Skip to content

Latest commit

 

History

History
43 lines (34 loc) · 1.26 KB

Https-example-setup.md

File metadata and controls

43 lines (34 loc) · 1.26 KB
Raw

Https example setup

Make sure you are using Erlang's latest release, namely R14B04 as the older versions's SSL OTP package has a memory leak http://erlang.2086793.n4.nabble.com/SSL-cache-delete-bug-td3614886.html

Make directory to hold the certificates

mkdir ssl
cd ssl

Generating private key suitable for https serving...

openssl genrsa -out privkey.pem 1024 -des3

Generating a Certficate Signing Request (certreq.csr)…

openssl req -new -key privkey.pem -out certreq.csr

Generating a CA Certificate…

openssl req -new -x509 -key privkey.pem -out cacert.pem -days 1095

Generating self-signed certificate

openssl x509 -req -days 3650 -in certreq.csr -signkey privkey.pem -out newcert.pem

Add this to your boss.config:

   {ssl_enable, true},
   {ssl_options,
      [
        {cacertfile, "ssl/cacert.pem"},
        {certfile, "ssl/newcert.pem"},
        {keyfile, "ssl/privkey.pem"},
        {verify, verify_peer},
        {fail_if_no_peer_cert, false}
    ]},

Make you startup script line (start-dev.sh, start.sh) look like this:

From:
     -boot start_sasl -config boss -s reloader -s boss \

To:
     -boot start_sasl -config boss -s reloader -s inets -s ssl -s boss \