SSL Certificate Problem: Self Signed Certificate

[tzuntzai]

error: curl error 60 (SSL certificate problem: self signed certificate) (URL: "https://domain.com:8448/_matrix/client/#/login")

[tzuntzai]

Downloaded cert and added the following to http fucntion in 'matrix.lua'

post.pinnedpublickey = '~/.weechat/certs/domain.com.tls.crt' post.ssl_verifypeer = 0

Then received the error below:

error: curl error 90 (SSL: public key does not match pinned public key!) (URL: "https://domain.com:8448/_matrix/client/#/login")

[K0HAX]

Change post.ssl_verifypeer to false, not zero.

[ghost]

I am trying to get self-signed certificates to work with weechat too but it seems to crash. Where exactly should I put those two lines of code ?

[billux]

Changing post.ssl_verifypeer from 0 to false makes matrix.lua to crash for me.

However you have to provide post.pinnedpublickey with the public key, not the certificate according the curl documentation : https://curl.haxx.se/libcurl/c/CURLOPT_PINNEDPUBLICKEY.html

To extract the public key from the server's certificate : openssl x509 -in certificate.pem -pubkey -noout > publickey.pem

It works for me.