Generating a SSL Cert request

Denie · 04-29-2010, 12:04 PM

Hey everyone!

I got a problem across all of my ISPmanager Installations.. i cant create any SSL certs.

Error when i try is: Error: Internal error Failed to create certificate request

Ispmgr.log:
Apr 29 11:03:31 [13925] INFO Request [xx.xxx.xxx.xx][root] 'key=test&ctype=request&duration=365&country=Te&st ate=Test&city=test&company=test&division=test&name =www.test.test&domain=&domain_list=&email=test%40t est.dk&keydata=&crtdata=&passwd=&bdldata=&func=cer tificate.edit&elid=&sok=ok'
Apr 29 11:03:31 [13925] EXTINFO Execute (/usr/bin/openssl req -batch -new -newkey rsa:1024 -nodes -keyout var/cert/test.key -subj '/C=Te/ST=Test/L=test/O=test/OU=test/emailAddress=test@test.dk/CN=www.test.test' -out var/cert/test.csr) return=1 exited
Apr 29 11:03:31 [13925] ERROR Exception 1: Failed to create certificate request

This is happening on all of my ISPmanager Pro installations, and it have been working as a charm before..

the servers are running debian 5.0 and i got one server with ubuntu 8.04LTS..

Any help?

slava · 04-29-2010, 07:49 PM

Try run manually in the ssh command

Code:

/usr/bin/openssl req -batch -new -newkey rsa:1024 -nodes -keyout var/cert/test.key -subj '/C=Te/ST=Test/L=test/O=test/OU=test/emailAddress=test@test.dk/CN=www.test.test' -out var/cert/test.csr

What's error output you get?

Denie · 04-29-2010, 10:28 PM

I get the following on my debian box:

Code:

Generating a 1024 bit RSA private key
.++++++
....++++++
writing new private key to 'var/cert/test.key'
var/cert/test.key: No such file or directory
11667:error:02001002:system library:fopen:No such file or directory:bss_file.c:352:fopen('var/cert/test.key','w')
11667:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:354:

on my second debian box:

Code:

Generating a 1024 bit RSA private key
...........................++++++
...........................................++++++
writing new private key to 'var/cert/test.key'
var/cert/test.key: No such file or directory
6578:error:02001002:system library:fopen:No such file or directory:bss_file.c:352:fopen('var/cert/test.key','w')
6578:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:354:

and on my ubuntu box i the same:

Code:

Generating a 1024 bit RSA private key
..............++++++
.............................++++++
writing new private key to 'var/cert/test.key'
var/cert/test.key: No such file or directory
2803:error:02001002:system library:fopen:No such file or directory:bss_file.c:352:fopen('var/cert/test.key','w')
2803:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:354:

Denie · 04-29-2010, 10:48 PM

I checked the the code you wanted me to run from ssh, and noticed there was missing a / in front of var/cert/test.key, as soon as i did the command with /var/cert/test.key instead, there was no errors and i manually created a crt and key file...

and if i run the command that is used in my ispmgr.log file i get no errors and the csr and key files are generated

Denie · 04-30-2010, 10:01 AM

any other suggestions for this?

Denie · 04-30-2010, 10:36 AM

I tried to setup a test server, where i could go deeper into this.. when i install ISPmanager pro, i get an internal error at the end of the installation..

the ispmgr.log shows the following:

Code:

Apr 29 22:40:00 [ 3289] EXTINFO Load config '/var/www/mgrtest/data/www/isptest.mgr/webstat/.htaccess'
Apr 29 22:40:00 [ 3289] EXTINFO Load config '/var/www/mgrtest/data/etc/isptest.mgr.stat.passwd'
Apr 29 22:40:00 [ 3289] EXTINFO Execute (/usr/bin/openssl req -batch -new -newkey rsa:1024 -nodes -keyout /var/www/mgrtest/data/etc/isptest.mgr.key -subj '/C=XX/ST=XX/L=XX/O=XX/OU=XX/emailAddress=webmaster@isptest.mgr/CN=isptest.mgr' -out /var/www/mgrtest/data/etc/isptest.mgr.csr) return=1 exited
Apr 29 22:40:00 [ 3289] ERROR Exception 1: Failed to create certificate request
Apr 29 22:40:00 [ 3289] EXTINFO Execute (/bin/rm -rf /var/www/mgrtest/data/public_html) return=0 exited
Apr 29 22:40:00 [ 3289] EXTINFO Execute (/bin/rm -rf /var/www/mgrtest/data/www/isptest.mgr) return=0 exited
Apr 29 22:40:00 [ 3289] INFO Request [pkgctl][root] 'out=text&func=user.delete&elid=mgrtest'
Apr 29 22:40:00 [ 3289] ERROR Assert '109.123.94.226:8443 isptest.mgr' in 'virtualhost' failed
Apr 29 22:40:00 [ 3289] ERROR Exception 3: 'virtualhost'  not exists.

this is happening on all VPS's i am trying to install ISPmanager on, ubuntu or debian, its happening on all OS's.

sNuuFix · 05-07-2010, 03:51 PM

I have exactly the same problems on Debian 5.0 (Linode VPS). Installation fails when checking HTTP. Apache process freezes and every other check fails also. after restart everything works fine, except error with SSL certificate request generation.

