[GH-ISSUE #910] SSL Certificate error #640

New issue

Closed

opened 2026-05-07 00:26:12 +02:00 by BreizhHardware · 2 comments

BreizhHardware commented

2026-05-07 00:26:12 +02:00

Owner

Originally created by @hunnomad on GitHub (Oct 7, 2023).
Original GitHub issue: https://github.com/binwiederhier/ntfy/issues/910

The certificate used by Certbot is set on the Nginx server, and the ntfy server is behind Cloudflare.

Originally created by @hunnomad on GitHub (Oct 7, 2023). Original GitHub issue: https://github.com/binwiederhier/ntfy/issues/910 The certificate used by Certbot is set on the Nginx server, and the ntfy server is behind Cloudflare. ![Screenshot_20231007_121638_ntfy](https://github.com/binwiederhier/ntfy/assets/2537005/1bb847ef-ba67-4fca-9d52-6e4b4716407e)

BreizhHardware

2026-05-07 00:26:12 +02:00

closed this issue
added the
🪲 bug
label

BreizhHardware commented

2026-05-07 00:26:13 +02:00

Author

Owner

@babiloof commented on GitHub (Oct 17, 2023):

I had the same issue and in my case i had generated a cert.crt file for Nginx reverse proxy with the command

openssl pkcs12 -in cert.pfx -clcerts -nokeys -out cert.crt

witch does not include intermediate certificates so i removed "-clcerts" from the command and generated a new cert.crt file with the intermediate certificates included. Restarted the Nginx reverse proxy with the new cert.crt file and the error was gone.

So i belive the issue was that intermediate certificates was missing.

@babiloof commented on GitHub (Oct 17, 2023): I had the same issue and in my case i had generated a cert.crt file for Nginx reverse proxy with the command openssl pkcs12 -in cert.pfx -clcerts -nokeys -out cert.crt witch does not include intermediate certificates so i removed "-clcerts" from the command and generated a new cert.crt file with the intermediate certificates included. Restarted the Nginx reverse proxy with the new cert.crt file and the error was gone. So i belive the issue was that intermediate certificates was missing.

BreizhHardware commented

2026-05-07 00:26:13 +02:00

Author

Owner

@binwiederhier commented on GitHub (Nov 6, 2023):

So i belive the issue was that intermediate certificates was missing.

Just from the error message "trust anchor is missing", this seems to be the case.

certbot provides a cert.pem and a fullchain.pem. Be sure to pick fullchain.pem.

Closing this issue as it is not related to ntfy at all.

@binwiederhier commented on GitHub (Nov 6, 2023): > So i belive the issue was that intermediate certificates was missing. Just from the error message "trust anchor is missing", this seems to be the case. `certbot` provides a `cert.pem` and a `fullchain.pem`. Be sure to pick `fullchain.pem`. Closing this issue as it is not related to ntfy at all.

BreizhHardware referenced this issue

2026-05-07 01:01:46 +02:00

[PR #640] [MERGED] Remove health check from dockerfile & document health check endpoint #1362