# TLS setup on Mac and Linux

**URL:** <https://forums.foundationdb.org/t/tls-setup-on-mac-and-linux/1188>\
**Category:** Using FoundationDB\
**Created:** [February 27, 2019, 11:46pm UTC](https://forums.foundationdb.org/t/tls-setup-on-mac-and-linux/1188 "2019-02-27T23:46:10Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![samir](https://avatars.discourse-cdn.com/v4/letter/s/ea666f/32.png) [@samir](https://forums.foundationdb.org/u/samir)\
**Post date:** [February 27, 2019, 11:46pm UTC](https://forums.foundationdb.org/t/tls-setup-on-mac-and-linux/1188/1 "2019-02-27T23:46:10Z")

</div>

Anyone any document would be appreciable

---

<div class="post-metadata">

**Author:** ![samir](https://avatars.discourse-cdn.com/v4/letter/s/ea666f/32.png) [@samir](https://forums.foundationdb.org/u/samir)\
**Post date:** [February 28, 2019, 12:03am UTC](https://forums.foundationdb.org/t/tls-setup-on-mac-and-linux/1188/2 "2019-02-28T00:03:03Z")

</div>

Particular via document layer

---

<div class="post-metadata">

**Author:** ![alexmiller](https://sea1.discourse-cdn.com/foundationdb/user_avatar/forums.foundationdb.org/alexmiller/32/326_2.png) [@alexmiller](https://forums.foundationdb.org/u/alexmiller)\
**Post date:** [February 28, 2019, 1:23am UTC](https://forums.foundationdb.org/t/tls-setup-on-mac-and-linux/1188/3 "2019-02-28T01:23:36Z")

</div>

There’s a TLS section [in the docs](https://apple.github.io/foundationdb/tls.html).

---

<div class="post-metadata">

**Author:** ![samir](https://avatars.discourse-cdn.com/v4/letter/s/ea666f/32.png) [@samir](https://forums.foundationdb.org/u/samir)\
**Post date:** [February 28, 2019, 1:53am UTC](https://forums.foundationdb.org/t/tls-setup-on-mac-and-linux/1188/4 "2019-02-28T01:53:05Z")

</div>

Thanks , but it is kind of confusing , I do not have make\_build.py under the directory specify in doc for Mac and Linux and neither fdb.pem any idea how to get these file and where to generate I tried OpenSSL but no luck  
Any steps ?

---

<div class="post-metadata">

**Author:** ![ajbeamon](https://sea1.discourse-cdn.com/foundationdb/user_avatar/forums.foundationdb.org/ajbeamon/32/13_2.png) [@ajbeamon](https://forums.foundationdb.org/u/ajbeamon)\
**Post date:** [February 28, 2019, 6:02am UTC](https://forums.foundationdb.org/t/tls-setup-on-mac-and-linux/1188/5 "2019-02-28T06:02:32Z")

</div>

See [this post](https://forums.foundationdb.org/t/solved-correct-setup-of-tls-for-foundationdb/1037/4) for a list of steps I followed for getting a basic instance running.

---

<div class="post-metadata">

**Author:** ![samir](https://avatars.discourse-cdn.com/v4/letter/s/ea666f/32.png) [@samir](https://forums.foundationdb.org/u/samir)\
**Post date:** [March 1, 2019, 8:18pm UTC](https://forums.foundationdb.org/t/tls-setup-on-mac-and-linux/1188/6 "2019-03-01T20:18:07Z")

</div>

Thanks ,  
As I cannot edit cluster file to add :tls  
I use coordinator in fdbcli like ip:port:tls but it gives error cannot use coordinator with incompatible TLS state  
Anything I am doing wrong ?

---

<div class="post-metadata">

**Author:** ![samir](https://avatars.discourse-cdn.com/v4/letter/s/ea666f/32.png) [@samir](https://forums.foundationdb.org/u/samir)\
**Post date:** [March 2, 2019, 12:35am UTC](https://forums.foundationdb.org/t/tls-setup-on-mac-and-linux/1188/7 "2019-03-02T00:35:21Z")

</div>

I use coordinator in fdbcli like ip:port:tls but it gives error cannot use coordinator with incompatible TLS state  
I do not understand why it is giving incompatible TLS state

Thanks

---

<div class="post-metadata">

**Author:** ![samir](https://avatars.discourse-cdn.com/v4/letter/s/ea666f/32.png) [@samir](https://forums.foundationdb.org/u/samir)\
**Post date:** [March 5, 2019, 8:29pm UTC](https://forums.foundationdb.org/t/tls-setup-on-mac-and-linux/1188/8 "2019-03-05T20:29:33Z")

</div>

Can anyone help me overcoming the error I am receiving via adding told to the cluster file “cannot use coordinator with incompatible tcs state “

Samit

---

<div class="post-metadata">

**Author:** ![samir](https://avatars.discourse-cdn.com/v4/letter/s/ea666f/32.png) [@samir](https://forums.foundationdb.org/u/samir)\
**Post date:** [March 5, 2019, 8:30pm UTC](https://forums.foundationdb.org/t/tls-setup-on-mac-and-linux/1188/9 "2019-03-05T20:30:27Z")

</div>

I mean coordinator cannot use incompatible TLS state

---

<div class="post-metadata">

**Author:** ![alexmiller](https://sea1.discourse-cdn.com/foundationdb/user_avatar/forums.foundationdb.org/alexmiller/32/326_2.png) [@alexmiller](https://forums.foundationdb.org/u/alexmiller)\
**Post date:** [March 5, 2019, 8:53pm UTC](https://forums.foundationdb.org/t/tls-setup-on-mac-and-linux/1188/10 "2019-03-05T20:53:53Z")

</div>

You need to edit the cluster file to add `:tls`. If you don’t tell the coordinators to listen with TLS, then they won’t be able to accept TLS connections. Why are you not able to edit the cluster file?

---

<div class="post-metadata">

**Author:** ![samir](https://avatars.discourse-cdn.com/v4/letter/s/ea666f/32.png) [@samir](https://forums.foundationdb.org/u/samir)\
**Post date:** [March 5, 2019, 9:06pm UTC](https://forums.foundationdb.org/t/tls-setup-on-mac-and-linux/1188/11 "2019-03-05T21:06:08Z")

</div>

When we open the cluster file it says should not be edited by hand  
Anyway I edited and added :tls and restarted foundationdb but says ip:port:tls is not reachable cannot communicate with the quorum of coordinator servers

Samir