[FATAL] [dtls.c:janus_dtls_load_keys:331] Error opening certificate file

[mazbeh]

Hello every body, maybe its an old topic but since i am new to janus (docker version) i would please you to give me tipps, thanks !

I will install janus under the docker version. When i start the docker containers ( sudo docker-compose up ) , i get the error : [FATAL] [dtls.c:janus_dtls_load_keys:331] Error opening certificate file

I have configured the certificates in the janus.jcfg as follow:

but RSA generation is still supported if you set 'rsa_private_key' to 'true'.

certificates: { cert_pem = "/srv/certs/fullchain.pem" cert_key = "/srv/certs/privatekey.key"

cert_pwd = "secretpassphrase"

   dtls_accept_selfsigned = false
   #dtls_ciphers = "DEFAULT:!NULL:!aNULL:!SHA256:!SHA384:!aECDH:!AESGCM+AES256:!aPSK"
   rsa_private_key = true

} . the Turn container can access and read the certificates but the janus container not. the fullchain.pem contains the CA and the server Certificates.

I would appreciate it, if you could give some tipps, thanks !

[lminiero]

fopen is failing, so Janus can't access the file for some reason. Change line 331 to something like this:

JANUS_LOG(LOG_FATAL, "Error opening certificate file (%d, %s)\n", errno, g_strerror(errno));

which should print the exact cause.

[mazbeh]

first of thanks alot for the replying ! how should i exactly add it? i just made a copy paste of that in the janus.jcfg but now i get a syntax error.

[lminiero]

I was talking of line 331 of dtls.c (since that's the line mentioned in the log you shared), not the config file... Modify that line as I said, recompile, and try again.

[mazbeh]

sorry, that i may understand you false. I have only these files: janus.jcfg janus.plugin.audiobridge.jcfg janus.plugin.videoroom.jcfg turnserver.conf

and a docker-compose file. The line 331 is as follows:

ice_enforce_list = "eth0,192.168.0.1"

i dont have any dtls.c file.

[lminiero]

You DO have a dtls.c file, it's part of the Janus sources you compiled... :man_facepalming:

[lminiero]

I added it to the code myself. Just pull the latest master and try again.

[mazbeh]

ok, thanks. I will do that and let you know.

[lminiero]

Any update?

[mazbeh]

Hi, sorry, i was some days in vacation. I have configured the Certificates directly in the docker-compose file and now every thing works fine, thanks !

[lminiero]

Ack, closing then.

[mazbeh]

joo :))