error RSA PRIVATE KEY not found from openssl output

[PhilipJonasFranz]

After installation using the install-script, I get the following error in the logs of the service:

May 05 11:25:56 ubuntu code-server[17012]: [2022-05-05T11:25:56.314Z] error RSA PRIVATE KEY not found from openssl output:
May 05 11:25:56 ubuntu code-server[17012]: ---stdout---
May 05 11:25:56 ubuntu code-server[17012]: -----BEGIN PRIVATE KEY-----
May 05 11:25:56 ubuntu code-server[17012]: MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQDBtlEnZLssezit
May 05 11:25:56 ubuntu code-server[17012]:             ......................
May 05 11:25:56 ubuntu code-server[17012]: 85ApfDxbNKRPXB24sszXjhWI3A==
May 05 11:25:56 ubuntu code-server[17012]: -----END PRIVATE KEY-----
May 05 11:25:56 ubuntu code-server[17012]: ---stderr---
May 05 11:25:56 ubuntu code-server[17012]: code: 0 

I am using the following config:

bind-addr: 0.0.0.0:443
auth: password
password: ...
cert: true

I think this could be related: https://githubhot.com/repo/Chocobozzz/PeerTube/issues/4901

[jsjoeio]

Did you get this figured out?

[PhilipJonasFranz]

I opened an issue for this, but so far I only managed to get around this issue by installing on Ubuntu 20 instead of Ubuntu 22 as Version 20 comes with OpenSSL Version 1.1.1 compared to OpenSSL Version 3.0.2 on Version 22.

It seems like code-server is looking for

-----BEGIN RSA PRIVATE KEY-----
...

on std::out, but OpenSSL >3.0.0 returns the key in the format

-----BEGIN PRIVATE KEY-----
...

[jsjoeio]

Interesting. Looks like we read the cert here:

code-server/src/node/app.ts

Lines 66 to 67 in e3c8bd6

	cert: args.cert && (await fs.readFile(args.cert.value)),
	key: args["cert-key"] && (await fs.readFile(args["cert-key"])),

and the library we use is called httpolyglot which lives here.

It would probably require some work on our end to support OpenSSL V1 and V3.