SSL cert not installed in latest 4.6 build

[Kurt Albershardt]

Ran a 'yum update' on an unconfigured 4.6 (installed on 7/25, the one with the unmet Homer dependency) and got only a couple of OS updates.

Running 'yum groupupgrade sipxecs' yielded 271 updates (now at 4.6.0.233)
Did a 'yum clean all' and restarted, then ran sipxecs-setup.

Five minutes later, no access via https:, so:

[***@sipx ~]# /etc/init.d/httpd status
httpd is stopped
[***@sipx ~]# /etc/init.d/httpd start
Starting httpd: Syntax error on line 18 of /etc/httpd/conf.d/ssl.conf:
SSLCertificateFile: file '/etc/httpd/conf.d/ssl/ssl-web.crt' does not exist or is empty
[FAILED]
[***@sipx ~]#

[Douglas Hubler]

check/send along sipxagent.log and sipxconfig.log

Post by Kurt Albershardt
Ran a 'yum update' on an unconfigured 4.6 (installed on 7/25, the one with the unmet Homer dependency) and got only a couple of OS updates.
Running 'yum groupupgrade sipxecs' yielded 271 updates (now at 4.6.0.233)
Did a 'yum clean all' and restarted, then ran sipxecs-setup.
httpd is stopped
SSLCertificateFile: file '/etc/httpd/conf.d/ssl/ssl-web.crt' does not exist or is empty
[FAILED]
_______________________________________________
sipx-users mailing list
List Archive: http://list.sipfoundry.org/archive/sipx-users/

[Kurt Albershardt]

sipxconfig.log and tail of sipxagent.log (which was 2 MB) attached.

[Tony Graziano]

mongo doesn't look right...

try:

bash -x /usr/bin/mongodb-repair
/etc/init.d/mongod start

Post by Kurt Albershardt
sipxconfig.log and tail of sipxagent.log (which was 2 MB) attached.
Updated via yum this morning and invoked 'sipxecs-setup --reset-all'
(with the same results.) Logs were grabbed before this step.

Post by Douglas Hubler
check/send along sipxagent.log and sipxconfig.log

Post by Kurt Albershardt
Ran a 'yum update' on an unconfigured 4.6 (installed on 7/25, the one

with the unmet Homer dependency) and got only a couple of OS updates.

Post by Douglas Hubler

Post by Kurt Albershardt
Running 'yum groupupgrade sipxecs' yielded 271 updates (now at

4.6.0.233)

Post by Douglas Hubler

Post by Kurt Albershardt
Did a 'yum clean all' and restarted, then ran sipxecs-setup.
httpd is stopped
SSLCertificateFile: file '/etc/httpd/conf.d/ssl/ssl-web.crt' does not

exist or is empty

Post by Douglas Hubler

Post by Kurt Albershardt
[FAILED]

_______________________________________________
sipx-users mailing list
List Archive: http://list.sipfoundry.org/archive/sipx-users/

