I'm trying to build and run a working ECH setup. I've built latest cURL, nginx and openssl (from the relevant branches).
When trying to run echsvr.sh as described here localhost-tests.md I'm getting the following error:
Running ./scripts/echsvr.sh at 20231207-213521
Not forcing HRR
Using all key pairs found in $HOME/ech-dev-utils/echkeydir
error setting private key
00000000:error:0480006C:PEM routines:get_name:no start line:crypto/pem/pem_lib.c:773:
00000000:error:0A080106:SSL routines:SSL_CTX_ech_server_enable_file:passed invalid argument:ssl/ech.c:5013:
00000000:error:0A0000F7:SSL routines:ssl_set_pkey:unknown certificate type:ssl/ssl_rsa.c:132:
I'm using an EC (P-384) certificate (from LetsEncrypt, actually) and it seems that is causing issues for openssl s_server with ECH.
I'm trying to build and run a working ECH setup. I've built latest cURL, nginx and openssl (from the relevant branches).
When trying to run
echsvr.shas described here localhost-tests.md I'm getting the following error:I'm using an EC (P-384) certificate (from LetsEncrypt, actually) and it seems that is causing issues for
openssl s_serverwith ECH.