2.15 - SSL certificate invalid ERR_SSL_PROTOCOL_ERROR

kirobo_tashehi · July 18, 2020, 2:39pm

The system is extremely buggy.
Tried to setup on Ubuntu 18.04.
I generated SSL certificate for my main domain and sub-domain using letsencrypt. It’s working.
SSL is valid on :80 apache HTTP port but on OpenVid, I set CERTIFICATE_TYPE = letsencrypt and it doesn’t work.
Always show ERR_SSL_PROTOCOL_ERROR
Only work in selfsigned mode but that’s problem with Chrome - Need SSL for it to work.

I wanted to buy PRO version but I don’t think I will buy such buggy software. Any alternatives?

Please help.

micael.gallego · July 18, 2020, 2:53pm

You can use Jitsi, mediasoup, Janus, plain Kurento, etc.

I’m pretty sure they are less buggy than OpenVidu.

But there are a lot of people using OpenVide CE and OpenVidu PRO successfully, without issues. If you explain the exact steps you have used to deploy OpenVidu, and share its logs, maybe we can help you to make it working.

Regards

kirobo_tashehi · July 18, 2020, 3:22pm

Will appreciate any help on this.

micael.gallego · July 18, 2020, 5:13pm

You have a problem in your .env file. You have configured HTTP_PORT with the same value than HTTPS_PORT. The nginx will fail to start.

Remember to change your password as you have published it in your .env file.

In case you have issues, please share NGINX logs

Regards

kirobo_tashehi · July 18, 2020, 6:28pm

I’ve tried to change the HTTP_PORT many times.
Attaching to openvidu_nginx_1
nginx_1 | 2020/07/18 18:25:52 [emerg] 7#7: bind() to 0.0.0.0:80 failed (98: Address in use)
nginx_1 | nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address in use)
nginx_1 | 2020/07/18 18:25:52 [emerg] 7#7: bind() to 0.0.0.0:80 failed (98: Address in use)
nginx_1 | nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address in use)
nginx_1 | 2020/07/18 18:25:52 [emerg] 7#7: bind() to 0.0.0.0:80 failed (98: Address in use)
nginx_1 | nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address in use)
nginx_1 | 2020/07/18 18:25:52 [emerg] 7#7: bind() to 0.0.0.0:80 failed (98: Address in use)
nginx_1 | nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address in use)
nginx_1 | 2020/07/18 18:25:52 [emerg] 7#7: bind() to 0.0.0.0:80 failed (98: Address in use)
nginx_1 | nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address in use)
nginx_1 | 2020/07/18 18:25:52 [emerg] 7#7: still could not bind()
nginx_1 | nginx: [emerg] still could not bind()
nginx_1 |
nginx_1 | =======================================
nginx_1 | = INPUT VARIABLES =
nginx_1 | =======================================
nginx_1 |
nginx_1 | Config NGINX:
nginx_1 | - Http Port: 80
nginx_1 | - Https Port: 4443
nginx_1 | - Allowed Access in Openvidu Dashboard: all
nginx_1 | - Allowed Access in Openvidu API: all
nginx_1 |
nginx_1 | Config Openvidu Application:
nginx_1 | - Domain name: video.sspeducation.org
nginx_1 | - Certificated: owncert
nginx_1 | - Letsencrypt Email: email@gmail.com
nginx_1 | - Openvidu Application: true
nginx_1 | - Openvidu Application Type: CE
nginx_1 |
nginx_1 | =======================================
nginx_1 | = CONFIGURATION NGINX =
nginx_1 | =======================================
nginx_1 |
nginx_1 | Configure video.sspeducation.org domain…
nginx_1 | - New configuration: owncert
nginx_1 | - Old configuration: owncert
nginx_1 | - Owmcert certificate already exists, using them…
nginx_1 |
nginx_1 | =======================================
nginx_1 | = ALLOWED ACCESS =
nginx_1 | =======================================
nginx_1 |
nginx_1 | Adding rules…
nginx_1 |
nginx_1 | Finish Rules:
nginx_1 | Openvidu Dashboard:
nginx_1 | - allow all;
nginx_1 | Openvidu API:
nginx_1 | - allow all;
nginx_1 |
nginx_1 | =======================================
nginx_1 | = START OPENVIDU PROXY =
nginx_1 | =======================================
nginx_1 |
nginx_1 | 2020/07/18 18:25:55 [emerg] 53#53: cannot load certificate “/etc/letsencrypt/live/video.sspeducation.org/fullchain.pem”: PEM_read_bio_X509_AUX() failed (SSL: error:0909006C:PEM routines:get_name:no start line:Expecting: TRUSTED CERTIFICATE)
nginx_1 | nginx: [emerg] cannot load certificate “/etc/letsencrypt/live/video.sspeducation.org/fullchain.pem”: PEM_read_bio_X509_AUX() failed (SSL: error:0909006C:PEM routines:get_name:no start line:Expecting: TRUSTED CERTIFICATE)
nginx_1 | ==> /var/log/nginx/access.log <==

