Rocket Chat error contacting Api Server

[karpaga]

Hi,

I have egroupware 19.1.20200318 with rocketchat working with ssl, nginx and docker but users or admin when logging into egroupware gets the message “Error contacting Api Server https://myegroupwaredns:4443/rocketchat/api/info”.

Nginx logs are (at user login):

2020/04/03 20:27:50 [error] 6#6: *21058 FastCGI sent in stderr: “PHP message: EGroupware\Rocketchat\Hooks::avatar_stat()Error contacting Api server: https://myegroupwaredns:4443/rocketchat/api/info” while reading response header from upstream, client: 10.0.8.126, server: _, request: “GET /egroupware/index.php?cd=yes HTTP/2.0”, upstream: “fastcgi://172.23.0.2:9000”, host: “myegroupwaredns:4443”, referrer: “https://myegroupwaredns:4443/egroupware/login.php?cd=1&domain=default”

Rocket Chat is apparently working “fine”, each user logs into egroupware and they can use chat normally.

Regards.

[RalfBecker]

What do you get when you run:

docker exec -it egroupware curl -i https://myegroupwaredns:4443/rocketchat/api/info

In my opinion this can never work for “myegroupwaredns”, as you can not get a valid certificate for it, as it is no valid domain name.

Ralf

[karpaga]

Hi Ralf,

Thanks for your support.

docker exec -it egroupware curl -i https://myegroupwaredns:4443/rocketchat/api/info shows:

curl: (60) SSL certificate problem: self signed certificate
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above

I will check the certificate and ssl configuration.

Thanks.

[RalfBecker]

SSL certificate problem: self signed certificate

There are ways around that, thought unless you know the system very well or willing to spend a lot of time: get a Let’s Encrypt certificate and everything just works!

We got private CA’s eg. certs generated by a Windows DC working for some of our customers, but it’s a real hassle and unfortunately different for each container (EGroupware, Rocket.Chat, …).

Ralf