Welcome! Log In Create A New Profile

Advanced

loading ssl_certificate from a variable

June 23, 2021 09:29AM
Hello,

I'm trying to load the cert/key from a variable, based on the documentation here:

https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_certificate

Using this configuration:

<snip>
server {
listen 19099 ssl;

set $mycert "-----BEGIN CERTIFICATE----- ...";
set $mypkey "-----BEGIN PRIVATE KEY----- ...";
ssl_certificate "data:$mycert";
ssl_certificate_key "data:$mypkey";

<snip>

When I connect to port 19099, nginx reports this error (v 1.19.7)

[error] 16408#0: *1 cannot load certificate "data:": PEM_read_bio_X509_AUX() failed (SSL: error:0909006C:PEM routines:get_name:no start line:Expecting: TRUSTED CERTIFICATE) while SSL handshaking, client: 127.0.0.1, server: 0.0.0.0:19099

I realize that this might not be a great idea, but I don't understand why it's not working. Can someone please explain what's wrong with the config?

Thanks,
Dave
Subject Author Posted

loading ssl_certificate from a variable

daveb June 23, 2021 09:29AM

Re: loading ssl_certificate from a variable

Sergey Kandaurov June 23, 2021 10:24AM

Re: loading ssl_certificate from a variable

daveb June 23, 2021 03:00PM

Re: loading ssl_certificate from a variable

Sergey A. Osokin June 23, 2021 10:26AM

Re: loading ssl_certificate from a variable

daveb June 23, 2021 03:05PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 303
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready