US: 1-941-4621-069
  
Cyprus: 3-572-2052-781

Go Back   ISPsystem.com Forums > ISPmanager > Troubleshooting


Reply
 
Thread Tools
Old 04-29-2010, 12:04 PM   #1
Junior Member
 
Join Date: Jan 2010
Posts: 15
Denie is on a distinguished road
Default Generating a SSL Cert request

Hey everyone!

I got a problem across all of my ISPmanager Installations.. i cant create any SSL certs.

Error when i try is: Error: Internal error Failed to create certificate request

Ispmgr.log:
Apr 29 11:03:31 [13925] INFO Request [xx.xxx.xxx.xx][root] 'key=test&ctype=request&duration=365&country=Te&st ate=Test&city=test&company=test&division=test&name =www.test.test&domain=&domain_list=&email=test%40t est.dk&keydata=&crtdata=&passwd=&bdldata=&func=cer tificate.edit&elid=&sok=ok'
Apr 29 11:03:31 [13925] EXTINFO Execute (/usr/bin/openssl req -batch -new -newkey rsa:1024 -nodes -keyout var/cert/test.key -subj '/C=Te/ST=Test/L=test/O=test/OU=test/emailAddress=test@test.dk/CN=www.test.test' -out var/cert/test.csr) return=1 exited
Apr 29 11:03:31 [13925] ERROR Exception 1: Failed to create certificate request

This is happening on all of my ISPmanager Pro installations, and it have been working as a charm before..

the servers are running debian 5.0 and i got one server with ubuntu 8.04LTS..

Any help?

Last edited by Denie; 04-29-2010 at 12:29 PM.
Denie is offline   Reply With Quote
Old 04-29-2010, 07:49 PM   #2
ISPsystem team
 
slava's Avatar
 
Join Date: May 2008
Location: ISPsystem
Posts: 588
slava is on a distinguished road
Default

Try run manually in the ssh command
Code:
/usr/bin/openssl req -batch -new -newkey rsa:1024 -nodes -keyout var/cert/test.key -subj '/C=Te/ST=Test/L=test/O=test/OU=test/emailAddress=test@test.dk/CN=www.test.test' -out var/cert/test.csr
What's error output you get?
slava is offline   Reply With Quote
Old 04-29-2010, 10:28 PM   #3
Junior Member
 
Join Date: Jan 2010
Posts: 15
Denie is on a distinguished road
Default

I get the following on my debian box:

Code:
Generating a 1024 bit RSA private key
.++++++
....++++++
writing new private key to 'var/cert/test.key'
var/cert/test.key: No such file or directory
11667:error:02001002:system library:fopen:No such file or directory:bss_file.c:352:fopen('var/cert/test.key','w')
11667:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:354:
on my second debian box:

Code:
Generating a 1024 bit RSA private key
...........................++++++
...........................................++++++
writing new private key to 'var/cert/test.key'
var/cert/test.key: No such file or directory
6578:error:02001002:system library:fopen:No such file or directory:bss_file.c:352:fopen('var/cert/test.key','w')
6578:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:354:
and on my ubuntu box i the same:

Code:
Generating a 1024 bit RSA private key
..............++++++
.............................++++++
writing new private key to 'var/cert/test.key'
var/cert/test.key: No such file or directory
2803:error:02001002:system library:fopen:No such file or directory:bss_file.c:352:fopen('var/cert/test.key','w')
2803:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:354:

Last edited by Denie; 04-29-2010 at 10:41 PM.
Denie is offline   Reply With Quote
Old 04-29-2010, 10:48 PM   #4
Junior Member
 
Join Date: Jan 2010
Posts: 15
Denie is on a distinguished road
Default

I checked the the code you wanted me to run from ssh, and noticed there was missing a / in front of var/cert/test.key, as soon as i did the command with /var/cert/test.key instead, there was no errors and i manually created a crt and key file...

and if i run the command that is used in my ispmgr.log file i get no errors and the csr and key files are generated

Last edited by Denie; 04-29-2010 at 10:51 PM.
Denie is offline   Reply With Quote
Old 04-30-2010, 10:01 AM   #5
Junior Member
 
Join Date: Jan 2010
Posts: 15
Denie is on a distinguished road
Default

any other suggestions for this?
Denie is offline   Reply With Quote
Old 04-30-2010, 10:36 AM   #6
Junior Member
 
Join Date: Jan 2010
Posts: 15
Denie is on a distinguished road
Default

I tried to setup a test server, where i could go deeper into this.. when i install ISPmanager pro, i get an internal error at the end of the installation..

