Script fails to create ssl certificates for the ISPconfig interface, causing nginx and amavis not able to start about ispconfig_setup HOT 5 OPEN

I did the following to solve above problem by reissuing the certs (can cut and paste):

BACKUP THE OLD CERTS

tar pcfz /root/ispconfig_ssl_backup.tar.gz /usr/local/ispconfig/interface/ssl
chmod 600 /root/ispconfig_ssl_backup.tar.gz

CREATED NEW CSR

cd /usr/local/ispconfig/interface/ssl
openssl genrsa  -out ispserver.key 4096
openssl req -new -key ispserver.key -out ispserver.csr

-des3 was removed from the second command above to issue it without a passphrase (ref: http://serverfault.com/questions/366372/is-it-possible-to-generate-rsa-key-without-pass-phrase)

CREATED CERTS

openssl x509 -req -days 3650 -in ispserver.csr -signkey ispserver.key -out ispserver.crt
openssl rsa -in ispserver.key -out ispserver.key.insecure

REPLACED NEW CERTS WITH NEW

mv ispserver.key ispserver.key.secure
mv ispserver.key.insecure ispserver.key

from ispconfig_setup.

It is resolved?

from ispconfig_setup.

I found a similar issue with turnkey linux with lxc and here goes the solution that worked in turnkey linux at least: turnkeylinux/tracker#587 (comment) as posted by @JedMeister

URL=https://raw.githubusercontent.com/turnkeylinux/common/master/overlays/turnkey.d/sslcert
FILE=usr/local/bin/turnkey-make-ssl-cert
wget -O /$FILE $URL/$FILE
turnkey-make-ssl-cert --default --force-overwrite
service nginx restart

It suggests to create and force overwrite the security certificates.

from ispconfig_setup.

@zenny - it may be a similar issue but I'm not sure that the fix would be the relevant anywhere other than TurnKey though. The error/issue (in TurnKey) was caused by a bug in our turnkey-make-ssl-cert script (which all appliances use to create self signed SSL certs).

from ispconfig_setup.

Excellent for me

from ispconfig_setup.