Invalid SSL certs cause uploads to fail

Jan 31, 2017
8
0
1
42
Hello,
Had a issue today on a brand new install on both the latest version of 4.4 and the 5 beta 1 where since the ssl certificate was not valid it would cause uploads to any of the storage to fail. I thought for some time at first that the issue was with my storage, possibly the raid controller being bad out of the box or a issue with one of the drives. I initially saw the error:

Apr 6 15:26:14 phoenix pveproxy[1923]: problem with client 10.10.10.12; ssl3_read_bytes: tlsv1 alert unknown ca

The error above would show whenever I would goto login, and whenever I would goto upload directly when the upload would fail with the Error shown in the GUI:

Error 0 occurred while receiving the document. OK


So I was unable to upload a ISO or any other data at all.

To describe it more I would log into proxmox while running tail -f /var/log/syslog
I would then goto my local storage, then select upload, begin to upload the ISO.
The ISO would get to a random % number, then go back to 0% and start over, when starting over I see the error in systlog about tlsv1
Eventually after about 3 or so cycles the upload failed with " Error 0 occurred while receiving the document. OK"

I simply ignored it for some time and tried to follow a few threads, and a bug report which claimed it was a browser issue, and to update browsers, try different browsers etc. This was not the case. I decided to test with my wildcard cert from digicert, replacing the ssl files for my node with the appropriate pem files needed.

Immediately after restarting pveproxy I was able to upload files to my storage with no issue.

Just thought I would leave this thread here for anyone else who has this issue so they do not spend hours on the problem because it was a little annoying.
 
I simply ignored it for some time and tried to follow a few threads, and a bug report which claimed it was a browser issue, and to update browsers, try different browsers etc. This was not the case. I decided to test with my wildcard cert from digicert, replacing the ssl files for my node with the appropriate pem files needed.

And how do you accomplish that (not a clue about certificates) since I m having the exact same problem.

Even though I seem to solve my problem (i was trying to upload the iso from a laptop using wifi connection. From the moment I connected via lan the upload took 2 mins max and all went fine.) I would still like to see the procedure of your way. Just in case in the future come across a similar problem.

Thank you
 
Last edited: