Top Menu

Jump to content
Home
    • Projects
    • Work packages
    • News
    • Boards
    • Getting started
    • Introduction video
      Welcome to OpenProject Community
      Get a quick overview of project management and team collaboration with OpenProject. You can restart this video from the help menu.
    • Help and support
    • User guides
    • Videos
    • Shortcuts
    • Community forum
    • Enterprise support
    • Additional resources
    • Data privacy and security policy
    • Digital accessibility (DE)
    • OpenProject website
    • Security alerts / Newsletter
    • OpenProject blog
    • Release notes
    • Report a bug
    • Development roadmap
    • Add and edit translations
    • API documentation
  • Sign in
      Forgot your password?
      Create a new account

      or sign in with your existing account

      Google

Side Menu

  • Overview
  • Activity
  • Roadmap
  • Work packages
  • Calendars
  • Team planners
  • Boards
  • Forums
  • Feature tour
    • Table of contents
      • Expanded. Click to collapseCollapsed. Click to showDeveloper
        • Hierarchy leafAccessibility Checklist
        • Hierarchy leafCode Review Guidelines
        • Expanded. Click to collapseCollapsed. Click to showContribution
          • Hierarchy leafGit Workflow
          • Hierarchy leafTranslations
        • Expanded. Click to collapseCollapsed. Click to showDeveloping Plugins
          • Hierarchy leafDeveloping an OmniAuth Authentication Plugin
        • Hierarchy leafRelease Process
        • Hierarchy leafReport a bug
        • Hierarchy leafSecurity
        • Hierarchy leafSetting up an OpenLDAP server for testing
        • Hierarchy leafTheme Features
      • Hierarchy leafDownload
      • Expanded. Click to collapseCollapsed. Click to showFeature tour
        • Hierarchy leafRelease Notes OpenProject 30
        • Expanded. Click to collapseCollapsed. Click to showRelease Notes OpenProject 30 - Overview
          • Hierarchy leafGlossary
          • Hierarchy leafRelease Notes - Accessibility
          • Hierarchy leafRelease Notes - Accessibility changes
          • Hierarchy leafRelease Notes - Add work package queries as menu items to sidebar
          • Hierarchy leafRelease Notes - Copy projects based on Templates
          • Hierarchy leafRelease Notes - Design changes
          • Hierarchy leafRelease Notes - Fixed Bugs
          • Hierarchy leafRelease Notes - Keyboard Shortcuts
          • Hierarchy leafRelease Notes - Project settings
          • Hierarchy leafRelease Notes - Ruby&Rails Update
          • Hierarchy leafRelease Notes - Security
          • Hierarchy leafRelease Notes - Timelines
          • Hierarchy leafRelease Notes - Work packages
      • Hierarchy leafHowto create animated gifs
      • Hierarchy leafMigration Squashing
      • Hierarchy leafMod security
      • Hierarchy leafNew work package page
      • Hierarchy leafOP3 to OP4 Debian upgrade
      • Hierarchy leafOP4 Ubuntu1404 Stable with MySQL in production
      • Hierarchy leafOpenProject 40 Development Setup
      • Expanded. Click to collapseCollapsed. Click to showOpenProject Foundation
        • Hierarchy leafBoards
        • Hierarchy leafMembers
        • Hierarchy leafOPF-Meetings
        • Hierarchy leafStatutes
      • Expanded. Click to collapseCollapsed. Click to showRelease Notes
        • Hierarchy leafOpenProject released on Bitnami
      • Expanded. Click to collapseCollapsed. Click to showRelease Notes OpenProject 40 - Overview
        • Hierarchy leafRelease Notes OpenProject 40 - Accessibility improvements
        • Hierarchy leafRelease Notes OpenProject 40 - Column header functions in work package table
        • Hierarchy leafRelease Notes OpenProject 40 - Improved Design
        • Hierarchy leafRelease Notes OpenProject 40 - Integrated query title on work package page
        • Hierarchy leafRelease Notes OpenProject 40 - Integrated toolbar on work package page
        • Hierarchy leafRelease Notes OpenProject 40 - OmniAuth integration for OpenProject
        • Hierarchy leafRelease Notes OpenProject 40 - Work package details pane
      • Expanded. Click to collapseCollapsed. Click to showSecurity and privacy
        • Hierarchy leafFAQ
      • Expanded. Click to collapseCollapsed. Click to showSupport
        • Expanded. Click to collapseCollapsed. Click to showDownload and Installation
          • Hierarchy leafInstallation MacOS
          • Expanded. Click to collapseCollapsed. Click to showInstallation OpenProject 3 0
            • Hierarchy leafDebian Stable with MySQL in production
            • Hierarchy leafInstallation Ubuntu
            • Hierarchy leafInstallation Windows
            • Hierarchy leafInstallation on Centos 65 x64 with Apache and PostgreSQL 93
          • Expanded. Click to collapseCollapsed. Click to showInstallation OpenProject 40
            • Hierarchy leafOP4 Debian Stable with MySQL in production
          • Expanded. Click to collapseCollapsed. Click to showMigration paths
            • Hierarchy leafFrom Chilliproject to OpenProject
            • Hierarchy leafMigration 15 to 30
            • Hierarchy leafMigration 24 to 30
            • Hierarchy leafMigration Redmine 2x › OpenProject 30
            • Hierarchy leafOpenProject 3 Migration
          • Hierarchy leafOpenProject 40
        • Expanded. Click to collapseCollapsed. Click to showNews
          • Hierarchy leafNew OpenProject Translations Plugin
          • Hierarchy leafNew Plugin on OpenProjectorg Local Avatars
          • Hierarchy leafNew design for OpenProject
          • Hierarchy leafNews Accessibility workshop for OpenProject
          • Hierarchy leafNews Glossary for OpenProject
          • Hierarchy leafNews Heartbleed fixed
          • Hierarchy leafNews Icon Fonts
          • Hierarchy leafNews OpenProject 30 Release
          • Hierarchy leafNews Release GitHub Integration Plugin
          • Hierarchy leafNews Success Story Deutsche Telekom
          • Hierarchy leafNews Timelines
          • Hierarchy leafOpenProject 3013 released
          • Hierarchy leafOpenProject 3017 released
          • Hierarchy leafOpenProject 40 released
          • Hierarchy leafOpenProject 40 will be coming soon
          • Hierarchy leafOpenProject 405 released
          • Hierarchy leafOpenProject and pkgrio
          • Hierarchy leafOpenProject news moved to a new blog
          • Hierarchy leafOpenProjectBitnami
          • Hierarchy leafPackager version with plugins released ("Community edition")
          • Hierarchy leafRegistration OpenProject-Foundation
          • Hierarchy leafRelease OpenProject AuthPlugins
          • Hierarchy leafUpdates on OpenProject
          • Hierarchy leafWe need your feedback for the the new fullscreen view for work packages
        • Hierarchy leafOpenProject Plug-Ins
      • Expanded. Click to collapseCollapsed. Click to showWiki
        • Hierarchy leaf2nd Level Support
You are here:
  • Forums
  • General discussion

Content

Files storage integration Problem.

Added by Night Owl 3 months ago

My nextcloud website is run under https://my.nextcloud.com -- not https://my.nextcloud.com/nextcloud
Document Root is /var/www/nextcloud.

Last week I solved HTTPS, SSL stuff between openproject server and nextcloud.
So I can curl between them without SSL problem now.

But when I tried to connect openproject to nextcloud, there was an error as below image.

So I followed this troubleshooting guide, (https://www.openproject.org/docs/system-admin-guide/integrations/nextcloud/#troubleshooting)

the first step was successful.

curl --location --request GET 'https://my.nextcloud.com/index.php/apps/integration_openproject/check-config' --header 'Authorization: foo'

But when I tried the second step, I cannot get the result.

curl -H 'OCS-APIRequest:true' -H 'Accept:application/json' https://my.nextcloud.com/nextcloud/ocs/v2.php/cloud/capabilities

I noticed that the URL in above command is include /nextcloud/ in path,
which is not available in my nextcloud site. (My site root is at /var/www/nextcloud)

So I tried this instead. (remove /nextcloud/ path)

curl -H 'OCS-APIRequest:true' -H 'Accept:application/json' https://my.nextcloud.com/ocs/v2.php/cloud/capabilities

Then Nextcloud site return data as it should.

My questions are ..
1. Is the 'File Storage' tried to connect 'Nextcloud' site,  by include /nextcloud/ in Requested URL?
2. If (1) was true, how do I remove that /nextcloud/ from requested URL, without re-build nextcloud site ?

Thanks !


Replies (1)

RE: Files storage integration Problem. - Added by Night Owl 3 months ago

Found the root of problem by ....

- Enable debug level log using this guide >> https://community.openproject.org/topics/9247

- view log by command

journalctl -e -o short-full SYSLOG_IDENTIFIER=openproject-web-1.service --output-fields=MESSAGE > ./op-log.txt

- from log, found that openproject use openssl to test connection to nextcloud host.

so I think the problem is SSL Certificate configuration on nextcloud server.

Nextcloud server invalid host="https://my.nextcloud.com" 
error_type=cannot_be_connected_to: 
exception OpenSSL::SSL::SSLError: SSL_connect SYSCALL 
returned=5 errno=0 peeraddr=192.168.x.x:443 
state=error: certificate verify failed

try to use openssl command to manually check.

openssl s_client -showcerts -connect my.nextcloud.com:443 > ./ssl-log.txt

Found that, there was missing Intermediate CA certificate.

*** you need full chain certificate PEM format without key.

in my scenario, 3 certs are needed. which are nextcloud server cert, intermediate CA cert and the root CA cert.

So I make the new full chain PEM, replace the old one on nextcloud server. then restart apache service.

Then I use openssl command to test first.
openssl s_client -showcerts -connect my.nextcloud.com:443 > ./ssl-log.txt

from above command, you'll see message like.

depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
verify return:1
depth=1 C = US, O = "DigiCert, Inc.", CN = RapidSSL Global TLS RSA4096 SHA256 2022 CA1
verify return:1
depth=0 CN = *.nextcloud.com
verify return:1

You can see, there are 3 certs verified and 'Verify return: 1' that means successful.

Then I go back to File storage admin page. try connect again. DONE !

  • (1 - 1/1)
Loading...