SSL certificates in pulp

Hello guys!
I’m using the “Pulp in One Container” installation and I would like to use my personal SSL certificates.
According to this guide I should be able to do that, but it looks like to me that even the default generated ones are not working correctly.

When I run a brand new container and test the certificates with
openssl s_client -connect pulp:443

I get these two errors:

`140691359229760:error:0200206F:system library:connect:Connection refused:crypto/bio/b_sock2.c:110:`
`140691359229760:error:2008A067:BIO routines:BIO_connect:connect error:crypto/bio/b_sock2.c:111:`

For reference, the container is started with:

podman run --detach --publish 8080:80 --publish 9000:443 --name pulp --volume "$(pwd)/settings":/etc/pulp:Z --volume "$(pwd)/pulp_storage":/var/lib/pulp:Z --volume "$(pwd)/pgsql":/var/lib/pgsql:Z --volume "$(pwd)/containers":/var/lib/containers:Z --device /dev/fuse --cap-add=all quay.io/pulp/pulp

As you can see I gave all the capabilities to exclude permissions problems.

I also tried removing the --publish 9000:443 part

Relevant to notice, if I install lsof and run lsof -i -P -n | grep LISTEN I do not see any service listening to the 443 port

Do you have any idea about what could be causing this issue?
Thanks in advance! :lemon:

I think, you need to add -e PULP_HTTPS=true

1 Like