I’m setting up an IRC bouncer (soju) and I need relayd to take care of \
TLS. I’m using this wiki [1] as a helper to write my relayd.conf. For \
the *tls keypair* option, I need to specify a different certificate \
file path since my acme-client creates a fullchain certificate at \
/etc/ssl/example.com.fullchain.pem. So I wrote at line 2 relayd.conf: \

```
tls keypair mydomain.tld cert "/etc/ssl/mydomain.tld.fullchain.pem"
```

When I check the configuration with relayd -n, I got a syntax error at \
that line. I don’t get why when I look at the man page, the syntax \
seems correct.

Then, I tried the default by converting my .pem file with openssl to \
/etc/ssl/mydomain.tld.crt, and removing the cert option of the tls \
keypair line. This time no syntax error, but relayd fails on startup \
and the log says fatal in ca: ca_launch: cert PEM_read_bio_X509.

How can I make relayd to use my initial .pem file?

I’m running OpenBSD 7.9 on amd64.

[1] 
https://codeberg.org/emersion/soju/src/branch/master/contrib/openbsd-relayd.md

Reply via email to