<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html>
<head>
<meta name="Generator" content="Kopano WebApp v-5.0.0.212+1977.1">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title>RE: [BlueOnyx:24889] Re: AlmaLinux 5210R broken</title>
</head>
<body>
<p style="font-family: arial,helvetica,sans-serif; font-size: 11pt; padding: 0; margin: 0;">Hi Michael,</p>
<p style="font-family: arial,helvetica,sans-serif; font-size: 11pt; padding: 0; margin: 0;"><span style="font-size: 11pt; font-family: arial, helvetica, sans-serif;"><br /></span></p>
<p style="font-family: arial,helvetica,sans-serif; font-size: 11pt; padding: 0; margin: 0;"><span style="font-size: 11pt; font-family: arial, helvetica, sans-serif;">I just had the same problem. The solution worked to me as well.</span></p>
<p style="font-family: arial,helvetica,sans-serif; font-size: 11pt; padding: 0; margin: 0;"><span style="font-size: 11pt; font-family: arial, helvetica, sans-serif;"><br /></span></p>
<p style="font-family: arial,helvetica,sans-serif; font-size: 11pt; padding: 0; margin: 0;"><span style="font-size: 11pt; font-family: arial, helvetica, sans-serif;">But: after creating a LE cert the removed line in </span>/etc/admserv/conf.d/ssl.conf <span style="font-size: 11pt; font-family: arial, helvetica, sans-serif;">doesn't get created again, despite a ca-certs file getting created.</span></p>
<p style="font-family: arial,helvetica,sans-serif; font-size: 11pt; padding: 0; margin: 0;"><br /></p>
<div class="signatureContainer">
<div class="signature">
<p style="padding: 0; margin: 0;"><span style="font-size: 11pt; font-family: arial, helvetica, sans-serif;"></span></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<p style="padding: 0; margin: 0;"></p>
<pre style="white-space: pre-wrap; overflow-wrap: break-word;"><span style="font-family: arial, helvetica, sans-serif;">Regards,<br />Tobias</span></pre>
</div>
</div>
<p style="padding: 0; margin: 0; min-height: 11pt; font-family: arial,helvetica,sans-serif; font-size: 11pt;"><br /></p>
<p style="padding: 0; margin: 0; min-height: 11pt; font-family: arial,helvetica,sans-serif; font-size: 11pt;"><br /></p>
<blockquote style="border-left: 2px solid #325FBA; padding-left: 5px; margin: 0px 5px;"><span style="font-family: tahoma,arial,helvetica,sans-serif; font-size: 10pt;">-----Ursprüngliche Nachricht-----<br /><span><strong>Von:</strong> Colin Jack <colin@mainline.co.uk></span><br /><span><strong>Gesendet:</strong> Montag 5. April 2021 20:40</span><br /><span><strong>An:</strong> BlueOnyx General Mailing List <blueonyx@mail.blueonyx.it></span><br /><span><strong>Betreff:</strong> [BlueOnyx:24889] Re: AlmaLinux 5210R broken</span><br /><br /></span>
<div>
<pre style="white-space: pre-wrap; word-wrap: break-word;">Hi Michael,<br /><br /> > I decided to try out the new AlmaLinux 5210R.<br /> > <br /> > Created a new Aventurin{e} CT and ran through the wizard.<br /> > All fine and I was able to log in the GUI.<br /> > Ran a yum update to check I was up to date.<br /> > Then decided to install an LE cert. Oh dear!<br /> > <br /> > Now cannot access web interface at all.<br /> This isn't specifically an AlmaLinux issue. It happens on CentOS as well.<br /><br /> See:<br /><br /> http://mail.blueonyx.it/pipermail/blueonyx/2021-March/061918.html<br /><br /> To shake that situation loose you can do this:<br /><br /> rm -R /etc/admserv/certs/<br /> mkdir /etc/admserv/certs/<br /><br /> Then restart CCEd to let it regenerate a self signed SSL certificate for<br /> the GUI:<br /><br /> /usr/sausalito/sbin/cced.init restart<br /><br /> Restart AdmServ:<br /><br /> systemctl restart admserv<br /><br /> Check if AdmServ is running:<br /><br /> systemctl status admserv<br /><br /> Normally it now should be running *and* have the self signed<br /> certificate. BUT: It could also be that it shows this error:<br /><br /> [root at alma admserv]# systemctl restart admserv<br /> Job for admserv.service failed because the service did not take the<br /> steps required by its unit configuration.<br /> See "systemctl status admserv.service" and "journalctl -xe" for details.<br /> [root at alma admserv]# systemctl status admserv<br /> ● admserv.service - SYSV: Apache is a World Wide Web server. It is used<br /> to serve HTML files and CGI.<br /> Loaded: loaded (/etc/rc.d/init.d/admserv; generated)<br /> Active: failed (Result: protocol) since Tue 2021-03-23 11:38:26 -05;<br /> 5s ago<br /> Docs: man:systemd-sysv-generator(8)<br /> Process: 3717925 ExecStart=/etc/rc.d/init.d/admserv start<br /> (code=exited, status=0/SUCCESS)<br /> Main PID: 11727 (code=exited, status=1/FAILURE)<br /><br /> Mär 23 11:38:26 alma.smd.net systemd[1]: Starting SYSV: Apache is a<br /> World Wide Web server. It is used to serve HTML files and CGI....<br /> Mär 23 11:38:26 alma.smd.net admserv[3717925]: Starting admin web<br /> server: AH00526: Syntax error on line 55 of /etc/admserv/conf.d/ssl.conf:<br /> Mär 23 11:38:26 alma.smd.net admserv[3717925]: SSLCACertificateFile:<br /> file '/etc/admserv/certs/ca-certs' does not exist or is empty<br /> Mär 23 11:38:26 alma.smd.net admserv[3717925]: [FAILED]<br /><br /><br /> As you can see the problem is this:<br /><br /> Syntax error on line 55 of /etc/admserv/conf.d/ssl.conf<br /> SSLCACertificateFile: file '/etc/admserv/certs/ca-certs' does not exist<br /> or is empty<br /><br /> The self signed SSL certificate doesn't have CA-Certs, but our<br /> /etc/admserv/conf.d/ssl.conf still has an entry that calls for their<br /> presence.<br /><br /> The fix: Edit /etc/admserv/conf.d/ssl.conf and remove this line:<br /><br /> SSLCACertificateFile /etc/admserv/certs/ca-certs<br /><br /> That allows you to then restart Admserv again:<br /><br /> systemctl restart admserv<br /><br />Up and running! __<br /><br />Many thanks. Much appreciated.<br /><br />Colin<br /><br /><br />_______________________________________________<br />Blueonyx mailing list<br />Blueonyx@mail.blueonyx.it<br />http://mail.blueonyx.it/mailman/listinfo/blueonyx<br /></pre>
</div>
</blockquote>
</body>
</html>