From 960f555790f426ca94f93dbbde591a992a8435bf Mon Sep 17 00:00:00 2001
From: iain MacDonnell <github@dseven.org>
Date: Mon, 30 Jun 2025 17:58:39 +0100
Subject: [PATCH] fix: ensure certStore is initialised when adding custom cert
 (#639)

Fixes: #612
---
 web_tls.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/web_tls.go b/web_tls.go
index 564f150..41f532e 100644
--- a/web_tls.go
+++ b/web_tls.go
@@ -108,6 +108,9 @@ func setTLSState(s TLSState) error {
 			isChanged = true
 		}
 		// parse pem to cert and key
+		if certStore == nil {
+			initCertStore()
+		}
 		err, _ := certStore.ValidateAndSaveCertificate(webSecureCustomCertificateName, s.Certificate, s.PrivateKey, true)
 		// warn doesn't matter as ... we don't know the hostname yet
 		if err != nil {