Denie · 05-07-2010, 11:25 PM

It seems like there is a problem with ISPmanager's libssl.so and libcrypto.so

Code:

/usr/local/ispmgr/external/lib/libssl.so.0.9.8: no version information available (required by /usr/bin/openssl) 
/usr/bin/openssl: /usr/local/ispmgr/external/lib/libcrypto.so.0.9.8: no version information available (required by /usr/bin/openssl)

To fix this i did the following:

Code:

mv /usr/local/ispmgr/external/lib/libssl.so.0.9.8 /usr/local/ispmgr/external/lib/libssl.so.0.9.8_0 

cp /usr/lib/libssl.so.0.9.8 /usr/local/ispmgr/external/lib/libssl.so.0.9.8 

and 

mv /usr/local/ispmgr/external/lib/libcrypto.so.0.9.8 /usr/local/ispmgr/external/lib/libcrypto.so.0.9.8_0 

cp /usr/lib/libcrypto.so.0.9.8 /usr/local/ispmgr/external/lib/libcrypto.so.0.9.8

I dont know if this will fix it for you, but my ISPmanager runs normal again, on all of my servers...

Eik Christensen
Eik-data.dk

sNuuFix · 05-10-2010, 10:42 AM

Thanks, I can generate self-signed certificates now. I didn't test that with valid cetificates, but ISPmanager Lite gives me an error 'User does not exist' (with javascript alert) when I try to install the certificate.
And it still doesn't solve problems during installation for obvious reasons.
I need to install ISPmanager during next week on another Linode with Debian, do I need to ingore those errors and just reboot after? I can live without SSL for some time while this will be fixed.

Denie · 05-10-2010, 12:51 PM

i havent heard from the ispmgr team since their last post to this thread, so i dont know if this is a bug or not..

make sure that the user exist with SSL enabled to the account and domain, if that doesnt fix the problem, what does the ispmanger log file say? the log file is located at /usr/local/ispmgr/var/ispmgr.log.

When you install the ISPmanager, just ignore the installation error, this is due to their test user which aint able to create a SSL (properly due to the ISPmanager's libssl.so and libcrypto.so) so just ignore the errors, copy the files from the above post.. if you see an mgrtest user in the control panel, create a WWW domain for the user, and delete the mgrtest user.. otherwise you wont be able to delete the user since its virtuel domain files does not exist (because of the test that failed during the installation, thats my guess).. afterwards the control panel should function as normal...

Eik Christensen
Eik-data.dk

04-29-2010, 12:04 PM	#1
Denie Junior Member Join Date: Jan 2010 Posts: 15	Generating a SSL Cert request Hey everyone! I got a problem across all of my ISPmanager Installations.. i cant create any SSL certs. Error when i try is: Error: Internal error Failed to create certificate request Ispmgr.log: Apr 29 11:03:31 [13925] INFO Request [xx.xxx.xxx.xx][root] 'key=test&ctype=request&duration=365&country=Te&st ate=Test&city=test&company=test&division=test&name =www.test.test&domain=&domain_list=&email=test%40t est.dk&keydata=&crtdata=&passwd=&bdldata=&func=cer tificate.edit&elid=&sok=ok' Apr 29 11:03:31 [13925] EXTINFO Execute (/usr/bin/openssl req -batch -new -newkey rsa:1024 -nodes -keyout var/cert/test.key -subj '/C=Te/ST=Test/L=test/O=test/OU=test/emailAddress=test@test.dk/CN=www.test.test' -out var/cert/test.csr) return=1 exited Apr 29 11:03:31 [13925] ERROR Exception 1: Failed to create certificate request This is happening on all of my ISPmanager Pro installations, and it have been working as a charm before.. the servers are running debian 5.0 and i got one server with ubuntu 8.04LTS.. Any help? Last edited by Denie; 04-29-2010 at 12:29 PM.

04-29-2010, 07:49 PM	#2
slava ISPsystem team Join Date: May 2008 Location: ISPsystem Posts: 588	Try run manually in the ssh command Code: /usr/bin/openssl req -batch -new -newkey rsa:1024 -nodes -keyout var/cert/test.key -subj '/C=Te/ST=Test/L=test/O=test/OU=test/emailAddress=test@test.dk/CN=www.test.test' -out var/cert/test.csr What's error output you get?

04-29-2010, 10:48 PM	#4
Denie Junior Member Join Date: Jan 2010 Posts: 15	I checked the the code you wanted me to run from ssh, and noticed there was missing a / in front of var/cert/test.key, as soon as i did the command with /var/cert/test.key instead, there was no errors and i manually created a crt and key file... and if i run the command that is used in my ispmgr.log file i get no errors and the csr and key files are generated Last edited by Denie; 04-29-2010 at 10:51 PM.

05-10-2010, 10:42 AM	#9
sNuuFix Junior Member Join Date: May 2010 Posts: 6	Thanks, I can generate self-signed certificates now. I didn't test that with valid cetificates, but ISPmanager Lite gives me an error 'User does not exist' (with javascript alert) when I try to install the certificate. And it still doesn't solve problems during installation for obvious reasons. I need to install ISPmanager during next week on another Linode with Debian, do I need to ingore those errors and just reboot after? I can live without SSL for some time while this will be fixed. Last edited by sNuuFix; 05-10-2010 at 10:47 AM.