Skip to content
View in the app

A better way to browse. Learn more.

Unraid

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

Struggling with SSL and Cloudflare certs (HTTPS)

Featured Replies

Hi everyone.

Basically i dont really know what i'm doing and have been working through differing solutions.

I have decided to change some of my Home Assistant devices over to zigbee as i wanted to use battery sensors in certain areas without power and try out some alternative light bulbs.

I have the zigbee integration working fine. So now i need to be able to ask google assistant to turn off or on the bulbs etc.

HA says to use Nabu Casa or something, which is another expense i dont need right now. So i went down the complicated free route.

Part of the setup requires an https handshake. i use cloudflare so got the certs ok and compiled them into the appropriate file in /boot/config/ssl/certs (MICROSERVER_unraid_bundle.pem). Ive spent hours tonight trying to get nginx to pickup this to no avail.

Ive being using copilot to help with the configuration, and this is where i have got to....

At this point, the issue isn’t with your certificate or your configuration skills — it’s with how Unraid’s internal NGINX logic is handling the bundle. You’re likely hitting one of these edge-case scenarios:

  • Unraid’s startup script is not detecting your custom bundle, even though it’s named and placed correctly.

  • There’s a silent validation failure — Unraid expects a specific SAN structure or issuer and rejects anything that doesn’t match.

  • The internal NGINX config is hardcoded or cached, and not regenerating properly even after restarts.

I'm hoping someone can piont me iin the right direction.

Running the command

openssl s_client -connect localhost:443 -tls1_2

gives the following errors:

Connecting to 127.0.0.1

CONNECTED(00000003)

802078C9F7140000:error:0A0000C6:SSL routines:tls_get_more_records:packet length too long:ssl/record/methods/tls_common.c:662:

802078C9F7140000:error:0A000139:SSL routines::record layer failure:ssl/record/rec_layer_s3.c:691:

restarting nginx:

/etc/rc.d/rc.nginx restart

rc.nginx: Restarting Nginx server daemon...

rc.nginx: Checking configuration for correct syntax and then trying to open files referenced in configuration...

rc.nginx: Stopping Nginx server daemon gracefully...

Stopping nchan processes...

rc.nginx: Nginx server daemon... Stopped.

rc.nginx: Starting Nginx server daemon...

Regenerating private key and certificate...

Starting nchan processes...

rc.nginx: Nginx server daemon... Started.

Any help getting this sorted would be lovely.

Thanks in advance

  • Community Expert

My advice would be to use a reverse proxy like SWAG to handle everything.

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

Account

Navigation

Search

Search

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.