Re: [Pound Mailing List] SSL_CTX_use_PrivateKey_file error

On 25/02/2019 22:23, @lbutlr wrote:
> Trying to setup Pound for the first time under FreeBSD 11.2 with Let’s Encrypt certs.
>
> User    "www"
> group   "www"
>
> ListenHTTP
>          address <myMachinesExternalIP>
>          port 80
> end
> ListenHTTPS
>          address <myMachinesExternalIP>
>          port 443
>          Cert "/usr/local/etc/dehydrated/certs/fullchain.pem”
> End
>
> I have tried cert.pem and privkey.pem with the same error
>
> # service pound start
> Starting pound.
> starting...
> /usr/local/etc/pound.cfg line 11: SSL_CTX_use_PrivateKey_file failed - aborted
> /usr/local/etc/rc.d/pound: WARNING: failed to start pound
>
> Is this a read error? Do I need to create a copy of the certs exclusively for pound? Do I need to run it as root?
>
>
The file needed is the result of the command (run this whenever
you get a new cert):

cat privkey.pem fullchain.pem > keyandfullchain.pem

This is not specific to Let's encrypt (except the need to rerun
every 2 to 3 months).


Enjoy

Jakob
-- 
Jakob Bohm, CIO, Partner, WiseMo A/S.  https://www.wisemo.com
Transformervej 29, 2860 Søborg, Denmark.  Direct +45 31 13 16 10
This public discussion message is non-binding and may contain errors.
WiseMo - Remote Service Management for PCs, Phones and Embedded


--
To unsubscribe send an email with subject unsubscribe to [email protected]
Please contact [email protected] for questions.