Been trying to generate a self-signed certificate for HTTPS testing on a webserver hosted on an AWS EC2 instance. When I run MIX_ENV=prod mix phx.server I get the error: 19:09:05.450 [error] Failed to start Ranch listener BlackbookWeb.Endpoint.HTTPS in :ranch_ssl:listen([cacerts: :..., key: :..., …

whoami under the same user that you run mix tasks will give you the username, then sudo chown -R username:username /home/ubuntu/documents/blackbook to make this user (and their group) own the project root and all dirs / files recusrsively

To me, that looks like the app doesn’t have permission to read the cert files.

how do I give it permission to read the cert files?

:waving_hand: With chmod, probably.

Standard users are usually not allowed to listen on ports lower than 1024. You need to use another port. I do assume, that /home/ubuntu/ is the homefolder of the user that you are using to run the application. And I therefore I usually assume that the certificates have proper permissions set.

There was recently a PR with a very detailed guide on this topic opened on Plug. https://github.com/elixir-plug/plug/pull/803

Standard users are usually not allowed to listen on ports lower than 1024 thanks @NobbZ , that was a good hint for me! (+ a note for my-future-self: check What's the best way to serve restricted ports (e.g. 80, 443) with Phoenix?

For some reason the chown still didn’t work in my case. I had to start the server with sudo: sudo MIX_ENV=prod mix phx.server. It might have something to do with the way this particular server is configured.

Elixir Programming Language Forum

HTTPS SSL Phoenix 1.4

Questions & Help Questions

Codball December 19, 2018, 8:36pm 5

Do you have an example? Relatively new to Ubuntu.