Forums

×

Warning

JUser: :_load: Unable to load user with ID: 177211
Medium
Offline
Resolved
0 votes
HI All

I wonder if somebody could help me. I bought a domain and and an external certificate. I inserted the new certificate in the ClearOS and now I cannot access webconfigurator.

I think I may know what the issue is - I didn't set up te DNS Entry to point to the IP address. How can I go and insert DNS Entry? What fire do I need to amend?

Regards
Sunday, October 15 2017, 02:18 PM
Share this post:
Responses (9)
  • Accepted Answer

    Monday, October 16 2017, 11:08 AM - #Permalink
    Resolved
    0 votes
    Hi Nick

    You are a life saver. You just saved me re-install and re-configure.

    There was an error with the licence and the private key validation. I created a new certificate and the private key. All works now.

    Thank you for your help
    Bhavesh
    The reply is currently minimized Show
  • Accepted Answer

    Monday, October 16 2017, 08:42 AM - #Permalink
    Resolved
    0 votes
    I've found a good reference which points to the correct files to look at. You will want to do the reverse of the instructions.
    The reply is currently minimized Show
  • Accepted Answer

    Monday, October 16 2017, 08:33 AM - #Permalink
    Resolved
    0 votes
    Yes you can fix it manually but I can't tell you how from work as I can't remember which file the Webconfig uses. It is probably in the ClearOS sandbox (do a "locate sandbox" to look for anything obvious), but could be in /etc/httpd somewhere. If you can locate the conf file, also do a "locate backup" and you will find the last 10-14 days of config backup files. You could replace the file from there or have a look at the file there and edit the current one to match. It should only be the certificate entries which have changed (the three I mentioned earlier but there should not be a chain entry, and possibly a CA entry).
    The reply is currently minimized Show
  • Accepted Answer

    Monday, October 16 2017, 08:08 AM - #Permalink
    Resolved
    0 votes
    Hi Nick

    Thank you for your detailed answer.

    I did import the certificate via web configurator. I then applied the certificate using one of the other screens (I don't have the name at the moment, it has two options, certificate as the dropdown, and something else) As soon as that was applied, I lost the connection.

    Can I not go and delete this certificate or change it back to web configurator certificate using Putty?
    The reply is currently minimized Show
  • Accepted Answer

    Sunday, October 15 2017, 06:16 PM - #Permalink
    Resolved
    0 votes
    If you applied the certificate by hand and made a mistake the Webconfig server can fail to start. How did you apply the certificates? In 7.x you can import your certificate through Webconfig > System > Settings > Certificate Manager. In some combination you may need the Certificate, Intermediate Certificate and Key. Sometimes the Certificate and Intermediate Certificate can be supplied as a combined file, in which case, import it as the certificate and don't bother with the combined file.

    You can then apply the certificate to the Webconfig through Webconfig > System > Settings > General Settings.. You apply the certificates to the normal web server through Webconfig > Server > Web Server.

    If doing it manually for either the Webconfig or for Web Servers, you'll need to supply values for:
    	SSLCertificateFile
    SSLCertificateKeyFile
    SSLCertificateChainFile
    But not SSLCertificateChainFile if the certificate is combined with the chain.

    Have a look in your Apache error logs in /var/log/webconfig to see if there are certificate errors and it may tell you what is missing or wrong.
    The reply is currently minimized Show
  • Accepted Answer

    Sunday, October 15 2017, 05:35 PM - #Permalink
    Resolved
    0 votes
    Hi Nick

    That didn't help. I cannot use IP or the url. I can logon via putty though. It is a fresh install so I can just wipe clean and re start. But it is bugging me that it lost the facility to log me in. This could happen in live system and I might be in trouble.
    What they need is ability to logon from the ClearOS box as well.

    Regards
    The reply is currently minimized Show
  • Accepted Answer

    Sunday, October 15 2017, 04:11 PM - #Permalink
    Resolved
    0 votes
    Entries should look like:
    172.17.2.107	Wii.howitts.co.uk		Wii
    172.17.2.108 iPad.howitts.co.uk iPad
    You don't need both the long and short entry but I do it anyway. The short one should be ok if the LAN is set to your domain name.

    I don't think you need to restart anything, but if you do, do a:
    service dnsmasq restart


    For an editor you can use nano.

    It does not make sense that you cannot access the server by any means unless the browser is refusing you entry. Does PuTTy or WinSCP work?
    The reply is currently minimized Show
  • Accepted Answer

    Sunday, October 15 2017, 03:28 PM - #Permalink
    Resolved
    0 votes
    Hi Nick

    Thanks for the reply. I am not able to access my server by any means unless I go to the server. Nothing in the /etc/hosts except 127.0.0.1. Any particular way to insert the DNS names? Also do I need to restart anything after I amend the file?

    Regards
    Bhavesh
    The reply is currently minimized Show
  • Accepted Answer

    Sunday, October 15 2017, 03:17 PM - #Permalink
    Resolved
    0 votes
    You should still be able to access the webconfig by IP address. If you can, use the Webconfig > Network > Infrastructure > DNS Server to add the record there. If not, edit the file /etc/hosts.
    The reply is currently minimized Show
Your Reply