--
~~~~~~~~~~~~~~~~~~
Tony Graziano, Manager
Telephone: [phone]
sip: ***@voice.myitdepartment.net
Fax: [phone]
~~~~~~~~~~~~~~~~~~
Linked-In Profile:
http://www.linkedin.com/pub/tony-graziano/14/4a6/7a4
Ask about our Internet Fax services!
~~~~~~~~~~~~~~~~~~

Using or developing for sipXecs from SIPFoundry? Ask me about sipX-CoLab
2013!
<http://sipxcolab2013.eventbrite.com/?discount=tony2013>

[Douglas Hubler]

Somehow you might have double quotes around your host name. When
running sipxecs-setup, did you put double quotes around your host
name? Can you send me /etc/sipxpbx/sipxconfig.properties?

Post by Kurt Albershardt
sipxconfig.log and tail of sipxagent.log (which was 2 MB) attached.
Updated via yum this morning and invoked 'sipxecs-setup --reset-all' (with the same results.) Logs were grabbed before this step.

Post by Douglas Hubler
check/send along sipxagent.log and sipxconfig.log

Post by Kurt Albershardt
Ran a 'yum update' on an unconfigured 4.6 (installed on 7/25, the one with the unmet Homer dependency) and got only a couple of OS updates.
Running 'yum groupupgrade sipxecs' yielded 271 updates (now at 4.6.0.233)
Did a 'yum clean all' and restarted, then ran sipxecs-setup.
httpd is stopped
SSLCertificateFile: file '/etc/httpd/conf.d/ssl/ssl-web.crt' does not exist or is empty
[FAILED]

_______________________________________________
sipx-users mailing list
List Archive: http://list.sipfoundry.org/archive/sipx-users/

[Kurt Albershardt]

In a few more minutes you will be able to access the administration
https://"sipx.domain.com"

[Kurt Albershardt]

did not add quotes -- and the URL at the end still has them:


[***@sipx ~]# sipxecs-setup --reset-all
This will wipe all configuration data from this server. Are you sure? [ enter 'y' or 'n' ] : y
Network settings:
IP address : 192.168.X.26
Would you like to configure your system's network settings? [ enter 'y' or 'n' ] : n
Enter just the host name of this computer?. Example: myhost. [ press enter for '"sipx' ] :
Enter just the domain name of your network? Example: mydomain.com [ press enter for 'domain.com"' ] :
Is this the first server in your cluster? [ enter 'y' or 'n' ] : y
Configuring as the first server...
Tip: Use '"sipx.domain.com"' as your SIP domain if you are
setting up for the first time or if you know you are only going to setup one
server. This can make configuration easier. You can always change the value
later.
Enter SIP domain name [ press enter for 'domain.com"' ] : sipx.domain.com
Enter SIP realm [ press enter for 'sipx.domain.com' ] :
Initial setup, this may take a few minutes...
Finishing system configuration, almost done...
done.


In a few more minutes you will be able to access the administration
interface from your web browser at the following URL:

https://"sipx.domain.com"

Post by Douglas Hubler
Somehow you might have double quotes around your host name. When
running sipxecs-setup, did you put double quotes around your host
name?

[Tony Graziano]

perhaps re-run the script and manually input the host and sipdomain
(instead of hitting enter) to see if it removes the quotes.

Post by Kurt Albershardt
This will wipe all configuration data from this server. Are you sure? [
enter 'y' or 'n' ] : y
IP address : 192.168.X.26
Would you like to configure your system's network settings? [ enter 'y' or 'n' ] : n
Enter just the domain name of your network? Example: mydomain.com [ press
Is this the first server in your cluster? [ enter 'y' or 'n' ] : y
Configuring as the first server...
Tip: Use '"sipx.domain.com"' as your SIP domain if you are
setting up for the first time or if you know you are only going to setup one
server. This can make configuration easier. You can always change the value
later.
Enter SIP domain name [ press enter for 'domain.com"' ] : sipx.domain.com
Initial setup, this may take a few minutes...
Finishing system configuration, almost done...
done.
In a few more minutes you will be able to access the administration
https://"sipx.domain.com"

Post by Douglas Hubler
Somehow you might have double quotes around your host name. When
running sipxecs-setup, did you put double quotes around your host
name?

_______________________________________________
sipx-users mailing list
List Archive: http://list.sipfoundry.org/archive/sipx-users/

--
~~~~~~~~~~~~~~~~~~
Tony Graziano, Manager
Telephone: [phone]
sip: ***@voice.myitdepartment.net
Fax: [phone]
~~~~~~~~~~~~~~~~~~
Linked-In Profile:
http://www.linkedin.com/pub/tony-graziano/14/4a6/7a4
Ask about our Internet Fax services!
~~~~~~~~~~~~~~~~~~

Using or developing for sipXecs from SIPFoundry? Ask me about sipX-CoLab
2013!
<http://sipxcolab2013.eventbrite.com/?discount=tony2013>

[Kurt Albershardt]

Just tried a couple variants of that - first one left the host and domain at default and then I manually typed everything else -- that produced the same result at the end:

https://"sipx.domain.com"


Note spurious double quotes show in the proposed defaults:

Enter just the host name of this computer?. Example: myhost. [ press enter for '"sipx' ] :
Enter just the domain name of your network? Example: mydomain.com [ press enter for 'domain.com"' ] :

Re- running but manually entering those produced the expected:

https://sipx.murray-hotel.com

at the end.



thanks~

perhaps re-run the script and manually input the host and sipdomain (instead of hitting enter) to see if it removes the quotes.
This will wipe all configuration data from this server. Are you sure? [ enter 'y' or 'n' ] : y
IP address : 192.168.X.26
Would you like to configure your system's network settings? [ enter 'y' or 'n' ] : n
Is this the first server in your cluster? [ enter 'y' or 'n' ] : y
Configuring as the first server...
Tip: Use '"sipx.domain.com"' as your SIP domain if you are
setting up for the first time or if you know you are only going to setup one
server. This can make configuration easier. You can always change the value
later.
Enter SIP domain name [ press enter for 'domain.com"' ] : sipx.domain.com
Initial setup, this may take a few minutes...
Finishing system configuration, almost done...
done.
In a few more minutes you will be able to access the administration
https://"sipx.domain.com"

Post by Douglas Hubler
Somehow you might have double quotes around your host name. When
running sipxecs-setup, did you put double quotes around your host
name?

