IPTV Universe Premium IPTV
Paid Advertisement

UIONE ssl

leonidas

leonidas

Staff member
Offline
have UIONE trying make https port 443 ,,,,,,,,,,,,,,,, on app panel only http will work , ive installed ssl on all server but it still says no cert installed but on main it says its got good vallid date and when i pull m3u its https port 443 ,,,, but just cant get it to pull on a app using https dns
 
leonidas said:
have UIONE trying make https port 443 ,,,,,,,,,,,,,,,, on app panel only http will work , ive installed ssl on all server but it still says no cert installed but on main it says its got good vallid date and when i pull m3u its https port 443 ,,,, but just cant get it to pull on a app using https dns
Click to expand...
This is a notorious headache with XUI.ONE (UI.ONE) panels. The reason your main login works via HTTPS but your apps fail to pull using the HTTPS DNS—accompanied by that frustrating "no cert installed" warning on the app/server panel—usually comes down to how XUI.ONE handles certificates across different ports and load balancers.

Here is exactly what is happening and how to fix it:

Why It’s Happening​

When you install an SSL certificate on the server OS (like via Certbot/Let's Encrypt), it secures the web server's main port (usually for the admin panel). However, XUI.ONE uses independent ports for streaming and its app API.If you haven't explicitly linked those certificate files inside the XUI.ONE panel interface for each server/load balancer, the backend continues to serve the client/app traffic over plain HTTP, throwing a certificate error when an app tries to connect via an https:// DNS.

Step-by-Step Fix​

1. Define the SSL Paths in the XUI.ONE UI​

You must tell the panel exactly where your SSL certificate and private key live so it can bind them to your streaming/app API ports.

  1. Log into your Main Admin Panel.
  2. Go to Servers (or Load Balancers if you have external ones).
  3. Click Edit on your main server (and repeat this for any load balancers/edge servers).
  4. Look for the SSL Settings section. You need to fill in the absolute local server paths for your certificate files. For standard Let's Encrypt installations, they look like this:
    • SSL Certificate Path: /etc/letsencrypt/live/yourdomain.com/fullchain.pem
    • SSL Key Path: /etc/letsencrypt/live/yourdomain.com/privkey.pem
  5. Click Save / Update.
⚠️ Important Permission Note: XUI.ONE runs under its own user system. If the panel still says "no cert installed" after saving, it means the panel doesn't have root permission to read the /etc/letsencrypt/ directory. You may need to copy your fullchain.pem and privkey.pem to a directory XUI can access (like /home/xui/) and point the panel to that path instead.
Click to expand...

2. Configure Your Client/App Port to 443​

If you want your apps to pull via standard HTTPS without having to append a weird port number at the end (e.g., https://dns.com:25500), you need to tell the panel to use port 443 for client traffic.

  1. Navigate to Settings > Panel Settings (or System Settings depending on your exact version).
  2. Find the Client Port or App Port configuration.
  3. If it is currently set to an HTTP port (like 80 or 8080), change it to 443.
  4. Double-check that your server's hardware firewall or cloud security groups (UFW, AWS, DigitalOcean, etc.) have TCP Port 443 fully open.

3. Generate a Test M3U / Connection String​

Once you save the settings and the status updates to show a valid certificate in the panel:

  1. Go to a test user account and grab the newly generated M3U or XC API credentials.
  2. Ensure the string structure looks like: https://yourdns.com/get.php?... (Notice the lack of an explicit port, since browsers and applications default to 443 automatically when they see https://).
  3. Try loading this link in a player like TiviMate or IPTV Smarters using the secure DNS.

Alternative: The Cloudflare / Reverse Proxy Route​

If you don't want to mess with local certificate permissions on the Linux backend, a highly popular alternative among providers is to use a reverse proxy or Cloudflare:

  • Keep your XUI.ONE app panel listening on regular HTTP (Port 80 or 8080).
  • Route your DNS through Cloudflare with the SSL/TLS mode set to Flexible.
  • This allows the IPTV apps to connect safely to Cloudflare using HTTPS on port 443, while Cloudflare talks to your backend panel over plain HTTP in the background, bypassing the local certificate errors completely.
 
issue is i dont see this

  1. Click Edit on your main server (and repeat this for any load balancers/edge servers).
  2. Look for the SSL Settings section. You need to fill in the absolute local server paths for your certificate files. For standard Let's Encrypt installations, they look like this:
 
This issue sounds like it could be related to a mismatch between how SSL is installed and how the app panel is validating the certificate on port 443. I notice that even though the main server shows a valid certificate, the application still reports “no cert installed,” which often happens when HTTPS traffic isn’t correctly bound to the service or when DNS/port routing isn’t fully aligned.
Basket Random
 
here is what i have learned ,,,,,, issue is cant stream on same port panel is on ,,,,, even though it says no cert is installed it is still working by decrypting stream info ,,,,, BUT when you log into your xuione panel it is not https ,,,,,, so if was way to change port for panel llike on old Xtreme then we could have https stream and panel..............
 
question for anyone ,,,,,,,,,,,,,,,,,,,,,,,, anyone paid whoever is on xui one website for install ,,,,, i got on there and hit their telegram and they said 100 bucks they install ,,,,,,, anyone know if this is legit
 
leonidas said:
question for anyone ,,,,,,,,,,,,,,,,,,,,,,,, anyone paid whoever is on xui one website for install ,,,,, i got on there and hit their telegram and they said 100 bucks they install ,,,,,,, anyone know if this is legit
Click to expand...
Full disclosure: I know absolutely nothing about this, but then there is this:


Whether this is "legitimate" depends heavily on how you reached them and who you are actually talking to.

Here is the breakdown of what is likely going on:

1. Is $100 a normal price?​

Yes, $100 is a standard going rate in the IPTV community for a server admin or third-party tech to manually install, configure, and secure an XUI.ONE panel (including fixing tricky SSL port binding issues like the ones discussed in this forum thread). It takes a bit of command-line work, so people charge for their labor.

2. The Danger of Telegram Impersonators​

The biggest risk with Telegram is impersonation scams. Scammers frequently lurk on official websites, forums, and public groups. They copy the exact profile pictures, names, and bios of official developers or support staff, changing only a single hidden character in the username (e.g., @XUI_Support vs @XUI__Support).

If you clicked a public link or if a "support agent" messaged you directly after you posted a question, it is highly likely a scammer looking to take your $100 and ghost you—or worse, install a backdoor on your server.

3. Safety Check: How to Verify​

  • Check the Source: Did you get the Telegram link from inside a secure, logged-in user dashboard on the official XUI.ONE billing site? If yes, it's more likely to be an official tech offering paid deployment. If you got it from a public landing page or a google search, exercise extreme caution.
  • Official vs. Third-Party: The actual developers of XUI.ONE sell licenses; they rarely do hands-on server installation for individual users via Telegram unless it's a managed service add-on explicitly itemized in your official invoice.
  • Credentials Warning: To install the panel, you will have to give this person Root SSH access to your server. If they are not completely trustworthy, they can steal your data, use your server for malicious activity, or lock you out entirely.

What you should do instead​

Before handing over $100 and full root access to your server, consider attempting it yourself or using trusted community tools. There are automated containerized setups like the Itz-Agasta/xui.one-installer on GitHub and step-by-step video tutorials that can walk you through an Ubuntu installation for free.
 
You must log in or register to reply here.
Back
Top