ISPsystem.com Forums

ISPsystem.com Forums (http://forum.ispsystem.com//index.php)
-   Troubleshooting (http://forum.ispsystem.com//forumdisplay.php?f=11)
-   -   Generating a SSL Cert request (http://forum.ispsystem.com//showthread.php?t=1027)

Denie 04-29-2010 12:04 PM

Generating a SSL Cert request
 
Hey everyone!

I got a problem across all of my ISPmanager Installations.. i cant create any SSL certs.

Error when i try is: Error: Internal error Failed to create certificate request

Ispmgr.log:
Apr 29 11:03:31 [13925] INFO Request [xx.xxx.xxx.xx][root] 'key=test&ctype=request&duration=365&country=Te&st ate=Test&city=test&company=test&division=test&name =www.test.test&domain=&domain_list=&email=test%40t est.dk&keydata=&crtdata=&passwd=&bdldata=&func=cer tificate.edit&elid=&sok=ok'
Apr 29 11:03:31 [13925] EXTINFO Execute (/usr/bin/openssl req -batch -new -newkey rsa:1024 -nodes -keyout var/cert/test.key -subj '/C=Te/ST=Test/L=test/O=test/OU=test/emailAddress=test@test.dk/CN=www.test.test' -out var/cert/test.csr) return=1 exited
Apr 29 11:03:31 [13925] ERROR Exception 1: Failed to create certificate request

This is happening on all of my ISPmanager Pro installations, and it have been working as a charm before..

the servers are running debian 5.0 and i got one server with ubuntu 8.04LTS..

Any help?

slava 04-29-2010 07:49 PM

Try run manually in the ssh command
Code:

/usr/bin/openssl req -batch -new -newkey rsa:1024 -nodes -keyout var/cert/test.key -subj '/C=Te/ST=Test/L=test/O=test/OU=test/emailAddress=test@test.dk/CN=www.test.test' -out var/cert/test.csr
What's error output you get?

Denie 04-29-2010 10:28 PM

I get the following on my debian box:

Code:

Generating a 1024 bit RSA private key
.++++++
....++++++
writing new private key to 'var/cert/test.key'
var/cert/test.key: No such file or directory
11667:error:02001002:system library:fopen:No such file or directory:bss_file.c:352:fopen('var/cert/test.key','w')
11667:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:354:

on my second debian box:

Code:

Generating a 1024 bit RSA private key
...........................++++++
...........................................++++++
writing new private key to 'var/cert/test.key'
var/cert/test.key: No such file or directory
6578:error:02001002:system library:fopen:No such file or directory:bss_file.c:352:fopen('var/cert/test.key','w')
6578:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:354:

and on my ubuntu box i the same:

Code:

Generating a 1024 bit RSA private key
..............++++++
.............................++++++
writing new private key to 'var/cert/test.key'
var/cert/test.key: No such file or directory
2803:error:02001002:system library:fopen:No such file or directory:bss_file.c:352:fopen('var/cert/test.key','w')
2803:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:354:


Denie 04-29-2010 10:48 PM

I checked the the code you wanted me to run from ssh, and noticed there was missing a / in front of var/cert/test.key, as soon as i did the command with /var/cert/test.key instead, there was no errors and i manually created a crt and key file...

and if i run the command that is used in my ispmgr.log file i get no errors and the csr and key files are generated

Denie 04-30-2010 10:01 AM

any other suggestions for this?

Denie 04-30-2010 10:36 AM

I tried to setup a test server, where i could go deeper into this.. when i install ISPmanager pro, i get an internal error at the end of the installation..

the ispmgr.log shows the following:
Code:

