http directly to port 8181.
I then configured my running apache instance to do a reverse proxy to port 8181.
My server uses a lets encrypt certificate. When I now try to connect with the desktop client (linux) or the android app I always get a certificate error.
I know that my certificate is valid because it works in the browser without any problems.

Error: <server addr>: an error occurred trying to connect: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:s3_clnt.c:1269: (unable to get issuer certificate)

How can I configure the clients to accept my certificate?


#2

Have you check, what SSL-Versions your apache is supporting. Based on the message it looks like turtl use ssl3. A good Webserver only supports TLS (see https://disablessl3.com/).