Cannot use custom certificate for Resilio on Windows

[Padre Pedro]

Hi,

I'm new to Resilio and I've just installed Resilio Connect on my Windows PC as a Windows service, running as LOCAL SERVICE. I can connect to http://127.0.0.1/gui and can configure the application, sync, etc. Then I've downloaded the sample confi file from Resilio's site to the LOCAL SERVICE's Resiliio folder: C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Resilio Sync Service. I've renamed the file to sync.conf and have uncommented force_https; afterwards I can connect through https, although I logically get a warning because the certificate is self-signed.

Then I've configured this part as follows:

    ,"force_https" : true // disable http
    ,"ssl_certificate" : "OWNNAME.pem"
    ,"ssl_private_key" : "OWNNAME.key"

This doesn't work though: the Windows service does start, but I can't connect to the WUI of Resilio.

I've checked it through OpenSSL: both files are in the PEM format.

sync.log gives me this:

[2022-02-03 16:57:58.650] HTTPS: failed to load certificate from file
[2022-02-03 16:57:58.650] HTTPS: failed to load certificate
[2022-02-03 16:57:58.650] HTTPS: failed to load certificate from file
[2022-02-03 16:57:58.650] HTTPS: failed to load certificate
[2022-02-03 16:57:58.915] HTTPS: failed to load certificate from file
[2022-02-03 16:57:58.915] HTTPS: failed to load certificate

Sometimes it also says this before:

[2022-02-03 16:57:27.276] OpenSSL: can't find suitable trusted CA location

Both files are placed in the same location as sync.conf: C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Resilio Sync Service

 

I don't know what exactly is going on: is the format wrong (it should be PEM, right? Or is DER of Base64 OK as well?)? Is the location wrong? Have I made a mistake in the config file?

 

Thanks!

Pedro