dunglas / vulcain

Fast and idiomatic client-driven REST APIs.
https://vulcain.rocks
GNU Affero General Public License v3.0
3.5k stars 104 forks source link

tls: failed to parse private key #13

Open dmouse opened 4 years ago

dmouse commented 4 years ago

After to clone and go build I ran:

mkdir tls openssl req -x509 -newkey rsa:4096 -keyout tls/key.pem -out tls/cert.pem -days 365 In this command I added the PEM pass phrase

$ docker run -it -v (pwd)/:/app golang:1.13 bash
root@9e73b18f1a60:/app# go build
root@9e73b18f1a60:/app# UPSTREAM='http://172.18.0.2' ADDR=':3000' KEY_FILE='tls/key.pem' CERT_FILE='tls/cert.pem' ./vulcain
INFO[0000] Vulcain started                               addr=":3000" protocol=https
FATA[0000] tls: failed to parse private key

I think is because vulcain does not know the phrase key

dunglas commented 4 years ago

Yes passphrases aren't supported yet!

laurent35240 commented 4 years ago

Hi,

I found one post about this issue https://medium.com/@prateeknischal25/using-encrypted-private-keys-with-golang-server-379919955854

If I have time I will try to backport their solution in vulcain.

Laurent

saurabhgupta11 commented 4 years ago

Hi,

if you are making self signed certificates for a demo project, then you can use -nodes option while making CA certificate then it won't throw error:

1. generate CA's private key and self-signed certificate

openssl req -x509 -newkey rsa:4096 -days 365 -nodes -keyout ca-key.pem -out ca-cert.pem