[solved] functions ssl certificate not trusted

[candid bobcat]

Why the generated certificate from treafik is not trusted.

And I also observe a problem with the custom domain for the function.

I tried two different CNAME but it is not verifying.

[tough oyster]

First of all, you know all DNS data is public, right? So there’s not much point censoring anything

[candid bobcat]

😅 I will not hide it ahead

@tough oyster Have you ever encountered such a problem?

[tough oyster]

To be trusted by the world, your certificate has to be “signed” by a recognised certificate authority. Appwrite uses LetsEncrypt for this.

The verification modal you’re looking at is for adding an additional domain to access your function with, not to verify your primary [FUNCTION_ID].functions.[YOUR_APPWRITE_DOMAIN] certificate.

Can we please see a screenshot of the Domains tab in your Function?

Oh, and you’re self hosting, right?

[candid bobcat]

Self i use self hosting

[tough oyster]

Could we please see a screenshot of the Domains tab in your Function

[candid bobcat]

This you mean

[tough oyster]

Interesting. So it shows it has a valid certificate, but it doesn’t seem to be using it.

Yes, I have seen this before, but I never quite got to the bottom of why it was happening

[candid bobcat]

Working with the certificate in appwrite is a problematic.

[broken sierra]

Seems like you have nginx in front of appwrite? That could be interfering

[candid bobcat]

No, I don't have it, I have only one appwrite running on one server. It is running on port 80, 443.

[broken sierra]

that 1st one if the auto generated one? Auto generated ones won't have a cert out of the box

(even though it says generated 😕 )

are you running Nginx Proxy Manager in front of Appwrite?

[candid bobcat]

I did not generate it myself, the first automatically generated certificate. Should I manually generate them or what do you suggest?

[candid bobcat]

No, Apart from appwrite, there is nothing on the hosting.

[broken sierra]

yes, create a custom function domain. i think the 2 you added should be webhook.core.pai.kg and webhooks.pai.kg

[broken sierra]

i don't think i see the DNS record so maybe it hasn't propagated?

[candid bobcat]

Added it 6 hours ago, I think it should have been updated already.

[broken sierra]

you're right nvm

[candid bobcat]

I can't figure out what else the problem might be.

[broken sierra]

would you please share a screenshot of the domains page again?

please also make sure there are no extra spaces in the domain

[broken sierra]

when you mouse over webhooks...what is the link?

[candid bobcat]

http://webhooks.core/

[broken sierra]

isn't that wrong?

[candid bobcat]

http://webhooks/

[broken sierra]

when you were creating the domain, what did you enter?

[candid bobcat]

webhoooks and webhooks.core

[broken sierra]

that is wrong

[candid bobcat]

I need fill full address?

[broken sierra]

it should be webhook.core.pai.kg and webhooks.pai.kg

[candid bobcat]

It is work, This is my mistake. Thank you solved my problem

[candid bobcat]

For the first, do I manually generate certificates? Please tell me how to do it correctly.

[broken sierra]

you could try to manually generate a certificate.

do you have requests running through Nginx Proxy Manager?

[candid bobcat]

For the former, I get this all the time.

I don't use it Nginx proxy

[candid bobcat]

Can I manually generate for certain domains?

[broken sierra]

https://appwrite.io/docs/advanced/self-hosting/tls-certificates#manual-generation

[candid bobcat]

Thank you