[Enhancement]: Allow self-issued certs for OpenID Provider #2722

Closed
opened 2026-04-25 00:09:55 +02:00 by adam · 3 comments
Owner

Originally created by @nekrich on GitHub (Apr 23, 2025).

Type of Enhancement

Server Backend

Describe the Feature/Enhancement

Allow to connect to OpenID Provider with self-signed certs.

Why would this be helpful?

Not everyone needs a real SSL certificate for a home setup. Having an option to trust a self-signed root CA PEM file would be awesome.

Future Implementation (Screenshot)

There should be an option in the OpenID settings to specify a Root CA to trust

Image

Audiobookshelf Server Version

v2.20.0

Current Implementation (Screenshot)

Currently, it shows error Error in callback in the UI when trying to login.

Console logs from Docker:

[2025-04-23 09:10:18.382] DEBUG: [Auth] OIDC redirect_uri=https://audiobookshelf.home.arpa/auth/openid/callback


[2025-04-23 09:10:18.472] ERROR: "[Auth] Error in openid callback - Error: unable to get local issuer certificate"

Error when trying to do Auto-populate in Settings:
Image

Originally created by @nekrich on GitHub (Apr 23, 2025). ### Type of Enhancement Server Backend ### Describe the Feature/Enhancement Allow to connect to OpenID Provider with self-signed certs. ### Why would this be helpful? Not everyone needs a real SSL certificate for a home setup. Having an option to trust a self-signed root CA PEM file would be awesome. ### Future Implementation (Screenshot) There should be an option in the OpenID settings to specify a Root CA to trust <img width="850" alt="Image" src="https://github.com/user-attachments/assets/5c6272ee-a39b-4d36-9cd0-1be6af29ff1a" /> ### Audiobookshelf Server Version v2.20.0 ### Current Implementation (Screenshot) Currently, it shows error `Error in callback` in the UI when trying to login. Console logs from Docker: ``` [2025-04-23 09:10:18.382] DEBUG: [Auth] OIDC redirect_uri=https://audiobookshelf.home.arpa/auth/openid/callback [2025-04-23 09:10:18.472] ERROR: "[Auth] Error in openid callback - Error: unable to get local issuer certificate" ``` Error when trying to do Auto-populate in Settings: <img width="616" alt="Image" src="https://github.com/user-attachments/assets/3ad9f060-bf68-475f-9963-82e44f848fef" />
adam added the enhancement label 2026-04-25 00:09:55 +02:00
adam closed this issue 2026-04-25 00:09:55 +02:00
Author
Owner

@nekrich commented on GitHub (Apr 23, 2025):

Nevermind. Found NODE_EXTRA_CA_CERTS env var that helped me a lot

@nekrich commented on GitHub (Apr 23, 2025): Nevermind. Found NODE_EXTRA_CA_CERTS env var that helped me a lot
Author
Owner

@SylvainMT commented on GitHub (Apr 5, 2026):

Sorry to play Thread Necromancer :(

@nekrich How did you use the environment variable to fix the issue? I've installed AudioBookShelf via Debian Package, not Docker.

Thanks.

@SylvainMT commented on GitHub (Apr 5, 2026): Sorry to play Thread Necromancer :( @nekrich How did you use the environment variable to fix the issue? I've installed AudioBookShelf via Debian Package, not Docker. Thanks.
Author
Owner

@SylvainMT commented on GitHub (Apr 5, 2026):

NVM, fixed it... I had a file permission issue.

@SylvainMT commented on GitHub (Apr 5, 2026): NVM, fixed it... I had a file permission issue.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/audiobookshelf#2722