On 25/02/2019 22:23, @lbutlr wrote:
Trying to setup Pound for the first time under FreeBSD 11.2 with Let’s Encrypt 
certs.

User    "www"
group   "www"

ListenHTTP
         address <myMachinesExternalIP>
         port 80
end
ListenHTTPS
         address <myMachinesExternalIP>
         port 443
         Cert "/usr/local/etc/dehydrated/certs/fullchain.pem”
End

I have tried cert.pem and privkey.pem with the same error

# service pound start
Starting pound.
starting...
/usr/local/etc/pound.cfg line 11: SSL_CTX_use_PrivateKey_file failed - aborted
/usr/local/etc/rc.d/pound: WARNING: failed to start pound

Is this a read error? Do I need to create a copy of the certs exclusively for 
pound? Do I need to run it as root?


The file needed is the result of the command (run this whenever
you get a new cert):

cat privkey.pem fullchain.pem > keyandfullchain.pem

This is not specific to Let's encrypt (except the need to rerun
every 2 to 3 months).


Enjoy

Jakob
--
Jakob Bohm, CIO, Partner, WiseMo A/S.  https://www.wisemo.com
Transformervej 29, 2860 Søborg, Denmark.  Direct +45 31 13 16 10
This public discussion message is non-binding and may contain errors.
WiseMo - Remote Service Management for PCs, Phones and Embedded


--
To unsubscribe send an email with subject unsubscribe to pound@apsis.ch.
Please contact ro...@apsis.ch for questions.

Reply via email to