SOLVED Nextcloud plugin 23.0.0 installation certificate issues

[theomolenaar]

Hi. I'm having trouble installing the latest Nextcloud plugin. Probably some certificate issues. Any ideas how to fix?
Installed the NC plugin on CORE without using NAT/DHCP.
I tried installing plugin version 22.2.3 last week and was hoping the 23.0.0. would magically fix the issue
The log below mentions this:

You can install the following CA on your devices to trust the TLS certificate: /usr/local/etc/letsencrypt/live/truenas/root.cer

What I did was installing this file on my iMac ( in Keychain Access) but the problem of not being able to run nextcloud was still there.
I watched some Youtube videos about installing nextcloud (plugin version) and searched this forum but had no luck in finding a working solution. Although this thread popped up in my search results: https://www.truenas.com/community/t...ou-build-your-private-cloud.95869/post-663360
Same issues but no mention how it got fixed.

The letsencypt.log contains the line 'No certificates found'. Might be something going on with Certbot?

2021-12-05 10:10:58,004:DEBUG:certbot._internal.display.obj:Notifying user: No certificates found.

A few lines down:

Generating a RSA private key

writing new private key to '/usr/local/etc/letsencrypt/live/truenas/root.key'

writing new private key to '/usr/local/etc/letsencrypt/live/truenas/server.key'

Getting CA Private Key
You can install the following CA on your devices to trust the TLS certificate: /usr/local/etc/letsencrypt/live/truenas/root.cer

This is the installation log of Nextcloud (local ip adresses removed for security);

Install Notes:
Saving debug log to /var/log/letsencrypt/letsencrypt.log
No certificates found.
Saving debug log to /var/log/letsencrypt/letsencrypt.log
No certificates found.
Generating a RSA private key
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
...............+++++
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
..........................................................................+++++
No certificates found.
writing new private key to '/usr/local/etc/letsencrypt/live/truenas/root.key'
-----
No certificates found.
Generating a RSA private key
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
....+++++
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
No certificates found.
......................+++++
No certificates found.
writing new private key to '/usr/local/etc/letsencrypt/live/truenas/server.key'
-----
No certificates found.
Signature ok
subject=O = TrueNAS (Nextcloud), CN = localhost
No certificates found.
Getting CA Private Key
You can install the following CA on your devices to trust the TLS certificate: /usr/local/etc/letsencrypt/live/truenas/root.cer
Getting CA Private Key
nginx_enable: -> YES
Getting CA Private Key
mysql_enable: -> YES
Getting CA Private Key
php_fpm_enable: -> YES
Getting CA Private Key
redis_enable: -> YES
Getting CA Private Key
fail2ban_enable: -> YES
Getting CA Private Key
Performing sanity check on nginx configuration:
Getting CA Private Key
Starting nginx.
Getting CA Private Key
Performing sanity check on php-fpm configuration:
Getting CA Private Key
Starting php_fpm.
Getting CA Private Key
Starting mysql.
Getting CA Private Key
Starting redis.
Getting CA Private Key
Starting redis.
mysqladmin: [Warning] Using a password on the command line interface can be insecure.
Starting redis.
Warning: Since password will be sent to server in plain text, use ssl connection to ensure password safety.
Starting redis.
mysql: [Warning] Using a password on the command line interface can be insecure.
Nextcloud was successfully installed
mysql: [Warning] Using a password on the command line interface can be insecure.
Set mode for background jobs to 'cron'
mysql: [Warning] Using a password on the command line interface can be insecure.
System config value trusted_domains => 1 set to string 192.168.x.xx
mysql: [Warning] Using a password on the command line interface can be insecure.
contacts 4.0.6 installed
mysql: [Warning] Using a password on the command line interface can be insecure.
contacts enabled
mysql: [Warning] Using a password on the command line interface can be insecure.
calendar 3.0.1 installed
mysql: [Warning] Using a password on the command line interface can be insecure.
calendar enabled
mysql: [Warning] Using a password on the command line interface can be insecure.
notes 4.2.0 installed
mysql: [Warning] Using a password on the command line interface can be insecure.
notes enabled
mysql: [Warning] Using a password on the command line interface can be insecure.
deck 1.6.0 installed
mysql: [Warning] Using a password on the command line interface can be insecure.
deck enabled
mysql: [Warning] Using a password on the command line interface can be insecure.
spreed 13.0.0 installed
mysql: [Warning] Using a password on the command line interface can be insecure.
spreed enabled
mysql: [Warning] Using a password on the command line interface can be insecure.
mail 1.11.0 installed
mysql: [Warning] Using a password on the command line interface can be insecure.
mail enabled
mysql: [Warning] Using a password on the command line interface can be insecure.
Server ready
mysql: [Warning] Using a password on the command line interface can be insecure.
Admin Portal:

http://192.168.x.xx

 

[Basil Hendroff]

I think you've been porned!

 

[theomolenaar]

I think you've been porned!

oh really hahaha. It's kids safe now. PG-rated

 

[theomolenaar]

Somehow I messed up installing the wrong certificate file a few days ago.
This is the fix.

1. SSH into your nextcloud jail
2. Go to folder: /usr/local/etc/letsencrypt/live/truenas/root.cer
3. Copy this file to your desktop
4. To install in on macOS. Double the root.cer file. It will be installed into the Keychain App.
5. To fix the untrusted issue of this certificate in the Keychain App. Select Always Trust.
6. Refresh the nextcloud login page. And that's it.