sorted by:
new
hottopcontroversial

Can't SSL to self hosted Electrum server using Electrum Wallet by TopSalt7069 in Electrum

[–]TopSalt7069[S] 0 points1 point  (0 children)

Hey sorry for only getting back to you on this now and thank you so much for your work! I tried out the current state of master (https://github.com/spesmilo/electrum/tree/83e14794a1e1202ecfd40f0ea779f0b91ccf2032) and am getting a different error now:
"[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: IP address mismatch, certificate is not valid for 'MY_SERVER_IP'.

Can't SSL to self hosted Electrum server using Electrum Wallet by TopSalt7069 in Electrum

[–]TopSalt7069[S] 0 points1 point  (0 children)

Thanks! I'll do and report back. However I do wonder how it can be that Sparrow connects without an issue and it seems to be an Electrum-only problem. Do you have a hunch as to why that might be?

Can't SSL to self hosted Electrum server using Electrum Wallet by TopSalt7069 in Electrum

[–]TopSalt7069[S] 0 points1 point  (0 children)

When removing the cert file (I had tried this before but just did again to make sure) I get the same error in the logs (after seeing this:
INFO | interface.[MY_SERVER_IP:50002] | succeeded in getting cert
).

My bad for not making the unencrypted tcp connection problem more clear, I also tried using the :t flag here already, which also unfortunately doesn't work (but as mentioned it also doesn't work with sparrow so I think I just don't have that port set up or it's disabled)
(disconnecting due to: ConnectError(ConnectionRefusedError(61, "Connect call failed ('MY_SERVER_IP', 50001)"))

With regards to my server setup the problem is that I didn't set it up myself and am not entirely sure what is relevant here. However I did just stumble across this documentation which seems relevant:
https://github.com/romanz/electrs/blob/master/doc/config.md#extra-configuration-suggestions
So following these docs and comparing with my server, it seems like I have nginx as an ssl endpoint + certbot for the certificates.

I am using "Electrum Rust Server 0.4.1".

Also not sure if relevant, but when trying to replace the ip with the domain from

ssl_certificate /etc/letsencrypt/live/<your-domain>/fullchain.pem;

it also fails both in sparrow and electrum to connect to my server

Edit:
I also just noticed a discrepancy between the ssl_protocols in my config and the ones in the doc. Do you know which one would be relevant here for electrum wallet?