[GH-ISSUE #59] Handling of Secure Connection Errors #59

Closed
opened 2026-02-25 22:36:00 +03:00 by kerem · 5 comments
Owner

Originally created by @SomePoorBastard on GitHub (Mar 25, 2018).
Original GitHub issue: https://github.com/floccusaddon/floccus/issues/59

Software versions

Browser(s):

Google Chrome

chrome://version

Google Chrome | 65.0.3325.181 (Official Build) (64-bit)
           -- | --
     Revision | dc3469be277cc962ba01d9c0cb5bb1a265676c36-refs/branch-heads/3325@{#725}
           OS | Linux      
   JavaScript | V8 6.5.254.41
Firefox

(To Be Amended on next test case)

Nextcloud: 13.0.1

Nextcloud Bookmarks app: 0.11.0

Floccus: 2.0.0

Steps to reproduce

  1. Set up Nextcloud 13.0.1 using a self-signed certificate or a certificate chain with an untrusted certificate authority.
  2. Install Nextcloud Bookmarks Version 0.11.0 (same revision as specified in Issue #56)
  3. Install Floccus 2.0.0 on Google Chrome 65.0.3325.181 (or similar) and add a test account on the prepared Nextcloud service.
  4. The error should appear at this point when you attempt to perform a synchronization.

Expected outcome

One of two outcomes:

  1. A warning/error message under the extension's account window where the user is alerted to security session errors and possible solutions to those errors the user can take.
  2. A dialog/message/setting recommendation to ask to enable trust of specific/all self-signed certificates (that last part with [all] self-signed certs may be a bad idea) under the extension's account window.
    ...

Actual outcome

  1. An error status symbol under the extension's account window, which, when hovered over with the mouse, displays the "Failed to Fetch" message.
    ...

Additional Information

Floccus Logfile (Scrubbed of P.I.I. & replaced with dummy data)

Notes

The first two errors I believe were when when I forced a sync with development mode off. After turning development mode on, then opening the console and attempted to reproduce in front of my eyes, it successfully completed a synchronization. lol...

Originally created by @SomePoorBastard on GitHub (Mar 25, 2018). Original GitHub issue: https://github.com/floccusaddon/floccus/issues/59 <!-- Hello there! Thank you for providing feedback! Please answer the below questions to allow for as smooth a process of tackling the issue as possible :) --> ### Software versions <!-- Please provide the versions of the following software products in your set up --> #### Browser(s): ##### Google Chrome chrome://version ``` Google Chrome | 65.0.3325.181 (Official Build) (64-bit) -- | -- Revision | dc3469be277cc962ba01d9c0cb5bb1a265676c36-refs/branch-heads/3325@{#725} OS | Linux JavaScript | V8 6.5.254.41 ``` ##### Firefox (To Be Amended on next test case) #### Nextcloud: 13.0.1 #### Nextcloud Bookmarks app: 0.11.0 #### Floccus: 2.0.0 ### Steps to reproduce <!-- What did you do? Be as specific as possible --> 1. Set up Nextcloud 13.0.1 using a self-signed certificate or a certificate chain with an untrusted certificate authority. 2. Install Nextcloud Bookmarks Version 0.11.0 (same revision as specified in Issue #56) 3. Install Floccus 2.0.0 on Google Chrome 65.0.3325.181 (or similar) and add a test account on the prepared Nextcloud service. 4. The error should appear at this point when you attempt to perform a synchronization. ### Expected outcome <!-- What did you think was going to happen or what do you think should have happened? --> One of two outcomes: 1. A warning/error message under the extension's account window where the user is alerted to security session errors and possible solutions to those errors the user can take. 2. A dialog/message/setting recommendation to ask to enable trust of specific/all self-signed certificates (that last part with [all] self-signed certs may be a bad idea) under the extension's account window. ... ### Actual outcome <!-- What actually happened after you did the above steps? --> 1. An error status symbol under the extension's account window, which, when hovered over with the mouse, displays the "Failed to Fetch" message. ... ### Additional Information [Floccus Logfile ](https://gist.github.com/SomePoorBastard/3e29438dbe4d38266f00d8e457fd0582)(Scrubbed of P.I.I. & replaced with dummy data) ### Notes The first two errors I believe were when when I forced a sync with development mode off. After turning development mode on, then opening the console and attempted to reproduce in front of my eyes, it successfully completed a synchronization. lol...
Author
Owner

@marcelklehr commented on GitHub (Mar 25, 2018):

Mh. Are you able to login using the normal nextcloud frontend in the same browser? The fact that it worked the second time you tried is strange, as a certificate error usually doesn't resolve itself. It might be that nextcloud banned your ip after too many requests before?

