Generating a SSL Cert request
Hey everyone!
I got a problem across all of my ISPmanager Installations.. i cant create any SSL certs. Error when i try is: Error: Internal error Failed to create certificate request Ispmgr.log: Apr 29 11:03:31 [13925] INFO Request [xx.xxx.xxx.xx][root] 'key=test&ctype=request&duration=365&country=Te&st ate=Test&city=test&company=test&division=test&name =www.test.test&domain=&domain_list=&email=test%40t est.dk&keydata=&crtdata=&passwd=&bdldata=&func=cer tificate.edit&elid=&sok=ok' Apr 29 11:03:31 [13925] EXTINFO Execute (/usr/bin/openssl req -batch -new -newkey rsa:1024 -nodes -keyout var/cert/test.key -subj '/C=Te/ST=Test/L=test/O=test/OU=test/emailAddress=test@test.dk/CN=www.test.test' -out var/cert/test.csr) return=1 exited Apr 29 11:03:31 [13925] ERROR Exception 1: Failed to create certificate request This is happening on all of my ISPmanager Pro installations, and it have been working as a charm before.. the servers are running debian 5.0 and i got one server with ubuntu 8.04LTS.. Any help? |
Try run manually in the ssh command
Code:
/usr/bin/openssl req -batch -new -newkey rsa:1024 -nodes -keyout var/cert/test.key -subj '/C=Te/ST=Test/L=test/O=test/OU=test/emailAddress=test@test.dk/CN=www.test.test' -out var/cert/test.csr |
I get the following on my debian box:
Code:
Generating a 1024 bit RSA private key Code:
Generating a 1024 bit RSA private key Code:
Generating a 1024 bit RSA private key |
I checked the the code you wanted me to run from ssh, and noticed there was missing a / in front of var/cert/test.key, as soon as i did the command with /var/cert/test.key instead, there was no errors and i manually created a crt and key file...
and if i run the command that is used in my ispmgr.log file i get no errors and the csr and key files are generated |
any other suggestions for this?
|
I tried to setup a test server, where i could go deeper into this.. when i install ISPmanager pro, i get an internal error at the end of the installation..
the ispmgr.log shows the following: Code:
Apr 29 22:40:00 [ 3289] EXTINFO Load config '/var/www/mgrtest/data/www/isptest.mgr/webstat/.htaccess' |
I have exactly the same problems on Debian 5.0 (Linode VPS). Installation fails when checking HTTP. Apache process freezes and every other check fails also. after restart everything works fine, except error with SSL certificate request generation.
|
It seems like there is a problem with ISPmanager's libssl.so and libcrypto.so
Code:
/usr/local/ispmgr/external/lib/libssl.so.0.9.8: no version information available (required by /usr/bin/openssl) Code:
mv /usr/local/ispmgr/external/lib/libssl.so.0.9.8 /usr/local/ispmgr/external/lib/libssl.so.0.9.8_0 Eik Christensen Eik-data.dk |
Thanks, I can generate self-signed certificates now. I didn't test that with valid cetificates, but ISPmanager Lite gives me an error 'User does not exist' (with javascript alert) when I try to install the certificate.
And it still doesn't solve problems during installation for obvious reasons. I need to install ISPmanager during next week on another Linode with Debian, do I need to ingore those errors and just reboot after? I can live without SSL for some time while this will be fixed. |
i havent heard from the ispmgr team since their last post to this thread, so i dont know if this is a bug or not..
make sure that the user exist with SSL enabled to the account and domain, if that doesnt fix the problem, what does the ispmanger log file say? the log file is located at /usr/local/ispmgr/var/ispmgr.log. When you install the ISPmanager, just ignore the installation error, this is due to their test user which aint able to create a SSL (properly due to the ISPmanager's libssl.so and libcrypto.so) so just ignore the errors, copy the files from the above post.. if you see an mgrtest user in the control panel, create a WWW domain for the user, and delete the mgrtest user.. otherwise you wont be able to delete the user since its virtuel domain files does not exist (because of the test that failed during the installation, thats my guess).. afterwards the control panel should function as normal... Eik Christensen Eik-data.dk |
All times are GMT +2. The time now is 10:13 PM. |
Powered by vBulletin® Version 3.8.9
Copyright ©2000 - 2024, vBulletin Solutions, Inc.