Been trying to generate a self-signed certificate for HTTPS testing on a webserver hosted on an AWS EC2 instance. When I run MIX_ENV=prod mix phx.server I get the error: 19:09:05.450 [error] Failed to start Ranch listener BlackbookWeb.Endpoint.HTTPS in :ranch_ssl:listen([cacerts: :..., key: :..., …

whoami under the same user that you run mix tasks will give you the username, then sudo chown -R username:username /home/ubuntu/documents/blackbook to make this user (and their group) own the project root and all dirs / files recusrsively

To me, that looks like the app doesn’t have permission to read the cert files.

how do I give it permission to read the cert files?

:waving_hand: With chmod, probably.

Do you have an example? Relatively new to Ubuntu.

Standard users are usually not allowed to listen on ports lower than 1024. You need to use another port. I do assume, that /home/ubuntu/ is the homefolder of the user that you are using to run the application. And I therefore I usually assume that the certificates have proper permissions set.

There was recently a PR with a very detailed guide on this topic opened on Plug. https://github.com/elixir-plug/plug/pull/803

Standard users are usually not allowed to listen on ports lower than 1024 thanks @NobbZ , that was a good hint for me! (+ a note for my-future-self: check What's the best way to serve restricted ports (e.g. 80, 443) with Phoenix?

For some reason the chown still didn’t work in my case. I had to start the server with sudo: sudo MIX_ENV=prod mix phx.server. It might have something to do with the way this particular server is configured.

Elixir Programming Language Forum

HTTPS SSL Phoenix 1.4

Questions & Help Questions

idi527 December 19, 2018, 8:30pm 4

With chmod, probably.