[GH-ISSUE #186] [BUG] CA not initialized on nightly version behind nginx #177

Closed
opened 2026-06-05 14:24:48 -04:00 by yindo · 9 comments
Owner

Originally created by @Visirt on GitHub (Feb 22, 2026).
Original GitHub issue: https://github.com/Drop-OSS/drop-app/issues/186

Describe the bug
While trying to run the nightly version of drop and running a Windows source-code compiled version of drop-app.
When trying to log into the drop server with the app, after clicking on Authorize and getting redirected to the drop app, the app displays the following error:
Authentication failed
Drop encountered an error while connecting to your instance. Error: server returned invalid response: 500, Server Error

And the following error appears on the drop server logs
[request error] [unhandled] [POST] https://localhost:4000/api/v1/client/auth/handshake
H3Error: CA not initialised
at useCertificateAuthority (file:///app/app/server/chunks/nitro/nitro.mjs:1:1089860)
... 3 lines matching cause stack trace ...
at async Server. (file:///app/app/server/chunks/nitro/nitro.mjs:1:98901) {
cause: Error: CA not initialised
at useCertificateAuthority (file:///app/app/server/chunks/nitro/nitro.mjs:1:1089860)
at Object.handler (file:///app/app/server/chunks/routes/api/v1/client/auth/handshake.post.mjs:1:1614)
at process.processTicksAndRejections (node:internal/process/task_queues:103:5)
at async Object.handler (file:///app/app/server/chunks/nitro/nitro.mjs:1:95921)
at async Server. (file:///app/app/server/chunks/nitro/nitro.mjs:1:98901),
statusCode: 500,
fatal: false,
unhandled: true,
statusMessage: undefined,
data: undefined
}

The drop is running behind a Docker LXC on Proxmox, running in the same server as the latest drop server, and using Nginx Proxy Manager as a reverse proxy with SSL enabled.

To Reproduce
Steps to reproduce the behavior:

  1. Install drop nightly
  2. Setup an Admin user and Log In
  3. Clone, Build and Run drop-app (nightly) on Windows
  4. Authenticate the drop-app to the drop nightly server
  5. Click on Authorize
  6. See the error

Expected behavior
The expected behavior is to successfully authorize the client to the drop server.

Screenshots
Image

Desktop (please complete the following information):

  • OS: Windows 11 for drop-app, Debian based LXC for drop server
  • App Version: nightly on both server and app

Additional context
Here's the full output of the docker server

[Drop] performing migrations...
[dotenv@17.2.3] injecting env (0) from .env -- tip: 🔄 add secrets lifecycle management: https://dotenvx.com/ops
Loaded Prisma config from prisma.config.ts.
Prisma schema loaded from prisma.
Datasource "db": PostgreSQL database "drop", schema "public" at "postgres:5432"
117 migrations found in prisma/migrations
┌─────────────────────────────────────────────────────────┐
│ Update available 7.3.0 -> 7.4.1 │
│ Run the following to update │
│ npm i --save-dev prisma@latest │
│ npm i @prisma/client@latest │
└─────────────────────────────────────────────────────────┘
No pending migrations to apply.
Listening on http://[::]:4000
[16:25:04.373] INFO (66): enabled metadata provider: Steam
[16:25:04.374] INFO (66): enabled metadata provider: PCGamingWiki
[16:25:04.374] WARN (66): skipping metadata provider setup: Error: Missing config item IGDB_CLIENT_ID for IGDB
[16:25:04.387] INFO (service-torrential/66): service launched
[16:25:04.396] INFO (service-nginx/66): service launched
[16:25:04.466] WARN (66): Error: Missing all necessary OIDC configuration:
OIDC_AUTHORIZATION: undefined
OIDC_TOKEN: undefined
OIDC_USERINFO: undefined
OIDC_SCOPES: undefined
OIDC_ISSUER: undefined
OIDC_JWKS: undefined
[16:25:04.472] INFO (66): enabled auth: Simple
[16:25:04.472] INFO (66): AuthManager initialized
[16:25:04.970] INFO (service-torrential/66): INFO [torrential] using 2 threads
INFO [torrential::server] created client subroutine
INFO [torrential] started depot server
[16:25:04.971] ERROR (service-nginx/66): nginx: [alert] could not open error log file: open() "/data/nginx/logs/error.log" failed (2: No such file or directory)
[16:25:04.972] INFO (service-torrential/66): connected to torrential socket
[16:25:04.973] INFO (service-torrential/66): service healthy
[unhandledRejection] Could not create backend for path.
[16:25:05.153] INFO (service-torrential/66): INFO [torrential::droplet::manifest] using 1 import threads
WARN [torrential::droplet] manifest generation failed with err: Could not create backend for path.
[request error] [unhandled] [POST] https://localhost:4000/api/v1/client/auth/handshake
H3Error: CA not initialised
at useCertificateAuthority (file:///app/app/server/chunks/nitro/nitro.mjs:1:1089860)
... 3 lines matching cause stack trace ...
at async Server. (file:///app/app/server/chunks/nitro/nitro.mjs:1:98901) {
cause: Error: CA not initialised
at useCertificateAuthority (file:///app/app/server/chunks/nitro/nitro.mjs:1:1089860)
at Object.handler (file:///app/app/server/chunks/routes/api/v1/client/auth/handshake.post.mjs:1:1614)
at process.processTicksAndRejections (node:internal/process/task_queues:103:5)
at async Object.handler (file:///app/app/server/chunks/nitro/nitro.mjs:1:95921)
at async Server. (file:///app/app/server/chunks/nitro/nitro.mjs:1:98901),
statusCode: 500,
fatal: false,
unhandled: true,
statusMessage: undefined,
data: undefined
}

Originally created by @Visirt on GitHub (Feb 22, 2026). Original GitHub issue: https://github.com/Drop-OSS/drop-app/issues/186 **Describe the bug** While trying to run the nightly version of drop and running a Windows source-code compiled version of drop-app. When trying to log into the drop server with the app, after clicking on Authorize and getting redirected to the drop app, the app displays the following error: Authentication failed Drop encountered an error while connecting to your instance. Error: server returned invalid response: 500, Server Error And the following error appears on the drop server logs [request error] [unhandled] [POST] https://localhost:4000/api/v1/client/auth/handshake H3Error: CA not initialised at useCertificateAuthority (file:///app/app/server/chunks/nitro/nitro.mjs:1:1089860) ... 3 lines matching cause stack trace ... at async Server.<anonymous> (file:///app/app/server/chunks/nitro/nitro.mjs:1:98901) { cause: Error: CA not initialised at useCertificateAuthority (file:///app/app/server/chunks/nitro/nitro.mjs:1:1089860) at Object.handler (file:///app/app/server/chunks/routes/api/v1/client/auth/handshake.post.mjs:1:1614) at process.processTicksAndRejections (node:internal/process/task_queues:103:5) at async Object.handler (file:///app/app/server/chunks/nitro/nitro.mjs:1:95921) at async Server.<anonymous> (file:///app/app/server/chunks/nitro/nitro.mjs:1:98901), statusCode: 500, fatal: false, unhandled: true, statusMessage: undefined, data: undefined } The drop is running behind a Docker LXC on Proxmox, running in the same server as the latest drop server, and using Nginx Proxy Manager as a reverse proxy with SSL enabled. **To Reproduce** Steps to reproduce the behavior: 1. Install drop nightly 2. Setup an Admin user and Log In 3. Clone, Build and Run drop-app (nightly) on Windows 4. Authenticate the drop-app to the drop nightly server 5. Click on Authorize 6. See the error **Expected behavior** The expected behavior is to successfully authorize the client to the drop server. **Screenshots** <img width="1536" height="864" alt="Image" src="https://github.com/user-attachments/assets/90e24df5-1463-47d0-9c97-d5ff4c68f341" /> **Desktop (please complete the following information):** - OS: Windows 11 for drop-app, Debian based LXC for drop server - App Version: nightly on both server and app **Additional context** Here's the full output of the docker server [Drop] performing migrations... [dotenv@17.2.3] injecting env (0) from .env -- tip: 🔄 add secrets lifecycle management: https://dotenvx.com/ops Loaded Prisma config from prisma.config.ts. Prisma schema loaded from prisma. Datasource "db": PostgreSQL database "drop", schema "public" at "postgres:5432" 117 migrations found in prisma/migrations ┌─────────────────────────────────────────────────────────┐ │ Update available 7.3.0 -> 7.4.1 │ │ Run the following to update │ │ npm i --save-dev prisma@latest │ │ npm i @prisma/client@latest │ └─────────────────────────────────────────────────────────┘ No pending migrations to apply. Listening on http://[::]:4000 [16:25:04.373] INFO (66): enabled metadata provider: Steam [16:25:04.374] INFO (66): enabled metadata provider: PCGamingWiki [16:25:04.374] WARN (66): skipping metadata provider setup: Error: Missing config item IGDB_CLIENT_ID for IGDB [16:25:04.387] INFO (service-torrential/66): service launched [16:25:04.396] INFO (service-nginx/66): service launched [16:25:04.466] WARN (66): Error: Missing all necessary OIDC configuration: OIDC_AUTHORIZATION: undefined OIDC_TOKEN: undefined OIDC_USERINFO: undefined OIDC_SCOPES: undefined OIDC_ISSUER: undefined OIDC_JWKS: undefined [16:25:04.472] INFO (66): enabled auth: Simple [16:25:04.472] INFO (66): AuthManager initialized [16:25:04.970] INFO (service-torrential/66): INFO [torrential] using 2 threads INFO [torrential::server] created client subroutine INFO [torrential] started depot server [16:25:04.971] ERROR (service-nginx/66): nginx: [alert] could not open error log file: open() "/data/nginx/logs/error.log" failed (2: No such file or directory) [16:25:04.972] INFO (service-torrential/66): connected to torrential socket [16:25:04.973] INFO (service-torrential/66): service healthy [unhandledRejection] Could not create backend for path. [16:25:05.153] INFO (service-torrential/66): INFO [torrential::droplet::manifest] using 1 import threads WARN [torrential::droplet] manifest generation failed with err: Could not create backend for path. [request error] [unhandled] [POST] https://localhost:4000/api/v1/client/auth/handshake H3Error: CA not initialised at useCertificateAuthority (file:///app/app/server/chunks/nitro/nitro.mjs:1:1089860) ... 3 lines matching cause stack trace ... at async Server.<anonymous> (file:///app/app/server/chunks/nitro/nitro.mjs:1:98901) { cause: Error: CA not initialised at useCertificateAuthority (file:///app/app/server/chunks/nitro/nitro.mjs:1:1089860) at Object.handler (file:///app/app/server/chunks/routes/api/v1/client/auth/handshake.post.mjs:1:1614) at process.processTicksAndRejections (node:internal/process/task_queues:103:5) at async Object.handler (file:///app/app/server/chunks/nitro/nitro.mjs:1:95921) at async Server.<anonymous> (file:///app/app/server/chunks/nitro/nitro.mjs:1:98901), statusCode: 500, fatal: false, unhandled: true, statusMessage: undefined, data: undefined }
yindo closed this issue 2026-06-05 14:24:48 -04:00
Author
Owner

@DecDuck commented on GitHub (Feb 22, 2026):

When was the last time you pulled nightly? We fixed an issue along these lines around a week ago.

<!-- gh-comment-id:3941362186 --> @DecDuck commented on GitHub (Feb 22, 2026): When was the last time you pulled nightly? We fixed an issue along these lines around a week ago.
Author
Owner

@Visirt commented on GitHub (Feb 22, 2026):

I did the last pull 3 hours ago

<!-- gh-comment-id:3941423657 --> @Visirt commented on GitHub (Feb 22, 2026): I did the last pull 3 hours ago
Author
Owner

@DecDuck commented on GitHub (Feb 22, 2026):

If you restart the server, does the issue go away? We think we've found a related issue.

<!-- gh-comment-id:3941943895 --> @DecDuck commented on GitHub (Feb 22, 2026): If you restart the server, does the issue go away? We think we've found a related issue.
Author
Owner

@Visirt commented on GitHub (Feb 23, 2026):

I restarted the entire docker service and the error is still happenning
I also just restarted the entire LXC containing multiple dockers and the error is still happening

Here's once again the output to the drop server.
[Drop] performing migrations...
[dotenv@17.2.3] injecting env (0) from .env -- tip: ⚙️ specify custom .env file path with { path: '/custom/path/.env' }
Loaded Prisma config from prisma.config.ts.
Prisma schema loaded from prisma.
Datasource "db": PostgreSQL database "drop", schema "public" at "postgres:5432"
117 migrations found in prisma/migrations
No pending migrations to apply.
Listening on http://[::]:4000
[11:17:26.680] INFO (72): enabled metadata provider: Steam
[11:17:26.680] INFO (72): enabled metadata provider: PCGamingWiki
[11:17:26.681] WARN (72): skipping metadata provider setup: Error: Missing config item IGDB_CLIENT_ID for IGDB
[11:17:26.694] INFO (service-torrential/72): service launched
[11:17:26.706] INFO (service-nginx/72): service launched
[11:17:26.772] WARN (72): Error: Missing all necessary OIDC configuration:
OIDC_AUTHORIZATION: undefined
OIDC_TOKEN: undefined
OIDC_USERINFO: undefined
OIDC_SCOPES: undefined
OIDC_ISSUER: undefined
OIDC_JWKS: undefined
[11:17:26.777] INFO (72): enabled auth: Simple
[11:17:26.777] INFO (72): AuthManager initialized
[11:17:27.269] INFO (service-torrential/72): INFO [torrential] using 2 threads
INFO [torrential::server] created client subroutine
INFO [torrential] started depot server
[11:17:27.269] ERROR (service-nginx/72): nginx: [alert] could not open error log file: open() "/data/nginx/logs/error.log" failed (2: No such file or directory)
[11:17:27.274] INFO (service-torrential/72): connected to torrential socket
[11:17:27.277] INFO (service-torrential/72): service healthy
[unhandledRejection] Could not create backend for path.
[11:17:27.510] INFO (service-torrential/72): INFO [torrential::droplet::manifest] using 1 import threads
WARN [torrential::droplet] manifest generation failed with err: Could not create backend for path.
[request error] [unhandled] [POST] https://localhost:4000/api/v1/client/auth/handshake
H3Error: CA not initialised
at useCertificateAuthority (file:///app/app/server/chunks/nitro/nitro.mjs:1:1089860)
... 3 lines matching cause stack trace ...
at async Server. (file:///app/app/server/chunks/nitro/nitro.mjs:1:98901) {
cause: Error: CA not initialised
at useCertificateAuthority (file:///app/app/server/chunks/nitro/nitro.mjs:1:1089860)
at Object.handler (file:///app/app/server/chunks/routes/api/v1/client/auth/handshake.post.mjs:1:1614)
at process.processTicksAndRejections (node:internal/process/task_queues:103:5)
at async Object.handler (file:///app/app/server/chunks/nitro/nitro.mjs:1:95921)
at async Server. (file:///app/app/server/chunks/nitro/nitro.mjs:1:98901),
statusCode: 500,
fatal: false,
unhandled: true,
statusMessage: undefined,
data: undefined
}

<!-- gh-comment-id:3944202200 --> @Visirt commented on GitHub (Feb 23, 2026): I restarted the entire docker service and the error is still happenning I also just restarted the entire LXC containing multiple dockers and the error is still happening Here's once again the output to the drop server. [Drop] performing migrations... [dotenv@17.2.3] injecting env (0) from .env -- tip: ⚙️ specify custom .env file path with { path: '/custom/path/.env' } Loaded Prisma config from prisma.config.ts. Prisma schema loaded from prisma. Datasource "db": PostgreSQL database "drop", schema "public" at "postgres:5432" 117 migrations found in prisma/migrations No pending migrations to apply. Listening on http://[::]:4000 [11:17:26.680] INFO (72): enabled metadata provider: Steam [11:17:26.680] INFO (72): enabled metadata provider: PCGamingWiki [11:17:26.681] WARN (72): skipping metadata provider setup: Error: Missing config item IGDB_CLIENT_ID for IGDB [11:17:26.694] INFO (service-torrential/72): service launched [11:17:26.706] INFO (service-nginx/72): service launched [11:17:26.772] WARN (72): Error: Missing all necessary OIDC configuration: OIDC_AUTHORIZATION: undefined OIDC_TOKEN: undefined OIDC_USERINFO: undefined OIDC_SCOPES: undefined OIDC_ISSUER: undefined OIDC_JWKS: undefined [11:17:26.777] INFO (72): enabled auth: Simple [11:17:26.777] INFO (72): AuthManager initialized [11:17:27.269] INFO (service-torrential/72): INFO [torrential] using 2 threads INFO [torrential::server] created client subroutine INFO [torrential] started depot server [11:17:27.269] ERROR (service-nginx/72): nginx: [alert] could not open error log file: open() "/data/nginx/logs/error.log" failed (2: No such file or directory) [11:17:27.274] INFO (service-torrential/72): connected to torrential socket [11:17:27.277] INFO (service-torrential/72): service healthy [unhandledRejection] Could not create backend for path. [11:17:27.510] INFO (service-torrential/72): INFO [torrential::droplet::manifest] using 1 import threads WARN [torrential::droplet] manifest generation failed with err: Could not create backend for path. [request error] [unhandled] [POST] https://localhost:4000/api/v1/client/auth/handshake H3Error: CA not initialised at useCertificateAuthority (file:///app/app/server/chunks/nitro/nitro.mjs:1:1089860) ... 3 lines matching cause stack trace ... at async Server.<anonymous> (file:///app/app/server/chunks/nitro/nitro.mjs:1:98901) { cause: Error: CA not initialised at useCertificateAuthority (file:///app/app/server/chunks/nitro/nitro.mjs:1:1089860) at Object.handler (file:///app/app/server/chunks/routes/api/v1/client/auth/handshake.post.mjs:1:1614) at process.processTicksAndRejections (node:internal/process/task_queues:103:5) at async Object.handler (file:///app/app/server/chunks/nitro/nitro.mjs:1:95921) at async Server.<anonymous> (file:///app/app/server/chunks/nitro/nitro.mjs:1:98901), statusCode: 500, fatal: false, unhandled: true, statusMessage: undefined, data: undefined }
Author
Owner

@DecDuck commented on GitHub (Feb 23, 2026):

What image tag are you using? And can you provide the version you're using (it's in the footer)?

Image
<!-- gh-comment-id:3944674608 --> @DecDuck commented on GitHub (Feb 23, 2026): What image tag are you using? And can you provide the version you're using (it's in the footer)? <img width="1211" height="425" alt="Image" src="https://github.com/user-attachments/assets/658a991a-cfe4-48ea-bc0d-ddbf84c53d24" />
Author
Owner

@Visirt commented on GitHub (Feb 23, 2026):

I'm using:

  • drop server: docker with tag "nightly" (image: ghcr.io/drop-oss/drop:nightly)
  • drop-app: latest commit from develop branch

drop server version: v0.4.0-nightly.2026.02.22

Image

If it'll be helpful I can try finding out which commit broke this and even try fixing it

<!-- gh-comment-id:3945259669 --> @Visirt commented on GitHub (Feb 23, 2026): I'm using: - drop server: docker with tag "nightly" (image: ghcr.io/drop-oss/drop:nightly) - drop-app: latest commit from develop branch drop server version: v0.4.0-nightly.2026.02.22 <img width="610" height="112" alt="Image" src="https://github.com/user-attachments/assets/705b8f5c-489f-47d4-803b-0af36bf34f2a" /> If it'll be helpful I can try finding out which commit broke this and even try fixing it
Author
Owner

@DecDuck commented on GitHub (Feb 23, 2026):

Yeah that'd be super helpful, I can't seem to replicate this bug on my own.

<!-- gh-comment-id:3947992981 --> @DecDuck commented on GitHub (Feb 23, 2026): Yeah that'd be super helpful, I can't seem to replicate this bug on my own.
Author
Owner

@DecDuck commented on GitHub (Feb 24, 2026):

Found the issue! It was a typo lol.

<!-- gh-comment-id:3952522514 --> @DecDuck commented on GitHub (Feb 24, 2026): Found the issue! It was a typo lol.
Author
Owner

@DecDuck commented on GitHub (Feb 24, 2026):

It'll be fixed and released soon with the first v0.4.0 release candidate

<!-- gh-comment-id:3952524345 --> @DecDuck commented on GitHub (Feb 24, 2026): It'll be fixed and released soon with the first v0.4.0 release candidate
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Drop-OSS/drop-app#177