no webui nginx error with ssl certificate after recent updates

sagatxxx · 26. Juni 2015

Good morning guys, after the last update I find no access to the web server and when I try to restart the service nginx I get this error:

Code

root@mini:~# service nginx status
nginx is not running ... failed!


root@mini:~# service nginx restart
Restarting nginx: nginx: [emerg] 
SSL_CTX_use_certificate_chain_file("/certs/0951edee-df16-47a8-98ea-b487e2362e16.crt") 
failed (SSL: error:02001002:system library:fopen:No such file or directory 
error:20074002:BIO routines:FILE_CTRL:system lib error:140DC002:SSL 
routines:SSL_CTX_use_certificate_chain_file:system lib)
nginx: configuration 
file /etc/nginx/nginx.conf test failed

Alles anzeigen

what is happening? and especially as I fix

thanks for help

davidh2k · 26. Juni 2015

Try "Welcome to nignx" or "It works!"

Greetings
David

votdev · 26. Juni 2015

Which software version are you using? How did you install the update? Are we talking about the OMV webgui or Owncloud?

Please tell us your OMV version and paste the file /etc/default/openmediavault here.

When you are using 2.0.15 I assume your file is missing

Code

OMV_SSL_CERTIFICATE_DIR="/etc/ssl"
OMV_SSL_CERTIFICATE_PREFIX="openmediavault-"

because you installed the package update via 'apt-get upgrade' manually and not 'omv-update' or the WebGUI.

After you've added the missing ebvironment variables recreate the nginx config and restart the service

Code

# omv-mkconf nginx
# service nginx restart

sagatxxx · 26. Juni 2015

Zitat von davidh2k

Try "Welcome to nignx" or "It works!"

Greetings
David

not worked, David

Zitat von votdev
Which software version are you using? How did you install the update? Are we talking about the OMV webgui or Owncloud?

Please tell us your OMV version and paste the file /etc/default/openmediavault here.

When you are using 2.0.15 I assume your file is missing
Code
OMV_SSL_CERTIFICATE_DIR="/etc/ssl"
OMV_SSL_CERTIFICATE_PREFIX="openmediavault-"
because you installed the package update via 'apt-get upgrade' manually and not 'omv-update' or the WebGUI.

After you've added the missing ebvironment variables recreate the nginx config and restart the service
Code
# omv-mkconf nginx
# service nginx restart
Alles anzeigen

its the OMV webui, and now that I look... owncloud does not work either
I have the latest version OMV and all packages, This has happened to me after installing the latest version of OMV-extras, I think!

this is my file /etc/default/openmediavault

Code

OMV_CONFIG_FILE="/etc/openmediavault/config.xml"


OMV_CONFIG_TEMPLATE_FILE="/usr/share/openmediavault/templates/config.xml"


OMV_PRODUCTINFO_FILE="/usr/share/openmediavault/productinfo.xml"


OMV_SCRIPTS_DIR="/usr/share/openmediavault/scripts"


OMV_I18N_LOCALE_DIR="/usr/share/openmediavault/locale"


OMV_MOUNT_DIR="/media"


OMV_NFSD_EXPORT_DIR="/export"


OMV_CACHE_DIR="/var/cache/openmediavault"


OMV_LOG_DIR="/var/log/openmediavault"


OMV_SSL_CERTIFICATE_DIR="/etc/ssl"


OMV_SSL_CERTIFICATE_PREFIX="openmediavault-"


OMV_SSH_KEYS_DIR="/var/lib/openmediavault/ssh/keys"


OMV_SSH_KEY_PREFIX="openmediavault-"


OMV_DPKGARCHIVE_DIR="/var/cache/openmediavault/archives"


OMV_DOCUMENTROOT_DIR="/var/www/openmediavault"


OMV_CRONSCRIPTS_DIR="/var/lib/openmediavault/cron.d"


OMV_CONFIGIMPORT_SCRIPTS_DIR="/usr/share/openmediavault/configimport"


OMV_MKCONF_SCRIPTS_DIR="/usr/share/openmediavault/mkconf"


OMV_ENGINED_DIR="/usr/share/openmediavault/engined"


OMV_ENGINED_SO_ADDRESS="/var/lib/openmediavault/engined.sock"


OMV_ENGINED_SO_SNDTIMEO=10


OMV_ENGINED_SO_RCVTIMEO=180


OMV_ENGINED_DIRTY_MODULES_FILE="/var/lib/openmediavault/dirtymodules.json"


OMV_INITSYSTEM_SCRIPTS_DIR="/usr/share/openmediavault/initsystem"


OMV_INITSYSTEM_FILE="/var/lib/openmediavault/initsystem.req"


OMV_USERMGMT_DEFAULT_GROUP="users"


OMV_RRDGRAPH_DIR="/var/lib/openmediavault/rrd"


OMV_RRDGRAPH_ERROR_IMAGE="/usr/share/openmediavault/icons/rrd_graph_error_64.png"


OMV_WEBGUI_FILE_OWNERGROUP_NAME="openmediavault"


OMV_DEBUG_SCRIPT="NO"


OMV_DEBUG_PHP="NO"


OMV_DEBUG_EXTJS="NO"

Alles anzeigen

votdev, I have always used webui to update

Code

root@mini:~# omv-mkconf nginx


root@mini:~# service nginx restart


Restarting nginx: nginx: [emerg] SSL_CTX_use_certificate_chain_file("/certs/0951edee-df16-47a8-98ea-b487e2362e16.crt") failed (SSL: error:02001002:system library:fopen:No such file or directory error:20074002:BIO routines:FILE_CTRL:system lib error:140DC002:SSL routines:SSL_CTX_use_certificate_chain_file:system lib)


nginx: configuration file /etc/nginx/nginx.conf test failed


root@mini:~#

Alles anzeigen

i dont know how rebuild missing ebvironment variables??
and then do everything you tell me is still not working

votdev · 26. Juni 2015

You have to wait until the OMV core and owncloud packages have been upgraded. See http://sourceforge.net/p/openmediavault/code/1916/ for the code changes.

sagatxxx · 26. Juni 2015

Zitat von votdev

You have to wait until the OMV core and owncloud packages have been upgraded. See http://sourceforge.net/p/openmediavault/code/1916/ for the code changes.

ok , and as I do?
Please could you tell me what commands I have to run...
owncloud not mind too much but I need access OMV-webui
thanks a lot Volker!

votdev · 26. Juni 2015

After openmediavault 2.1 has been released you have to do the following from within the CLI:

Code

# omv-update
# omv-mkconf nginx
# service nginx restart

sagatxxx · 26. Juni 2015

Zitat von votdev
After openmediavault 2.1 has been released you have to do the following from within the CLI:
Code
# omv-update
# omv-mkconf nginx
# service nginx restart

ok I wait for the release date 29-06
thanks !!

timmotyD · 3. Juli 2015

Hello,

Fresh installation of OMV 2.1.
Installed nginx plugin.
Pool configured. Then trying to set new server with SSL and getting this error:

Failed to execute command 'export LANG=C; nginx -t 2>&1': Site configuration file 'openmediavault-nginx' not found. nginx: [emerg] SSL_CTX_use_certificate_chain_file("/certs/b167d8f5-1755-4639-b0ef-f286f52451ca.crt") failed (SSL: error:02001002:system library:fopen:No such file or directory error:20074002:BIO routines:FILE_CTRL:system lib error:140DC002:SSL routines:SSL_CTX_use_certificate_chain_file:system lib) nginx: configuration file /etc/nginx/nginx.conf test failed

what is more it crashes also OMV WebUI - it's not accessible anymore, so only omv-firstaid help to fix it.
server w/o SSL works with any problems.

timmotyD · 3. Juli 2015

Did a little more investigation.

I have in /etc/default/openmediavault, variables:
OMV_SSL_CERTIFICATE_DIR="/etc/ssl"
OMV_SSL_CERTIFICATE_PREFIX="openmediavault-"

...but on the other side here is how ssl config looks like in openmediavault-nginx:

ssl_certificate /certs/b167d8f5-1755-4639-b0ef-f286f52451ca.crt;
ssl_certificate_key /private/b167d8f5-1755-4639-b0ef-f286f52451ca.key;

...so, directry and prefix for a file is inccorect.

Correcting directory and prefix for a file fix the issue.
But it's manuall work

ryecoaaron · 3. Juli 2015

HK fixed the cert location. Update is in repo now.

Hiero · 6. Juli 2015

I had exaclty the same problems.
At the weekend i tried to post my message here in the forums but there were some strange posting-issues which are now fixed. (not all i think!)

I recently found the latest changes to the ssl-certificate config here:
https://github.com/OpenMediaVa…6317ae1e38e9f33d504c663ed

and was able to fix the problem by myself.
If someone stumbles over this problem one should take a look at the corrected openmediavault-nginx above.

Jetzt mitmachen!