SSL Interception + Zoom on Ubuntu 20.04 (Error Code 104107) | Community
Skip to main content
D
Newcomer
DaJo
Newcomer
August 3, 2022
Question

SSL Interception + Zoom on Ubuntu 20.04 (Error Code 104107)

  • August 3, 2022
  • 4 replies
  • 8 views

Hello Zoom Community!

I run into an issue with ssl interception on ubuntu 20.04 (latest update).

We began the ssl interception nearly 2 months ago and at first i thought it is enough to put the certificate into the official ubuntu certificate storage (In PEM Format under /usr/local/share/ca-certificates and read it in with update-ca-certificate).  https://ubuntu.com/server/docs/security-trust-store

 

Now we're able to login in the zoom client but as soon as you try to connect to a meeting you get a certificate warning and an error code: 104107 with this message the meeting is terminated. I can't find any informations on this error code.

We are quite a large research institution and there is no option to trust the certificate anyways.

 

Also our network and security team won't whitelist zoom as suggested in a few links because it is working in windows without any issues. (Windows 10, latest patch)

 

I tried:

https://support.zoom.us/hc/en-us/articles/360052337271-Zoom-Untrusted-Server-Certificate-issues#h_01FCXB0ZYRDFD5553EC0XEC09R

https://support.zoom.us/hc/en-us/sections/201740126-Troubleshooting-Zoom-Meetings

https://support.zoom.us/hc/en-us/articles/201362683

https://support.zoom.us/hc/en-us/articles/360044092031-Conference-Room-Connector-TLS-certificates

 

Please let me know why Zoom isn't working with the new root-ca.crt rightfully setup (as other tools like wget or curl are working). Or maybe give me a hint where zoom is searching for the certificates.

 

Bests,

Daniel.

 

 

 

 

    4 replies

    D
    Newcomer
    DaJoAuthor
    Newcomer
    August 4, 2022

    Update:

    i tried to find logs describing this error but can't find anything useful while reproducing the error.

    Logs i checked:

    ~/.zoom/logs/zoom_stdout_stderr.log

    watched the system with:

    journalctl --follow

     

    Are there any other location to search for zoom logs?

    Bests,

    Daniel.

     

    D
    Newcomer
    DaJoAuthor
    Newcomer
    August 8, 2022

    Second Update:

    i tried to find the certificate location via strace but it seems like zoom isn't even looking for certificates on the system. 

     

    Here is the output of command "strace -e openat zoom":

    openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
    openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpthread.so.0", O_RDONLY|O_CLOEXEC) = 3
    openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libstdc++.so.6", O_RDONLY|O_CLOEXEC) = 3
    openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libm.so.6", O_RDONLY|O_CLOEXEC) = 3
    openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libgcc_s.so.1", O_RDONLY|O_CLOEXEC) = 3
    openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
    openat(AT_FDCWD, "/home/<user>/.zoom/logs/zoom_stdout_stderr.log", O_RDWR|O_CREAT|O_APPEND, 0664) = 3
    --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4177, si_uid=167844, si_status=0, si_utime=6, si_stime=5} ---
    +++ exited with 0 +++

     

    Any clues on this?

    D
    Newcomer
    DaJoAuthor
    Newcomer
    August 11, 2022

    Sooo, does anyone know anything about Zoom on Linux with SSL Inspection?

    Should we just admit that there is an issue which won't be fixed anytime soon?

    I could also provide more informations if anyone is willing to look into this with me.

    Bests,

    Daniel.

    D
    Newcomer
    DaJoAuthor
    Newcomer
    August 16, 2022

    We whitelisted Zoom from our ssl inspection and it's working for now.

    I can't understand why it's working on Windows or Mac without whitelisting but for now we are good.

    Terms & ConditionsAccessibility statement
    Copyright © Zoom Communications, Inc. All rights reserved.