Failed to fetch: net::ERR_CERT_COMMON_NAME_INVALID

[jolic]

Hi @pierre-b,

we moved our notifuse from DOMAIN.info to DOMAIN.com and when I try to login at DOMAIN.com I get this error in the client:

Failed to load resource: net::ERR_CERT_COMMON_NAME_INVALID

What needs to be done that it works at the domain?

Thx

[pierre-b]

Hi @jolic, this is a configuration leftover rather than a bug, and the error message points straight at it.

The console loads its API endpoint from the server config, not from the address in your browser. Yours still says the old .info domain, so every API call goes there, and that host no longer presents a certificate for the name the browser asked for. The page itself loads fine on .com, which is why it only fails at login.

Since you cannot sign in to change it in the system settings, use one of these:

# set the env var, it overrides the stored value, then restart
API_ENDPOINT=https://DOMAIN.com

# or update the system database directly
UPDATE settings SET value = 'https://DOMAIN.com' WHERE key = 'api_endpoint';

While you are at it, the rest of a domain move: re-register provider webhooks (SES, Mailgun, Postmark, etc. still call the old URL), update the OIDC redirect URI at your IdP if you use SSO, point any custom tracking domain CNAME at the new host, and keep the old domain redirecting for a while because tracking and unsubscribe links in emails you already sent still point at it.

I will add a "changing your domain" page to the docs, and I am looking at having the sign-in page warn when the console and the configured API endpoint are on different origins, so this is self-diagnosable next time. Closing, reopen if the env var does not fix it.