tls_empty_cert

Diagnostic `nanook::admin::tls_empty_cert`

Summary

TLS certificate PEM contained no certificates

Help

regenerate the cert: an empty file or one without BEGIN CERTIFICATE headers

Details

When this fires

[admin].cert parsed successfully as PEM, but contained zero BEGIN CERTIFICATE blocks. The file is technically valid but useless: rustls cannot start a TLS server without at least one certificate.

What to check

  • Confirm the file is non-empty and contains a cert block:
grep -c 'BEGIN CERTIFICATE' "$cert"
  • If the count is zero, you likely pointed [admin].cert at the key file by mistake. Swap the two paths.