I get "The certificate is not trusted because it is self-signed."

Traefik Hub
1

Hello,

I started with Traefik Hub and one service last November successful. It's installed as Docker containers on my own local maschine and available from the internet. I did not changed anything on my side. Since 2 days I get the following message from my browser (checked different browser and clients) if I try to access the service via the published URL created from traefik:

sensitive-gayal-xxxxxxx.sa4avwzt.traefikhub.io uses an invalid security certificate.
 
The certificate is not trusted because it is self-signed.

Error code: MOZILLA_PKIX_ERROR_SELF_SIGNED_CERT

If I accept the risk and click on continue I get a "404 page not found". To solve the problem I deleted the service and the agent and created both new from scratch. But running again in the same issue.

Here are my docker-compose-file for the agent:

version: "3.9"

services:
  # Start the agent with the latest version
  hub-agent:
    image: ghcr.io/traefik/hub-agent-traefik:v1.0.1
    pull_policy: always
    container_name: hub-agent
    restart: "on-failure"
    command:
      - run
      - --hub.token=my_token
      - --auth-server.advertise-url=http://hub-agent
      - --traefik.host=traefik
      - --traefik.tls.insecure=true
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    depends_on:
      - traefik

  # Start Traefik with the latest version
  traefik:
    image: traefik:v2.8
    container_name: traefik
    command:
      # Enable Hub communication (open the port 9900 and 9901 by default)
      - --experimental.hub=true
      - --hub.tls.insecure=true
      - --metrics.prometheus.addrouterslabels=true

The docker log from the hub-agent container:

2023/01/09 09:09AM INF version=v1.0.1 module=github.com/traefik/hub-agent-traefik commit=0ddfa03 built=2022-11-23_03:32:31PM go_version=go1.19.3 os=linux arch=arm
2023/01/09 09:09AM INF Using Agent reachable address | addr=http://hub-agent
2023/01/09 09:09AM INF Starting auth server | addr=0.0.0.0:80

And here the docker-file from my service:

version: "3.3"

volumes:
  data:
  extensions:

services:

  freshrss:
    image: freshrss/freshrss:custom
    container_name: freshrss
    hostname: freshrss
    restart: unless-stopped
#    ports:
#      - 80:80
    volumes:
      - data:/var/www/FreshRSS/data
      - extensions:/var/www/FreshRSS/extensions
    environment:
      TZ: Europe/Paris
      CRON_MIN: '3,33'

networks:
  default:
    name: traefikhub_default
    external: true

Any idea to solve this issue?

2

Hello @cc13, and thanks for your interest in Traefik Hub,

It was an issue on our end. It should be fixed without you doing anything.
If it's still not working, it will be with a simple restart of the hub-agent container.

Thanks for the report.

2 Likes
3

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.