From c570c2dd57cb68698c0b56b5d032d5526010e869 Mon Sep 17 00:00:00 2001
From: iain MacDonnell <github@dseven.org>
Date: Mon, 23 Jun 2025 11:09:23 +0000
Subject: [PATCH] fix: ensure certStore is initialised when adding custom cert

Fixes: #612
---
 web_tls.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/web_tls.go b/web_tls.go
index 564f150..41f532e 100644
--- a/web_tls.go
+++ b/web_tls.go
@@ -108,6 +108,9 @@ func setTLSState(s TLSState) error {
 			isChanged = true
 		}
 		// parse pem to cert and key
+		if certStore == nil {
+			initCertStore()
+		}
 		err, _ := certStore.ValidateAndSaveCertificate(webSecureCustomCertificateName, s.Certificate, s.PrivateKey, true)
 		// warn doesn't matter as ... we don't know the hostname yet
 		if err != nil {