Jupyter notebook SSL does not allow keyfile with PEM pass phrase

[charlie718y]

Trying to enable Notebook SSL,

1. Creating a .pem and .key file,
2. To secure the .key file, I put a pass phrase on the .key file.
3. Update notebook config file to point to the certfile and keyfile,
   NotebookApp.certfile
   NotebookApp.keyfile

An exception is encountered when using browser to access the notebook webserver,

Enter PEM pass phrase:
[E 15:24:43.503 NotebookApp] Exception in callback (<socket._socketobject object at 0x7f9bdc28a360>, <function null_wrapper at 0x7f9bdc0bb758>)
Traceback (most recent call last):
File "/var/install/lib/python2.7/site-packages/tornado/ioloop.py", line 888, in start
handler_func(fd_obj, events)
File "/var/install/lib/python2.7/site-packages/tornado/stack_context.py", line 277, in null_wrapper
return fn(*args, **kwargs)
File "/var/install/lib/python2.7/site-packages/tornado/netutil.py", line 276, in accept_handler
callback(connection, address)
File "/var/install/lib/python2.7/site-packages/tornado/tcpserver.py", line 264, in _handle_connection
do_handshake_on_connect=False)
File "/var/install/lib/python2.7/site-packages/tornado/netutil.py", line 517, in ssl_wrap_socket
context = ssl_options_to_context(ssl_options)
File "/var/install/lib/python2.7/site-packages/tornado/netutil.py", line 494, in ssl_options_to_context
context.load_cert_chain(ssl_options['certfile'], ssl_options.get('keyfile', None))
IOError: [Errno 22] Invalid argument

[gnestor]

Can you share your update notebook config?

@minrk Any ideas?

[charlie718y]

Hi @gnestor

It's been a while, I no longer have the environment anymore, the issue was due to Tornado not exposing the password parameter in the load_cert_chain API. For more info, refer to, tornadoweb/tornado#2113

In the end I had to stick with passwordless keyfiles. If you guys plan to provide support for password protected keyfiles. Give me a heads up.

Thanks,
Charlie

[gnestor]

Thanks for following up @charlie718y! It would be nice to support password-protected keyfiles. We invite you and anyone else to contribute! I'll leave this open and mark as "help wanted".