On Tue, Nov 14, 2023 at 02:21:44PM +0100, Christoph Kukulies wrote:
> Thanks.
>
> I did a fresh
>
> acme.sh --issue -d domain ... --keylength 2048
> with prior revoking the certificates since I was a bit unsure what the
> partially exposing of my provate key was concerned - thanks, Shawn.
>
>
William Lallemand :
>>>>
>>>> acme@mail:~$ echo "show ssl cert /etc/haproxy/certs/mydomain.org.pem" |
>>>> socat /var/run/haproxy/admin.sock -
>>>> Can't display the certificate: Not found or the certificate is a bundle!
>>>>
On Mon, Nov 13, 2023 at 10:46:08AM +0100, Christoph Kukulies wrote:
> > Am 13.11.2023 um 10:09 schrieb William Lallemand :
> >>
> >> acme@mail:~$ echo "show ssl cert /etc/haproxy/certs/mydomain.org.pem" |
> >> socat /var/run/haproxy/admin.sock -
>
On 11/13/23 02:09, William Lallemand wrote:
"show ssl cert" shows the certificate in the haproxy memory, and not on
the filesystem. Start by doing "show ssl cert" without any argument to
see the list of certificates whcih were loaded by haproxy.
That makes complete sense now! I saw an error on
s://github.com/haproxy/wiki/wiki/Letsencrypt-integration-with-HAProxy-and-acme.sh
>>
>> Once I get to the point to test the certificate, I'm getting:
>>
>> acme@mail:~$ echo "show ssl cert /etc/haproxy/certs/mydomain.org.pem" |
>> socat /var/run/haproxy/adm
> Once I get to the point to test the certificate, I'm getting:
>
> acme@mail:~$ echo "show ssl cert /etc/haproxy/certs/mydomain.org.pem" | socat
> /var/run/haproxy/admin.sock -
> Can't display the certificate: Not found or the certificate is a bundle!
>
>
On 11/12/2023 02:37, Christoph Kukulies wrote:
what the inadvertently publicly dislosing my private key is concerned:
I obfuscated the excerpts of my .pem file by putting XX into the
string. Destroying part of it would suffice, I think.
Up to you. I wouldn't trust it personally.
What t
Hi Shawn,
what the inadvertently publicly dislosing my private key is concerned: I
obfuscated the excerpts of my .pem file by putting XX into the string.
Destroying part of it would suffice, I think.
What the actual issue is concerned: It looks like haproxy (2.8) can't cope
with the type
On 11/11/2023 02:26, Christoph Kukulies wrote:
The file is definitely there and the command works an a different file,
when I apply it to the previously used certificate fullchain.pem.
The file which is not working, has the following structure:
-BEGIN EC PRIVATE KEY-
I think you have
"show ssl cert /etc/haproxy/certs/mydomain.org.pem" | socat
/var/run/haproxy/admin.sock -
Can't display the certificate: Not found or the certificate is a bundle!
The file is definitely there and the command works an a different file, when I
apply it to the previously used certi
10 matches
Mail list logo
