plugins icon indicating copy to clipboard operation
plugins copied to clipboard

net/ntopng plugin certificate configuration fails to pull full certchain

Open wangmaster opened this issue 7 months ago • 0 comments

Important notices Before you add a new report, we ask you kindly to acknowledge the following:

  • [ X] I have read the contributing guide lines at https://github.com/opnsense/plugins/blob/master/CONTRIBUTING.md
  • [X ] I have searched the existing issues, open and closed, and I'm convinced that mine is new.
  • [ X] The title contains the plugin to which this issue belongs

Describe the bug The ntopng certificate configuration fails to pull in the full cert chain into /usr/local/share/ntopng/httpdocs/ssl/ntopng-cert.pem

To Reproduce Steps to reproduce the behavior:

  1. Go to 'Services-Ntopg`
  2. Configure an ACME issued LetsEncrypt Certificate
  3. Connect to https://:3443
  4. depending on your client, you may get a cert error because the LetsEncrypt intermediate cert is not usually in the trust store.
  5. Check /usr/local/share/ntopng/httpdocs/ssl/ntopng-cert.pem and you will see it only has a single -----BEGIN CERTIFICATE----- -----END CERTIFICATE----- block. It should have at least two. one for the cert and one for the intermediate

Expected behavior Should not see an error, or the ntopng-cert.pem file should be complete.

Additional context See https://www.ntop.org/ntopng/securing-ntopng-with-ssl-and-lets-encrypt/ step 5 which shows that the fullchain.pem (not just the cert.pem) needs to be installed properly for ntopng.

Environment Software version used and hardware type if relevant. e.g.:

OPNsense 25.1.6_4 (amd64).

wangmaster avatar May 15 '25 22:05 wangmaster