Ngrok client doesn't allow for certificate pinning, relying solely on CA chain about ngrok HOT 4 CLOSED

@krzysztofantczak: I had the same issue with the crt/key combo not being liked by ngrok. However for me it turned out to be a simple problem: the key was originally created with a passphrase and that screwed up the load process. Removed the passphrase (openssl rsa -in server.key -out server.key) and it got accepted.

from ngrok.

This is already supported and used for ngrok.com. Only a single trusted ngrok root cert is used and specified in the ngrok client. Self-hosted clients/servers may do the same by modifying the files in assets/[client|server]/tls.

from ngrok.

Hi,

I'm not that advanced with SSL/PKI stuff but i'm trying to self-host ngrok instance (with self signed certs), the thing is i have no idea how should i create proper pairs of files for client/server tls directories to make it work. I was playing around with some openssl tutorials, pasting generated crts and keys and recompiling ngrok, i'm still failing with that. My certs/keys are rejected by server or server isn't able to start becouse of panic: crypto/tls: failed to parse private key. Currently i've cleaned everything up and reverted things to previous state, no idea how to proceed from that point on.

from ngrok.

@mhahn-sighthoundlabs i already managed things to work, but thanks for You answer ;-)

from ngrok.