Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

http-auth x509: certificate signed by unknown authority #36

Open
Awmusic12635 opened this issue Nov 26, 2023 · 1 comment
Open

http-auth x509: certificate signed by unknown authority #36

Awmusic12635 opened this issue Nov 26, 2023 · 1 comment

Comments

@Awmusic12635
Copy link

Awmusic12635 commented Nov 26, 2023

2023/11/26 02:04:38 http-auth: Post "https://example.com/broadcast/srt/authorize/": x509: certificate signed by unknown authority
2023/11/26 02:04:38 8.8.8.8:58886 - Stream 'publish/awmusic12635' access denied
02:04:38.147595/SRT:RcvQ:w1!W:SRT.cn: @923775032:newConnection: connection rejected due to: INTERNAL REJECTION - ERROR:PREDEFINED:401
02:04:38.148049/SRT:RcvQ:w1!W:SRT.cn: processConnectRequest: rsp(REJECT): 2401 - Application-defined rejection reason

Having a situation where the http-auth is rejecting even querying my auth URL due to it not knowing the SSL cert. The domain is using a Let's encrypt cert that works on all other situations I've seen (on the host, in the browser etc).

I cannot disable https on the domain

Is there a way this can be made to be trusted or at the very minimum a way to allow insecure certificates?

@iSchluff
Copy link
Member

Go should pick up the CA certificates from your local system. If the Letsencrypt CA is untrusted then most likely something is strange with your certificate setup on the machine you are running srtrelay on?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants