Skip to content

[BUG] SSL Issue (cannot load certificate) on UI Service #2987

@philippefiz

Description

@philippefiz

What happened?

Hello,
I'v associate subdomain to default service (administration gui) via the webinterface, method "Wizard" and template "UI"

The custom certificate doesn't copy in /var/cache/bunkerweb/customcert/rproxy.mydomain.com (the folder isn't created)

I've in source a custom certificate readable by nginx in /etc/ssl/local, define in file mode only (not data) in BW.

It's OK for another service with the same certificate.
I must load another service used the same certificate to have access on the administration url few minutes, and the error appears again. The folder with the name of the service in cache is never created.

Best Regards,
Thanks

How to reproduce?

Personnalize the default service and load a custom certificate at file mode

Configuration file(s) (yaml or .env)

IS_DRAFT=no
SERVER_NAME=rproxy.mydomain.com
USE_TEMPLATE=ui
USE_BROTLI=yes
USE_CORS=yes
USE_CLIENT_CACHE=yes
USE_CROWDSEC=yes
USE_CUSTOM_SSL=yes
CUSTOM_SSL_CERT=/etc/ssl/local/_.mydomain.com.bundle.crt
CUSTOM_SSL_KEY=/etc/ssl/local/_.mydomain.com.key
INTERCEPTED_ERROR_CODES=404 405 413 429 500 501 502 503 504
USE_GZIP=yes
KEEP_UPSTREAM_HEADERS=Content-Security-Policy Strict-Transport-Security X-Frame-Options X-Content-Type-Options Referrer-Policy
EMAIL_LETS_ENCRYPT=admin@mydomain.com
LIMIT_CONN_MAX_HTTP1=25
LIMIT_CONN_MAX_HTTP2=200
LIMIT_CONN_MAX_HTTP3=200
LIMIT_REQ_RATE=6r/s
MAX_CLIENT_SIZE=50m
SERVE_FILES=no
USE_REAL_IP=yes
USE_REVERSE_PROXY=yes
REVERSE_PROXY_HOST=http://127.0.0.1:7000
REVERSE_PROXY_URL=/RandomURLAdmin
REVERSE_PROXY_BUFFERING=no
USE_ROBOTSTXT=yes
REDIRECT_HTTP_TO_HTTPS=yes
USE_UI=yes

Relevant log output

2025/12/12 14:15:07 [error] 645787#645787: [CUSTOMCERT] error while reading files : /var/cache/bunkerweb/customcert/rproxy.mydomain.com/cert.pem = /var/cache/bunkerweb/customcert/rproxy.mydomain.com/cert.pem: No such file or directory
2025/12/12 14:15:07 [error] 645787#645787: [INIT] customcert:init() call failed : error reading files
2025/12/12 14:15:07 [notice] 645787#645787: [INIT] selfsigned:init() call successful : self signed is not used

BunkerWeb version

1.6.6

What integration are you using?

Linux

Linux distribution (if applicable)

Debian 12

Removed private data

  • I have removed all private data from the configuration file and the logs

Code of Conduct

  • I agree to follow this project's Code of Conduct

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions