Hi, growthbook proxy can use certificates generate...
# ask-questions
l
Hi, growthbook proxy can use certificates generated by lets encrypt like fullchain.pem and privkey.pem? I get this error: "Error: error0480006CPEM routines::no start line"
h
If you're putting your certs into your env variables, its likely the newline character. You can get around this via something like:
Copy code
HTTPS_KEY="-----BEGIN RSA PRIVATE KEY-----\nh13ufh13uhf91uhefu0h1ef.......\n-----END DSA PRIVATE KEY---"
Similar fix for
HTTPS_CERT
l
I am using them like this: -e "HTTPS_CERT=/certs/server.crt" \ -e "HTTPS_KEY=/certs/key.pem" \ -e "CACHE_ENGINE=memory" \ -e "NODE_TLS_REJECT_UNAUTHORIZED=0" \ -e "VERBOSE_DEBUGGING=1" \ -v "/GB/certsro" \
I put them in the format you recommended but same error? Do you have a working gbproxy configuration for docker?
also what is the required certificate format: fullchain and private key or apache style?
@happy-autumn-40938 I understand from Graham you worked on this, can you please advise? I cannot get gbproxy to work due to SSL errrors
@happy-autumn-40938 @fresh-football-47124 please guys why its not working?
h
I can't seem to recreate your issue, my self-signed certs are working. What are you using to generate, or are these provided externally?
l
This is how I start the gbproxy
my certs are located in folder /GB/live/gb..../ as fullchain.pem and privkey.pem from LetsEncryot
What do I do wrong in the command above or the certificates should be in another format than LetsEncrypt for webservers?
h
I mean HTTPS_CERT and KEY should be the value of the cert with "\n" replacing the newline character. But you already had that in a prior iteration. I don't know what else could be going wrong offhand. Wondering if you have considered termination at the networking level instead of in the proxy itself
l
I tried haproxy too but its not loading if I terminate SSL at haproxy level
mind sharing a working configuration of your own?
h
mine is basically identical to yours but less production-ready. I think I followed this guide https://stackoverflow.com/questions/66604487/how-do-i-generate-fullchain-pem-and-privkey-pem
l
I think I progressed a bit