[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] RaQ4 - Cannot generate a new certificate, Files do not exist



I am getting the following message when I try to generate a certificate on
any of my RaQ4 sites:

Cannot generate a new certificate
Certificate files do not exist.

I have searched around for answeres and the only thing I could find is the
following post which did not work for me since the ssltest program exists on
my server.  Can anyone help???

----->
I needed to install the current version of openssl.  In the process of doing
so, I have broken my RaQ3's ability to generate a self-signed certificate
for https pages.  When I try to generate the self-signed certificate using
the GUI, I receive the following error message at the bottom of the GUI
screen:

Cannot generate a new certificate
Certificate files do not exist.

Where should I start looking to solve this?
-+-+

Quite surprisingly, I received no answers.  So I decided to go spelunking
deep within the .cobalt directories to see what I might find.  In short, I
resolved the problem.  Here are some of the things I found out, for
completeness of the archives....

The GUI page that configures the SSL for the main site seems to invoke the
following:
/usr/admserv/cgi-bin/.cobalt/siteSSL/siteSSL.cgi

That cgi script, in turn, calls upon a number of Perl scripts for
assistance.  The one I was interested in was:
/usr/lib/perl5/site_perl/5.005/Cobalt/Ssl.pm

That Perl script contains the function ssl_cert_check that [indirectly]
triggers some of the error messages that I was seeing.  (I got this far via
the wondefulness of recursive grep and a lot of time).

The ssl_cert_check function makes a system call to /usr/sbin/ssltest and I
was missing that program.  I checked my log (I keep a log of all the steps I
do when I make changes so that I can backtrack if necessary), but I saw
nothing for the ssltest program.  So its disappearance remains a mystery.

I created a soft link (ln -s /usr/local/ssl/bin/ssltest /usr/sbin/ssltest)
to the new ssltest program provided by the install of the current openssl.
I previously had created a similar soft link for the openssl program in
/usr/sbin.  Everything is working fine now.  Note that I had to build
ssltest, as it was not built with the default install of openssl.

I hope this helps someone in the future...
----->