plugins
plugins copied to clipboard
net/ntopng plugin certificate configuration fails to pull full certchain
Important notices Before you add a new report, we ask you kindly to acknowledge the following:
- [ X] I have read the contributing guide lines at https://github.com/opnsense/plugins/blob/master/CONTRIBUTING.md
- [X ] I have searched the existing issues, open and closed, and I'm convinced that mine is new.
- [ X] The title contains the plugin to which this issue belongs
Describe the bug The ntopng certificate configuration fails to pull in the full cert chain into /usr/local/share/ntopng/httpdocs/ssl/ntopng-cert.pem
To Reproduce Steps to reproduce the behavior:
- Go to 'Services-Ntopg`
- Configure an ACME issued LetsEncrypt Certificate
- Connect to https://
:3443 - depending on your client, you may get a cert error because the LetsEncrypt intermediate cert is not usually in the trust store.
- Check /usr/local/share/ntopng/httpdocs/ssl/ntopng-cert.pem and you will see it only has a single
-----BEGIN CERTIFICATE----- -----END CERTIFICATE-----block. It should have at least two. one for the cert and one for the intermediate
Expected behavior Should not see an error, or the ntopng-cert.pem file should be complete.
Additional context See https://www.ntop.org/ntopng/securing-ntopng-with-ssl-and-lets-encrypt/ step 5 which shows that the fullchain.pem (not just the cert.pem) needs to be installed properly for ntopng.
Environment Software version used and hardware type if relevant. e.g.:
OPNsense 25.1.6_4 (amd64).