ROCKET_TLS={certs....could not be parsed #1124

New Issue

OVERLORD · 2026-02-04T23:58:17+03:00

OVERLORD commented

2026-02-04 23:58:17 +03:00

Originally created by @M4st3rITA on GitHub (Oct 2, 2021).

Subject of the issue

since yesterday, it is no longer possible to use externally created SSL certificates; the rest of the server is unaffected; I am using NGINX Proxy Manager

Deployment environment

vaultwarden version:
1.22.2

Install method:
Clients used:
Reverse proxy and version:
NGINX Proxy Manager v2.9.9
MySQL/MariaDB or PostgreSQL version:
Other relevant details:

Steps to reproduce

after starting up the docker, as usual, Vaultwarden is not reachable and a 502 bad gateway error is returned; the docker log reads as follows:
[2021-10-02 07:26:17.075][rocket::config::error][ERROR] environment variable ROCKET_TLS={certs="/ssl/npm-8/fullchain.pem",key="/ssl/npm-8/privkey.pem"} could not be parsed

Logger failed to initialize: attempted to set a logger after the logging system was already initialized

Expected behaviour

Actual behaviour

Troubleshooting data

Originally created by @M4st3rITA on GitHub (Oct 2, 2021).   ### Subject of the issue  since yesterday, it is no longer possible to use externally created SSL certificates; the rest of the server is unaffected; I am using NGINX Proxy Manager ### Deployment environment     * vaultwarden version: 1.22.2  * Install method: * Clients used:  * Reverse proxy and version:  NGINX Proxy Manager v2.9.9 * MySQL/MariaDB or PostgreSQL version:  * Other relevant details: ### Steps to reproduce  after starting up the docker, as usual, Vaultwarden is not reachable and a 502 bad gateway error is returned; the docker log reads as follows: [2021-10-02 07:26:17.075][rocket::config::error][ERROR] environment variable ROCKET_TLS={certs="/ssl/npm-8/fullchain.pem",key="/ssl/npm-8/privkey.pem"} could not be parsed Logger failed to initialize: attempted to set a logger after the logging system was already initialized ### Expected behaviour  ### Actual behaviour  ### Troubleshooting data

OVERLORD closed this issue

2026-02-04 23:58:18 +03:00

OVERLORD commented

2026-02-04 23:58:23 +03:00

@M4st3rITA commented on GitHub (Oct 2, 2021):

Compared to the past few days, nothing has been changed, no settings, no variables.

@M4st3rITA commented on GitHub (Oct 2, 2021): Compared to the past few days, nothing has been changed, no settings, no variables.

OVERLORD commented

2026-02-04 23:58:27 +03:00

@BlackDex commented on GitHub (Oct 2, 2021):

Is this cert a Lets Encrypt cert?
If so, it could have something to do with this: https://letsencrypt.org/2021/10/01/cert-chaining-help.html

@BlackDex commented on GitHub (Oct 2, 2021): Is this cert a Lets Encrypt cert? If so, it could have something to do with this: https://letsencrypt.org/2021/10/01/cert-chaining-help.html

OVERLORD commented

2026-02-04 23:58:35 +03:00

@M4st3rITA commented on GitHub (Oct 2, 2021):

Yes, definitely...I'm using Let's Encrypt certs.
How can I resolve this...?
I already tried to use the HTTP version of Vaultwarden without success because of the security policy of the browser

@M4st3rITA commented on GitHub (Oct 2, 2021): Yes, definitely...I'm using Let's Encrypt certs. How can I resolve this...? I already tried to use the HTTP version of Vaultwarden without success because of the security policy of the browser

OVERLORD commented

2026-02-04 23:58:38 +03:00

@BlackDex commented on GitHub (Oct 2, 2021):

Well if you use a reverse proxy, you could just have the reverse pricy offload the ssl. That might work.

Else i think you are using the Alpine image, you might want to switch to the Debian image.

@BlackDex commented on GitHub (Oct 2, 2021): Well if you use a reverse proxy, you could just have the reverse pricy offload the ssl. That might work. Else i think you are using the Alpine image, you might want to switch to the Debian image.

OVERLORD referenced this issue

2026-02-05 05:01:03 +03:00

[PR #1124] [MERGED] Fixing MsgPack headers type and support mobile SignalR #2861

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/vaultwarden#1124