Discovery Server self signed cert

[swills (Steve Wills)]

I’m running my own discovery server and using a self signed cert with it. However when my client tries to connect, it won’t accept the cert. I turned on tracing discovery and it logs this message:

announce POST: Post https://my.discovery.server:8443/: x509: certificate signed by unknown authority

How can I make it accept the cert?

Thanks!

[calmh (Jakob Borg)]

When starting, the server outputs it’s device ID. Give that to the client as part of the relay URL - https://my.discovery.server:8443/?id=ABCD123-....

[swills (Steve Wills)]

That worked, thanks! Is this documented somewhere that I missed? Also, it seems sort of odd, I wonder if there’s some way to give the CA cert…

[calmh (Jakob Borg)]

Indeed it is, in the doc article that you should have been following. http://docs.syncthing.net/users/discosrv.html#certificates

You can also give it a “real” CA-signed cert and not do the device ID business, yes.

[swills (Steve Wills)]

Ah, I knew I was missing something! Thanks!