Hi, I created droplet in Digital Ocean where I am running my nodejs application. I bought a domain in Namecheap and point it to my ip adress of a droplet. I also installed let’s encrypt ssl for that domain in my droplet. When I access to my domain I am getting an error: ‘An application is stopping Chrome from safely connecting to this site’ (NET:ERR_CERT_AUTHORITY_INVALID). I am attaching my nginx default config below Do you know if this is because I am using the free let’s encrypt ssl or there is something wrong in my settings?
server {
server_name domain www.domain;
location / {
proxy_pass http://localhost:3000;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/domain/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/domain/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.domain) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = domain) {
return 301 https://$host$request_uri;
} # managed by Certbot
listen 80;
server_name domain www.domain;
return 404; # managed by Certbot
}
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.
Hi there,
The error message you’re encountering,
NET::ERR_CERT_AUTHORITY_INVALID
, indicates that there might be an issue with the SSL certificate or its configuration. This error is not because you’re using a free Let’s Encrypt SSL certificate, as they are trusted by most modern browsers.Here are a few things that I could suggest:
If the issue persists, you may want to consider reissuing the SSL certificate using Certbot or checking the Certbot logs for any errors. You can do that by running the
certbot
command again.Let me know how it goes!
Best,
Bobby