Fresh Install: NGINX SSL issues

Technical assistance
1
  • Used Zammad version: Newest
  • Used Zammad installation type: Package
  • Operating system: Debian 12
  • Browser + version: Brave Newest

Expected behavior:

Restart the NGINX as specified in the documentation. (Configure the web server).

Actual behavior:

The error appears:
Mar 03 20:59:35 ticket-01 nginx[10493]: 2025/03/03 20:59:35 [emerg] 10493#10493: cannot load certificate “/etc/ssl/certs/example.com.pem”: BIO_new_file() f>
Mar 03 20:59:35 ticket-01 systemd[1]: nginx.service: Control process exited, code=exited, status=1/FAILURE

An attempt was made to request the certificate via Certbot, but NGINX was not found. A self-signed certificate should then be used, but this does not work either.

Steps to reproduce the behavior:

The installation was done 3 times at different times on fresh VMs without any change in the result, is it just me or is this known?

2

It‘s you. The configure webserver documentation has a step by step list.

3

Thank you for your, albeit not very helpful, answer,

Which part have I forgotten?

Because after customizing the zammad.conf file, you are supposed to get an SSL certificate. From there the instructions no longer work.

Neither with self-signed nor with letsencrypt.

With letsencrypt the error appears that nginx cannot be found, but it is clearly visible when I call up the IP of the server in the browser.

4

You’re very welcome.

You missed the part where you replace the zammad.conf with the zammad_ssl.conf (with the same name though) and then adjust said file to match your paths and certificate names.

The error message of your nginx shows that you didn’t do this (or did not to it correctly / entirely).

Mar 03 20:59:35 ticket-01 nginx[10493]: 2025/03/03 20:59:35 [emerg] 10493#10493: cannot load certificate “/etc/ssl/certs/example.com.pem”: BIO_new_file() f>

Now, is that good enough for you?

1 Like
5

Yes, thank you very much, I can do something with that.

You mean this command:
cp /opt/zammad/contrib/nginx/zammad_ssl.conf /etc/nginx/sites-available/zammad.conf

I have executed this. But as I wrote in my last message, I can’t use the Certbot at all and therefore I can’t customize any paths.

Then I tried it with self signed certificates, but even if they are referenced in the file. I get this error when reloading NGINX.