# Setup custom certificates

You can use your own certificates with EasyHAProxy. You just need to let EasyHAProxy know that certificate.  

There are two ways to do that. 

- [Setup certificate as a label definition in docker container](#setup-certificate-as-a-label-definition-in-docker-container)
- [Map the certificate as a docker volume](#map-the-certificate-as-a-docker-volume)

## Setup certificate as a label definition in docker container

1. Create a single PEM from the certificate and key. 

```bash
cat example.com.crt example.com.key > single.pem

cat single.pem

-----BEGIN CERTIFICATE-----
MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQC5ZheHqmBnEJP+
U9r1gxYWKLzdqrMrcxtQN6M1hIH9n0peuJeIrybdcV7sMbStMXI=
-----END CERTIFICATE-----

-----BEGIN PRIVATE KEY-----
MIIEojCCA4qgAwIBAgIUegW2BimwuL4RzRZ2WYkHA6U5nkAwDQYJKoZIhvcNAQEL
3j4wz8/I5fdsk090j4s5KA==
-----END PRIVATE KEY-----
```

2. Convert the `single.pem` to BASE64 in a single line:

```bash
cat single.pem | base64 -w0
```

3. Define a label in yout container

Add the Base64 string you generated before to the label `easyhaproxy.[definition].sslcert`

## Map the certificate as a docker volume

EasyHAProxy stores the certificates inside the container folder `/certs/haproxy`.

1. Run EasyHAProxy with the volume for the certificates:

```bash
docker volume create certs_haproxy

docker run \
    /* other parameters */
    -v certs_haproxy:/certs/haproxy \
    -d byjg/easy-haproxy
```

2. Create a single PEM from the certificate and the key.

```bash
cat example.com.crt example.com.key > single.pem

cat single.pem

-----BEGIN CERTIFICATE-----
MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQC5ZheHqmBnEJP+
U9r1gxYWKLzdqrMrcxtQN6M1hIH9n0peuJeIrybdcV7sMbStMXI=
-----END CERTIFICATE-----

-----BEGIN PRIVATE KEY-----
MIIEojCCA4qgAwIBAgIUegW2BimwuL4RzRZ2WYkHA6U5nkAwDQYJKoZIhvcNAQEL
3j4wz8/I5fdsk090j4s5KA==
-----END PRIVATE KEY-----
```

3. Copy this certificate to EasyHAProxy volume

```bash
docker cp single.pem easyhaproxy:/certs/haproxy
```

----
[Open source ByJG](http://opensource.byjg.com)