nats-io/nats-server · error

cert_store not compatible with current operating system

Error message

cert_store not compatible with current operating system

What it means

Returned when the configured cert_store type is either unknown or not valid for runtime.GOOS (checked against StoreOSMap), e.g. a Windows certificate store configured on Linux, or the stub TLSConfig path on an unsupported platform. The cert_store type string is the input at fault.

Source

Thrown at server/certstore/errors.go:78

	ErrConflictCertFileAndStore = errors.New("'cert_file' and 'cert_store' may not both be configured")

	// ErrBadCertStoreField represents malformed cert_store option
	ErrBadCertStoreField = errors.New("expected 'cert_store' to be a valid non-empty string")

	// ErrBadCertMatchByField represents malformed cert_match_by option
	ErrBadCertMatchByField = errors.New("expected 'cert_match_by' to be a valid non-empty string")

	// ErrBadCertMatchField represents malformed cert_match option
	ErrBadCertMatchField = errors.New("expected 'cert_match' to be a valid non-empty string")

	// ErrBadCaCertMatchField represents malformed cert_match option
	ErrBadCaCertMatchField = errors.New("expected 'ca_certs_match' to be a valid non-empty string array")

	// ErrBadCertMatchSkipInvalidField represents malformed cert_match_skip_invalid option
	ErrBadCertMatchSkipInvalidField = errors.New("expected 'cert_match_skip_invalid' to be a boolean")

	// ErrOSNotCompatCertStore represents cert_store passed that exists but is not valid on current OS
	ErrOSNotCompatCertStore = errors.New("cert_store not compatible with current operating system")
)

View on GitHub (pinned to 3a66a489d2)

Solutions

  1. Use a cert store type supported on this OS (check StoreOSMap; Windows stores only work on Windows)
  2. Fall back to cert_file/cert_key file-based TLS on unsupported platforms
  3. Fix typos in the cert_store string
Defensive patterns

Strategy: validation

When it happens

Trigger: Thrown at server/certstore/errors.go:78 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of nats-io/nats-server@3a66a489d2 (2026-09-02). Data as JSON: /api/errors/b603b12625e3fa3d. Report an issue: GitHub.