-
-
Notifications
You must be signed in to change notification settings - Fork 724
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[BUG] - Cannot use OIDC login with rootless podman #4454
Comments
Is Authelia behind a custom SSL certificate? If so, then you'd need to pass the I also noticed that your |
I'm using a certificate I got from ZeroSSL using DNS challenge. I got the certs using acme.sh and specifed them manually within Caddy because I couldn't get the duckdns plugin to work. |
I'm no expert when it comes to certs and CA bundles... |
Here's the logs:
|
So looks like the http client is using the default CA bundle from You can try bypassing SSL verification by setting Edit: if you're gonna try using that env variable you'll need to be on the nightly image or the custom one from #4449 |
I have the same problem and tried to bind my local ca-certificates.crt file to the ca certificate store certifi uses.
If I log into the containers console I can see, that the file has been mapped successfully, but unfortunately the error is still the same. Probably I'm missing additional steps. |
I just tried traefik for the reverse proxy instead of caddy and it seems to be working now. I've no idea why caddy isn't working. |
I already use Traefik and still have this issue. Do you have any idea how using Traefik influences certificate validation? |
No Idea. I've just tested the certs that got automatically generated with traefik by exporting them using https://github.com/ldez/traefik-certs-dumper and passing them to caddy. With those same certs caddy seems to be working now too. |
Would it be possible to make the OIDC part of Mealie recognize custom CA certificates just like it did with |
@tedstriker Mealie does support this via the |
I tried the nightly and it SSO works again! Thank you 👍 |
First Check
What is the issue you are experiencing?
I can't seem to get OIDC working with rootless podman. I'm getting the same error as #4449 but I assume my case is a bit different since the fixed container image from that issue doesn't work for me.
Steps to Reproduce
Please provide relevant logs
Mealie Version
v2.0.0
ghcr.io/mealie-recipes/mealie:latest
a7c8b33
Deployment
Other (please specify below)
Additional Deployment Details
The text was updated successfully, but these errors were encountered: