Cannot run landscape-api "SSL certificate problem: self-signed certificate"

Asked by jorge medina

Hi there,

I have install a Manual instalation landscape with a self signed SSL certificate and after installing the API, I'm not able to launch it due to this error "SSL certificate problem: self-signed certificate"

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu landscape Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
actionparsnip (andrew-woodhead666) said :
#1

Create a non-self signed cert. LetsEncrypt can give you a free SSL. One option

Revision history for this message
jorge medina (medinaramosjorge) said :
#2

Hi there,

I have tried to generate a cerbot cert but there’s some error about
resolving my hostname with my public ip,

In my case I have create a DNS record in my domain, but with the internal
IP not with the external, so cerbot fails with a lookup error

Un saludo Jorge Medina Ramos

El El mié, 13 mar 2024 a las 12:56, actionparsnip <
<email address hidden>> escribió:

> Your question #709556 on landscape in Ubuntu changed:
> https://answers.launchpad.net/ubuntu/+source/landscape/+question/709556
>
> Status: Open => Answered
>
> actionparsnip proposed the following answer:
> Create a non-self signed cert. LetsEncrypt can give you a free SSL. One
> option
>
> --
> If this answers your question, please go to the following page to let us
> know that it is solved:
>
> https://answers.launchpad.net/ubuntu/+source/landscape/+question/709556/+confirm?answer_id=0
>
> If you still need help, you can reply to this email or go to the
> following page to enter your feedback:
> https://answers.launchpad.net/ubuntu/+source/landscape/+question/709556
>
> You received this question notification because you asked the question.
>

Revision history for this message
actionparsnip (andrew-woodhead666) said :
#3

You will need to forward port 443 and 80 on your WAN IP to the internal server so that the certbot can work. You will set the A record to your WAN IP. If you are unsude of your WAN IP then us

http://ipchicken.com

Can you help with this problem?

Provide an answer of your own, or ask jorge medina for more information if necessary.

To post a message you must log in.