ssl

  1. T

    [SOLVED] PVEProxy failing to start after trying to join cluster

    PVE Version: 8.2.4 Hi, I have setup 3 Proxmox PVE servers (all with identical hardware) running PVE 8.2.4 After setting them up (fresh installs, nothing else done other than check for updates) I created Linux VLAN on each server in the 192.168.*.* address space - these networks all came up...
  2. O

    Acme account register

    Hello everyone, i'm facing an issue when i try register a "acme account" using Google CA as directory. root@antispam:~# pmgconfig acme account register certificados-de-seguranca xxxxxxxx@domain.com Directory endpoints: 0) Let's Encrypt V2 (https://acme-v02.api.letsencrypt.org/directory) 1)...
  3. E

    How can I correctly assign SSL certificates ( let`s Encrypt) to the interfaces for API and TLS?

    I have set up and assigned certificates with Let`y Encrypt for both interfaces TLS (mail.mydomain.com) and API (pmg.mydomain.com). The hostname is pmg and fqdn-name ist pmg.mydomain.com. Access for the web interface is good because hostname and fqd-name are correctly mapped in the certificate...
  4. D

    Conflicting Cloudflare tunnel hostnames

    I have a pretty basic Proxmox setup. I am still learning how everything works. I have set up a Cloudflare tunnel to the Proxmox and published a subdomain through it to access it from the internet. I have set up a container which runs the Cloudflared app that makes the connection of the tunnel...
  5. I

    Error 401 - No Ticket when running behind nginx in container

    I have proxmox running a container that runs nginx. When I try to connect to proxmox web-ui through the nginx redirect, I get a "401- no ticket" error a bit after logging in. I'm pretty new to dealing with ssl/tls, but it seems really confusing (both ssl and the error). I've found...
  6. E

    SCEP / NDIS Support ?

    Hello, unfortunately I have not found anything here in the forum or in the documentation that the service SCEP (Microsoft NDIS) is supported anywhere. My goal is to renew the SSL web certificate. Are there any plans to include this in future versions? or is this already possible and I have...
  7. C

    Built-in SSL certificate renewal?

    I have a pve-ssl.pem that expires on May 24th (the matching pve-root-ca.pem does not expire until May 2032), the default-on-creation /OU=PVE Cluster Node/O=Proxmox Virtual Environment/ certificate. It is not in the ACME section of the certificates area of my Proxmox node. Is this going to...
  8. S

    [TUTORIAL] Clean Install Proxmox VE 8.1 - How I fixed: Webinterface not working (failed to use local certificate chain)

    While installing my first Proxmox VE hosts I chose to use the latest version on a Dell Wyse 5070 host. The installation process went completely fine. As hostname I provided "proxmoxtest". After removing the install medium and first start I tried to connect via https and port 8006 but nothing...
  9. P

    [SOLVED] PMG Cluster - ACME Sync

    Hi Forum, i have setup a 2 node cluster configuration to keep the configuration in sync. As it seems, the added acme account from node1 was copied to node2. I was able to request a certificate for node1 without a problem, but on node2 i experience this behaviour: i can only select the...
  10. T

    [SOLVED] Create cluster problem - possibly SSL related

    Hi All I’ve spent all week trying to get clustering working but I’m having problems. I’m now at the point were I need to reach out to the community. Steps: I install Proxmox 8.0.3 to two separate machines. I edit the network config, delete the bridge and leave a single network interface...
  11. T

    Hertzner Nginx Proxy Manager

    Hello everyone! I am new to proxmox having a problem with nginx proxy manager, I have a VM for DHCP as well as a VM with docker on it. My proxy manager sits on my Docker VM which I started with portainer, everything works as long as I use the IP. I'm trying to fix so I can get my domain names...
  12. T

    454 4.7.0 TLS not available due to local problem

    Transcript of session follows. Out: 220 mail.dmz.se dmz.se In: EHLO mta-70-5-198.update.strava.com.sparkpostmail.com Out: 250-mail.dmz.se Out: 250-PIPELINING Out: 250-SIZE 10485760 Out: 250-VRFY Out: 250-ETRN Out: 250-STARTTLS Out: 250-ENHANCEDSTATUSCODES Out: 250-8BITMIME Out: 250-SMTPUTF8...
  13. M

    PVE ACME client generating bad CSR for IP addresses

    I am using an ACME server other than Let's Encrypt, and I observe PVE is having issues creating the CSR for IP addresses. Depending of the order of the domains (the actual domain and the IP) to be verified I add in the GUI to be verified it creates a bad CSR that is not accepted by the ACME...
  14. T

    Is Smart Host TLS SSL supported?

    Today I am using Mail Gateway for all incoming email... to my Exchange Server. For ouotgoing smtp-mail I have an smart host via TLS SSL that I have to use. Can I use Proxmox Mail Gateway as my "Smarthost"? What version of TLS is this? Is it for outgoing, incoming or both? The SSL-certificate...
  15. A

    SSL Connection error, please offer suggestions

    So, I was testing out some certificate stuff and might have accidentally borked my Proxmox. Usually, I would just reinstall it but this time it's different. I'm getting the following errors with curl: curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL and wget: GnuTLS: The TLS connection was...
  16. C

    SPICE TLS certificates

    Im using my own TLS certificate in PVE WebUI. But how can I setup How can I setup my custom TLS certificates in the SPICE protocol used by Proxmox PVE?
  17. M

    ACME client wrongly treats IP address as DNS name in CSR generation

    I'm using PVE's ACME client to get a certiifcate from my ACME server. I added two names: "domain.com" and "172.16.0.1" in the control panel. The certificate I finally got has its Subject Alternative Name = "DNS:domain.com,DNS:172.16.0.1". It's invalid. It should be...
  18. D

    Disable SSL certificate verification

    Hello, I want to disable SSL certificate verification on my proxmox. The thing is I'm working on developing a script with API and I'm unable to access it because proxmox uses https and unfortunately my software has only access for http. Another thing I want to add is using postman I am able to...
  19. C

    SSL certificate - New files

    Hi. I have my own certificate, and has copiet the files to ProxMox, and it workes fine. However, now i have updated the files .. New certificate files. But it seems like ProxMox is stock on the old files. Do i need to restart something? - And if yes, what?
  20. M

    Probleme Zertifizierung von Proxmox

    Hallo Leute, ich habe aktuell Proxmox neu installiert und gerade meine Festplatten sind richtig gemountet. Danke nochmals an @Dunuin Habe jetzt ein anliegen bezüglich der Zertifizierung. Ich habe ein ACME Account eingerichtet in Proxmox als Default "Let's Encrypt V2". Da steht auch das es...

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!