Hi

I am currently trying to integrate openproject with nextcloud. Unfortunately I am not getting anywhere with the setup.
On "figure 1" you can see that the integration of openproject in nextcloud worked.

Now I want to select the storage of nextcloud in openproject. See "figure 2"

An error appears. The following is written in the log:

Mai 16 15:38:16 openproject openproject-web-1.service[19934]: I, [2023-05-16T15:38:16.011059 #19934]  INFO -- : Started GET "/api/v3/notifications?pageSize=0&filters=%5B%7B%22readIAN%22%3A%7B%22operator%22%3A%22%3D%22%2C%22values%22%3A%5B%22f%22%5D%7D%7D%5D" for 192.168.***.** at 2023-05-16 15:38:16 +0200
Mai 16 15:38:16 openproject openproject-web-1.service[19934]: I, [2023-05-16T15:38:16.019315 #19934]  INFO -- : duration=7.32 db=1.73 view=5.59 status=200 method=GET path=/api/v3/notifications params={"pageSize"=>"0", "filters"=>"[{\"readIAN\":{\"operator\":\"=\",\"values\":[\"f\"]}}]"} host=openproject.z*********.net user=5
Mai 16 15:38:16 openproject openproject-web-1.service[19934]: I, [2023-05-16T15:38:16.104100 #19934]  INFO -- : Started POST "/admin/settings/storages" for 192.168.***.** at 2023-05-16 15:38:16 +0200
Mai 16 15:38:16 openproject openproject-web-1.service[19934]: I, [2023-05-16T15:38:16.106339 #19934]  INFO -- : Processing by Storages::Admin::StoragesController#create as HTML
Mai 16 15:38:16 openproject openproject-web-1.service[19934]: I, [2023-05-16T15:38:16.106385 #19934]  INFO -- :   Parameters: {"utf8"=>"✓", "authenticity_token"=>"s4QtaZa2pUbg2SGTqX28PJ3ayTBHzw8qQ2zeilkWwB8J3G4xMlIt7MdStr-nTOxaLH1m6rOS11TnsMbG-Ob8iw", "storages_storage"=>{"provider_type"=>"nextcloud", "name"=>"Mein Nextcloud", "host"=>"https://nextcloud.************.net"}, "button"=>""}
Mai 16 15:38:16 openproject openproject-web-1.service[19934]: I, [2023-05-16T15:38:16.117673 #19934]  INFO -- : Nextcloud server invalid host="https://nextcloud.*************.net" error_type=cannot_be_connected_to: exception OpenSSL::SSL::SSLError: SSL_connect returned=1 errno=0 peeraddr=192.168.***.**:443 state=error: certificate verify failed (self-signed certificate in certificate chain)
Mai 16 15:38:16 openproject openproject-web-1.service[19934]: I, [2023-05-16T15:38:16.127528 #19934]  INFO -- :   Rendered modules/storages/app/views/storages/admin/storages/new.html.erb within layouts/admin (Duration: 8.2ms | Allocations: 9786)
Mai 16 15:38:16 openproject openproject-web-1.service[19934]: I, [2023-05-16T15:38:16.171376 #19934]  INFO -- :   Rendered layouts/base.html.erb (Duration: 43.5ms | Allocations: 41976)
Mai 16 15:38:16 openproject openproject-web-1.service[19934]: I, [2023-05-16T15:38:16.171450 #19934]  INFO -- :   Rendered layout layouts/admin.html.erb (Duration: 52.1ms | Allocations: 52010)
Mai 16 15:38:16 openproject openproject-web-1.service[19934]: I, [2023-05-16T15:38:16.171595 #19934]  INFO -- : Completed 200 OK in 65ms (Views: 50.3ms | ActiveRecord: 3.7ms | Allocations: 55692)
Mai 16 15:38:16 openproject openproject-web-1.service[19934]: I, [2023-05-16T15:38:16.521778 #19934]  INFO -- : Started GET "/api/v3/configuration" for 192.168.***.** at 2023-05-16 15:38:16 +0200
Mai 16 15:38:16 openproject openproject-web-1.service[19934]: I, [2023-05-16T15:38:16.532143 #19934]  INFO -- : duration=8.89 db=1.40 view=7.49 status=200 method=GET path=/api/v3/configuration params={} host=openproject.*********.net user=5
Mai 16 15:38:16 openproject openproject-web-1.service[19934]: I, [2023-05-16T15:38:16.599818 #19934]  INFO -- : Started GET "/api/v3/users/5/avatar" for 192.168.***.** at 2023-05-16 15:38:16 +0200
Mai 16 15:38:16 openproject openproject-web-1.service[19934]: I, [2023-05-16T15:38:16.606510 #19934]  INFO -- : duration=5.85 db=1.16 view=4.69 status=302 method=GET path=/api/v3/users/5/avatar params={} host=openproject.********.net user=5
Mai 16 15:38:16 openproject openproject-web-1.service[19934]: I, [2023-05-16T15:38:16.613913 #19934]  INFO -- : Started GET "/api/v3/notifications?pageSize=0&filters=%5B%7B%22readIAN%22%3A%7B%22operator%22%3A%22%3D%22%2C%22values%22%3A%5B%22f%22%5D%7D%7D%5D" for 192.168.***.** at 2023-05-16 15:38:16 +0200
Mai 16 15:38:16 openproject openproject-web-1.service[19934]: I, [2023-05-16T15:38:16.622085 #19934]  INFO -- : duration=6.47 db=1.39 view=5.08 status=200 method=GET path=/api/v3/notifications params={"pageSize"=>"0", "filters"=>"[{\"readIAN\":{\"operator\":\"=\",\"values\":[\"f\"]}}]"} host=openproject.**********.net user=5
Mai 16 15:38:16 openproject openproject-web-1.service[19934]: I, [2023-05-16T15:38:16.806623 #19934]  INFO -- : Started GET "/api/v3/capabilities?pageSize=-1&filters=%5B%7B%22principal%22%3A%7B%22operator%22%3A%22%3D%22%2C%22values%22%3A%5B%225%22%5D%7D%7D%2C%7B%22context%22%3A%7B%22operator%22%3A%22%3D%22%2C%22values%22%3A%5B%22g%22%5D%7D%7D%2C%7B%22action%22%3A%7B%22operator%22%3A%22%3D%22%2C%22values%22%3A%5B%22projects%2Fcreate%22%5D%7D%7D%5D" for 192.168.***.** at 2023-05-16 15:38:16 +0200
Mai 16 15:38:16 openproject openproject-web-1.service[19934]: I, [2023-05-16T15:38:16.837451 #19934]  INFO -- : duration=29.57 db=10.95 view=18.62 status=200 method=GET path=/api/v3/capabilities params={"pageSize"=>"-1", "filters"=>"[{\"principal\":{\"operator\":\"=\",\"values\":[\"5\"]}},{\"context\":{\"operator\":\"=\",\"values\":[\"g\"]}},{\"action\":{\"operator\":\"=\",\"values\":[\"projects/create\"]}}]"} host=openproject.*************.net user=5

I can see from this that openproject does not recognize the self-signed certificate of our own CA, hence the error: "certificate verify failed (self-signed certificate in certificate chain)".

In nextcloud there is a command to "recognize" self-signed certificates.

Nextcloud:
sudo -u www-data ./occ security:certificates:import "path to cert".

Is there something like this in Openproject to validate other servers ?

I think a similar question is https://community.openproject.org/topics/15900?forum_id=6&r=16320#message-16320

Thanks for the help