Hello everyone,

I am a new starter in the UNRAID universe.

I've installed a new Unraid server and I'm having trouble installing an SSL certificate through Unraid. I've already tried changing the port and forwarding the router's ports, but I'm getting the following error message:

Does anyone have a suggestion or a solution for this?

This probably won't help you, but, throwing it out there since, 'who knows'

For myself, I use a wildcard cert and this is the method I use to update/replace the certs:
User scripts plugin: https://forums.unraid.net/topic/48286-plugin-ca-user-scripts/

Create a script to run monthly:

#!/bin/bash

/usr/bin/cat /mnt/user/backups/certificates/_.mydomain.com.crt > /boot/config/ssl/certs/unraidhostname_unraid_bundle.pem

/usr/bin/cat /mnt/user/backups/certificates/_.mydomain.com.issuer.crt >> /boot/config/ssl/certs/unraidhostname_unraid_bundle_unraid_bundle.pem

/usr/bin/cat /mnt/user/backups/certificates/_.mydomain.com.key >> /boot/config/ssl/certs/unraidhostname_unraid_bundle_unraid_bundle.pem

/etc/rc.d/rc.nginx reload

I've got another system that updates the LE certs and dumps them into that source location ... It's been working fine for a couple of years for me.

Yours is throwing an error that the file is missing the key ... maybe at least part of that would be useful for you?

Personally, I'd also recommend the DNS challenge method for a server that really shouldn't be directly exposed to the internet so that you don't need to forward ports, but, that's a decision that's between you and your firewall.

ETA: The way the timing works out, it'll replace the cert and restart nginx more often that it needs to (it'll do it once a month when the certs are valid for ~3, so, two of the times it's the same cert that's getting re-created), but, the cert will always be updated with the new one before it actually expires and has required zero interaction from me since I started using this method (previously, I had used a cronjob, but, those get purged by Unraid during some upgrades, so, I wouldn't use that method again). My server that pulls the updated cert from LE attempts once a week and when LE provides it a cert, it replaces the one in that source location, so, there is always overlap in valid time between the old cert and the new one.

Edited August 31, 2025Aug 31 by TJHART85