I've tried a couple of ways to start MobiLink with a certificate from LetsEncrypt, but so far with no success.

First I tried getting a certificate using this method:

.\wacs.exe --store centralssl --centralsslstore C:\CentralSSL\

which creates the certificate and stores it as C:\CentralSSL\mycertificate.pfx. Then I tried starting MobiLink with the -x option set to

-x HTTPS(host=172.254.35.101;port=443;identity=C:\CentralSSL\mycertificate.pfx)

However, mlsrv17 fails to start, and gives the error

SQLANYm_balanceML: <main> [-10117] Stream Error: Error parsing certificate file, error code 0x00000000

So I tried converting the .pfx file to a .crt file using openssl and changing the MobiLink -x option approriately, but still get a parsing error, this time:

SQLANYm_balanceML: <main> [-10117] Stream Error: Error parsing certificate file, error code 0x0d0680a8

Then I tried another way, to get and install the certificate using this method

.\wacs.exe --store certificatestore --certificatestore My

which creates the certificate in the Windows Certificate Store. However, I don't know how to tell MobiLink to use that version of the certificate. Is there a way to point the identity option to the Windows Certificate Store?

Has anyone ever tried this? Any advice?

EDIT: A bit more information - I discovered that the .crt file generated above contains Bag Attributes before the actual certificate. I removed them with the command openssl x509 -in mycertificate.crt -out mycertificate.crt and then MobiLink starts without complaint BUT the connections still fail, now with error code 8. I know it's not specifically a network problem since it all works fine with HTTP.

identity=*

SQLANYm_balanceML: <main> [-10117] Stream Error: Unable to open certificate file '*'