0

I got this error

'bind *:443' : unable to load SSL certificate from PEM file '/etc/ssl/private/https-cert.pem'

but the file location is correct.

$ sudo ls -l  /etc/ssl/private/https-cert.pem
-rwxrwxrwx 1 root root 1660 Aug 27 12:56 /etc/ssl/private/https-cert.pem

My PEM File

-----BEGIN CERTIFICATE-----
MIICCjCCAXMCFFVlEFkJOqOR70jCfoTjeYUjghgzMA0GCSqG....
-----END CERTIFICATE-----
-----BEGIN RSA PRIVATE KEY-----
MIICXgIBAAKBgQDPyhixafaLSWhGlvYqKYslqUp3j8cF2RHx....
-----END RSA PRIVATE KEY-----

I've also tried all the methods in this link: haproxy - unable to load SSL private key from PEM file, but still having problems.

Please help me, I'm desperate to fix it.

Jesaya Fernando Napitupulu
  • 59
  • 1
  • 8

1 Answers1

0

I am not realy into it, bit i might lead to the right path ... (had to deal with that too and got it fixed)

created pem with (please be smart enought to move your secrets away once it is running ;-) )

cd /etc/haproxy/
mkdir certs
cd certs/
openssl req -newkey rsa:2048 -nodes -x509 -days 365 -keyout haproxy2.key -out haproxy2.crt -subj "/CN=<yourServerName>"
cat haproxy2.crt haproxy2.key haproxy2.pem
cat haproxy2.crt haproxy2.key > haproxy2.pem

modified haproxy.cfg to look like... (path should be full path)

  bind :::8181 ssl crt /etc/haproxy/certs/haproxy2.pem

further might be good to check that haproxy is compiled with proper SSL by

haproxy -vv
Ma Ha
  • 17
  • 4