_______________________________________________
sipx-users mailing list
List Archive: http://list.sipfoundry.org/archive/sipx-users/
--
~~~~~~~~~~~~~~~~~~
Tony Graziano, Manager
Telephone: [phone]
Fax: [phone]
~~~~~~~~~~~~~~~~~~
http://www.linkedin.com/pub/tony-graziano/14/4a6/7a4
Ask about our Internet Fax services!
~~~~~~~~~~~~~~~~~~
Using or developing for sipXecs from SIPFoundry? Ask me about sipX-CoLab 2013!
Telephone: [phone]
Helpdesk Customers: http://myhelp.myitdepartment.net
Blog: http://blog.myitdepartment.net
_______________________________________________
sipx-users mailing list
List Archive: http://list.sipfoundry.org/archive/sipx-users/

[Douglas Hubler]

Post by Kurt Albershardt
thanks~

We scrape host and domain from

/etc/sysconfig/network

so it probably *was* wrong there too. That value comes from using the
network config tool we launch from the setup-setup script. I say "was"
because we in turn write it back if you change the values. Best we can do
in this case is drop quotes if we find them

[Kurt Albershardt]

Post by Douglas Hubler
We scrape host and domain from
/etc/sysconfig/network
so it probably *was* wrong there too. That value comes from using the network config tool we launch from the setup-setup script. I say "was" because we in turn write it back if you change the values. Best we can do in this case is drop quotes if we find them

Currently no quotes there, which is not standard syntax -- is it possible the scrape didn't strip quotes?

[***@sipx ~]# cat /etc/sysconfig/network
NETWORKING="yes"
GATEWAYDEV="venet0"
NETWORKING_IPV6="yes"
IPV6_DEFAULTDEV="venet0"
HOSTNAME=sipx.murray-hotel.com
[***@sipx ~]#

[Tony Graziano]

i might venture a guess that re-running the script and taking the defaults
are doing this. if so, it would be incorrect and unwanted behavior. i think
in order to open a jira, it needs to be tried against a fresh install and
all patched up prior to running, then re-running the script. if it
continues to happen a jira would be in order.

Post by Kurt Albershardt
Just tried a couple variants of that - first one left the host and domain
at default and then I manually typed everything else -- that produced the
https://"sipx.domain.com"
Enter just the domain name of your network? Example: mydomain.com [ press
https://sipx.murray-hotel.com
at the end.
thanks~
perhaps re-run the script and manually input the host and sipdomain
(instead of hitting enter) to see if it removes the quotes.

Post by Kurt Albershardt
This will wipe all configuration data from this server. Are you sure? [
enter 'y' or 'n' ] : y
IP address : 192.168.X.26
Would you like to configure your system's network settings? [ enter 'y' or 'n' ] : n
Enter just the host name of this computer?. Example: myhost. [ press
Enter just the domain name of your network? Example: mydomain.com [
Is this the first server in your cluster? [ enter 'y' or 'n' ] : y
Configuring as the first server...
Tip: Use '"sipx.domain.com"' as your SIP domain if you are
setting up for the first time or if you know you are only going to setup one
server. This can make configuration easier. You can always change the value
later.
Enter SIP domain name [ press enter for 'domain.com"' ] : sipx.domain.com
Initial setup, this may take a few minutes...
Finishing system configuration, almost done...
done.
In a few more minutes you will be able to access the administration
https://"sipx.domain.com"

Post by Douglas Hubler
Somehow you might have double quotes around your host name. When
running sipxecs-setup, did you put double quotes around your host
name?

_______________________________________________
sipx-users mailing list
List Archive: http://list.sipfoundry.org/archive/sipx-users/

--
~~~~~~~~~~~~~~~~~~
Tony Graziano, Manager
Telephone: [phone]
Fax: [phone]
~~~~~~~~~~~~~~~~~~
http://www.linkedin.com/pub/tony-graziano/14/4a6/7a4
Ask about our Internet Fax services!
~~~~~~~~~~~~~~~~~~
Using or developing for sipXecs from SIPFoundry? Ask me about sipX-CoLab 2013!
<http://sipxcolab2013.eventbrite.com/?discount=tony2013>
Telephone: [phone]
Helpdesk Customers: http://myhelp.myitdepartment.**net<http://myhelp.myitdepartment.net/>
Blog: http://blog.myitdepartment.net
_______________________________________________
sipx-users mailing list
List Archive: http://list.sipfoundry.org/archive/sipx-users/
_______________________________________________
sipx-users mailing list
List Archive: http://list.sipfoundry.org/archive/sipx-users/

