# Nest certificate issue

**URL:** <https://discourse.pijul.org/t/nest-certificate-issue/103>\
**Category:** Question\
**Created:** [November 3, 2017, 11:57pm UTC](https://discourse.pijul.org/t/nest-certificate-issue/103 "2017-11-03T23:57:00Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![lthms](https://yyz1.discourse-cdn.com/flex031/user_avatar/discourse.pijul.org/lthms/32/124_2.png) [@lthms](https://discourse.pijul.org/u/lthms)\
**Post date:** [November 3, 2017, 11:57pm UTC](https://discourse.pijul.org/t/nest-certificate-issue/103/1 "2017-11-03T23:57:00Z")

</div>

Hi everyone.

Am I the only one to have an error with the nest certificate? It says the connection is not secure as the CA is unknown (Firefox Nightly).

---

<div class="post-metadata">

**Author:** ![pierrebeaucamp](https://yyz1.discourse-cdn.com/flex031/user_avatar/discourse.pijul.org/pierrebeaucamp/32/43_2.png) [@pierrebeaucamp](https://discourse.pijul.org/u/pierrebeaucamp)\
**Post date:** [November 4, 2017, 3:34am UTC](https://discourse.pijul.org/t/nest-certificate-issue/103/2 "2017-11-04T03:34:34Z")

</div>

You’re definitely not the only one. I can reproduce this issue using Firefox, Chrome and curl. However I don’t know if it affects only the web-interface itself or also the pijul cli.

---

<div class="post-metadata">

**Author:** ![lthms](https://yyz1.discourse-cdn.com/flex031/user_avatar/discourse.pijul.org/lthms/32/124_2.png) [@lthms](https://discourse.pijul.org/u/lthms)\
**Post date:** [November 4, 2017, 4:06am UTC](https://discourse.pijul.org/t/nest-certificate-issue/103/3 "2017-11-04T04:06:17Z")

</div>

AFAIK, pijul cli is fine from this matter.

---

<div class="post-metadata">

**Author:** ![pmeunier](https://yyz1.discourse-cdn.com/flex031/user_avatar/discourse.pijul.org/pmeunier/32/4_2.png) [@pmeunier](https://discourse.pijul.org/u/pmeunier)\
**Post date:** [November 4, 2017, 6:11am UTC](https://discourse.pijul.org/t/nest-certificate-issue/103/4 "2017-11-04T06:11:49Z")

</div>

You’re definitely not the only one. The issue is, I moved the server from Hetzner to Google Cloud. The server is deployed using NixOps, which is super well tested for AWS and the low-tech Hetzner, but doesn’t quite work for the high-tech GCE and its ten daemons that monitor your instance.

The documentation of NixOS and NixOps doesn’t really help, as usual, so my instance kept crashing every night at around 4am, locking me out of SSH.

I realised after reinstalling it four times that it was trying to self-update, and disabled that, but it was too late: I had already hit Let’s Encrypt’s limit rates of five requests per week.

So, we have to wait until tomorrow to get a decent certificate. I’m sorry about that. As soon as I can make my own NixOps images, I’ll write PAGES of documentation.

---

<div class="post-metadata">

**Author:** ![lthms](https://yyz1.discourse-cdn.com/flex031/user_avatar/discourse.pijul.org/lthms/32/124_2.png) [@lthms](https://discourse.pijul.org/u/lthms)\
**Post date:** [November 4, 2017, 6:17am UTC](https://discourse.pijul.org/t/nest-certificate-issue/103/5 "2017-11-04T06:17:00Z")

</div>

Thanks for the heads-up! Maybe we could try to have a status page for the nest and to update it as often as possible with that kind of notices. It would be very helpful.

---

<div class="post-metadata">

**Author:** ![pmeunier](https://yyz1.discourse-cdn.com/flex031/user_avatar/discourse.pijul.org/pmeunier/32/4_2.png) [@pmeunier](https://discourse.pijul.org/u/pmeunier)\
**Post date:** [November 4, 2017, 11:05am UTC](https://discourse.pijul.org/t/nest-certificate-issue/103/6 "2017-11-04T11:05:58Z")

</div>

Btw, if the CLI can still download patches from HTTPS, that’s an extremely serious security flaw, which should be fixed as soon as possible.

---

<div class="post-metadata">

**Author:** ![pmeunier](https://yyz1.discourse-cdn.com/flex031/user_avatar/discourse.pijul.org/pmeunier/32/4_2.png) [@pmeunier](https://discourse.pijul.org/u/pmeunier)\
**Post date:** [November 4, 2017, 11:07am UTC](https://discourse.pijul.org/t/nest-certificate-issue/103/7 "2017-11-04T11:07:34Z")

</div>

It cannot, but I just fixed the error message.

---

<div class="post-metadata">

**Author:** ![pmeunier](https://yyz1.discourse-cdn.com/flex031/user_avatar/discourse.pijul.org/pmeunier/32/4_2.png) [@pmeunier](https://discourse.pijul.org/u/pmeunier)\
**Post date:** [November 6, 2017, 1:14pm UTC](https://discourse.pijul.org/t/nest-certificate-issue/103/8 "2017-11-06T13:14:07Z")

</div>

This issue is now fixed!