Error 400 Host does not match SNI when running PowerChute behind a Reverse Proxy

[doolbneerg]

I have been trying to put my PowerChute Serial Shutdown server behind a reverse proxy I have so that I will get a valid SSL certificate. However, I am getting “HTTP ERROR 400 Host does not match SNI” when I attempt to connect. In the log file it is “[qtp477405852-69] ERROR - [http.ValidationHandler.()] handle() - Request host header contains invalid host:”. I tried updating the certificate to be a validate certificate for the DNS entry I am providing, but it seems like PowerChute might be doing its own logic here instead of using the metadata associated with the certificate stored in the keystore.

Is there a way to configure what host name values PowerChute will find acceptable?

[totoli]

I have the same experience.
Connect to nginxproxy as a subdomain and apply TLS and access it,
You will be redirected to a "Host does not match SNI" error page.

[JereckNET]

Error still happening with PCSS new version 1.2.0.301

[ekengren]

We’re having the same problem with WebUI not working behind our reverse proxy. Does anyone know what the last working version is?

[totoli]

I have found the solution.

Here is the nginx configuration.

The IP address 192.168.1.2 is the server where PowerChute is installed.

(If it is the same server as NPM, use 127.0.0.1 instead.)

location / {
    proxy_pass https://192.168.1.2:6547;
    proxy_ssl_server_name off;
    proxy_ssl_verify off;
}