Self signed certificate errors while sync and plugin install

Hi,

Posting possible temporary workaround if you are using joplin in a windows 11 environment in a corporate laptop and are getting self certificate chain error due to electron/node bundled using its own certificates and not windows installed certificate

  • Open chrome and go to www.google.com
  • In the address bar top left side there may be a padlock/two opposing lines with rings click it
  • It will have a field connection is secure (with padlock icon)
  • Now you will see a certificate is valid option with with a rectangle and arrow for opening - click it
  • This will open a certificate details inside chrome
  • Go to details tab - there will a heirarchy/tree of certificates click on the top one
  • Bottom right there will be an export button select it and export as a crt file (single certificate only NOT chain one)
  • Save it some place
  • Now make a .bat file in windows with following format
@echo off
set NODE_EXTRA_CA_CERTS=C:\Users\username\path\to\file\certadmin.crt
start "" "C:\Users\username\AppData\Local\Programs\Joplin\Joplin.exe"

  • adjust username and path-to-file according to your setup
  • save the bat
  • Now launch Joplin using the joplin_launcher.bat file you just created
  • Enjoy!

Thanks for the tip. I don't need it often. When I do I usually temporarily encrypt my data using SSH tunneling to get through to the outside world without having my packets being inspected.

I use opentunnel.net