500 error only in privacy mode (chrome)

We have a NSS 5.2.3 (Docker Container) running in our kubernetes behind traefik with a certificate by lets encrypt.

We are testing the chess app (https://pheyvaer.github.io/solid-chess/) and it's working for a normal chrome session.

But in privacy mode or in Chromium, we will got the following error for the GET request https://localhost/inbox/ with status 500:
request to https://localhost/.well-known/openid-configuration failed, reason: unable to verify the first certificate

We tested also against inrupt.net and there is no problem.

We compared the requests and found out, that the cookie nssidp.sid is missing.

We tried some startup parameters, but with no effect.

We think that is not a specific NSS issue more like general purpose for proxying or security measures.

Commencez par reproduire la requête GET vers https://localhost/inbox/ en mode confidentialité de Chrome ou dans Chromium, puis comparez-la à une session normale. Suivez l’échec de vérification du certificat pour /.well-known/openid-configuration et l’absence du cookie nssidp.sid à travers NSS, Docker, Kubernetes et Traefik ; le travail est terminé lorsque la requête aboutit sans l’erreur 500.