the ispmgr.log shows the following:
Code:
Apr 29 22:40:00 [ 3289] EXTINFO Load config '/var/www/mgrtest/data/www/isptest.mgr/webstat/.htaccess'
Apr 29 22:40:00 [ 3289] EXTINFO Load config '/var/www/mgrtest/data/etc/isptest.mgr.stat.passwd'
Apr 29 22:40:00 [ 3289] EXTINFO Execute (/usr/bin/openssl req -batch -new -newkey rsa:1024 -nodes -keyout /var/www/mgrtest/data/etc/isptest.mgr.key -subj '/C=XX/ST=XX/L=XX/O=XX/OU=XX/emailAddress=webmaster@isptest.mgr/CN=isptest.mgr' -out /var/www/mgrtest/data/etc/isptest.mgr.csr) return=1 exited
Apr 29 22:40:00 [ 3289] ERROR Exception 1: Failed to create certificate request
Apr 29 22:40:00 [ 3289] EXTINFO Execute (/bin/rm -rf /var/www/mgrtest/data/public_html) return=0 exited
Apr 29 22:40:00 [ 3289] EXTINFO Execute (/bin/rm -rf /var/www/mgrtest/data/www/isptest.mgr) return=0 exited
Apr 29 22:40:00 [ 3289] INFO Request [pkgctl][root] 'out=text&func=user.delete&elid=mgrtest'
Apr 29 22:40:00 [ 3289] ERROR Assert '109.123.94.226:8443 isptest.mgr' in 'virtualhost' failed
Apr 29 22:40:00 [ 3289] ERROR Exception 3: 'virtualhost'  not exists.
this is happening on all VPS's i am trying to install ISPmanager on, ubuntu or debian, its happening on all OS's.

Last edited by Denie; 04-30-2010 at 10:39 AM.
Denie is offline   Reply With Quote
Old 05-07-2010, 03:51 PM   #7
Junior Member
 
Join Date: May 2010
Posts: 6
sNuuFix is on a distinguished road
Default

I have exactly the same problems on Debian 5.0 (Linode VPS). Installation fails when checking HTTP. Apache process freezes and every other check fails also. after restart everything works fine, except error with SSL certificate request generation.
sNuuFix is offline   Reply With Quote
Old 05-07-2010, 11:25 PM   #8
Junior Member
 
Join Date: Jan 2010
Posts: 15
Denie is on a distinguished road
Default

It seems like there is a problem with ISPmanager's libssl.so and libcrypto.so
Code:
/usr/local/ispmgr/external/lib/libssl.so.0.9.8: no version information available (required by /usr/bin/openssl) 
/usr/bin/openssl: /usr/local/ispmgr/external/lib/libcrypto.so.0.9.8: no version information available (required by /usr/bin/openssl)
To fix this i did the following:

Code:
mv /usr/local/ispmgr/external/lib/libssl.so.0.9.8 /usr/local/ispmgr/external/lib/libssl.so.0.9.8_0 

cp /usr/lib/libssl.so.0.9.8 /usr/local/ispmgr/external/lib/libssl.so.0.9.8 

and 

mv /usr/local/ispmgr/external/lib/libcrypto.so.0.9.8 /usr/local/ispmgr/external/lib/libcrypto.so.0.9.8_0 

cp /usr/lib/libcrypto.so.0.9.8 /usr/local/ispmgr/external/lib/libcrypto.so.0.9.8
I dont know if this will fix it for you, but my ISPmanager runs normal again, on all of my servers...

Eik Christensen
Eik-data.dk
Denie is offline   Reply With Quote
Old 05-10-2010, 10:42 AM   #9
Junior Member
 
Join Date: May 2010
Posts: 6
sNuuFix is on a distinguished road
Default

Thanks, I can generate self-signed certificates now. I didn't test that with valid cetificates, but ISPmanager Lite gives me an error 'User does not exist' (with javascript alert) when I try to install the certificate.
And it still doesn't solve problems during installation for obvious reasons.
I need to install ISPmanager during next week on another Linode with Debian, do I need to ingore those errors and just reboot after? I can live without SSL for some time while this will be fixed.

Last edited by sNuuFix; 05-10-2010 at 10:47 AM.
sNuuFix is offline   Reply With Quote
Old 05-10-2010, 12:51 PM   #10
Junior Member
 
Join Date: Jan 2010
Posts: 15
Denie is on a distinguished road
Default

i havent heard from the ispmgr team since their last post to this thread, so i dont know if this is a bug or not..

make sure that the user exist with SSL enabled to the account and domain, if that doesnt fix the problem, what does the ispmanger log file say? the log file is located at /usr/local/ispmgr/var/ispmgr.log.

When you install the ISPmanager, just ignore the installation error, this is due to their test user which aint able to create a SSL (properly due to the ISPmanager's libssl.so and libcrypto.so) so just ignore the errors, copy the files from the above post.. if you see an mgrtest user in the control panel, create a WWW domain for the user, and delete the mgrtest user.. otherwise you wont be able to delete the user since its virtuel domain files does not exist (because of the test that failed during the installation, thats my guess).. afterwards the control panel should function as normal...

Eik Christensen
Eik-data.dk
Denie is offline   Reply With Quote
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +2. The time now is 07:09 AM.