starred/nginx-proxy-manager-NginxProxyManager

Fork 0

mirror of https://github.com/NginxProxyManager/nginx-proxy-manager.git synced 2026-04-25 09:25:55 +03:00

[GH-ISSUE #80] SSL Cipher error #71

New issue

Closed

opened 2026-02-26 05:34:06 +03:00 by kerem · 6 comments

kerem commented

2026-02-26 05:34:06 +03:00

Owner

Originally created by @checkerbomb on GitHub (Feb 21, 2019).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/80

I've installed a custom SSL certificate, and played with all the settings, but currently receiving an SSL error. I have ports 80/443 forwarded through the firewall to the nginx-proxy-host container. I've tried toggling things on/off in the Proxy Host settings with no change. Here are the basic settings I'm trying to use:

Here is the error I receive.

Chrome:

Firefox:

Originally created by @checkerbomb on GitHub (Feb 21, 2019). Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/80 I've installed a custom SSL certificate, and played with all the settings, but currently receiving an SSL error. I have ports 80/443 forwarded through the firewall to the nginx-proxy-host container. I've tried toggling things on/off in the Proxy Host settings with no change. Here are the basic settings I'm trying to use: ![image](https://user-images.githubusercontent.com/1671346/53180192-1f356a80-35c3-11e9-90da-c075339564a8.png) ![image](https://user-images.githubusercontent.com/1671346/53180331-5dcb2500-35c3-11e9-9210-80ca64c189a5.png) Here is the error I receive. Chrome: ![image](https://user-images.githubusercontent.com/1671346/53180597-dfbb4e00-35c3-11e9-9fb0-167df71ae938.png) Firefox: ![image](https://user-images.githubusercontent.com/1671346/53180639-fe214980-35c3-11e9-82bf-a0de2be94b21.png)

kerem

2026-02-26 05:34:06 +03:00

closed this issue
added the
awaiting feedback
label

kerem commented

2026-02-26 05:34:07 +03:00

Author

Owner

@jc21 commented on GitHub (Feb 25, 2019):

Can you use an online SSL checker to see what they say about the setup?

@jc21 commented on GitHub (Feb 25, 2019): Can you use an online SSL checker to see what they say about the setup? - https://www.sslshopper.com/ssl-checker.html - https://www.ssllabs.com/ssltest/ - https://www.digicert.com/help/

kerem commented

2026-02-26 05:34:07 +03:00

Author

Owner

@checkerbomb commented on GitHub (Feb 25, 2019):

Thanks for the reply. Based on these tests, it seems to me that the SSL cert is not being presented by nginx. Here are the results from the first two links. I should also note that I am using this same cert without issue on pfSense via haproxy, which I am attempting to replace with nginx-proxy-manager. I have also double checked that firewall and NAT rules are setup correctly, and reuploaded the cert and reconfigured the proxy host as well.

@checkerbomb commented on GitHub (Feb 25, 2019): Thanks for the reply. Based on these tests, it seems to me that the SSL cert is not being presented by nginx. Here are the results from the first two links. I should also note that I am using this same cert without issue on pfSense via haproxy, which I am attempting to replace with nginx-proxy-manager. I have also double checked that firewall and NAT rules are setup correctly, and reuploaded the cert and reconfigured the proxy host as well. ![image](https://user-images.githubusercontent.com/1671346/53345121-35546b00-38e2-11e9-98c4-59b977495651.png) ![image](https://user-images.githubusercontent.com/1671346/53345270-7f3d5100-38e2-11e9-896b-f40ad0262ac8.png)

kerem commented

2026-02-26 05:34:08 +03:00

Author

Owner

@jc21 commented on GitHub (Feb 25, 2019):

Ok that's super weird. Can you find the generated nginx config file for this host, it will be in your data/nginx/proxy_host folder, paste the contents here without your domain name for privacy

@jc21 commented on GitHub (Feb 25, 2019): Ok that's super weird. Can you find the generated nginx config file for this host, it will be in your `data/nginx/proxy_host` folder, paste the contents here without your domain name for privacy

kerem commented

2026-02-26 05:34:08 +03:00

Author

Owner

@checkerbomb commented on GitHub (Feb 26, 2019):

Sure thing. The formatting of the file was getting severely screwed up by Markdown, so I've attached it instead.

proxy-conf.txt

@checkerbomb commented on GitHub (Feb 26, 2019): Sure thing. The formatting of the file was getting severely screwed up by Markdown, so I've attached it instead. [proxy-conf.txt](https://github.com/jc21/nginx-proxy-manager/files/2905987/proxy-conf.txt)

kerem commented

2026-02-26 05:34:08 +03:00

Author

Owner

@jc21 commented on GitHub (Feb 27, 2019):

Ok so you can't use my.domain.com/portainer as the hostname, because it contains a path. When you ssl check my.domain.com/portainer it's actually checking my.domain.com and that doesn't (presumably) has configuration - and won't have ssl configured.

It's only currently possible to create portainer.domain.com host and apply a custom wildcard cert for domain.com to that proxy host.

Refer to #74 for possible future support of sub-folder forwarding.

@jc21 commented on GitHub (Feb 27, 2019): Ok so you can't use `my.domain.com/portainer` as the hostname, because it contains a path. When you ssl check `my.domain.com/portainer` it's actually checking `my.domain.com` and that doesn't (presumably) has configuration - and won't have ssl configured. It's only currently possible to create `portainer.domain.com` host and apply a custom wildcard cert for `domain.com` to that proxy host. Refer to #74 for possible future support of sub-folder forwarding.

kerem commented

2026-02-26 05:34:08 +03:00

Author

Owner

@checkerbomb commented on GitHub (Feb 27, 2019):

OK, thanks for the feedback. I will wait until this has been implemented, as setting up a subdomain for each and every application I need to forward (currently 12 but steadily increasing) would be cumbersome and also defeat the purpose of the custom SSL cert I have previously purchased for this specific subdomain.

I will say that I personally believe reverse proxying based on path is a critical feature and one that many will make use of. Nginx already supports it natively. https://docs.nginx.com/nginx/admin-guide/web-server/reverse-proxy/

Thanks! :)

@checkerbomb commented on GitHub (Feb 27, 2019): OK, thanks for the feedback. I will wait until this has been implemented, as setting up a subdomain for each and every application I need to forward (currently 12 but steadily increasing) would be cumbersome and also defeat the purpose of the custom SSL cert I have previously purchased for this specific subdomain. I will say that I personally believe reverse proxying based on path is a critical feature and one that many will make use of. Nginx already supports it natively. https://docs.nginx.com/nginx/admin-guide/web-server/reverse-proxy/ Thanks! :)

kerem referenced this issue

2026-02-26 06:31:51 +03:00

[GH-ISSUE #303] Example/Standard configs #267

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/nginx-proxy-manager-NginxProxyManager#71

No description provided.

Rows
Columns