Can't follow other instances

PeerTube
1

Hi there,

I get this weird error when I try to follow other instances:

It says something about an invalid signature, but afaik the SSL certificate is fine.

I am running PeerTube (192.168.1.51) behind HAProxy (192.168.1.1), which runs on OPNsense and I suspect it might have something to do with that and the nginx configuration on PeerTube.

nginx configuration file:

2

I just had to delete the certificate from Lets Encrypt and create a new one.

But there is still weird errors about signatures:

warn[10.1.2022 21.40.13] Error in ActivityPub signature checker.
{
  "err": {
    "stack": "RequestError: certificate has expired\n    at ClientRequest.<anonymous> (/var/www/peertube/versions/peertube-v4.0.0/node_modules/got/dist/source/core/index.js:962:111)\n    at Object.onceWrapper (events.js:520:26)\n    at ClientRequest.emit (events.js:412:35)\n    at ClientRequest.emit (domain.js:475:12)\n    at ClientRequest.origin.emit (/var/www/peertube/versions/peertube-v4.0.0/node_modules/@szmarczak/http-timer/dist/source/index.js:43:20)\n    at TLSSocket.socketErrorListener (_http_client.js:475:9)\n    at TLSSocket.emit (events.js:400:28)\n    at TLSSocket.emit (domain.js:475:12)\n    at emitErrorNT (internal/streams/destroy.js:106:8)\n    at emitErrorCloseNT (internal/streams/destroy.js:74:3)\n    at processTicksAndRejections (internal/process/task_queues.js:82:21)\n    at TLSSocket.onConnectSecure (_tls_wrap.js:1515:34)\n    at TLSSocket.emit (events.js:400:28)\n    at TLSSocket.emit (domain.js:475:12)\n    at TLSSocket._finishInit (_tls_wrap.js:937:8)\n    at TLSWrap.ssl.onhandshakedone (_tls_wrap.js:709:12)",
    "message": "certificate has expired",
    "name": "RequestError"
  }
}

warn[10.1.2022 21.38.53] Signature from https://tube.tchncs.de/accounts/m23hauke is invalid
{
  "parsed": {
    "scheme": "Signature",
    "params": {
      "keyId": "https://tube.tchncs.de/accounts/m23hauke",
      "algorithm": "rsa-sha256",
      "headers": [
        "(request-target)",
        "host",
        "date",
        "digest"
      ],
      "signature": "RXBKjRExldkMaylc33Mt0oXorn/4lZIVXsN7A7/5Mk/5oOxoFKpTklk+7bQHlBYpCJ7ygrGmPu1JikWhXPPsLbpXA1gj8VXB2ad1zx5kZF7+qgE1Ra+T0E77jfZzQ6CxKCTCotVvzt8w4zF4Fkcp1bj5ZWpUkvOZvlG38L6dCFFPwH2seHaPvlUGfoCGzJagvLrv7s8aNxz8bdg/SeWVkky+2n7VhvqTPs2sXKylZ29q10DCQwIJBSY/GJMtCp5zvSY02+A01875z07rqwiZB2izPnZQijDDeKWeaiXXTblwM34LJ6WjVadoUI6+VDtM8YeuKxWWWrV4Ig4qP3Yjaw=="
    },
    "signingString": "(request-target): post /inbox\nhost: peertube.dk\ndate: Mon, 10 Jan 2022 20:38:53 GMT\ndigest: SHA-256=/aLrB549rqoVEd/TYm3TfSuDXwAJOuTA+2Nh4L8WUOc=",
    "algorithm": "RSA-SHA256",
    "keyId": "https://tube.tchncs.de/accounts/m23hauke"
  }
}