Codeberg pages: SSL_ERROR_INTERNAL_ERROR_ALERT #2153

tinonline commented 2025年09月30日 17:28:25 +02:00

Comment

Hi there,

I got a similar issue as #1504

My main goal is to set up Codeberg as an OIDC Provider for Tailscale: https://tailscale.com/kb/1240/sso-custom-oidc

The problem is, that I already struggle at the setup of the custom domain as mentioned here: https://docs.codeberg.org/codeberg-pages/using-custom-domain/

What I did

• Repository: https://codeberg.org/tinonline/oidc/
• Create .domain file:

  oidc.tinonline.ch
  tinonline.codeberg.page
  oidc.tinonline.codeberg.page
  pages.oidc.tinonline.codeberg.page
  

• Create CNAME record
  • Domain: oidc.tinonline.ch
  • Points to: oidc.tinonline.codeberg.page
• Accessing https://codeberg.org/tinonline/oidc/ works

Problem

• I can't access https://oidc.tinonline.ch/.
• I receive a certificate error SSL_ERROR_INTERNAL_ERROR_ALERT

Additional hints
When using https://webfinger.net/ to lookup codeberg@tinonline.ch (as defined in the file .well-known/webfinger), I receive the followinig error:

15:21:50 Looking up WebFinger data for acct:codeberg@tinonline.ch
15:21:50 GET https://tinonline.ch/.well-known/webfinger?resource=acct%3Acodeberg%40tinonline.ch
15:21:51 Error getting JRD: Get "https://tinonline.ch/.well-known/webfinger?resource=acct%3Acodeberg%40tinonline.ch": tls: failed to verify certificate: x509: certificate is valid for *.hostpoint.ch, hostpoint.ch, not tinonline.ch

hostpoint.ch is where my domain is hosted.

Many thanks in advance for your help!

### Comment Hi there, I got a similar issue as #1504 My main goal is to set up Codeberg as an OIDC Provider for Tailscale: https://tailscale.com/kb/1240/sso-custom-oidc The problem is, that I already struggle at the setup of the custom domain as mentioned here: https://docs.codeberg.org/codeberg-pages/using-custom-domain/ **What I did** - Repository: https://codeberg.org/tinonline/oidc/ - Create .domain file: ```bash oidc.tinonline.ch tinonline.codeberg.page oidc.tinonline.codeberg.page pages.oidc.tinonline.codeberg.page ``` - Create CNAME record - Domain: oidc.tinonline.ch - Points to: oidc.tinonline.codeberg.page - Accessing https://codeberg.org/tinonline/oidc/ works **Problem** - I can't access https://oidc.tinonline.ch/. - I receive a certificate error SSL_ERROR_INTERNAL_ERROR_ALERT **Additional hints** When using https://webfinger.net/ to lookup codeberg@tinonline.ch (as defined in the file .well-known/webfinger), I receive the followinig error: ```bash 15:21:50 Looking up WebFinger data for acct:codeberg@tinonline.ch 15:21:50 GET https://tinonline.ch/.well-known/webfinger?resource=acct%3Acodeberg%40tinonline.ch 15:21:51 Error getting JRD: Get "https://tinonline.ch/.well-known/webfinger?resource=acct%3Acodeberg%40tinonline.ch": tls: failed to verify certificate: x509: certificate is valid for *.hostpoint.ch, hostpoint.ch, not tinonline.ch ``` hostpoint.ch is where my domain is hosted. Many thanks in advance for your help!

Gusted commented 2025年10月01日 16:17:22 +02:00

Hi, could you try changing the CNAME to be main.oidc.tinonline.codeberg.page?

Hi, could you try changing the CNAME to be `main.oidc.tinonline.codeberg.page`?

tinonline commented 2025年10月02日 12:29:19 +02:00

Simple but effective - it worked. Thanks a lot for your help.

Simple but effective - it worked. Thanks a lot for your help.