Hue Load Balancer does not start after enabling TLS
The Hue Load Balancer reads the private key file that is defined in the Hue Load Balancer TLS/SSL Server Private Key File (PEM Format) configuration property to start. Since the private key files are usually encrypted, the Hue Load Balancer must be configured to use the corresponding key password, without which it cannot start.
AH02312: Fatal error initialising mod_ssl, exiting.
CLOUDERA_HTTPD_USE_SSL=true Apache/2.4.6 mod_ssl (Pass Phrase Dialog) Some of your private key files are encrypted for security reasons. In order to read them you have to provide the pass phrases. Server example.test.com:443 (RSA) Enter pass phrase:
To resolve this issue:
- Create a password file in your chosen security directory and insert the private key password as shown in the following example:
echo "abc123" > /etc/security/password.txtWhere abc123 is the private key password and password.txt is the password file.
- Set the file ownership and permissions as shown in the following example:
chown hue:hue password.txt chmod 700 password.txt
- Enter the path to the file containing the passphrase used to encrypt the private key of the Hue Load Balancer server in the Hue Load Balancer TLS/SSL Server SSLPassPhraseDialog field.
In this case, /etc/security/password.txt.
- Click Save Changes.
- Restart the Hue service.