Error: "unable to verify leaf signature"

[R. Jay Flaming]

I have installed Enketo Express with the most current git update on a Debian Jessie machine. When clicking through to the enketo web form from ODK, I'm getting a momentary spinnning wheel, then "unable to verify leaf signature."

Backstory:

The folks I'm building this for want a single server for everything, including an Apache install, so it includes that and Tomcat for Open Data Kit on the same box. ODK install seems fine. I have Apache reverse proxied to send data from 443 to 8055 for Enketo. The Enketo API responds as expected via curl. If I run Enketo via grunt develop, and then click Enketo Webform in ODK, in the grunt output I see an error: 

openrosa-communicator Error occurred when requesting https://MyServer:8443/ODKAggregate/formList +447ms [Error: UNABLE_TO_VERIFY_LEAF_SIGNATURE]

Going to : https://MyServer:8443/ODKAggregate/formList works fine from chrome, it yields an xml document as expected.  

Any suggestions?  It seems like node.js isn't getting the certificate authority list? I tried npm install ssl-root-cas after researching that error online, doesn't seem to help.  

[Martijn van de Rijdt]

Does Enketo work if you manually make an API call using a form that exists on your ODK Aggregate server and then visit the returned url in the browser?

I haven't run into this myself before. I also think it's probably related to SSL. 

--
You received this message because you are subscribed to the Google Groups "enketo-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to enketo-users...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

-- 

Revolutionizing data collection since 2012.

Enketo    |    LinkedIn    |    GitHub    |    Twitter    |    Blog

[R. Jay Flaming]

Yes, that was the root of the problem. On Debian, I found I had to link the certificates into /etc/ssl so that node.js would find them.  

However, I still can only get it to work with grunt develop, npm start fails, so maybe something else is still wrong.