Error: Unknown certificate authority

ChirpStack Application Server
1

Hello everyone：
I’m having problems trying to build Lora app server。After I run it

%E5%BE%AE%E4%BF%A1%E5%9B%BE%E7%89%87_20180622131704
微信图片_20180622131704.png1208×384 21.9 KB

The general meaning of it is that the connection is not secure, the administrator did not configure the Web site.

6月 22 11:32:55 black-virtual-machine systemd[1]: Stopped LoRa App Server.
6月 22 11:32:55 black-virtual-machine systemd[1]: Started LoRa App Server.
6月 22 11:32:55 black-virtual-machine lora-app-server[3736]: time="2018-06-22T11:32:55+08:00" level=info msg="starting LoRa App Server" docs="https://www.loraserver.io/" version=1.0.1
6月 22 11:32:55 black-virtual-machine lora-app-server[3736]: time="2018-06-22T11:32:55+08:00" level=info msg="connecting to postgresql"
6月 22 11:32:55 black-virtual-machine lora-app-server[3736]: time="2018-06-22T11:32:55+08:00" level=info msg="setup redis connection pool"
6月 22 11:32:55 black-virtual-machine lora-app-server[3736]: time="2018-06-22T11:32:55+08:00" level=info msg="handler/mqtt: TLS config is empty"
6月 22 11:32:55 black-virtual-machine lora-app-server[3736]: time="2018-06-22T11:32:55+08:00" level=info msg="handler/mqtt: connecting to mqtt broker" server="tcp://localhost:1883"
6月 22 11:32:55 black-virtual-machine lora-app-server[3736]: time="2018-06-22T11:32:55+08:00" level=info msg="applying database migrations"
6月 22 11:32:55 black-virtual-machine lora-app-server[3736]: time="2018-06-22T11:32:55+08:00" level=info msg="handler/mqtt: connected to mqtt broker"
6月 22 11:32:55 black-virtual-machine lora-app-server[3736]: time="2018-06-22T11:32:55+08:00" level=info msg="handler/mqtt: subscribing to tx topic" qos=0 topic=application/+/device/+/tx
6月 22 11:32:55 black-virtual-machine lora-app-server[3736]: time="2018-06-22T11:32:55+08:00" level=info msg="migrations applied" count=0
6月 22 11:32:55 black-virtual-machine lora-app-server[3736]: time="2018-06-22T11:32:55+08:00" level=info msg="starting application-server api" bind="0.0.0.0:8001" ca-cert= tls-cert=/etc/lora-app-server/certs/http.pem tls-key=/etc/lora-app-server/certs/http-key.pem
6月 22 11:32:55 black-virtual-machine lora-app-server[3736]: time="2018-06-22T11:32:55+08:00" level=info msg="starting join-server api" bind="0.0.0.0:8003" ca_cert= tls_cert= tls_key=
6月 22 11:32:55 black-virtual-machine lora-app-server[3736]: time="2018-06-22T11:32:55+08:00" level=info msg="starting client api server" bind="0.0.0.0:8080" tls-cert=/etc/lora-app-server/certs/http.pem tls-key=/etc/lora-app-server/certs/http-key.pem
6月 22 11:32:55 black-virtual-machine lora-app-server[3736]: time="2018-06-22T11:32:55+08:00" level=info msg="registering rest api handler and documentation endpoint" path=/api
6月 22 11:33:50 black-virtual-machine lora-app-server[3736]: 2018/06/22 11:33:50 http2: server: error reading preface from client 127.0.0.1:41982: remote error: tls: unknown certificate authority
6月 22 11:33:50 black-virtual-machine lora-app-server[3736]: 2018/06/22 11:33:50 http2: server: error reading preface from client 127.0.0.1:41984: remote error: tls: unknown certificate authority
6月 22 11:33:51 black-virtual-machine lora-app-server[3736]: 2018/06/22 11:33:51 http2: server: error reading preface from client 127.0.0.1:41986: remote error: tls: unknown certificate authority
6月 22 11:46:21 black-virtual-machine lora-app-server[3736]: 2018/06/22 11:46:21 http2: server: error reading preface from client 127.0.0.1:41988: remote error: tls: unknown certificate authority
6月 22 11:46:21 black-virtual-machine lora-app-server[3736]: 2018/06/22 11:46:21 http2: server: error reading preface from client 127.0.0.1:41990: remote error: tls: unknown certificate authority
6月 22 11:46:21 black-virtual-machine lora-app-server[3736]: 2018/06/22 11:46:21 http2: server: error reading preface from client 127.0.0.1:41992: remote error: tls: unknown certificate authority
6月 22 11:46:57 black-virtual-machine lora-app-server[3736]: 2018/06/22 11:46:57 http2: server: error reading preface from client 127.0.0.1:41994: remote error: tls: unknown certificate authority
6月 22 11:46:57 black-virtual-machine lora-app-server[3736]: 2018/06/22 11:46:57 http2: server: error reading preface from client 127.0.0.1:41996: remote error: tls: unknown certificate authority
6月 22 11:46:57 black-virtual-machine lora-app-server[3736]: 2018/06/22 11:46:57 http2: server: error reading preface from client 127.0.0.1:41998: remote error: tls: unknown certificate authority
6月 22 11:47:21 black-virtual-machine lora-app-server[3736]: 2018/06/22 11:47:21 http2: server: error reading preface from client 127.0.0.1:42006: remote error: tls: unknown certificate authority
6月 22 11:47:21 black-virtual-machine lora-app-server[3736]: 2018/06/22 11:47:21 http2: server: error reading preface from client 127.0.0.1:42008: remote error: tls: unknown certificate authority
6月 22 11:47:21 black-virtual-machine lora-app-server[3736]: 2018/06/22 11:47:21 http2: server: error reading preface from client 127.0.0.1:42010: remote error: tls: unknown certificate authority
6月 22 12:56:50 black-virtual-machine lora-app-server[3736]: 2018/06/22 12:56:50 http2: server: error reading preface from client 127.0.0.1:42012: remote error: tls: unknown certificate authority
6月 22 12:56:50 black-virtual-machine lora-app-server[3736]: 2018/06/22 12:56:50 http2: server: error reading preface from client 127.0.0.1:42014: remote error: tls: unknown certificate authority
6月 22 12:57:30 black-virtual-machine lora-app-server[3736]: 2018/06/22 12:57:30 http2: server: error reading preface from client 127.0.0.1:42022: remote error: tls: unknown certificate authority
6月 22 12:57:30 black-virtual-machine lora-app-server[3736]: 2018/06/22 12:57:30 http2: server: error reading preface from client 127.0.0.1:42024: remote error: tls: unknown certificate authority
6月 22 12:57:30 black-virtual-machine lora-app-server[3736]: 2018/06/22 12:57:30 http2: server: error reading preface from client 127.0.0.1:42026: remote error: tls: unknown certificate authority

