failed: Error in connection establishment: net::ERR_CERT_AUTHORITY_INVALID

[jchunick]

I run FoundryVTT on my local desktop PC, but use a DDNS in order to allow everyone to connect without needing to change the IP when my ISP dynamically assigns me a new one. That all works fine. However, trying to connect without using SSL definitely won't work, but when I do enable SSL I'm still getting an error (see below).
It says that ther cert authority is invalid. The one I'm using for FoundryVTT is signed through Let's Encrypt and works fine when myself or my players try to access Foundry as clients thru Chrome, which is fine with the cert.

I should add that I'm the DM and running the server, and trying to get this to work through the server, not thru the client as a player.

Running Foundry v11.307
DnD5e - Fifth Edition System v2.2.2

I have a lot of other modules installed. If you need me to test without the SSL or any modules installed then let me know.

Here's the error (note that I put x.x so as not to reveal my IP):
dice-connection.mjs:22 WebSocket connection to 'wss://192.168.x.x:8596/FoundryGDVTT' failed: Error in connection establishment: net::ERR_CERT_AUTHORITY_INVALID
connect @ dice-connection.mjs:22
(anonymous) @ dice-connection.mjs:38
dice-connection.mjs:102 GoDice websocket error Event {isTrusted: true, type: 'error', target: WebSocket, currentTarget: WebSocket, eventPhase: 2, …}
dice-connection.mjs:93 GoDice websocket connection closed

[jchunick]

An addendum to the issue. When I don't use SSL, here's what I get:
foundry.js:753 TypeError: An error occurred while rendering GodiceResolver 123. Cannot read properties of undefined (reading 'connection')
[Detected 1 package: godice]
at GodiceResolver.activateListeners (godice-resolver.js:93:30)
at GodiceResolver._render (foundry.js:5764:10)
at async GodiceResolver._render (foundry.js:6452:5)
onError @ foundry.js:753

This is from the same computer I'm running the FoundryVTT server on and I'm running as the GM, trying to roll the GoDice.

Here's what the GoDice window looks like after I roll the physical dice. The phone recognizes the roll.

[AKparticula]

@jchunick
Sorry for the inconvenience. There might be a few things you can try and should check:

When using SSL turned on in the GoDice app

1. please verify you run the BAT file attached in the PDF as an administrator, and enter the IP only (without the prefix and suffix of "WSS://" and ":8596")
2. In Foundry configurations, have you typed "wss://godice-connector.com:8596"?
3. if this is what you've done and still getting the CERT issue - can you please try opening the server on Foundry without entering the game (keep it in the player choice screen), then open your server link in your browser and connect as the GM on the browser? This might solve it, might not be how you are used to though...

Another option is not to use SSL on the app, open the GM user on the browser, and allow insecure content, as shown in our other PDF
in any case you're more than welcome to contact me privately on discord: Katz Amit#5329

[jchunick]

Thanks for the updated information!

I've made a bit of progress, but not enough. I'm still trying to get SSL working because I have the DDNS along with my certificate so that I can access the server securely thru SSL.

I followed steps 1&2 for the setup needed when enabling SSL and running it through the FoundryVTT program. I don't get the error I was, but now I get a new error, ERR_CERT_INVALID (see below). I followed the steps outlined in the PDF and double-checked everything.

I did try your step 3, logging in as my default Gamemaster login, and it didn't seem to even load up the module properly in the Chrome browser; it's enabled, but the dice rolls as normal as if the godice module isn't active, yet it is. I've tried this both on the Chrome and Edge browsers. I did also try to set the site settings to allow Insecure content and it still rolls the dice without the goDice dialog coming up.

The interesting part is that I get this set of messages in the browser console, which suggest to me that it's mostly worked correctly:
dice-connection.mjs:22 Mixed Content: The page at 'https://varos.ddnsgeek.com/game' was loaded over HTTPS, but attempted to connect to the insecure WebSocket endpoint 'ws://godice-connector.com:8596/FoundryGDVTT'. This endpoint should be available via WSS. Insecure access is deprecated.
connect @ dice-connection.mjs:22
dice-connection.mjs:45 GoDice websocket connection opened
3dice-connection.mjs:54 GoDice websocket message received
foundry.js:7602 Foundry VTT | Retrieved and compiled template templates/sidebar/apps/settings-config-category.html
2dice-connection.mjs:54 GoDice websocket message received

However, as stated previously, no GoDice dialog window appears to allow me to roll the physical dice and select.

---

This is the error I'm now getting:
WebSocket connection to 'wss://godice-connector.com:8596/FoundryGDVTT' failed: Error in connection establishment: net::ERR_CERT_INVALID
connect @ dice-connection.mjs:22
dice-connection.mjs:102 GoDice websocket error EventisTrusted: truebubbles: falsecancelBubble: falsecancelable: falsecomposed: falsecurrentTarget: WebSocket {url: 'wss://godice-connector.com:8596/FoundryGDVTT', readyState: 3, bufferedAmount: 0, onopen: ƒ, onerror: ƒ, …}defaultPrevented: falseeventPhase: 0returnValue: truesrcElement: WebSocket {url: 'wss://godice-connector.com:8596/FoundryGDVTT', readyState: 3, bufferedAmount: 0, onopen: ƒ, onerror: ƒ, …}target: WebSocket {url: 'wss://godice-connector.com:8596/FoundryGDVTT', readyState: 3, bufferedAmount: 0, onopen: ƒ, onerror: ƒ, …}binaryType: "blob"bufferedAmount: 0extensions: ""onclose: ƒ ()onerror: ƒ ()onmessage: ƒ ()onopen: ƒ ()protocol: ""readyState: 3url: "wss://godice-connector.com:8596/FoundryGDVTT"[[Prototype]]: WebSocketCLOSED: 3CLOSING: 2CONNECTING: 0OPEN: 1binaryType: (...)bufferedAmount: (...)close: ƒ close()length: 0name: "close"arguments: (...)caller: (...)[[Prototype]]: ƒ ()apply: ƒ apply()arguments: (...)bind: ƒ bind()call: ƒ call()caller: (...)constructor: ƒ Function()length: 0name: ""toString: ƒ toString()length: 0name: "toString"arguments: (...)caller: (...)[[Prototype]]: ƒ ()[[Scopes]]: Scopes[0]Symbol(Symbol.hasInstance): ƒ Symbol.hasInstancelength: 1name: "[Symbol.hasInstance]"arguments: (...)caller: (...)[[Prototype]]: ƒ ()[[Scopes]]: Scopes[0]get arguments: ƒ ()set arguments: ƒ ()get caller: ƒ ()set caller: ƒ ()[[FunctionLocation]]: ​[[Prototype]]: Object[[Scopes]]: Scopes[0][[Scopes]]: Scopes[0]extensions: (...)onclose: (...)onerror: (...)onmessage: (...)onopen: (...)protocol: (...)readyState: (...)send: ƒ send()length: 1name: "send"arguments: (...)caller: (...)[[Prototype]]: ƒ ()[[Scopes]]: Scopes[0]url: (...)constructor: ƒ WebSocket()CLOSED: 3CLOSING: 2CONNECTING: 0OPEN: 1arguments: nullcaller: nulllength: 1name: "WebSocket"prototype: WebSocketCLOSED: 3CLOSING: 2CONNECTING: 0OPEN: 1binaryType: (...)bufferedAmount: (...)close: ƒ close()extensions: (...)onclose: (...)onerror: (...)onmessage: (...)onopen: (...)protocol: (...)readyState: (...)send: ƒ send()length: 1name: "send"arguments: (...)caller: (...)[[Prototype]]: ƒ ()[[Scopes]]: Scopes[0]url: (...)constructor: ƒ WebSocket()CLOSED: 3CLOSING: 2CONNECTING: 0OPEN: 1arguments: nullcaller: nulllength: 1name: "WebSocket"prototype: WebSocketCLOSED: 3CLOSING: 2CONNECTING: 0OPEN: 1binaryType: (...)bufferedAmount: (...)close: ƒ close()extensions: (...)onclose: (...)onerror: (...)onmessage: (...)onopen: (...)protocol: (...)readyState: (...)send: ƒ send()url: (...)constructor: ƒ WebSocket()Symbol(Symbol.toStringTag): "WebSocket"get binaryType: ƒ binaryType()set binaryType: ƒ binaryType()get bufferedAmount: ƒ bufferedAmount()get extensions: ƒ extensions()get onclose: ƒ onclose()set onclose: ƒ onclose()get onerror: ƒ onerror()set onerror: ƒ onerror()get onmessage: ƒ onmessage()set onmessage: ƒ onmessage()get onopen: ƒ onopen()set onopen: ƒ onopen()get protocol: ƒ protocol()get readyState: ƒ readyState()get url: ƒ url()[[Prototype]]: EventTarget[[Prototype]]: ƒ EventTarget()[[Scopes]]: Scopes[0]Symbol(Symbol.toStringTag): "WebSocket"get binaryType: ƒ binaryType()set binaryType: ƒ binaryType()get bufferedAmount: ƒ bufferedAmount()get extensions: ƒ extensions()get onclose: ƒ onclose()set onclose: ƒ onclose()get onerror: ƒ onerror()set onerror: ƒ onerror()get onmessage: ƒ onmessage()set onmessage: ƒ onmessage()get onopen: ƒ onopen()set onopen: ƒ onopen()get protocol: ƒ protocol()get readyState: ƒ readyState()get url: ƒ url()[[Prototype]]: EventTarget[[Prototype]]: ƒ EventTarget()[[Scopes]]: Scopes[0]Symbol(Symbol.toStringTag): "WebSocket"get binaryType: ƒ binaryType()set binaryType: ƒ binaryType()get bufferedAmount: ƒ bufferedAmount()get extensions: ƒ extensions()get onclose: ƒ onclose()set onclose: ƒ onclose()get onerror: ƒ onerror()set onerror: ƒ onerror()get onmessage: ƒ onmessage()set onmessage: ƒ onmessage()length: 1name: "set onmessage"arguments: (...)caller: (...)[[Prototype]]: ƒ ()[[Scopes]]: Scopes[0]get onopen: ƒ onopen()length: 0name: "get onopen"arguments: (...)caller: (...)[[Prototype]]: ƒ ()[[Scopes]]: Scopes[0]set onopen: ƒ onopen()get protocol: ƒ protocol()get readyState: ƒ readyState()get url: ƒ url()[[Prototype]]: EventTargettimeStamp: 8592.59999999986type: "error"[[Prototype]]: EventAT_TARGET: 2BUBBLING_PHASE: 3CAPTURING_PHASE: 1NONE: 0bubbles: (...)cancelBubble: (...)cancelable: (...)composed: (...)composedPath: ƒ composedPath()currentTarget: (...)defaultPrevented: (...)eventPhase: (...)initEvent: ƒ initEvent()preventDefault: ƒ preventDefault()returnValue: (...)srcElement: (...)stopImmediatePropagation: ƒ stopImmediatePropagation()stopPropagation: ƒ stopPropagation()target: (...)timeStamp: (...)type: (...)constructor: ƒ Event()Symbol(Symbol.toStringTag): "Event"get bubbles: ƒ bubbles()get cancelBubble: ƒ cancelBubble()set cancelBubble: ƒ cancelBubble()get cancelable: ƒ cancelable()get composed: ƒ composed()get currentTarget: ƒ currentTarget()get defaultPrevented: ƒ defaultPrevented()get eventPhase: ƒ eventPhase()get returnValue: ƒ returnValue()set returnValue: ƒ returnValue()get srcElement: ƒ srcElement()get target: ƒ target()get timeStamp: ƒ timeStamp()get type: ƒ type()[[Prototype]]: Object
dice-connection.mjs:93 GoDice websocket connection closed

[jchunick]

Update: I seem to finally be getting the messages when I run Gamemaster thru Chrome browser, but the window isn't popping up. I've attached a series of images that may assist in understanding the situation.

The first two images are being run in the FoundryVTT server.
The first one shows the GoDice Companion window does display properly as I'd expect, but the websocket connection error, net::ERR_CERT_INVALID stops it from communicating properly with the phone app, so it can't get any further.
The second one shows the security info from the FoundryVTT server.

Edit: to add, I've tested with Windows Defender firewall completely turned off and still get the same results so I can confirm that none of this is affected by the firewall in any way. I have also tested with no other modules but those needed to get goDice working, and again, whether other modules are loaded or not has no effect.

The third and fourth images are being run in the Chrome browser. Communication works, as you can see in the third and fourth images. However, in the fourth image, after the Roll button is pressed, the GoDice Companion window doesn't show up. It's real close to working, but now I'd guess that there's possibly something in the code that's stopping the GoDice Companion window from functioning in the browser... maybe.

[AKparticula]

@jchunick
I find it hard to troubleshoot it, please contact me privately on Discord: Katz Amit#5329
I feel like with more fluent messaging we can solve it.