Domoticz

Posted: **Thursday 31 May 2018 7:58**

I've installed on my raspberry pi 3 with the Domoticz latest stable version a let's encrypt certs. I've generated a DH param and cat to the certs chain and it has the following config:

Code: Select all

The SSL config and certs works fine, but often Domoticz log an error like this:

Code: Select all

Error: [web:8484] missing SSL DH parameters from file /home/pi/domoticz/server_cert.pem

I've tried to generete and attach either DH with 2048 key and 4096 but still generate the error. What's wrong? Thanks

Posted: **Sunday 08 July 2018 20:59**

Anybody?

Posted: **Sunday 08 July 2018 21:40**

I have the same... but no solution.

Posted: **Wednesday 11 July 2018 18:07**

Same problem here. I'm on stable version v4.9701.
any idea? thanks, bye.

Posted: **Thursday 12 July 2018 23:01**

Looks like working for me, my PEM order is like this, certificate at the top, followed by the intermediates and the private key. DH params generated and added to the end of the file. I'm using 2048 bits DH params, not 4096 (4096 is perhaps a bit paranoid currently)

Code: Select all

this should do to generate, just append to to the pem file.

Code: Select all

openssl dhparam -out dh2048.pem 2048

Posted: **Tuesday 17 July 2018 10:38**

Hi,

thank, working with these command:
cd /etc/ssl/certs
sudo openssl dhparam -out dhparam.pem 2048

In the wiki there is this command:
sudo openssl dhparam -dsaparam -out dhparam.pem 4096

The problem I think is "-dsaparam" flag. The wiki should be updated.

thanks.

Posted: **Tuesday 17 July 2018 11:31**

verified. I have taken the liberty to update the wiki.

Domoticz

Problem with ssl cert and DH param

Problem with ssl cert and DH param

Re: Problem with ssl cert and DH param

Re: Problem with ssl cert and DH param

Re: Problem with ssl cert and DH param

Re: Problem with ssl cert and DH param

Re: Problem with ssl cert and DH param

Re: Problem with ssl cert and DH param