Per bug#319529. Please add SSL_CERT_MANDATORY=1 before inherit of ssl-cert, as it is not optional at this package. Thanks!
Fixed in nufw-2.2.22