Upgraded from TrueNAS 25.04.2.6 to 25.10.1, the Certificates section becomes malfunction. In 25.04.2.6: [Screenshot 2025-12-21 at 02.44.15] In 25.10.1: [Screenshot 2025-12-21 at 02.37.44] Import certificate using Web UI works but Older certificates cannot be deleted. Updating with deploy_tru…

FWIW, I use a split horizon DNS for my homelab. Cloudflare resolves my names for my domain when I’m on the public internet but on my private subnet I run an unbound DNS server on my opnsense router that resolves names for my domain on my LAN. I then use a wildcard cert from lets encrypt which I …

I understand. It’s pity. The worst part is, there is no way to remove the problematic certificates unless I revert back to older version of boot partitions. Even worse, there is an instance that I switched from jailmaker to docker when I upgraded from 24.10 to 25.10 and I have deleted the jail part…

You’ve tried deleting the old certs using the web ui? I guess you probably see the same error?

I’d like to delete the old certs from UI or otherwise. As you can see, the module cannot even show me anything. Deleting from UI is impossible. Nor did the script deploy_truenas succeed. :face_with_spiral_eyes:

[image] fungshui: I hope this bug will be fixed soon. Did you report it? If you didn’t the chance of them doing anything about it are slim at best. Even then I have my doubts due to the nature of this issue. Perhaps you can find a way to handle this using the CLI or API.

The validation error is from Pydantic saying the String should have at most 1024 characters so it’s probably the base model config enforcing a character limit of 1024 on the cert DN. Doubt CLI/API will work well. I haven’t been following too closely recently but at a quick look, looks like this was …

[image] Yup, it was as I thought. certificate, privatekey, CSR, chain_list are all type LongString, but DN is just str. Which picks up from the BaseModel: class BaseModel(PydanticBaseModel, metaclass=_BaseModelMetaclass): model_config = ConfigDict( extra="forbid", strict=Tru…

Yeah, You are right. I have forgotten that.:winking_face_with_tongue:

I have tried to reduce the SAN to just the following and yet the TrueNAS 25.10.1 still fails to process the cert for showing in the WebUI. DNS:ng.home,DNS:*.ng.home,IP Address:10.27.0.40,IP Address:10.27.0.50,IP Address:10.27.0.61,IP Address:10.27.0.194,IP Address:10.27.0.202

Thank you pal. You are brilliant!:smiling_face_with_three_hearts:

Certificates: Cannot retrieve response

TrueNAS General

essinghigh December 23, 2025, 7:21pm 12

My PR to fix this has been merged. Should be fixed in 25.10.2 once available.

HOWTO: Fix Virtual Machines: Cannot Retrieve Response in 25.04.2

Topic		Replies	Views
Certificate created at installation has expired TrueNAS General	22	312	May 20, 2026
ACME challenge - TXT string? TrueNAS General SCALE , Networking	3	738	January 18, 2025
Certificate setup issue using UI TrueNAS General SSL	30	602	July 8, 2025
Let's Encrypt with FreeNAS 11.1 and later Resources CORE , SCALE , TLS	29	1768	October 27, 2025
Yet another SSL LetsEncrypt question TrueNAS General SSL	13	396	October 21, 2025

Certificates: Cannot retrieve response

Related topics