kirobo_tashehi · July 18, 2020, 6:37pm

Configure video.sspeducation.org domain…
nginx_1 | - New configuration: letsencrypt
nginx_1 | - Old configuration: owncert
nginx_1 | - Restarting configuration… Removing old certificated…
nginx_1 | Saving debug log to /var/log/letsencrypt/letsencrypt.log
nginx_1 | Plugins selected: Authenticator webroot, Installer None
nginx_1 | Obtaining a new certificate
nginx_1 | Performing the following challenges:
nginx_1 | http-01 challenge for video.sspeducation.org
nginx_1 | Using the webroot path /var/www/certbot for all unmatched domains.
nginx_1 | Waiting for verification…
nginx_1 | Challenge failed for domain video.sspeducation.org
nginx_1 | http-01 challenge for video.sspeducation.org
nginx_1 | Cleaning up challenges
nginx_1 | Some challenges have failed.
nginx_1 | - Requesting LetsEncrypt certificate…IMPORTANT NOTES:
nginx_1 | - The following errors were reported by the server:
nginx_1 |
nginx_1 | Domain: video.sspeducation.org
nginx_1 | Type: unauthorized
nginx_1 | Detail: Invalid response from
nginx_1 | http://video.sspeducation.org/.well-known/acme-challenge/n9izJ_0c9W6wJbZxOH-sVfxw6kD4ud3qYIrYu5rGWuI
nginx_1 | [172.105.62.97]: “\n\n404 Not
nginx_1 | Found\n\n

Not Found

Tried a completely new installation again.

Same problem with letsencrypt

cruizba · July 20, 2020, 10:17am

@kirobo_tashehi Do you have any other services running in this same server? Most of these problems happens when people have other servers running in the background… As Apache servers or nginx servers. OpenVidu installation system needs port 80 and 443 available to generate correctly the letsencrypt certificate.

Also, what do you mean by buggy system? Not reading the documentation does not mean that software is buggy (https://docs.openvidu.io/en/2.15.0/deployment/deploying-on-premises/#1-prerequisites):

cruizba · July 20, 2020, 11:17am

I’ve checked your domain and you have apache running at port 443

kirobo_tashehi · August 1, 2020, 2:31pm

Thanks. As I said, I’m rather new to this.
So is it not possible to have an APACHE/TOMCAT/NGINX server running and install openvidu on subdomain, correct?

vipin_mishra · August 1, 2020, 3:05pm

yes no need to install anything like tomcat , nginx etc to configuration openvidu servers setup.
So pleases just follow the steps as shown openvidu docs. I install this application approx 100 times in different environment azure, aws ,digital ocean ,just ubuntu for different people no problem is there instead people don’t know much about devops work .That’s why they do mistakes .
Thanks

aurdoc · August 1, 2020, 5:50pm

Hi kirobo_tashehi

[quote=“kirobo_tashehi, post:8, topic:1526”]
nginx_1 | To fix these errors, please make sure that your domain name was
nginx_1 | entered correctly and the DNS A/AAAA record(s) for that domain
nginx_1 | contain(s) the right IP address.
[/quote]

means you are creating the letsencrypt request from a server with an IP local address different than the DNS address for your domain name. That happens when the server is on a local network and its local address is mapped to to the domain address by an intermediate gateway. Letsencrypt thinks you are requesting the certificate from a proxy, which could be used for intercepting SSL messages.

aurdoc · August 1, 2020, 6:02pm

To vipin_mishra,

if you have ideas on how to solve some problems, described here or in other similar post, please make suggestions here so we can all learn! We all learn from mistakes!

The openvidu developers have made an incredible effort and build a marvelous product which they made it available free. In addition they have been very responsible with their time to provide excellent support. The least we can do is to provide them with our experience, and your ideas will help them as well as the rest of us.

Thank you!

vipin_mishra · August 1, 2020, 6:41pm

To aurdoc
what idea i can tell if your problem cause not guess able and second max time i seen people don’t follow instructions as it is say the openvidu are buggy app.
So i think i have more respect openvidu efforts that’s why i helping many peoples by sharing my idea’s and error i found .
But sometimes people not able to solve because they do silly mistakes and its not guessable.
For that i personally tell silly step by step procedure .
And many are able to understand there problem tell me the reasons behind that i post on group.
So this way of helping i know. But if you have better way please tell me i will care for future
Thanks

Topic		Replies	Views
Openvidu 2.14 Letsencrypt issue Issues with deployment v2	12	795	August 24, 2020
I want to resolve openvidu certificate errors Issues developing apps v2	5	410	July 28, 2021
Self signed certificate Issues with deployment v2	17	4098	June 24, 2020
Cannot run any of the tutorial examples Issues developing apps v2	11	1198	April 2, 2020
Connection WebSocket With SSL Issues with deployment v2	7	1901	July 8, 2020

2.15 - SSL certificate invalid ERR_SSL_PROTOCOL_ERROR

Not Found

Related topics