Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Element-desktop fails with Let's Encrypt root CA #19261

Closed
eravion opened this issue Oct 3, 2021 · 10 comments · Fixed by element-hq/element-desktop#270
Closed

Element-desktop fails with Let's Encrypt root CA #19261

eravion opened this issue Oct 3, 2021 · 10 comments · Fixed by element-hq/element-desktop#270
Assignees
Labels
A-Electron O-Uncommon Most users are unlikely to come across this or unexpected workflow S-Critical Prevents work, causes data loss and/or has no workaround T-Defect X-Regression X-Release-Blocker Z-Upstream

Comments

@eravion
Copy link

eravion commented Oct 3, 2021

Steps to reproduce

Use Element-desktop 1.9.0 that uses Electron 13.5.0 and try to establish a connection with a homeserver that has a Let's Encrypt certificate

Operating system

MacOS, IOS

Application version

1.9.0

How did you install the app?

.

Homeserver

matrix.ravion.org

Have you submitted a rageshake?

No

@schelmo
Copy link

schelmo commented Oct 3, 2021

there is a patch release for electron:
https://github.com/electron/electron/releases/tag/v13.5.1
electron/electron#31213

@germain-gg
Copy link
Contributor

Would you be able to share some logs or more information regarding the connection failure?
It will be difficult to investigate further with the current amount of information

@germain-gg germain-gg changed the title letsencrypt dst-root-ca-x3-expiration-september-2021 Element connection failure with Synapse homeserver Oct 4, 2021
@germain-gg germain-gg added O-Uncommon Most users are unlikely to come across this or unexpected workflow S-Major Severely degrades major functionality or product features, with no satisfactory workaround X-Needs-Info This issue is blocked awaiting information from the reporter labels Oct 4, 2021
@eravion
Copy link
Author

eravion commented Oct 4, 2021

there is a patch release for electron:
https://github.com/electron/electron/releases/tag/v13.5.1
electron/electron#31213

it look to be this issue.
This patch is/will be added on element apps ?

@eravion
Copy link
Author

eravion commented Oct 4, 2021

Would you be able to share some logs or more information regarding the connection failure?
It will be difficult to investigate further with the current amount of information

In french the message is :
l'URL du serveur d'accueil ne semble pas être un serveur d'accueil Matrix valide.
more or less in English : this URL is not a valid Matrix server
Or something like that.

Nothing on server logs.

@germain-gg
Copy link
Contributor

Right, when trying to load:

  • matrix.ravion.org
  • matrix.ravion.org/_synapse/admin/v1/server_version
  • ravion.org/.well-known/matrix/client
  • matrix.ravion.org/.well-known/matrix/client

None of those URLs answer. It appears to be an issue with your Synapse setup rather than an element-web issue.
Will close this issue as there are not much else we can do an our side

@eravion
Copy link
Author

eravion commented Oct 4, 2021

The site was down, sorry for that.
Now it is up.
BTW I have the same issue on element to connect to.

@germain-gg
Copy link
Contributor

Same problem arises, none of the URLs that I have tested above work.
I would recommend you go through the install steps again and verify your server side setup

Bonne chance :)

@schelmo
Copy link

schelmo commented Oct 5, 2021

hi @gsouquet
there is definitly a problem with the switch from letsencrypt. (https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/)
i have currently no access to the windows computer where it happened with element 1.9 to provide some logs
but it was an SSL error (-1 error code iirc)
removing the last block from the new certificate (like mentioned here), fixed the problem for me.
in the linked pull request above from electron, and with the 13.5.1 release, the bug should be fixed.
here is also the correspending electron issues: electron/electron#31212

@germain-gg germain-gg reopened this Oct 5, 2021
@germain-gg germain-gg changed the title Element connection failure with Synapse homeserver Element-desktop fails with Let's Encrypt root CA Oct 5, 2021
@germain-gg germain-gg added A-Electron Z-Upstream and removed X-Needs-Info This issue is blocked awaiting information from the reporter labels Oct 5, 2021
@novocaine novocaine added S-Critical Prevents work, causes data loss and/or has no workaround X-Regression X-Release-Blocker and removed S-Major Severely degrades major functionality or product features, with no satisfactory workaround labels Oct 5, 2021
@eravion
Copy link
Author

eravion commented Oct 5, 2021

Hello,
I have the same issue on IOS Apps Version 1.6.1.
May I ask you to confirm ?

@germain-gg germain-gg self-assigned this Oct 6, 2021
@germain-gg
Copy link
Contributor

I will handle the regression on the element-desktop side. However could you open another issue on the iOS bug tracker, https://github.com/vector-im/element-ios

@germain-gg germain-gg added this to In Progress in Web App Team Oct 6, 2021
germain-gg pushed a commit to element-hq/element-desktop that referenced this issue Oct 6, 2021
Fixes an issue where Element-desktop can not establish a connection with a homeserver that has a Let's Encrypt SSL certificate

Fixes element-hq/element-web#19261
@germain-gg germain-gg moved this from In Progress to In Review in Web App Team Oct 6, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
A-Electron O-Uncommon Most users are unlikely to come across this or unexpected workflow S-Critical Prevents work, causes data loss and/or has no workaround T-Defect X-Regression X-Release-Blocker Z-Upstream
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants