[Bug] {{ useHttps - clientOnly won't start }}

[SimoneMSR]

Environment

MagicMirror² version: 2.31
Node version: 22.12.0
npm version: 10.9.0
Platform: Linux

Which start option are you using?

node clientonly --address ... --port ...

Are you using PM2?

No

Module

None

Have you tried disabling other modules?

• Yes
• No

Have you searched if someone else has already reported the issue on the forum or in the issues?

• Yes

What did you do?

Configuration

/*************** AUTO GENERATED BY ROMEO MODULE ***************/

var config = 
{
  address: 'www.raspberrypi.local',
  ipWhitelist: [],
  modules: [
    {
      module: 'clock',
      hiddenOnStartup: true,
      position: 'top_left',
      config: {}
    },
    {
      module: 'MMM-CalendarExt3Agenda',
      hiddenOnStartup: true,
      position: 'top_left',
      header: 'My Agenda',
      config: {
        instanceId: 'basicCalendar',
        showMiniMonthCalendar: false,
        firstDayOfWeek: 1,
        startDayIndex: -1,
        calendarSet: [
          'us_holiday'
        ]
      }
    },
    {
      module: 'weather',
      hiddenOnStartup: true,
      position: 'bottom_left',
      config: {
        maxNumberOfDays: 4,
        weatherProvider: 'openmeteo',
        lat: 40.776676,
        lon: -73.971321
      }
    },
    {
      module: 'weather',
      hiddenOnStartup: true,
      instanceId: 'weather-forecast',
      classes: 'weather-forecast',
      position: 'bottom_left',
      config: {
        type: 'forecast',
        weatherProvider: 'openmeteo',
        lat: 40.776676,
        lon: -73.971321
      }
    },
    {
      module: 'calendar',
      position: 'bottom_left',
      hiddenOnStartup: true,
      config: {
        calendars: [
          {
            name: 'us_holiday',
            url: 'https://ics.calendarlabs.com/76/mm3137/US_Holidays.ics',
            color: '#6f1283'
          },
          {
            name: 'religious',
            url: 'https://gcatholic.org/calendar/ics/2025-it-General-F.ics?v=3'
          }
        ],
        broadcastPastEvents: true
      }
    },
    {
      module: 'MMM-CalendarExt3',
      hiddenOnStartup: true,
      position: 'top_center',
      header: '',
      config: {
        mode: 'month',
        headerWeekDayOptions: {
          weekday: 'narrow'
        }
      }
    },
    {
      module: 'MMM-Pir',
      hiddenOnStartup: true,
      position: 'top_left',
      config: {
        debug: false,
        Display: {
          timeout: 612000,
          animate: true,
          style: 0,
          colorFrom: '#FF0000',
          colorTo: '#00FF00',
          mode: 0,
          ecoMode: false,
          counter: true,
          lastPresence: true,
          lastPresenceTimeFormat: 'LL H:mm',
          availability: true,
          autoDimmer: false,
          xrandrForceRotation: 'normal',
          wrandrForceRotation: 'normal',
          wrandrForceMode: null,
          waylandDisplayName: 'wayland-1',
          relayGPIOPin: 16,
          ddcutil: {
            powerOffCode: '02',
            skipSetVcpCheck: true,
            setPowerRetries: 3
          }
        },
        Pir: {
          mode: 1,
          gpio: 21,
          triggerMode: 'H',
          skipToggleScreen: true
        },
        Motion: {
          deviceId: 0,
          captureIntervalTime: 1000,
          scoreThreshold: 100
        },
        Cron: {
          ON: [
            {
              dayOfWeek: [
                1
              ],
              hour: 1,
              minute: 0
            }
          ],
          OFF: [
            {
              dayOfWeek: [
                1
              ],
              hour: 1,
              minute: 9
            }
          ],
          mode: 0
        },
        Touch: {
          mode: 3
        },
        Governor: {
          sleeping: 4,
          working: 2
        },
        Sounds: {
          on: 'open.mp3',
          off: 'close.mp3'
        }
      }
    },
    {
      module: 'MMM-ip',
      position: 'bottom_left',
      config: {}
    }
  ],
  useHttps: true,
  httpsPrivateKey: 'modules/MMM-Styler/ssl/device.key',
  httpsCertificate: 'modules/MMM-Styler/ssl/raspberrypi.local.crt',
  locale: 'en-US'
}

/*************** DO NOT EDIT THE LINE BELOW ***************/
if (typeof module !== 'undefined') {module.exports = config;}

Steps to reproduce the issue:
Produce a self-signed certificate with openssl, expiring in 3035, using this scripts

node serveronly/ &
DISPLAY=:0 node clientonly/ --address www.raspberrypi.local --port 8080 --use-tls

What did you expect to happen?

The client working

What actually happened?

I get this error

Unable to connect to server: (Error: Unable to read config from server (https://www.raspberrypi.local:8080/config/ (unable to verify the first certificate)

If I run the above, with useHttps:false, everything works.

Additional comments

No response

Participation

• I am willing to submit a pull request for this change.

[sdetweil]

try client w localhost not 0.0.0.0

[sdetweil]

if you do this from diff machines does it work?
can you use remote browser to server in https?

[SimoneMSR]

I have updated the config.js in this issue.
What I am trying to do is to access the MM from devices (android, iOS), but at the same time have an electron client running on my raspberry

I can successfully connect to https://www.raspberrypi.local:8080 from browser

But I still get the error

[khassel]

if I google unable to verify the first certificate the problem seems to be an incomplete cert setup, see e.g. https://stackoverflow.com/questions/31673587/error-unable-to-verify-the-first-certificate-in-nodejs

[SimoneMSR]

This is strange, since In chrome i get the ✅ icon for https. However, to do this I added another CA certificate to the browser.

I have 3 files:

• server.cert (use in MM)
• server.key (use in MM)
• CA.pem (add in browser to avoid "page insecure" alert)

Should I add CA.pem to MM, like this, as suggested above?

const path = require('path');
const https = require('https');
const rootCas = require('ssl-root-cas').create();

rootCas.addFile(path.resolve(__dirname, 'CA.pem'));
const httpsAgent = new https.Agent({ca: rootCas});

[khassel]

don't know, try it.

I would add the contents of CA.pem into the server.cert and try again.