Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Even in HTTP mode, auth is performed over HTTPS #34

Open
Stan-Tastic opened this issue Jan 9, 2025 · 2 comments
Open

Even in HTTP mode, auth is performed over HTTPS #34

Stan-Tastic opened this issue Jan 9, 2025 · 2 comments

Comments

@Stan-Tastic
Copy link

When trying to connect to my local instance, even though I want to connect over HTTP, auth goes over HTTPS:


ADGUARD_IP is set to <myhost>
ADGUARD_PORT is set to 80
ADGUARD_PROTOCOL is set to http
ADGUARD_USERNAME is set to admin
ADGUARD_PASSWORD is set to ******

Verifying connection to your AdGuard instance...
Failed to connect to AdGuard at: <myhost>:80
error sending request for url (https://<myhost>/control/status): error trying to connect: invalid peer certificate contents: invalid peer certificate: UnknownIssuer
Please check your environmental variables and try again.

Secondary problem is that my Adguard Home instance is using my self-issued certificated (issued from a CA that serves my entire home), and I can't quite see how to get AdGuardian to either ignore the cert error or make it use my root cert.

@sochartgit
Copy link

  1. You need to replace with the effective IP or name of your instance
  2. root cert is not the right cert you need. If you really want a leggit cert, look for Let's encrypt, Buypass or ZeroSSL.

@Stan-Tastic
Copy link
Author

Stan-Tastic commented Jan 9, 2025

  1. I'm sorry, not sure what you're used to, but I thought it's obvious I'm providing my instance's IP (tried DNS name too, for good measure), but I'm just not willing to share it publicly, thus anonymization.
  2. Cert from my private CA is as legit as can be, the root cert is imported on all my home devices, and they are totally happy with it. Not to brag, but rather to set some background: I know my way around PKI, been PKI SME for a large enterprise.

Any other ideas/suggestions?

  • I mentioned root certificate trust, because this is the reason why AdGuardian doesn't trust the certificate presented by AdGuard, as shown by the error message "UnknownIssuer".

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants