[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-users] RaQ4 - Cannot generate a new certificate, Files do not exist
- Subject: [cobalt-users] RaQ4 - Cannot generate a new certificate, Files do not exist
- From: "cobalt" <cobalt@xxxxxxxxxxxxxxxxx>
- Date: Fri Feb 7 11:07:01 2003
- List-id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
I am getting the following message when I try to generate a certificate on
any of my RaQ4 sites:
Cannot generate a new certificate
Certificate files do not exist.
I have searched around for answeres and the only thing I could find is the
following post which did not work for me since the ssltest program exists on
my server. Can anyone help???
----->
I needed to install the current version of openssl. In the process of doing
so, I have broken my RaQ3's ability to generate a self-signed certificate
for https pages. When I try to generate the self-signed certificate using
the GUI, I receive the following error message at the bottom of the GUI
screen:
Cannot generate a new certificate
Certificate files do not exist.
Where should I start looking to solve this?
-+-+
Quite surprisingly, I received no answers. So I decided to go spelunking
deep within the .cobalt directories to see what I might find. In short, I
resolved the problem. Here are some of the things I found out, for
completeness of the archives....
The GUI page that configures the SSL for the main site seems to invoke the
following:
/usr/admserv/cgi-bin/.cobalt/siteSSL/siteSSL.cgi
That cgi script, in turn, calls upon a number of Perl scripts for
assistance. The one I was interested in was:
/usr/lib/perl5/site_perl/5.005/Cobalt/Ssl.pm
That Perl script contains the function ssl_cert_check that [indirectly]
triggers some of the error messages that I was seeing. (I got this far via
the wondefulness of recursive grep and a lot of time).
The ssl_cert_check function makes a system call to /usr/sbin/ssltest and I
was missing that program. I checked my log (I keep a log of all the steps I
do when I make changes so that I can backtrack if necessary), but I saw
nothing for the ssltest program. So its disappearance remains a mystery.
I created a soft link (ln -s /usr/local/ssl/bin/ssltest /usr/sbin/ssltest)
to the new ssltest program provided by the install of the current openssl.
I previously had created a similar soft link for the openssl program in
/usr/sbin. Everything is working fine now. Note that I had to build
ssltest, as it was not built with the default install of openssl.
I hope this helps someone in the future...
----->