<!-- gh-comment-id:375977430 --> @marcelklehr commented on GitHub (Mar 25, 2018): Mh. Are you able to login using the normal nextcloud frontend in the same browser? The fact that it worked the second time you tried is strange, as a certificate error usually doesn't resolve itself. It might be that nextcloud banned your ip after too many requests before?
Author
Owner

@SomePoorBastard commented on GitHub (Mar 25, 2018):

I had definitely logged in just before according to my web history, but it's hard to say exactly what happened without diving into the server logs. I'll take a peek at those shortly.

<!-- gh-comment-id:375985088 --> @SomePoorBastard commented on GitHub (Mar 25, 2018): I had definitely logged in just before according to my web history, but it's hard to say exactly what happened without diving into the server logs. I'll take a peek at those shortly.
Author
Owner

@SomePoorBastard commented on GitHub (Mar 27, 2018):

I'm not sure how long a ban lasts in Nextcloud's brute-force detection blacklist. Here is a snip from the logs at the time; starting at the time the requests were made:

{"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Run OC\\Authentication\\Token\\DefaultTokenCleanupJob job with ID 203","userAgent":"--","version":"13.0.1.1"}
{"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Invalidating session tokens older than 2018-03-24T03:00:00+00:00","userAgent":"--","version":"13.0.1.1"}
{"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Invalidating remembered session tokens older than 2018-03-10T03:00:00+00:00","userAgent":"--","version":"13.0.1.1"}
{"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Finished OC\\Authentication\\Token\\DefaultTokenCleanupJob job with ID 203 in 0 seconds","userAgent":"--","version":"13.0.1.1"}
{"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Run OCA\\Files_Sharing\\DeleteOrphanedSharesJob job with ID 7","userAgent":"--","version":"13.0.1.1"}
{"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"DeleteOrphanedSharesJob","method":"--","url":"--","message":"0 orphaned share(s) deleted","userAgent":"--","version":"13.0.1.1"}
{"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Finished OCA\\Files_Sharing\\DeleteOrphanedSharesJob job with ID 7 in 0 seconds","userAgent":"--","version":"13.0.1.1"}
{"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Run OCA\\Files\\BackgroundJob\\CleanupFileLocks job with ID 4","userAgent":"--","version":"13.0.1.1"}
{"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Finished OCA\\Files\\BackgroundJob\\CleanupFileLocks job with ID 4 in 0 seconds","userAgent":"--","version":"13.0.1.1"}
{"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Run OC\\Log\\Rotate job with ID 204","userAgent":"--","version":"13.0.1.1"}
{"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Finished OC\\Log\\Rotate job with ID 204 in 0 seconds","userAgent":"--","version":"13.0.1.1"}
{"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Run OCA\\Files_Trashbin\\BackgroundJob\\ExpireTrash job with ID 11","userAgent":"--","version":"13.0.1.1"}
{"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Finished OCA\\Files_Trashbin\\BackgroundJob\\ExpireTrash job with ID 11 in 0 seconds","userAgent":"--","version":"13.0.1.1"}
{"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Run OCA\\User_LDAP\\Jobs\\CleanUp job with ID 29","userAgent":"--","version":"13.0.1.1"}
{"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Finished OCA\\User_LDAP\\Jobs\\CleanUp job with ID 29 in 0 seconds","userAgent":"--","version":"13.0.1.1"}
{"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Run OCA\\Activity\\BackgroundJob\\EmailNotification job with ID 13","userAgent":"--","version":"13.0.1.1"}
{"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Finished OCA\\Activity\\BackgroundJob\\EmailNotification job with ID 13 in 0 seconds","userAgent":"--","version":"13.0.1.1"}
{"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:01","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Run OCA\\UpdateNotification\\ResetTokenBackgroundJob job with ID 194","userAgent":"--","version":"13.0.1.1"}
{"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:01","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Finished OCA\\UpdateNotification\\ResetTokenBackgroundJob job with ID 194 in 0 seconds","userAgent":"--","version":"13.0.1.1"}
{"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:01","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Run OC\\Authentication\\Token\\DefaultTokenCleanupJob job with ID 15","userAgent":"--","version":"13.0.1.1"}
{"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:01","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Invalidating session tokens older than 2018-03-24T03:00:01+00:00","userAgent":"--","version":"13.0.1.1"}
{"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:01","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Invalidating remembered session tokens older than 2018-03-10T03:00:01+00:00","userAgent":"--","version":"13.0.1.1"}
{"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:01","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Finished OC\\Authentication\\Token\\DefaultTokenCleanupJob job with ID 15 in 0 seconds","userAgent":"--","version":"13.0.1.1"}
{"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:01","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Run OCA\\Files\\BackgroundJob\\ScanFiles job with ID 2","userAgent":"--","version":"13.0.1.1"}
{"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:01","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Finished OCA\\Files\\BackgroundJob\\ScanFiles job with ID 2 in 0 seconds","userAgent":"--","version":"13.0.1.1"}
{"reqId":"OIlP75gT3VlJ9BwJYx4j","level":1,"time":"March 25, 2018 03:11:15","remoteAddr":"192.168.2.22","user":"--","app":"admin_audit","method":"GET","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark?page=-1","message":"Login attempt: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"}
