Let's Encrypt / ACME #590

Closed
opened 2025-12-29 02:20:54 +01:00 by adam · 0 comments
Owner

Originally created by @unknown1818 on GitHub (Dec 8, 2023).

Hi,

Im trying to figure out how to configure ssl via acme.sh

acme.sh ssl generate

acme.sh --issue --dns dns_dynu -d domain.com
acme.sh --install-cert --domain domain.com \
--cert-file /home/admin/headscale/cert.pem \
--key-file /home/admin/headscale/key.pem \
--fullchain-file /home/admin/headscale/fullchain.pem

headscale config.yaml

tls_cert_path: "cert.pem"
tls_key_path: "key.pem"

but i got error when linux client try to connect

TLS handshake error from xxxx:18483: remote error: tls: bad certificate

Do i need SSL in Headscale? The Keys will be not visible in MiTM Attacks?

I found answer the SSL Chain is wrong
https://whatsmychaincert.com/

Originally created by @unknown1818 on GitHub (Dec 8, 2023). Hi, Im trying to figure out how to configure ssl via acme.sh acme.sh ssl generate ``` acme.sh --issue --dns dns_dynu -d domain.com acme.sh --install-cert --domain domain.com \ --cert-file /home/admin/headscale/cert.pem \ --key-file /home/admin/headscale/key.pem \ --fullchain-file /home/admin/headscale/fullchain.pem ``` headscale config.yaml ``` tls_cert_path: "cert.pem" tls_key_path: "key.pem" ``` but i got error when linux client try to connect `TLS handshake error from xxxx:18483: remote error: tls: bad certificate` Do i need SSL in Headscale? The Keys will be not visible in MiTM Attacks? I found answer the SSL Chain is wrong https://whatsmychaincert.com/
adam added the bug label 2025-12-29 02:20:54 +01:00
adam closed this issue 2025-12-29 02:20:54 +01:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/headscale#590