NginxProxyManager / NginxProxyManager/nginx-proxy-manager

Complete crash when requesting a second wild-card cert from GoDaddy with DNS

Open
#1,628 18 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

awaiting feedback bug stale
Dominant language
TypeScript
Stars
34.2k
Forks
3.9k
Avg merge
21h 12m
Merged PRs (30d)
20

Description

Checklist

  • Have you pulled and found the error with jc21/nginx-proxy-manager:latest docker image?
    Yes
  • Are you sure you're not using someone else's docker image?
    Yes
  • Have you searched for similar issues (both open and closed)?
    Yes - Sort of the same exists but this gives explicit steps and the last one was closed with no repro

Describe the bug
If you try and add a second wild card cert from the SSL tab using go-daddy (not sure if it does this with others) you'll get an internal error about an npm folder in /letsencrypt/live not existing. Anything else you try and do in the session will error although the existing proxies will continue to function. If you restart the container, it will crash on boot. The only way to work around is to copy one of the other npm folders into the one it's looking for in the log and then it will start.

Nginx Proxy Manager Version
2.9.7

To Reproduce
Steps to reproduce the behavior:

  1. Go to SSL
  2. Click on Add SSL Cert
  3. Add wildcard (*.example.com) and choose go daddy and fill in secret and key click create.
  4. Add a second with the same information for a different domain (i.e. *.example2.com), click create => error as described.

Expected behavior
Should add the second certificate without error and not bork nginx manager entirely.

Operating System
Debian Linux

Additional context
❯ /data/nginx/redirection_host/1.conf
nginx: [emerg] cannot load certificate "/etc/letsencrypt/live/npm-8/fullchain.pem": BIO_new_file() failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/etc/letsencrypt/live/npm-8/fullchain.pem','r') error:2006D080:BIO routines:BIO_new_file:no such file)

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Reproduce the second wildcard certificate flow from the SSL tab using GoDaddy, then inspect the reported /data/nginx/redirection_host/1.conf failure and the missing /etc/letsencrypt/live/npm-8/fullchain.pem path. Done means the second certificate is added without an internal error and the container restarts without crashing.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, nginx, typescript
Domain
devops, infrastructure, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.