{"reqId":"OIlP75gT3VlJ9BwJYx4j","level":1,"time":"March 25, 2018 03:11:15","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"GET","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark?page=-1","message":"Login successful: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"}
{"reqId":"OIlP75gT3VlJ9BwJYx4j","level":1,"time":"March 25, 2018 03:11:15","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"GET","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark?page=-1","message":"Logout occurred","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"}
{"reqId":"OIlP75gT3VlJ9BwJYx4j","level":1,"time":"March 25, 2018 03:11:15","remoteAddr":"192.168.2.22","user":"--","app":"admin_audit","method":"GET","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark?page=-1","message":"Login attempt: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"}
{"reqId":"OIlP75gT3VlJ9BwJYx4j","level":1,"time":"March 25, 2018 03:11:15","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"GET","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark?page=-1","message":"Login successful: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"}
{"reqId":"zCC4WcW9riuG0YFtofvB","level":1,"time":"March 25, 2018 03:11:17","remoteAddr":"192.168.2.22","user":"--","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Login attempt: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"}
{"reqId":"JBh8Q32Iugjpns3OEhz0","level":1,"time":"March 25, 2018 03:11:17","remoteAddr":"192.168.2.22","user":"--","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Login attempt: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"}
{"reqId":"TWq5ZHPLPaM92aOwTNjN","level":1,"time":"March 25, 2018 03:11:17","remoteAddr":"192.168.2.22","user":"--","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Login attempt: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"}
{"reqId":"zCC4WcW9riuG0YFtofvB","level":1,"time":"March 25, 2018 03:11:17","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Login successful: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"}
{"reqId":"TWq5ZHPLPaM92aOwTNjN","level":1,"time":"March 25, 2018 03:11:17","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Login successful: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"}
{"reqId":"JBh8Q32Iugjpns3OEhz0","level":1,"time":"March 25, 2018 03:11:18","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Login successful: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"}
{"reqId":"zCC4WcW9riuG0YFtofvB","level":1,"time":"March 25, 2018 03:11:18","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Logout occurred","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"}
{"reqId":"zCC4WcW9riuG0YFtofvB","level":1,"time":"March 25, 2018 03:11:18","remoteAddr":"192.168.2.22","user":"--","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Login attempt: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"}
{"reqId":"TWq5ZHPLPaM92aOwTNjN","level":1,"time":"March 25, 2018 03:11:18","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Logout occurred","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"}
{"reqId":"TWq5ZHPLPaM92aOwTNjN","level":1,"time":"March 25, 2018 03:11:18","remoteAddr":"192.168.2.22","user":"--","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Login attempt: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"}
{"reqId":"JBh8Q32Iugjpns3OEhz0","level":1,"time":"March 25, 2018 03:11:18","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Logout occurred","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"}
{"reqId":"JBh8Q32Iugjpns3OEhz0","level":1,"time":"March 25, 2018 03:11:18","remoteAddr":"192.168.2.22","user":"--","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Login attempt: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"}
{"reqId":"zCC4WcW9riuG0YFtofvB","level":1,"time":"March 25, 2018 03:11:18","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Login successful: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"}
{"reqId":"TWq5ZHPLPaM92aOwTNjN","level":1,"time":"March 25, 2018 03:11:18","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Login successful: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"}
{"reqId":"JBh8Q32Iugjpns3OEhz0","level":1,"time":"March 25, 2018 03:11:18","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Login successful: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"}
{"reqId":"4rI6KzRPINpvnl8hmFmo","level":1,"time":"March 25, 2018 03:11:25","remoteAddr":"192.168.2.22","user":"--","app":"admin_audit","method":"GET","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark?page=-1","message":"Login attempt: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"}
{"reqId":"4rI6KzRPINpvnl8hmFmo","level":1,"time":"March 25, 2018 03:11:25","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"GET","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark?page=-1","message":"Login successful: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"}
{"reqId":"4rI6KzRPINpvnl8hmFmo","level":1,"time":"March 25, 2018 03:11:25","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"GET","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark?page=-1","message":"Logout occurred","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"}
{"reqId":"4rI6KzRPINpvnl8hmFmo","level":1,"time":"March 25, 2018 03:11:25","remoteAddr":"192.168.2.22","user":"--","app":"admin_audit","method":"GET","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark?page=-1","message":"Login attempt: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"}
{"reqId":"4rI6KzRPINpvnl8hmFmo","level":1,"time":"March 25, 2018 03:11:25","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"GET","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark?page=-1","message":"Login successful: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"}
{"reqId":"LxJIdQOKqOpLyFnIN45e","level":0,"time":"March 25, 2018 03:15:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Run OCA\\Files\\BackgroundJob\\CleanupFileLocks job with ID 4","userAgent":"--","version":"13.0.1.1"}

