I made a copy of the site for development, I can’t understand why it doesn’t work via https

[heiheshang]

mod_ssl_self_signed:51 SSL: Problem with certificates: {need_rsa_private_key,"/home/oper/Programs/zotonic/user/sites/123/ssl/123.pem","use: openssl rsa -in sitename.key -out sitename.pem"}
there is no dh-params.pem file in the ssl directory.

[mworrell]

@mmzeeman Do you have an idea? This is a 0.x site - we do have some write routines for the dh file, but I only see the dh-params.pem mentioned in the cert_files/1 function, and it looks like it should be generated on the fly?

[mmzeeman]

There are pre-configured dh parameters. When there is no file, the default, or one of the pre-configured named parameters will be written to disk. check_certs/1 in mod_ssl_self_signed does that.

[mmzeeman]

We use the ones recommended here: https://datatracker.ietf.org/doc/html/rfc7919