Apr 29 22:40:00 [ 3289] EXTINFO Load config '/var/www/mgrtest/data/www/isptest.mgr/webstat/.htaccess'
Apr 29 22:40:00 [ 3289] EXTINFO Load config '/var/www/mgrtest/data/etc/isptest.mgr.stat.passwd'
Apr 29 22:40:00 [ 3289] EXTINFO Execute (/usr/bin/openssl req -batch -new -newkey rsa:1024 -nodes -keyout /var/www/mgrtest/data/etc/isptest.mgr.key -subj '/C=XX/ST=XX/L=XX/O=XX/OU=XX/emailAddress=webmaster@isptest.mgr/CN=isptest.mgr' -out /var/www/mgrtest/data/etc/isptest.mgr.csr) return=1 exited
Apr 29 22:40:00 [ 3289] ERROR Exception 1: Failed to create certificate request
Apr 29 22:40:00 [ 3289] EXTINFO Execute (/bin/rm -rf /var/www/mgrtest/data/public_html) return=0 exited
Apr 29 22:40:00 [ 3289] EXTINFO Execute (/bin/rm -rf /var/www/mgrtest/data/www/isptest.mgr) return=0 exited
Apr 29 22:40:00 [ 3289] INFO Request [pkgctl][root] 'out=text&func=user.delete&elid=mgrtest'
Apr 29 22:40:00 [ 3289] ERROR Assert '109.123.94.226:8443 isptest.mgr' in 'virtualhost' failed
Apr 29 22:40:00 [ 3289] ERROR Exception 3: 'virtualhost'  not exists.

this is happening on all VPS's i am trying to install ISPmanager on, ubuntu or debian, its happening on all OS's.

sNuuFix 05-07-2010 03:51 PM

I have exactly the same problems on Debian 5.0 (Linode VPS). Installation fails when checking HTTP. Apache process freezes and every other check fails also. after restart everything works fine, except error with SSL certificate request generation.

Denie 05-07-2010 11:25 PM

It seems like there is a problem with ISPmanager's libssl.so and libcrypto.so
Code:

/usr/local/ispmgr/external/lib/libssl.so.0.9.8: no version information available (required by /usr/bin/openssl)
/usr/bin/openssl: /usr/local/ispmgr/external/lib/libcrypto.so.0.9.8: no version information available (required by /usr/bin/openssl)

To fix this i did the following:

Code:

mv /usr/local/ispmgr/external/lib/libssl.so.0.9.8 /usr/local/ispmgr/external/lib/libssl.so.0.9.8_0

cp /usr/lib/libssl.so.0.9.8 /usr/local/ispmgr/external/lib/libssl.so.0.9.8

and

mv /usr/local/ispmgr/external/lib/libcrypto.so.0.9.8 /usr/local/ispmgr/external/lib/libcrypto.so.0.9.8_0

cp /usr/lib/libcrypto.so.0.9.8 /usr/local/ispmgr/external/lib/libcrypto.so.0.9.8

I dont know if this will fix it for you, but my ISPmanager runs normal again, on all of my servers...

Eik Christensen
Eik-data.dk

sNuuFix 05-10-2010 10:42 AM

Thanks, I can generate self-signed certificates now. I didn't test that with valid cetificates, but ISPmanager Lite gives me an error 'User does not exist' (with javascript alert) when I try to install the certificate.
And it still doesn't solve problems during installation for obvious reasons.
I need to install ISPmanager during next week on another Linode with Debian, do I need to ingore those errors and just reboot after? I can live without SSL for some time while this will be fixed.

Denie 05-10-2010 12:51 PM

i havent heard from the ispmgr team since their last post to this thread, so i dont know if this is a bug or not..

make sure that the user exist with SSL enabled to the account and domain, if that doesnt fix the problem, what does the ispmanger log file say? the log file is located at /usr/local/ispmgr/var/ispmgr.log.

When you install the ISPmanager, just ignore the installation error, this is due to their test user which aint able to create a SSL (properly due to the ISPmanager's libssl.so and libcrypto.so) so just ignore the errors, copy the files from the above post.. if you see an mgrtest user in the control panel, create a WWW domain for the user, and delete the mgrtest user.. otherwise you wont be able to delete the user since its virtuel domain files does not exist (because of the test that failed during the installation, thats my guess).. afterwards the control panel should function as normal...

Eik Christensen
Eik-data.dk


All times are GMT +2. The time now is 10:13 PM.

Powered by vBulletin® Version 3.8.9
Copyright ©2000 - 2024, vBulletin Solutions, Inc.