Setting up SSL in Linux

So I’m wanting to switch from Sickbeard to Sonarr, it seems better in most respects. After an initially very simple and user friendly set up I’ve been stumped by the SSL process. Other similar programs (couchpotato, sabnzbd etc) you simply enable it and point to your certificate. Anyway, I’m trying to follow the instructions on the wiki.

I’ve generated my cert & key.
I’ve converted the key to a pvk.

Now stage 3 - (Load the certificate with httpcfg (comes with mono))
What is httpcfg? It seems to be a windows thing. I did the first stages on a windows machine but my server is openmediavault (Debian). If it assigns a cert to a port surely this needs to be done from the linux machine? I couldn’t even try to use it on Windows as apparently its been replaced by netsh…

I’m fumbling in the dark, I’d really appreciate some more in depth instructions!

You need to run httpcfg on the server that is running Sonarr, you are correct it was replaced by netsh on windows, but mono has kept httpcfg as their executable name. Mono (with the development package) ships with httpcfg, if you can’t run it on the OMV system it means the package is missing.

Thanks, I got it installed, ran stage 3. When I do httpcfg -list the port shows up with a thumbprint. However I still get a page not available when I try to access it.
Are there any logs I should look to?

I’m also having issues with SSL on Ubuntu. However, mine had been working previously for months with no problem. I’, not sure when exactly it quit working properly. I can still access the web UI via non-ssl.

I’m currently running version 2.0.0.3243 with Mono version 4.0.1

The error I’m getting is "SSL peer was unable to negotiate an acceptable set of security parameters. (Error code: ssl_error_handshake_failure_alert).

Please let me know if I can provide any other info.

I’m getting the same thing. I’ve tried with Mono 4.0.1 and 4.0.2 on Arch and tried generating the certs myself as well as using that self-signed certification website that they recommend.

Strangely if I delete the cert from my repository and try connect to it again, it lets me add it as an exception before giving any errors.

httpcfg -list shows the correct thumbprint and matches the one in my browser.

I suspect its an issue with mono 4 as a few people that upgraded went back to 3.10 and had success with httpcfg, I haven’t had a chance to confirm these suspicions though.

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.