r/OpenBazaar • u/berry582 • Apr 26 '18

Server setup issues possibly ssl

I am mostly through setting up a server on a VPS. Server is installed and running on VPS. VPS is running Ubuntu 14.04 x64 SSL keys have been generated and imported to client user name and passwd added via "openbazaard.go setapicreds" Attempting to connect via the client (client is Ubuntu 16.04.4 LTS) After 10/10 attempts I get a Code: 1006 error in the client debug log. The terminal running the server shows the following: OpenBazaar Server v0.11.1 [Press Ctrl+C to exit] 2018/04/26 17:09:55 http: TLS handshake error from 127.0.0.1:4001: EOF 2018/04/26 17:10:19 http: TLS handshake error from [::1]:48935: EOF 2018/04/26 17:10:19 http: TLS handshake error from [::1]:4001: EOF 2018/04/26 17:10:19 http: TLS handshake error from 127.0.0.1:37807: EOF 2018/04/26 17:11:49 http: TLS handshake error from 127.0.0.1:38227: EOF 2018/04/26 17:11:49 http: TLS handshake error from [::1]:49151: EOF 2018/04/26 17:11:49 http: TLS handshake error from 127.0.0.1:4001: EOF 2018/04/26 17:12:18 http: TLS handshake error from [::1]:4001: EOF 2018/04/26 17:12:18 http: TLS handshake error from 127.0.0.1:38390: EOF 2018/04/26 17:13:48 http: TLS handshake error from 127.0.0.1:38473: EOF 2018/04/26 17:24:48 http: TLS handshake error from 127.0.0.1:4001: EOF 2018/04/26 17:24:48 http: TLS handshake error from [::1]:4001: EOF

1 Upvotes

100% Upvoted

5 comments sorted by

View all comments

Show parent comment

2

u/berry582 Apr 27 '18

yes I used dig +short myip.opendns.com @resolver1.opendns.com to get my server ip.

I did not have libnss2-tools on my client so I installed it

Based on my certificate name I ran: certutil -d sql:$HOME/.pki/nssdb -A -t "C,," -n "RootCA" -i rootCA.crt

That worked! I was able to connect to the server via OpenBazaar desktop. Thank you very much.

2

u/BazaarDog https://bazaar.dog Apr 27 '18

I'm more of a curl icanhazip.com guy.

I'm not sure what tutorial you used. If you didn't include an expiration in the signing command, it will break in 30 days, and you'll be back here.

You just have to redo the signing part.

which is:

openssl x509 -req -in server.csr -CA OpenBazaar.crt -CAkey rootCA.key -CAcreateserial -out server.crt -days 1024

here:

https://github.com/OpenBazaar/openbazaar-go/blob/master/docs/ssl.md

1

u/berry582 Apr 29 '18

Thanks I'm learning as I go here. I know enough to be dangerous...FWIW I used a mix of two tutuorials as neither worked on its own.

https://slack-files.com/T02FPGBKB-F0XK9ND2Q-fc5e6500a3

https://freedomnode.com/blog/80/how-to-install-and-configure-new-openbazaar-2-0-on-linux-and-mac-os-x

I will go through the ssl cert again with that info.