github-starred/barrier

Fork 0

mirror of https://github.com/debauchee/barrier.git synced 2026-05-15 14:16:02 -06:00

[GH-ISSUE #1674] Won't work with SSL enabled #1239

New issue

Open

opened 2026-05-05 07:38:38 -06:00 by gitea-mirror · 5 comments

gitea-mirror commented

2026-05-05 07:38:38 -06:00

Owner

Originally created by @dm30 on GitHub (May 14, 2022).
Original GitHub issue: https://github.com/debauchee/barrier/issues/1674

What happened?

Thank you for these great little tool.
Unfortunately won't connect with client. But unchecking SSL makes connection flawless.
Windows firewall was set to private network when prompted.
Thank you for your help.

Version

v2.4.0

Git commit hash (if applicable)

No response

If applicable, where did you install Barrier from?

Ubuntu 22.04 software center (2.4.0+gfsg version) Debian package

What OSes are you seeing the problem on? (Check all that apply)

Linux, Windows

What OS versions are you using?

Server: Ubuntu 22.04.
Client. Windows 11

Relevant log output

No response

Any other information

No response

Originally created by @dm30 on GitHub (May 14, 2022). Original GitHub issue: https://github.com/debauchee/barrier/issues/1674 ### What happened? Thank you for these great little tool. Unfortunately won't connect with client. But unchecking SSL makes connection flawless. Windows firewall was set to private network when prompted. Thank you for your help. ### Version v2.4.0 ### Git commit hash (if applicable) _No response_ ### If applicable, where did you install Barrier from? Ubuntu 22.04 software center (2.4.0+gfsg version) Debian package ### What OSes are you seeing the problem on? (Check all that apply) Linux, Windows ### What OS versions are you using? Server: Ubuntu 22.04. Client. Windows 11 ### Relevant log output _No response_ ### Any other information _No response_

gitea-mirror commented

2026-05-05 07:38:41 -06:00

Author

Owner

@Desani commented on GitHub (May 19, 2022):

I had the same issue when installing the server on a windows 10 machine. Apparently it is due to the fact that openssl isn't installed and can't be used to generate the required pem file.

I found this github issue and created my own pem file using the openssl command and moved it into the expected folder that was mention in the log file:

https://github.com/debauchee/barrier/issues/231#issuecomment-962421337

run in the cmd openssl req -x509 -nodes -days 365 -subj /CN=Barrier -newkey rsa:4096 -keyout Barrier.pem -out Barrier.pem

@Desani commented on GitHub (May 19, 2022): I had the same issue when installing the server on a windows 10 machine. Apparently it is due to the fact that openssl isn't installed and can't be used to generate the required pem file. I found this github issue and created my own pem file using the openssl command and moved it into the expected folder that was mention in the log file: https://github.com/debauchee/barrier/issues/231#issuecomment-962421337 run in the cmd `openssl req -x509 -nodes -days 365 -subj /CN=Barrier -newkey rsa:4096 -keyout Barrier.pem -out Barrier.pem`

gitea-mirror commented

2026-05-05 07:38:43 -06:00

Author

Owner

@dm30 commented on GitHub (May 25, 2022):

Thx. In my view this should be fixed.

@dm30 commented on GitHub (May 25, 2022): Thx. In my view this should be fixed.

gitea-mirror commented

2026-05-05 07:38:45 -06:00

Author

Owner

@Offbeatmammal commented on GitHub (Jul 13, 2022):

are there any downsides to having SSL set to off (local, private network)? This took me a moment to figure out (would be nice to have a very visible warning if this issue is encountered to get people working)

@Offbeatmammal commented on GitHub (Jul 13, 2022): are there any downsides to having SSL set to off (local, private network)? This took me a moment to figure out (would be nice to have a very visible warning if this issue is encountered to get people working)

gitea-mirror commented

2026-05-05 07:38:46 -06:00

Author

Owner

@UndyingSisyphos commented on GitHub (Sep 5, 2022):

As long as port 24800 (the port used by the service) is not open it shouldn't matter if you enable SSL or not, as long as it is actually a private/home network and not the one at work with other employees.
If you use a Desktop as a server then it's fine, just be sure your wifi password is not 1234567890, if it's a laptop I would suggest turning off Barrier every time you connect to a public network, even at your workplace.

@UndyingSisyphos commented on GitHub (Sep 5, 2022): As long as port 24800 (the port used by the service) is not open it shouldn't matter if you enable SSL or not, as long as it is actually a private/home network and not the one at work with other employees. If you use a Desktop as a server then it's fine, just be sure your wifi password is not 1234567890, if it's a laptop I would suggest turning off Barrier every time you connect to a public network, even at your workplace.

gitea-mirror commented

2026-05-05 07:38:48 -06:00

Author

Owner

@adam4235 commented on GitHub (Dec 15, 2022):

I had the same issue (Linux Mint 21 server, Windows 10 client), am new to using Barrier, followed the instructions and thought it wasn't working. Only by viewing the log file did I discover there was an SSL error, making me think to disable SSL in the options. Took me a while to figure this out, and many users, especially non-power users, might give up.

As mentioned it doesn't seem to be that big a deal for security to disable SSL by default. But if you want to keep it enabled by default, then the instructions should list openssl as a dependency and/or tell people to disable that option if they don't have openssl, I believe.

@adam4235 commented on GitHub (Dec 15, 2022): I had the same issue (Linux Mint 21 server, Windows 10 client), am new to using Barrier, followed the instructions and thought it wasn't working. Only by viewing the log file did I discover there was an SSL error, making me think to disable SSL in the options. Took me a while to figure this out, and many users, especially non-power users, might give up. As mentioned it doesn't seem to be that big a deal for security to disable SSL by default. But if you want to keep it enabled by default, then the instructions should list openssl as a dependency and/or tell people to disable that option if they don't have openssl, I believe.

No labels

Rows
Columns