tls_empty_key

Diagnostic `nanook::admin::tls_empty_key`

Summary

TLS private key PEM contained no key

Help

regenerate the key: an empty file or one without a recognised PEM header

Details

When this fires

[admin].key parsed as PEM but contained no recognised private-key block. As with tls_empty_cert, the file is well-formed but does not carry the material rustls needs.

What to check

  • Confirm at least one PRIVATE KEY block is present:
grep -E 'BEGIN (RSA |EC )?PRIVATE KEY' "$key"
  • Re-export from your CA or certbot directory if the file looks truncated.