CB Response: After changing the Web UI SSL Cert Accessing the Site Returns "err_connection_refused"

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• The services restart successfully after changing the Web Console to use a custom SSL cert.
• Accessing the site gives the error err_connection_refused.

Environment

• CB Response: 6.x and Higher

Cause

• This can happen if the key has a passphrase and nginx can't process the passphrase.
• The /var/log/cb/nginx/startup.log will have the following errors:

Failed (SSL: error:0906406D:PEM routines:PEM_def_callback:problems getting password error:0907B068:PEM routines:PEM_READ_BIO_PRIVATEKEY:bad password read error:140B0009:SSL routines:SSL_CTX_user_PrivateKey_file:PEM lib)

 

Resolution

Create a SSL Cert without a passphrase