Why two different parameters for Private Key in YAML config?

[pha3z]

I do not understand why the example YAML config file shows "cert" and "key" with the same comment.
What is the difference between these two lines?

tls:
    ## cert - Configures the private key (pem encoded).
    cert:
      path: /path/to/file.pem

    ## key - Configures the private key (pem encoded).
    key:
      path: /path/to/file.pem

[pha3z]

UPDATE:
As far as I can tell, the "cert" file is a certificate file that would follow X.509 standard, meaning it should have the name of the key owner, name of the certificate issuer, the expiration, and the public key.

The "key" file is the private key file.

So the line that says "cert - Configures the private key" in the example config file is incorrect. It should be changed to read "Configures the certificate" or possibly "Configures the public certificate". I feel like the second variation is more helpful to people who don't frequently deal with SSL certificates and authentication. A certificate is technically "public" by implication, but stating its public helps distinguish it from the private key.

[pha3z]

It's also worth noting that there is a difference between a certificate file and a full-chain certificate file. Most modern browsers expect a full-chain certificate, and this is what should be provided to Ory Hydra.

[aeneasr]

Yes, the description is definitely wrong! This should be updated here: https://github.com/ory/hydra/blob/master/spec/config.json#L225

Maybe you're down for a contribution? :)

[vinckr]

This has been "closed" by #2589.