Skip to content
View in the app

A better way to browse. Learn more.

Unraid

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

Cannot provision SSL certificate (error 403) with Ubiquiti Edgerouter 4 & ATT Fiber

Featured Replies

I've spent several hours over several days trying to fix this, and I've found other posts on these forums about the problem but none of them have fixed my problem.

 

When I try to click the provision button under 'Management Access' for an SSL certificate I get the following error.

image.png.07e18287ffd21d9bfc685f85cf9db1e7.png

 

This resolves to 192.168.1.91 in a ping

image.png.8faa62e484050ba1efe7a1eda5b7926c.png

 

I've tried to follow the suggestion in the help section of unraid, and also from the forums by specifying 'rebind-domain-ok=/unraid.net/' to allow dns rebinding on that address.

image.png.ade3ddf85475779f97408f58c077e52f.png

 

You can see I also specify the google DNS servers, which I've confirmed are being used

image.png.805605d89193e4524829d7667ad032e8.png

 

I'm completely stumped...  anybody have additional resources/suggestions I can follow?

Edited by lman30

This is odd :) Would you please upload your diagnostics ( Go to Tools -> Diagnostics )

Hmm... OK, the fact that this resolves for you:
 ping 7064337de712ccf69be1c7f7762091b345f6cf66.unraid.net
means that rebind protection is not an issue.

 

But for some reason it resolves to 192.168.1.91 instead of the server's IP of 192.168.2.42. I was thinking perhaps you had two network cards in your system but that doesn't seem to be the case.

 

Any chance you are in a double-nat situation, behind two routers?

  • Author

My current path for the server is (Unraid Server) -> (Dumb switch - Eth1) -> (EdgeRouter 4) -> (ONT)

 

I have hairpin/loopback NAT disabled

image.png.d10a834a5f6224dbf43d59387f32d1e1.png

 

 

I do have a masquerade for outbound traffic to VLAN eth0.0, not sure if that qualifies as a double NAT.

image.thumb.png.de0917d68cc53b65604576069d1deacd.png

 

Edit: I got my set up working without the masquerade, still no luck...

Edited by lman30

  • Author

So I've tried resorting to the last recommendation under help to just make an entry for unraid.net in the hosts file, and it STILL gives me an error when trying to provision.

 

image.png.e67385a5dafe59d9f59187693e52a713.png

 

image.png.450c378c006ba516002e1faed2d065ff.png

 

image.png.40140cfb373fbcc1b04ff57933a8c9f6.png

image.png

Edited by lman30

12 hours ago, lman30 said:

So I've tried resorting to the last recommendation under help to just make an entry for unraid.net in the hosts file, and it STILL gives me an error when trying to provision.

Changing the hosts file on the Unraid machine won't do anything... you would need to change the hosts file on the machine you're using to browse the Unraid UI.  Also, I would completely close your web browser after that to clear any dns caching it might store.

  • Author

Oh okay, guess I don't understand the provisioning process too well.

 

I tried creating an entry at C:\Windows\System32\drivers\etc\hosts on the PC I'm using to access unraid

Quote

192.168.2.1 7064337de712ccf69be1c7f7762091b345f6cf66.unraid.net

 

It doesn't take ~30 seconds to fail like before; it responds in less than a second but I still get the same error.  I've verified my machine resolves the address properly.

image.png.21b62dcf891c27cd54543882a9ee8ed3.png

 

So frustrating!!! 

Ok, this is really weird.  I'm not sure why you are getting some random IP address.  If you click the "Update DNS" button on that page, does it do anything?  Can you even click that button?

  • 2 weeks later...

Archived

This topic is now archived and is closed to further replies.

Account

Navigation

Search

Search

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.