[GH-ISSUE #605] Add self generated certificate as SSL provider #510

Closed
opened 2026-02-26 06:33:11 +03:00 by kerem · 4 comments
Owner

Originally created by @Syam on GitHub (Sep 10, 2020).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/605

I am trying to expose some HTTPS services to LAN only.
But when adding a proxy, Nginx Proxy Manager only offer Letsencrypt or None as provider.

Is it possible to add a self generated certificate as SSL provider ?

Thank,

Originally created by @Syam on GitHub (Sep 10, 2020). Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/605 I am trying to expose some HTTPS services to LAN only. But when adding a proxy, Nginx Proxy Manager only offer `Letsencrypt ` or `None` as provider. Is it possible to add a self generated certificate as SSL provider ? Thank,
kerem 2026-02-26 06:33:11 +03:00
Author
Owner

@chaptergy commented on GitHub (Oct 3, 2020):

When switching to the "SSL Certificates" tab and clicking on the "Add SSL Certificate" button in the upper right corner of the card (Not the big one in the center) you can choose to upload a custom certificate.
This certificate can then be selected for the host.
Screenshot from 2020-10-03 22-06-06

However it seems since version 2.5.0 the custom certificate upload is broken. See https://github.com/jc21/nginx-proxy-manager/issues/594

<!-- gh-comment-id:703158884 --> @chaptergy commented on GitHub (Oct 3, 2020): When switching to the "SSL Certificates" tab and clicking on the "Add SSL Certificate" button in the upper right corner of the card (Not the big one in the center) you can choose to upload a custom certificate. This certificate can then be selected for the host. ![Screenshot from 2020-10-03 22-06-06](https://user-images.githubusercontent.com/26956711/95000880-02498180-05c5-11eb-93bc-c11ec0e7318c.png) However it seems since version 2.5.0 the custom certificate upload is broken. See https://github.com/jc21/nginx-proxy-manager/issues/594
Author
Owner

@BlackF09 commented on GitHub (Oct 4, 2020):

@chaptergy: I'm unsure if the author meant a third option besides LE an Custom (before step three) like "Own CA". OpenSSL could generate a quick self signed certificate with the given name. I think with this scenario we could even leave out the whole renewal management, just let it generate a new cert eg. after year. Only give the CA certificate to download that it could be added to clients.

Besides that it's a little bit confusing if two buttons with the same name do different things ("Add SSL Certificate").

<!-- gh-comment-id:703184797 --> @BlackF09 commented on GitHub (Oct 4, 2020): @chaptergy: I'm unsure if the author meant a third option besides _LE_ an _Custom_ (before step three) like "Own CA". OpenSSL could generate a quick self signed certificate with the given name. I think with this scenario we could even leave out the whole renewal management, just let it generate a new cert eg. after year. Only give the CA certificate to download that it could be added to clients. Besides that it's a little bit confusing if two buttons with the same name do different things ("Add SSL Certificate").
Author
Owner

@jc21 commented on GitHub (Nov 22, 2020):

It was a conscious decision to make the main path for SSL certificate generation use Let's Encrypt because that was the goal of this project. Custom SSL certificates were added by request later in the game.

That said I agree it would be pretty easy to integrate mkcert into the project to generate self-signed certs on the fly and then make it part of the Host creation as an option.

<!-- gh-comment-id:731705888 --> @jc21 commented on GitHub (Nov 22, 2020): It was a conscious decision to make the main path for SSL certificate generation use Let's Encrypt because that was the goal of this project. Custom SSL certificates were added by request later in the game. That said I agree it would be pretty easy to integrate `mkcert` into the project to generate self-signed certs on the fly and then make it part of the Host creation as an option.
Author
Owner

@chaptergy commented on GitHub (May 12, 2021):

Duplicate of https://github.com/jc21/nginx-proxy-manager/issues/593

<!-- gh-comment-id:839987794 --> @chaptergy commented on GitHub (May 12, 2021): Duplicate of https://github.com/jc21/nginx-proxy-manager/issues/593
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/nginx-proxy-manager-NginxProxyManager#510
No description provided.