[QUESTION] How to ignore certificate for status check

[lissy93]

Hello,
I apologize but I am not comfortable with this.
How do I make the ping ignore the signing of the https certificate? (UNABLE_TO_VERIFY_LEAF_SIGNATURE)

Thx

Originally posted by @EVOTk in #35 (comment)

[lissy93]

Heya @EVOTk :)
I've moved this to a new issue.
So are you running Dashy via HTTPS, and trying to check the status of a non-HTTPS service? Or the otherway around?

If it's the case that the service you are accessing has an unsigned certificate, then you can ignore this by setting rejectUnauthorized: false in the headers. You can set status check headers with statusCheckHeaders. But this isn't great for security, so I would only do this if it is a local service within your LAN.
Hope that helps :)

[EVOTk]

Hello !
thank you for your responsiveness, again!

I use Dashy locally, through a VPN.
The service I am trying to check the status is HTTPS with a self-signed certificate (Proxmox)

  - name: "Serveur"
    items:
      - title: "Proxmox"
        description: ""
        icon: "proxmox.png"
        url: "https://192.168.2.40:8006"
        statusCheck: true

This gives the same result:

  - name: "Serveur"
    items:
      - title: "Proxmox"
        description: ""
        icon: "proxmox.png"
        url: "https://192.168.2.40:8006"
        statusCheck: true
        statusCheckHeaders: {rejectUnauthorized: false}

[lissy93]

Hmm okay, so maybe this is something that I have to do in the code. I could add in an optional attribute, that is off by default, so that users can disable SSL rejection for an individual service (if they are slef-hosting). I'll look into this tonight when I get home from work and hopefully get something working :)

I also notice that the error text in the tooltip is overflowing, I'll fix that at the same time :)

[EVOTk]

Thank you so much ! Can't wait to try this :)

[EVOTk]

Thanks thanks thanks !

[lissy93]

No problem :)
I'll get it merged tomorrow evening, when I get home from work, and let you know when it's done. Hopefully it'll work for you 🤞

[EVOTk]

Hello,
branch "FEATURE/ssl-status-check-options" works fine for me.

I am in a hurry for this to be merged :D :D

Take your time, don't do anything in a rush;)

Thanks again ! Good night !

[lissy93]

Sorry it took me a while to merge, I wanted to test it properly and fix the tooltip styles at the same time.
But it's merged now, enjoy :)

[EVOTk]

Thank you very much, I will immediately pull the latest version in order to update my "Dashy" and take advantage of this :)

[EVOTk]

Hello @dtctek
I think this issue will be useful for you :)

https://github.com/Lissy93/dashy/blob/master/docs/showcase.md#ground-control