# uwsgi doesn't listen on SSL port

**URL:** <https://help.galaxyproject.org/t/uwsgi-doesnt-listen-on-ssl-port/4968>\
**Category:** Uncategorized\
**Tags:** galaxy-local\
**Created:** [December 5, 2020, 12:07am UTC](https://help.galaxyproject.org/t/uwsgi-doesnt-listen-on-ssl-port/4968 "2020-12-05T00:07:54Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![mfricke](https://avatars.discourse-cdn.com/v4/letter/m/49beb7/32.png) [@mfricke](https://help.galaxyproject.org/u/mfricke)\
**Post date:** [December 5, 2020, 12:07am UTC](https://help.galaxyproject.org/t/uwsgi-doesnt-listen-on-ssl-port/4968/1 "2020-12-05T00:07:54Z")

</div>

We recently upgraded to 20.09. Configuring galaxy to listen on a port using SSL.

Everything works OK on non-ssl ports. But of course we can’t put that into production.

I am following this guide:  
[https://docs.galaxyproject.org/en/latest/admin/scaling.html](https://docs.galaxyproject.org/en/latest/admin/scaling.html)

That document is pointed to by a discussion on configuring uwsgi without  
a proxy server here: [galaxy+SSL without a proxy set up?](https://biostar.galaxyproject.org/p/27838/)

Galaxy reports:  
Starting server in PID 8037.  
serving on [https://127.0.0.1:8443](https://127.0.0.1:8443)  
serving on [http://127.0.0.1:8888](http://127.0.0.1:8888)

```auto
mfricke@taos:~[]$ sudo lsof -i -P -n | grep :8888
uwsgi 8037 galaxy 4u IPv4 109301279 0t0 TCP
127.0.0.1:8888 (LISTEN)
uwsgi 8104 galaxy 4u IPv4 109301279 0t0 TCP
127.0.0.1:8888 (LISTEN)

mfricke@taos:~[]$ sudo lsof -i -P -n | grep :8443

mfricke@taos:~[]$

```

Galaxy has permissions to read the SSL certs:

```auto
-bash-4.2$ ls -lah /opt/galaxy/20.09/ssl/
rw-r--r-- 1 galaxy galaxy-admin 1.7K Nov 25 08:24 alliance-wildcard.key
-rw-r--r-- 1 galaxy galaxy-admin 2.4K Nov 25 08:24
alliance-wildcard-public.crt

```

and in galaxy.yaml

```auto
http: 127.0.0.1:8888
https: 127.0.0.1:8443,/opt/galaxy/20.09/ssl/alliance-wildcard-public.crt,/opt/galaxy/20.09/ssl/alliance-wildcard.key
http-to-https: =0

```

I also added a debug statement to make sure the parameters were being  
passed down to the libraries:

```auto
galaxy.web_stack DEBUG 2020-12-02 10:40:41,885 [p:7467,w:1,m:0]
[MainThread] Calling postfork function: <function postfork_setup at
0x7f8a68952158>
VAL++++++++++++++
127.0.0.1:8443,/opt/galaxy/20.09/ssl/alliance-wildcard-public.crt,/opt/galaxy/20.09/ssl/alliance-wildcard.key
VAL++++++++++++++ 127.0.0.1:8888
galaxy.web_stack INFO 2020-12-02 10:40:41,885 [p:7467,w:1,m:0]
[MainThread] Galaxy server instance 'main.web.1' is running

```

These are the same certificates we use on our other web services so they  
should be good.

Any help would be appreciated.

All the best,

Matthew

---

<div class="post-metadata">

**Author:** ![NAGA270588](https://avatars.discourse-cdn.com/v4/letter/n/bc79bd/32.png) [@NAGA270588](https://help.galaxyproject.org/u/NAGA270588)\
**Post date:** [September 5, 2023, 11:40am UTC](https://help.galaxyproject.org/t/uwsgi-doesnt-listen-on-ssl-port/4968/2 "2023-09-05T11:40:21Z")

</div>

Our Galaxy is running using uwsgi protocol and I would like to configure SSL certificate to my galaxy. My Galaxy version is 20.05. Can anyone guide me with the procedure?

---

<div class="post-metadata">

**Author:** ![jennaj](https://sea2.discourse-cdn.com/flex020/user_avatar/help.galaxyproject.org/jennaj/32/27_2.png) [@jennaj](https://help.galaxyproject.org/u/jennaj)\
**Post date:** [September 5, 2023, 8:19pm UTC](https://help.galaxyproject.org/t/uwsgi-doesnt-listen-on-ssl-port/4968/3 "2023-09-05T20:19:49Z")

</div>

Hi @NAGA270588

These are the resources available.

References:

- Admin training [https://training.galaxyproject.org/training-material/topics/admin/](https://training.galaxyproject.org/training-material/topics/admin/)
- Admin docs [https://docs.galaxyproject.org/](https://docs.galaxyproject.org/)
- [Galaxy Platform Directory: Servers, Clouds, and Deployable Resources - Galaxy Community Hub](https://galaxyproject.org/use/)

---

<div class="post-metadata">

**Author:** ![jennaj](https://sea2.discourse-cdn.com/flex020/user_avatar/help.galaxyproject.org/jennaj/32/27_2.png) [@jennaj](https://help.galaxyproject.org/u/jennaj)\
**Post date:** [March 17, 2026, 4:43am UTC](https://help.galaxyproject.org/t/uwsgi-doesnt-listen-on-ssl-port/4968/4 "2026-03-17T04:43:56Z")

</div>