[GH-ISSUE #630] Ecc certificate is not available #425

New issue

Closed

opened 2026-03-03 01:29:00 +03:00 by kerem · 2 comments

kerem commented

2026-03-03 01:29:00 +03:00

Owner

Originally created by @loveqianool on GitHub (Sep 21, 2019).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/630

Use acme.sh certificate issued ecc unavailable
acme.sh --issue --dns dns_cf -d example.com -d '*.example.com' -k ec-256

[2019-09-21 14:40:48][rocket::config::error][ERROR] environment variable ROCKET_TLS={certs="/ssl/example.pem",key="/ssl/example.key"} could not be parsed
[2019-09-21 14:40:48][_][INFO] expected a valid private key file, but found malformed PEM file
Logger failed to initialize: attempted to set a logger after the logging system was already initialized

Originally created by @loveqianool on GitHub (Sep 21, 2019). Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/630 Use acme.sh certificate issued ecc unavailable `acme.sh --issue --dns dns_cf -d example.com -d '*.example.com' -k ec-256` ``` [2019-09-21 14:40:48][rocket::config::error][ERROR] environment variable ROCKET_TLS={certs="/ssl/example.pem",key="/ssl/example.key"} could not be parsed [2019-09-21 14:40:48][_][INFO] expected a valid private key file, but found malformed PEM file Logger failed to initialize: attempted to set a logger after the logging system was already initialized ```

kerem closed this issue

2026-03-03 01:29:00 +03:00

kerem commented

2026-03-03 01:29:01 +03:00

Author

Owner

@dani-garcia commented on GitHub (Sep 23, 2019):

Hmm never tried with ECDSA certificates, they might not be compatible. I'd recommend you use a reverse proxy in front of the server which is likely to be more performant than Rockets TLS implementation. Proxy examples here.

Otherwise, you might need to use an RSA certificate.

@dani-garcia commented on GitHub (Sep 23, 2019): Hmm never tried with ECDSA certificates, they might not be compatible. I'd recommend you use a reverse proxy in front of the server which is likely to be more performant than Rockets TLS implementation. [Proxy examples here](https://github.com/dani-garcia/bitwarden_rs/wiki/Proxy-examples). Otherwise, you might need to use an RSA certificate.

kerem commented

2026-03-03 01:29:01 +03:00

Author

Owner

@loveqianool commented on GitHub (Sep 24, 2019):

Yes, I am using caddy now, it works very well. Thank you.

@loveqianool commented on GitHub (Sep 24, 2019): Yes, I am using caddy now, it works very well. Thank you.