Hi, I created droplet in Digital Ocean where I am running my nodejs application. I bought a domain in Namecheap and point it to my ip adress of a droplet. I also installed let’s encrypt ssl for that domain in my droplet. When I access to my domain I am getting an error: ‘An application is stopping Chrome from safely connecting to this site’ (NET:ERR_CERT_AUTHORITY_INVALID). I am attaching my nginx default config below Do you know if this is because I am using the free let’s encrypt ssl or there is something wrong in my settings?
server {
server_name domain www.domain;
location / {
proxy_pass http://localhost:3000;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/domain/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/domain/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.domain) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = domain) {
return 301 https://$host$request_uri;
} # managed by Certbot
listen 80;
server_name domain www.domain;
return 404; # managed by Certbot
}
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
Hi there,
The error message you’re encountering, NET::ERR_CERT_AUTHORITY_INVALID, indicates that there might be an issue with the SSL certificate or its configuration. This error is not because you’re using a free Let’s Encrypt SSL certificate, as they are trusted by most modern browsers.
Here are a few things that I could suggest:
ls -lah /etc/letsencrypt/live/domain/fullchain.pem
ls -lah /etc/letsencrypt/live/domain/privkey.pem
sudo systemctl restart nginx
If the issue persists, you may want to consider reissuing the SSL certificate using Certbot or checking the Certbot logs for any errors. You can do that by running the certbot command again.
Let me know how it goes!
Best,
Bobby
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
Full documentation for every DigitalOcean product.
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
Stay up to date by signing up for DigitalOcean’s Infrastructure as a Newsletter.
New accounts only. By submitting your email you agree to our Privacy Policy
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Sign up and get $200 in credit for your first 60 days with DigitalOcean.*
*This promotional offer applies to new accounts only.