so ,I want to get some help. thanks！

2

Is there a problem with my configuration?

 [application_server.api]
  # ip:port to bind the api server
  bind="0.0.0.0:8001"

  # ca certificate used by the api server (optional)
  ca_cert=""

  # tls certificate used by the api server (optional)
  tls_cert="/etc/lora-app-server/certs/http.pem"

  # tls key used by the api server (optional)
  tls_key="/etc/lora-app-server/certs/http-key.pem"

[application_server.external_api]
  # ip:port to bind the (user facing) http server to (web-interface and REST / gRPC api)
  bind="0.0.0.0:8080"

  # http server TLS certificate
  tls_cert="/etc/lora-app-server/certs/http.pem"

  # http server TLS key
  tls_key="/etc/lora-app-server/certs/http-key.pem"

  # JWT secret used for api authentication / authorization
  # You could generate this by executing 'openssl rand -base64 32' for example
  jwt_secret="8OEGvIDJPXjXeqeH1IgVMookEc/vLb9s3VhR3CPytp0="

  # when set, existing users can't be re-assigned (to avoid exposure of all users to an organization admin)"
  disable_assign_existing_users=false
3 
 [application_server.api]
  # ip:port to bind the api server
  bind="0.0.0.0:8001"

  # ca certificate used by the api server (optional)
  ca_cert=""

  # tls certificate used by the api server (optional)
  tls_cert="/etc/lora-app-server/certs/http.pem"

  # tls key used by the api server (optional)
  tls_key="/etc/lora-app-server/certs/http-key.pem"

For the internal API you specify certificates, but not a CA certificate. Note that these are optional, only the TLS certificate for the web-interface and REST api are required. Start with a simple configuration and move from there.

Also read the Securing the … sections at https://www.loraserver.io/lora-app-server/install/config/ the documentation at the the linked GitHub repository. It explains which certificates must be set where. Again, most of the certificates are optional.

4

Bro,thank you so much You are very enthusiastic. I can login to the web side by reconfiguring my LoRa-app-server file.
:grin: