s-kaczmarek

Members
  • Posts

    5
  • Joined

  • Last visited

Everything posted by s-kaczmarek

  1. As mentioned above, in my previous message, I can't check that certificate from the browser level. How can I make sure, that self-signed certificate exists? Is there any way to verify that from the server level?
  2. Thanks for answer. My browser (firefox), says nothing about certificate, that's why I thought, there is no certificate at all. It only says "connection not encrypted" and "This website does not supply ownership information.". I doesn't say anywhere, that there is a certificate issued by Resilio Sync as per example in help center. Are you sure, that there is no risk of password being compromised? How can I verify, that this certificate exists?
  3. Hi, I'm trying to set up my sync node in cloud. These are the steps I've done: I created resilio instance as a docker container with docker-compose: --- version: "2.1" services: resilio-sync: image: ghcr.io/linuxserver/resilio-sync container_name: resilio-sync environment: - PUID=1000 - PGID=1000 - TZ=Europe/Warsaw - UMASK_SET=022 #optional volumes: - /home/user/sync_config:/config - /mnt/volume_sgp1_01/containers_data/sync_downloads:/downloads - /mnt/volume_sgp1_01/sync:/sync ports: - 443:8888 - 55555:55555 restart: unless-stopped Once I accessed web ui, browser complained about lack of ssl certificate, so I tried to generate one with command: openssl req -newkey rsa:2048 -nodes -keyout domain.key-x509 -days 36500 -out sync.crt I've adjusted resilio settings to use that certificate: "webui" : { "listen" : "0.0.0.0:8888", "allow_empty_password" : false, "dir_whitelist" : [ "/sync", "/sync/folders", "/sync/mounted_folders" ], "ssl_certificate" : "/config/sync.crt" } After restarting of container, it started without issues, but when I'm trying to access web ui once again, my browser gives me error: SSL_ERROR_RX_RECORD_TOO_LONG What have I done wrong?
  4. Hello, I'm working on my backup system based on Resilio Sync and I want to make sure, that my scenario will work in case of disaster. Let's imagine certain scenario: * I have machine "A" with Resilio Sync installed as docker container with /sync /config /download mapped to the host's filesystem * I have machine "B" with only encrypted keys exchanged as a safe off site backup. * I have machine "Z" that stores bakup of /sync and /config folders from Resilio Instance on machine "A" Now, let's imagine, that disaster came and machine "A" is dead. I cannot retrieve data, because machine "B" only holds encrypted keys. Is it possible to restore /sync and /config data from "Z" machine on new computer, rerun container, download and decrypt data from "B" machine? Is there a chance that id of peer from machine "A" will be not valid anymore? I hope, that you understand what I mean, because it seems like encrypted node doesn't make much sense once other nodes with read and write permissions are dead.