Not much to go on from a report's perspective. The only peculiar thing is the GET requests which specify a bookmark with a negative number for a page.

Anyways, I have changed the certificate used by the web-server of my Nextcloud Instance so the SAN matches the IP address I have set up for it. While I also have a DNS name inside the SAN, the DNS server is on a different network segment than the device I am using with Firefox. The device using Chrome however, is on the same network segment, but did not yet trust the certificate because it did not trust the CA the certificate was issued through. I have fixed this and can confirm that I have had no further problems on my end.

Since you seem to be using a specific API to implement this for Firefox, I believe that choosing to trust or distrust self-signed certificates is out-of-scope, despite my preferences to have such a feature included. I imagine this functionality would simply defer to the browser's trust with the Nextcloud Instance accessed. It would be a low-priority, but useful feature however to determine whether a connection is insecure, and simply refuse to use it unless it is acceptably secure.

I'll leave it to you to close as "will not implement", or keeo open as a future feature request.

<!-- gh-comment-id:376389426 --> @SomePoorBastard commented on GitHub (Mar 27, 2018): I'm not sure how long a ban lasts in Nextcloud's brute-force detection blacklist. Here is a snip from the logs at the time; starting at the time the requests were made: ``` {"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Run OC\\Authentication\\Token\\DefaultTokenCleanupJob job with ID 203","userAgent":"--","version":"13.0.1.1"} {"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Invalidating session tokens older than 2018-03-24T03:00:00+00:00","userAgent":"--","version":"13.0.1.1"} {"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Invalidating remembered session tokens older than 2018-03-10T03:00:00+00:00","userAgent":"--","version":"13.0.1.1"} {"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Finished OC\\Authentication\\Token\\DefaultTokenCleanupJob job with ID 203 in 0 seconds","userAgent":"--","version":"13.0.1.1"} {"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Run OCA\\Files_Sharing\\DeleteOrphanedSharesJob job with ID 7","userAgent":"--","version":"13.0.1.1"} {"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"DeleteOrphanedSharesJob","method":"--","url":"--","message":"0 orphaned share(s) deleted","userAgent":"--","version":"13.0.1.1"} {"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Finished OCA\\Files_Sharing\\DeleteOrphanedSharesJob job with ID 7 in 0 seconds","userAgent":"--","version":"13.0.1.1"} {"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Run OCA\\Files\\BackgroundJob\\CleanupFileLocks job with ID 4","userAgent":"--","version":"13.0.1.1"} {"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Finished OCA\\Files\\BackgroundJob\\CleanupFileLocks job with ID 4 in 0 seconds","userAgent":"--","version":"13.0.1.1"} {"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Run OC\\Log\\Rotate job with ID 204","userAgent":"--","version":"13.0.1.1"} {"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Finished OC\\Log\\Rotate job with ID 204 in 0 seconds","userAgent":"--","version":"13.0.1.1"} {"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Run OCA\\Files_Trashbin\\BackgroundJob\\ExpireTrash job with ID 11","userAgent":"--","version":"13.0.1.1"} {"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Finished OCA\\Files_Trashbin\\BackgroundJob\\ExpireTrash job with ID 11 in 0 seconds","userAgent":"--","version":"13.0.1.1"} {"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Run OCA\\User_LDAP\\Jobs\\CleanUp job with ID 29","userAgent":"--","version":"13.0.1.1"} {"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Finished OCA\\User_LDAP\\Jobs\\CleanUp job with ID 29 in 0 seconds","userAgent":"--","version":"13.0.1.1"} {"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Run OCA\\Activity\\BackgroundJob\\EmailNotification job with ID 13","userAgent":"--","version":"13.0.1.1"} {"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Finished OCA\\Activity\\BackgroundJob\\EmailNotification job with ID 13 in 0 seconds","userAgent":"--","version":"13.0.1.1"} {"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:01","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Run OCA\\UpdateNotification\\ResetTokenBackgroundJob job with ID 194","userAgent":"--","version":"13.0.1.1"} {"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:01","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Finished OCA\\UpdateNotification\\ResetTokenBackgroundJob job with ID 194 in 0 seconds","userAgent":"--","version":"13.0.1.1"} {"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:01","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Run OC\\Authentication\\Token\\DefaultTokenCleanupJob job with ID 