DuckDNS won't connect through https with the default certs installed

Installing and Using OpenWrt Network and Wireless Configuration
1

By default certs I meant after installing ca-certificates and ca-bundle.

I also use luci-app-ddns and of course have ddns-scripts installed.

However I can't set duckdns to work, here is the error:

 225403 ERROR : GNU Wget Error: '5'
 225403       : ERROR: cannot verify www.duckdns.org's certificate, issued by 'CN=OpenWrt,O=OpenWrte24fa8a0,L=Unknown,ST=Somewhere,C=ZZ':
  Self-signed certificate encountered.
    ERROR: certificate common name 'OpenWrt' doesn't match requested host name 'www.duckdns.org'.
To connect to www.duckdns.org insecurely, use `--no-check-certificate'.
 225403  WARN : Transfer failed - retry 1/0 in 60 seconds

This is when using /etc/ssl/certs as a path to the certs, as instructed in: https://openwrt.org/docs/guide-user/services/ddns/duckdns

The other method I could try is as instructed here: https://www.duckdns.org/install.jsp

And that would be with:

opkg update
opkg install curl
mkdir -p /etc/ssl/certs
curl -k https://certs.secureserver.net/repository/sf_bundle-g2.crt >  /etc/ssl/certs/ca-bundle.pem

But I have no clue why it does not work as per instructed in the main wiki, which is by having ca-certificates and ca-bundle and having the config link to /etc/ssl/certs.

2

Which adblock you added that yoir duck host *s directed to localhost?

1 Like
3

AGH, more info on it here: DDNS does not work anymore (possibly after installing AGH) - #5 by frollic

1 Like
4

So fix it, nothing to do with cacerts, you direct site to localhost, performing attac ssl is designed to prevent, and so it does.

5

Fix it where?

If I change the nameserver /etc/resolv.conf to 1.1.1.1 for example, I get everything working, but the router won't be running AGH.

If I change the nameserver in /etc/resolv.conf to 192.168.1.1 or 127.0.0.1, which is supposed to point to AGH since AGH for me is configured to listen there, then I won't get DDNS to work.

6

If you want consultation on agh lists you should ask them, or disableit for good if it interferes with your expectations.

1 Like