[asterisk-users] TLS/SSL error loading cert file. </etc/asterisk/keys/asterisk.pem>

[Olivier]

Hello,

On a newly re-installed Asterisk 16.7.0 on Debian Buster, I can't find a
way to enable HTTPS.
Asterisk is running as asterisk:asterisk:

asterisk 11097  0.3  6.7 741352 67984 ?        Ssl  17:53   0:06
/usr/sbin/asterisk -g -f -p -U asterisk

# cat /etc/asterisk/http.conf
[general]
servername=Asterisk
enabled=yes
bindaddr=0.0.0.0
bindport=8088
tlsenable=yes
tlsbindaddr=0.0.0.0:8089
tlscertfile=/etc/asterisk/keys/asterisk.pem
;tlsprivatekey=keys/asterisk.key

# ls -lR /etc/asterisk/keys
/etc/asterisk/keys:
total 32
-rw-rw-r-- 1 asterisk asterisk 1229 janv.  6 16:00 asterisk.crt
-rw-rw-r-- 1 asterisk asterisk  586 janv.  6 15:59 asterisk.csr
-rw-rw-r-- 1 asterisk asterisk  887 janv.  6 15:59 asterisk.key
-rw-rw-r-- 1 asterisk asterisk 2116 janv.  6 16:00 asterisk.pem
-rw-rw-r-- 1 asterisk asterisk  158 janv.  6 15:59 ca.cfg
-rw-rw-r-- 1 asterisk asterisk 1773 janv.  6 15:59 ca.crt
-rw-rw-r-- 1 asterisk asterisk 3311 janv.  6 15:59 ca.key
-rw-rw-r-- 1 asterisk asterisk  132 janv.  6 15:59 tmp.cfg

# grep TLS /var/log/asterisk/full | tail -1
[Jan  6 18:24:45] ERROR[11221] tcptls.c: TLS/SSL error loading cert file.
</etc/asterisk/keys/asterisk.pem>

# su - asterisk --shell /bin/sh --command 'cat
/etc/asterisk/keys/asterisk.pem'
-----BEGIN RSA PRIVATE KEY-----
MIICXAIBAAKBgQCxllxfOR9sFwyKiKPZErUcBF1zlwTVZ9XvemA/8yQY7aIVw2ce
...
RE3X5iJqFIRupoIQZQJBAJnDX8dCQbqLvmAV6/Ubiz0XHjHzLEkhMKtF/ksbgou1
zykmu2rlUbnZ+DPFj/lw9WH7DaIxtogZ7qKSp0dd95g=
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
MIIDXzCCAUcCAQEwDQYJKoZIhvcNAQELBQAwNTEcMBoGA1UEAwwTQXN0ZXJpc2sg
...
XkVjfneCBgllQhLrnb9oUBuHQCy3qtlPkXpXfAtIsodnoV1mrpI3+iKH7xWc4AtQ
Rbrt
-----END CERTIFICATE-----


Any clue ?

Best regards
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20200106/24344917/attachment.html>