15","userAgent":"--","version":"13.0.1.1"} {"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:01","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Invalidating session tokens older than 2018-03-24T03:00:01+00:00","userAgent":"--","version":"13.0.1.1"} {"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:01","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Invalidating remembered session tokens older than 2018-03-10T03:00:01+00:00","userAgent":"--","version":"13.0.1.1"} {"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:01","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Finished OC\\Authentication\\Token\\DefaultTokenCleanupJob job with ID 15 in 0 seconds","userAgent":"--","version":"13.0.1.1"} {"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:01","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Run OCA\\Files\\BackgroundJob\\ScanFiles job with ID 2","userAgent":"--","version":"13.0.1.1"} {"reqId":"enKVbvCSQhCsoTRXs8RI","level":0,"time":"March 25, 2018 03:00:01","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Finished OCA\\Files\\BackgroundJob\\ScanFiles job with ID 2 in 0 seconds","userAgent":"--","version":"13.0.1.1"} {"reqId":"OIlP75gT3VlJ9BwJYx4j","level":1,"time":"March 25, 2018 03:11:15","remoteAddr":"192.168.2.22","user":"--","app":"admin_audit","method":"GET","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark?page=-1","message":"Login attempt: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"} {"reqId":"OIlP75gT3VlJ9BwJYx4j","level":1,"time":"March 25, 2018 03:11:15","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"GET","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark?page=-1","message":"Login successful: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"} {"reqId":"OIlP75gT3VlJ9BwJYx4j","level":1,"time":"March 25, 2018 03:11:15","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"GET","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark?page=-1","message":"Logout occurred","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"} {"reqId":"OIlP75gT3VlJ9BwJYx4j","level":1,"time":"March 25, 2018 03:11:15","remoteAddr":"192.168.2.22","user":"--","app":"admin_audit","method":"GET","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark?page=-1","message":"Login attempt: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"} {"reqId":"OIlP75gT3VlJ9BwJYx4j","level":1,"time":"March 25, 2018 03:11:15","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"GET","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark?page=-1","message":"Login successful: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"} {"reqId":"zCC4WcW9riuG0YFtofvB","level":1,"time":"March 25, 2018 03:11:17","remoteAddr":"192.168.2.22","user":"--","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Login attempt: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"} {"reqId":"JBh8Q32Iugjpns3OEhz0","level":1,"time":"March 25, 2018 03:11:17","remoteAddr":"192.168.2.22","user":"--","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Login attempt: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"} {"reqId":"TWq5ZHPLPaM92aOwTNjN","level":1,"time":"March 25, 2018 03:11:17","remoteAddr":"192.168.2.22","user":"--","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Login attempt: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"} {"reqId":"zCC4WcW9riuG0YFtofvB","level":1,"time":"March 25, 2018 03:11:17","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Login successful: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"} {"reqId":"TWq5ZHPLPaM92aOwTNjN","level":1,"time":"March 25, 2018 03:11:17","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Login successful: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"} {"reqId":"JBh8Q32Iugjpns3OEhz0","level":1,"time":"March 25, 2018 03:11:18","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Login successful: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"} {"reqId":"zCC4WcW9riuG0YFtofvB","level":1,"time":"March 25, 2018 03:11:18","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Logout occurred","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"} {"reqId":"zCC4WcW9riuG0YFtofvB","level":1,"time":"March 25, 2018 03:11:18","remoteAddr":"192.168.2.22","user":"--","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Login attempt: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"} {"reqId":"TWq5ZHPLPaM92aOwTNjN","level":1,"time":"March 25, 2018 03:11:18","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Logout occurred","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"} {"reqId":"TWq5ZHPLPaM92aOwTNjN","level":1,"time":"March 25, 2018 03:11:18","remoteAddr":"192.168.2.22","user":"--","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Login attempt: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"} {"reqId":"JBh8Q32Iugjpns3OEhz0","level":1,"time":"March 25, 2018 03:11:18","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Logout occurred","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"} {"reqId":"JBh8Q32Iugjpns3OEhz0","level":1,"time":"March 25, 2018 03:11:18","remoteAddr":"192.168.2.22","user":"--","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Login attempt: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"} {"reqId":"zCC4WcW9riuG0YFtofvB","level":1,"time":"March 25, 2018 03:11:18","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Login successful: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"} {"reqId":"TWq5ZHPLPaM92aOwTNjN","level":1,"time":"March 25, 2018 03:11:18","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Login successful: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"} {"reqId":"JBh8Q32Iugjpns3OEhz0","level":1,"time":"March 25, 2018 03:11:18","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"POST","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark","message":"Login successful: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"} {"reqId":"4rI6KzRPINpvnl8hmFmo","level":1,"time":"March 25, 2018 03:11:25","remoteAddr":"192.168.2.22","user":"--","app":"admin_audit","method":"GET","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark?page=-1","message":"Login attempt: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"} {"reqId":"4rI6KzRPINpvnl8hmFmo","level":1,"time":"March 25, 2018 03:11:25","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"GET","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark?page=-1","message":"Login successful: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"} {"reqId":"4rI6KzRPINpvnl8hmFmo","level":1,"time":"March 25, 2018 03:11:25","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"GET","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark?page=-1","message":"Logout occurred","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"} {"reqId":"4rI6KzRPINpvnl8hmFmo","level":1,"time":"March 25, 2018 03:11:25","remoteAddr":"192.168.2.22","user":"--","app":"admin_audit","method":"GET","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark?page=-1","message":"Login attempt: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"} {"reqId":"4rI6KzRPINpvnl8hmFmo","level":1,"time":"March 25, 2018 03:11:25","remoteAddr":"192.168.2.22","user":"SomePoorBastard","app":"admin_audit","method":"GET","url":"\/index.php\/apps\/bookmarks\/public\/rest\/v2\/bookmark?page=-1","message":"Login successful: \"SomePoorBastard\"","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/65.0.3325.181 Safari\/537.36","version":"13.0.1.1"} {"reqId":"LxJIdQOKqOpLyFnIN45e","level":0,"time":"March 25, 2018 03:15:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Run OCA\\Files\\BackgroundJob\\CleanupFileLocks job with ID 4","userAgent":"--","version":"13.0.1.1"} ``` Not much to go on from a report's perspective. The only peculiar thing is the GET requests which specify a bookmark with a negative number for a page. Anyways, I have changed the certificate used by the web-server of my Nextcloud Instance so the SAN matches the IP address I have set up for it. While I also have a DNS name inside the SAN, the DNS server is on a different network segment than the device I am using with Firefox. The device using Chrome however, is on the same network segment, but did not yet trust the certificate because it did not trust the CA the certificate was issued through. I have fixed this and can confirm that I have had no further problems on my end. Since you seem to be using a specific API to implement this for Firefox, I believe that choosing to trust or distrust self-signed certificates is out-of-scope, despite my preferences to have such a feature included. I imagine this functionality would simply defer to the browser's trust with the Nextcloud Instance accessed. It would be a low-priority, but useful feature however to determine whether a connection is insecure, and simply refuse to use it unless it is acceptably secure. I'll leave it to you to close as "will not implement", or keeo open as a future feature request.
Author
Owner

@marcelklehr commented on GitHub (Mar 27, 2018):

I'm glad it works for you, now. :) I've improved error handling for network errors, so it's more obvious what is the problem with this kind of errors. Disallowing raw http URLs seems like a good idea, though! I will open a separate issue for this :)

<!-- gh-comment-id:376429356 --> @marcelklehr commented on GitHub (Mar 27, 2018): I'm glad it works for you, now. :) I've improved error handling for network errors, so it's more obvious what is the problem with this kind of errors. Disallowing raw http URLs seems like a good idea, though! I will open a separate issue for this :)
Author
Owner

@github-actions[bot] commented on GitHub (Mar 21, 2023):

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

<!-- gh-comment-id:1478280517 --> @github-actions[bot] commented on GitHub (Mar 21, 2023): This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/floccus#59
No description provided.