Vital unable to login (self-signed cert issue)

Vital 1.0.3 is unable to login. According to Wireshark Vital is trying to get to port 443 on 2a00:1450:400e:80c::200a to sign me in. The problem with that site is that it has a self-signed certificate with a SHA1 signature. The GnuTLS security policies on Fedora 33 do not allow TLS connections to sites with deprecated features in their certificate. So perhaps you could install a LetsEncrypt certificate?

4 Likes

Nice finding, patrick!
Does anyone have a reasonable work around ? So far I’ve used wine to get the plus packs.
Thanks

Hmm I’ll have to look into this. I’m using an auth library so I’m not sure how it’s handling that.
In the latest version (1.0.4) there’s a “Work offline” mode that you can use so you don’t have to login. But I should track this down…

If you go to the account site https://account.vital.audio you can manually download them and use the “Work Offline” mode on the latest build (1.0.4)

1 Like

Thanks Matt.

About the certificate: you can install Certbot on the webserver and make it generate a LetsEncrypt certificate which should work with most apps. https://certbot.eff.org/

I mean I don’t authenticate users on my own servers. It’s an external service because dealing with users passwords is something I don’t want to get into.

Ah right. Maybe you could ask the external service folks to install a LetsEncrypt certificate?