Hi, I created a Lets Encrypt certificate with the alternative chain a few days ago. Then my application, the Seafile Client / Windows 10 reported an invalid certificate. After I created a new certificate with the new default chain, the client reported no problems with the certificate. With the n…

With Windows 10 there is the issue of Windows updates, that I believe also updates Windows the certificate management root certificates.

As I wrote earlier, I have already asked this question to Seafile. There I received the answer that the Windows Store is used. I should be able to see this tomorrow when I have the certificate of the alternative chain again and then my application in the browser (Chrome / Edge) does not throw an e…

Yes I found this thread too after you brought up the lazy load issue. As I said I'll test it and then we'll see what happens

it surly will. I found relevant source code from seafile client repo. https://github.com/haiwen/seafile/blob/master/daemon/http-tx-mgr.c , from line 430 this loads ca list from local certificate store, load it into curl. it won't able to lazyload new root from online store in runtime.

Nice work @orangepizza ; thanks! :+1:

So i generate a new cert for my domain, only ISRG Root X1 is now the root, so far so good. However, now I no longer get the certificates error with the Seafile client. I also tested a snapshot from 5 months ago and it suddenly works now too

Okay I tried it again with another Windows 10 machine and there I could reproduce it. The Seafile client threw an error on a Seafile server with the ISRG Root X1 Root CA. After I opened the web user interface of this Seafile server with Chrome, I had to restart the Seafile client afterwards, but t…

Stepping back from what everyone else said here: One of the following two things could have caused your issue: The CLIENT has an error and does not recognize the new chain The Operating System does not have the new root in it's trust store. I do not know anything about your client, however it …

Seafile client DST Root CA expiry

Help

rg305 September 23, 2021, 5:10am 20

RE: Lazy Loading
Have a look at : ISRG Root lazy loading problem + missing from (random) updated Windows 10 versions - #18 by rg305

Topic		Replies	Views
DST Root CA X3 expiry countdown ISRG/Organizational	102	10393	October 1, 2021
Help thread for DST Root CA X3 expiration (September 2021) Help	665	169012	December 26, 2021
Should I add both DST Root CA X3 and ISRG Root X1 intermediates? Server	22	12668	August 7, 2018
Mozilla's certificate bundle is out of date Help	37	5710	October 8, 2021
Understanding DST Root expiry and the older default cert chain Help	35	3740	November 8, 2021

Seafile client DST Root CA expiry

Related topics