[cobalt-users] SSL: I cannot generate certificate - RESOLVED

["MikeM" <MyRaQ@xxxxxxxxx>]

A couple of weeks ago I posted the message quoted below:

-+-+
I needed to install the current version of openssl.  In the process of doing so, I have broken my RaQ3's ability to generate a self-signed certificate for https pages.  When I try to generate the self-signed certificate using the GUI, I receive the following error message at the bottom of the GUI screen:

	Cannot generate a new certificate
	Certificate files do not exist.

Where should I start looking to solve this?
-+-+

Quite surprisingly, I received no answers.  So I decided to go spelunking deep within the .cobalt directories to see what I might find.  In short, I resolved the problem.  Here are some of the things I found out, for completeness of the archives....

The GUI page that configures the SSL for the main site seems to invoke the following:
/usr/admserv/cgi-bin/.cobalt/siteSSL/siteSSL.cgi

That cgi script, in turn, calls upon a number of Perl scripts for assistance.  The one I was interested in was:
/usr/lib/perl5/site_perl/5.005/Cobalt/Ssl.pm

That Perl script contains the function ssl_cert_check that [indirectly] triggers some of the error messages that I was seeing.  (I got this far via the wondefulness of recursive grep and a lot of time).

The ssl_cert_check function makes a system call to /usr/sbin/ssltest and I was missing that program.  I checked my log (I keep a log of all the steps I do when I make changes so that I can backtrack if necessary), but I saw nothing for the ssltest program.  So its disappearance remains a mystery.

I created a soft link (ln -s /usr/local/ssl/bin/ssltest /usr/sbin/ssltest) to the new ssltest program provided by the install of the current openssl.  I previously had created a similar soft link for the openssl program in /usr/sbin.  Everything is working fine now.  Note that I had to build ssltest, as it was not built with the default install of openssl.

I hope this helps someone in the future...