Invalid certificates for https on web ui

Other platforms, generic questions.
Post Reply
Kurisutine

Invalid certificates for https on web ui

Post by Kurisutine »

I was following this guide:
https://github.com/qbittorrent/qBittorr ... rtificates

i got my key and my certificate but when i try to import it i always got "This is not a valid SSL certificate"

can some1 help me?
ciaobaby

Re: Invalid certificates for https on web ui

Post by ciaobaby »

Client version?
Browser?
Operating system?
sledgehammer_999
Administrator
Administrator
Posts: 2443
Joined: Sun Jan 23, 2011 1:17 pm

Re: Invalid certificates for https on web ui

Post by sledgehammer_999 »

Seriously who writes those guides? And do they even test what they write?

You shouldn't lock your certificates/keys with "pass phrases". Otherwise the browser or qbittorrent (depending if it the client or server certificate) won't be able to open it and thus result in "invalid certs".
IIRC the private key shouldn't use a passphrase. qBittorrent as a server needs to know the key to validate the certs. It cannot ask you for passphrase each time a connection is happening.
sledgehammer_999
Administrator
Administrator
Posts: 2443
Joined: Sun Jan 23, 2011 1:17 pm

Re: Invalid certificates for https on web ui

Post by sledgehammer_999 »

I forgot to tell you: I don't have a ready guide on how to make certs.
However this isn't specific to qbt. Google on how to make server/client certificates. There are a lot of guides out there.
If anyone wants to be helpful, please write a correct and tested guide in the wiki.
ciaobaby

Re: Invalid certificates for https on web ui

Post by ciaobaby »

You shouldn't lock your certificates/keys with "pass phrases".
The rider to this is, just in case anyone reads the thread/posts out of context. The ONLY time you should use a 'pass phrase' for a certificate, is when you are creating one for SSH access as root (root shell), so the SSH client prompts for the certificate password rather needing the root password.
Last edited by ciaobaby on Mon May 11, 2015 9:38 pm, edited 1 time in total.
Kurisutine

Re: Invalid certificates for https on web ui

Post by Kurisutine »

Thanks!, I got my https with this single line of code  :)
openssl req -new -x509 -nodes -out server.crt -keyout server.key
Post Reply