Skip to content

Can't create or renew certs because of SSLError(SSLError(1, '[SSL: TLSV1_UNRECOGNIZED_NAME] tlsv1 unrecognized name (_ssl.c:992)')). #3718

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
dataprolet opened this issue Apr 23, 2024 · 1 comment
Labels

Comments

@dataprolet
Copy link

dataprolet commented Apr 23, 2024

Checklist

  • Have you pulled and found the error with jc21/nginx-proxy-manager:latest docker image?
    • Yes
  • Are you sure you're not using someone else's docker image?
    • Yes
  • Have you searched for similar issues (both open and closed)?
    • Yes

Describe the bug
When trying to create or renew a certificate via the WebGUI I get an internal error. Checking the logs I see the following error:

[4/23/2024] [10:30:31 AM] [Global   ] › ⬤  debug     CMD: /usr/sbin/nginx -t -g "error_log off;"
[4/23/2024] [10:30:31 AM] [Nginx    ] › ℹ  info      Reloading Nginx
[4/23/2024] [10:30:31 AM] [Global   ] › ⬤  debug     CMD: /usr/sbin/nginx -s reload
[4/23/2024] [10:30:36 AM] [SSL      ] › ℹ  info      Requesting Let'sEncrypt certificates for Cert #45: my.domain.com
[4/23/2024] [10:30:36 AM] [SSL      ] › ℹ  info      Command: certbot certonly --config "/etc/letsencrypt.ini" --work-dir "/tmp/letsencrypt-lib" --logs-dir "/tmp/letsencrypt-log" --cert-name "npm-45" --agree-tos --authenticator webroot --email "[email protected]" --preferred-challenges "dns,http" --domains "my.domain.com" 
[4/23/2024] [10:30:36 AM] [Global   ] › ⬤  debug     CMD: certbot certonly --config "/etc/letsencrypt.ini" --work-dir "/tmp/letsencrypt-lib" --logs-dir "/tmp/letsencrypt-log" --cert-name "npm-45" --agree-tos --authenticator webroot --email "[email protected]" --preferred-challenges "dns,http" --domains "my.domain.com" 
[4/23/2024] [10:30:36 AM] [Nginx    ] › ⬤  debug     Deleting file: /data/nginx/temp/letsencrypt_45.conf
[4/23/2024] [10:30:37 AM] [Global   ] › ⬤  debug     CMD: /usr/sbin/nginx -t -g "error_log off;"
[4/23/2024] [10:30:37 AM] [Nginx    ] › ℹ  info      Reloading Nginx
[4/23/2024] [10:30:37 AM] [Global   ] › ⬤  debug     CMD: /usr/sbin/nginx -s reload
[4/23/2024] [10:30:37 AM] [Express  ] › ⚠  warning   Saving debug log to /tmp/letsencrypt-log/letsencrypt.log

An unexpected error occurred:

requests.exceptions.SSLError: HTTPSConnectionPool(host='acme-v02.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by SSLError(SSLError(1, '[SSL: TLSV1_UNRECOGNIZED_NAME] tlsv1 unrecognized name (_ssl.c:992)')))

Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /tmp/letsencrypt-log/letsencrypt.log or re-run Certbot with -v for more details.

Nginx Proxy Manager Version
v2.11.1

To Reproduce
Steps to reproduce the behavior:

  1. Go to 'SSL Certificates'
  2. Click on any certificate and select 'Renew Now'
  3. See 'Internal Error'

or

  1. Go to 'Proxy Hosts'
  2. Click on 'Add Proxy Host'
  3. Fill out necessary information and select "Request anew SSL Certifcate'
  4. Click 'Save'
  5. See 'Internal Error'

Expected behavior
Adding and renewing certificates should work without error.

Operating System
Hetzner vServer running Debian 12

EDIT:
I can use curl https://acme-v02.api.letsencrypt.org/directory from my host system without problems, but the same command from within the containers returns the following error:
curl: (35) OpenSSL/3.0.11: error:0A000458:SSL routines::tlsv1 unrecognized name.

EDIT 2:
Creating a completely new container on the same host results in the same error.
Also I can't curl any HTTPS connection from within the container:

curl https://google.com
curl: (35) OpenSSL/3.0.11: error:0A000458:SSL routines::tlsv1 unrecognized name
@dataprolet dataprolet added the bug label Apr 23, 2024
@dataprolet dataprolet changed the title Can't create or renew certs becasue of SSLError(SSLError(1, '[SSL: TLSV1_UNRECOGNIZED_NAME] tlsv1 unrecognized name (_ssl.c:992)')) Can't create or renew certs because of SSLError(SSLError(1, '[SSL: TLSV1_UNRECOGNIZED_NAME] tlsv1 unrecognized name (_ssl.c:992)')). Apr 24, 2024
@dataprolet
Copy link
Author

Rebooting the VPS solved the issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant