{"record":{"id":"56a074835042a711","repo":"grafana/k6","slug":"failed-to-load-the-tls-certificate-w","errorCode":null,"errorMessage":"failed to load the TLS certificate: %w","messagePattern":"failed to load the TLS certificate: %w","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"internal/output/prometheusrw/remotewrite/config.go","lineNumber":135,"sourceCode":"\t\t\tUsername: conf.Username.String,\n\t\t\tPassword: conf.Password.String,\n\t\t}\n\t}\n\n\ttlsMinVersion := uint16(tls.VersionTLS13)\n\tif conf.TLSMinVersion.Valid && conf.TLSMinVersion.String == \"1.2\" {\n\t\ttlsMinVersion = tls.VersionTLS12\n\t}\n\n\thc.TLSConfig = &tls.Config{\n\t\tInsecureSkipVerify: conf.InsecureSkipTLSVerify.Bool, //nolint:gosec\n\t\tMinVersion:         tlsMinVersion,\n\t}\n\n\tif conf.ClientCertificate.Valid && conf.ClientCertificateKey.Valid {\n\t\tcert, err := tls.LoadX509KeyPair(conf.ClientCertificate.String, conf.ClientCertificateKey.String)\n\t\tif err != nil {\n\t\t\treturn nil, fmt.Errorf(\"failed to load the TLS certificate: %w\", err)\n\t\t}\n\t\thc.TLSConfig.Certificates = []tls.Certificate{cert}\n\t}\n\n\tif isSigV4PartiallyConfigured(conf.SigV4Region, conf.SigV4AccessKey, conf.SigV4SecretKey) {\n\t\treturn nil, errors.New(\n\t\t\t\"sigv4 seems to be partially configured. All of \" +\n\t\t\t\t\"K6_PROMETHEUS_RW_SIGV4_REGION, K6_PROMETHEUS_RW_SIGV4_ACCESS_KEY, K6_PROMETHEUS_RW_SIGV4_SECRET_KEY \" +\n\t\t\t\t\"must all be set. Unset all to bypass sigv4\",\n\t\t)\n\t}\n\n\tif conf.SigV4Region.Valid && conf.SigV4AccessKey.Valid && conf.SigV4SecretKey.Valid {\n\t\thc.SigV4 = &sigv4.Config{\n\t\t\tRegion:             conf.SigV4Region.String,\n\t\t\tAwsAccessKeyID:     conf.SigV4AccessKey.String,\n\t\t\tAwsSecretAccessKey: conf.SigV4SecretKey.String,\n\t\t}","sourceCodeStart":117,"sourceCodeEnd":153,"githubUrl":"https://github.com/grafana/k6/blob/01ffac6f245854c1b8adc6a69857c76a15f90022/internal/output/prometheusrw/remotewrite/config.go#L117-L153","documentation":"tls.LoadX509KeyPair failed for the client certificate/key configured via K6_PROMETHEUS_RW_CLIENT_CERTIFICATE and K6_PROMETHEUS_RW_CLIENT_CERTIFICATE_KEY — files missing/unreadable, malformed PEM, or key mismatch. RemoteConfig wraps the load error.","triggerScenarios":"Thrown at internal/output/prometheusrw/remotewrite/config.go:135 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Verify both certificate and key paths exist and are readable","Ensure the pair is a valid PEM certificate/key match","Regenerate the client certificate if corrupted"],"exampleFix":null,"handlingStrategy":"fallback","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"01ffac6f245854c1b8adc6a69857c76a15f90022","analyzedAt":"2026-08-18T03:05:52.393Z","contentChangedAt":null,"schemaVersion":2},"datasetVersion":"2026-09-14T00:17:10.932Z"}