# Ssl\_password\_file on nginx 1.8.0

**URL:** <https://www.ruby-forum.com/t/ssl-password-file-on-nginx-1-8-0/242933>\
**Category:** NGINX\
**Created:** [August 8, 2015, 5:06pm UTC](https://www.ruby-forum.com/t/ssl-password-file-on-nginx-1-8-0/242933 "2015-08-08T17:06:46Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sadaf\_N](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/858c86/32.png) [@Sadaf\_N](https://www.ruby-forum.com/u/Sadaf_N)\
**Post date:** [August 8, 2015, 5:06pm UTC](https://www.ruby-forum.com/t/ssl-password-file-on-nginx-1-8-0/242933/1 "2015-08-08T17:06:46Z")

</div>

Hello,

I cannot manage to load a certificate protected wit ha password on nginx  
1.8.0:  
[emerg] 2331#0:  
SSL\_CTX\_use\_PrivateKey\_file(“/etc/ssl/private/domain.key”)  
failed (SSL: error:0906406D:PEM routines:PEM\_def\_callback:problems  
getting  
password error:0906A068:PEM routines:PEM\_do\_header:bad password read  
error:140B0009:SSL routines:SSL\_CTX\_use\_PrivateKey\_file:PEM lib)

The file configured with ssl\_password\_file is plaintext, restricted to  
read  
rights for root user only (even tried root user + root group).  
Shall it be otherwise? Have I missed something?

​I intended to avoid deciphering my private keys using this new  
capability  
of nginx.

I also noted that, dunno if it might be related to my trouble: ​  
[http://mailman.nginx.org/pipermail/nginx-devel/2014-October/006104.html](http://mailman.nginx.org/pipermail/nginx-devel/2014-October/006104.html)

## $ sudo nginx -v nginx version: nginx/1.8.0 $ openssl version OpenSSL 1.0.1k 8 Jan 2015

_B. R._

---

<div class="post-metadata">

**Author:** ![B.R](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/b/3be4f8/32.png) [@B.R](https://www.ruby-forum.com/u/B.R)\
**Post date:** [August 10, 2015, 1:00pm UTC](https://www.ruby-forum.com/t/ssl-password-file-on-nginx-1-8-0/242933/2 "2015-08-10T13:00:55Z")

</div>

On Saturday 08 August 2015 17:05:26 B.R. wrote:

> rights for root user only (even tried root user + root group).  
> $ openssl version  
> OpenSSL 1.0.1k 8 Jan 2015

Check your password file with hex editor.

wbr, Valentin V. Bartenev

---

<div class="post-metadata">

**Author:** ![B.R](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/b/3be4f8/32.png) [@B.R](https://www.ruby-forum.com/u/B.R)\
**Post date:** [August 11, 2015, 12:22am UTC](https://www.ruby-forum.com/t/ssl-password-file-on-nginx-1-8-0/242933/3 "2015-08-11T00:22:32Z")

</div>

At first I thought the 0x0a character could be a problem, though highly  
improbable… then I realized that one of the server blocks using that  
certificate had no ssl\_password\_file configured.

## Shameful mistake created a dummy error. Sorry for bothering! Thanks for help.

_B. R._

On Mon, Aug 10, 2015 at 1:00 PM, Valentin V. Bartenev [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)