--
~~~~~~~~~~~~~~~~~~
Tony Graziano, Manager
Telephone: [phone]
sip: ***@voice.myitdepartment.net
Fax: [phone]
~~~~~~~~~~~~~~~~~~
Linked-In Profile:
http://www.linkedin.com/pub/tony-graziano/14/4a6/7a4
Ask about our Internet Fax services!
~~~~~~~~~~~~~~~~~~

Using or developing for sipXecs from SIPFoundry? Ask me about sipX-CoLab
2013!
<http://sipxcolab2013.eventbrite.com/?discount=tony2013>

[Kurt Albershardt]

Happened the first time I ran the script, FWIW.
Install was updated 2-3x before I ran setup (due to dependency glitches) so it's not a good test case.
I'll re-install on a clean VM and try again.

i might venture a guess that re-running the script and taking the defaults are doing this. if so, it would be incorrect and unwanted behavior. i think in order to open a jira, it needs to be tried against a fresh install and all patched up prior to running, then re-running the script. if it continues to happen a jira would be in order.
https://"sipx.domain.com"
https://sipx.murray-hotel.com
at the end.
thanks~

perhaps re-run the script and manually input the host and sipdomain (instead of hitting enter) to see if it removes the quotes.
This will wipe all configuration data from this server. Are you sure? [ enter 'y' or 'n' ] : y
IP address : 192.168.X.26
Would you like to configure your system's network settings? [ enter 'y' or 'n' ] : n
Is this the first server in your cluster? [ enter 'y' or 'n' ] : y
Configuring as the first server...
Tip: Use '"sipx.domain.com"' as your SIP domain if you are
setting up for the first time or if you know you are only going to setup one
server. This can make configuration easier. You can always change the value
later.
Enter SIP domain name [ press enter for 'domain.com"' ] : sipx.domain.com
Initial setup, this may take a few minutes...
Finishing system configuration, almost done...
done.
In a few more minutes you will be able to access the administration
https://"sipx.domain.com"

Post by Douglas Hubler
Somehow you might have double quotes around your host name. When
running sipxecs-setup, did you put double quotes around your host
name?

_______________________________________________
sipx-users mailing list
List Archive: http://list.sipfoundry.org/archive/sipx-users/
--
~~~~~~~~~~~~~~~~~~
Tony Graziano, Manager
Telephone: [phone]
Fax: [phone]
~~~~~~~~~~~~~~~~~~
http://www.linkedin.com/pub/tony-graziano/14/4a6/7a4
Ask about our Internet Fax services!
~~~~~~~~~~~~~~~~~~
Using or developing for sipXecs from SIPFoundry? Ask me about sipX-CoLab 2013!
Telephone: [phone]
Helpdesk Customers: http://myhelp.myitdepartment.net
Blog: http://blog.myitdepartment.net
_______________________________________________
sipx-users mailing list
List Archive: http://list.sipfoundry.org/archive/sipx-users/

_______________________________________________
sipx-users mailing list
List Archive: http://list.sipfoundry.org/archive/sipx-users/
--
~~~~~~~~~~~~~~~~~~
Tony Graziano, Manager
Telephone: [phone]
Fax: [phone]
~~~~~~~~~~~~~~~~~~
http://www.linkedin.com/pub/tony-graziano/14/4a6/7a4
Ask about our Internet Fax services!
~~~~~~~~~~~~~~~~~~
Using or developing for sipXecs from SIPFoundry? Ask me about sipX-CoLab 2013!
Telephone: [phone]
Helpdesk Customers: http://myhelp.myitdepartment.net
Blog: http://blog.myitdepartment.net
_______________________________________________
sipx-users mailing list
List Archive: http://list.sipfoundry.org/archive/sipx-users/

[Kurt Albershardt]

First time running setup script on a freshly built Centos 6 VM:


[***@sipx ~]# cat /etc/sysconfig/network
NETWORKING="yes"
GATEWAYDEV="venet0"
NETWORKING_IPV6="yes"
IPV6_DEFAULTDEV="venet0"
HOSTNAME="sipx.domain.com"

[***@sipx ~]# sipxecs-setup
Network settings:
IP address : 192.168.X.26
Would you like to configure your system's network settings? [ enter 'y' or 'n' ] : n
Enter just the host name of this computer?. Example: myhost. [ press enter for '"sipx' ] :
Enter just the domain name of your network? Example: mydomain.com [ press enter for 'domain.com"' ] :
Is this the first server in your cluster? [ enter 'y' or 'n' ] : y
Configuring as the first server...
Tip: Use '"sipx.domain.com"' as your SIP domain if you are
setting up for the first time or if you know you are only going to setup one
server. This can make configuration easier. You can always change the value
later.
Enter SIP domain name [ press enter for 'domain.com"' ] :
Enter SIP realm [ press enter for 'domain.com"' ] :
Initial setup, this may take a few minutes...
Finishing system configuration, almost done...
done.


In a few more minutes you will be able to access the administration
interface from your web browser at the following URL:

https://"sipx.domain.com"

Post by Kurt Albershardt
Happened the first time I ran the script, FWIW.
Install was updated 2-3x before I ran setup (due to dependency glitches) so it's not a good test case.
I'll re-install on a clean VM and try again.

i might venture a guess that re-running the script and taking the defaults are doing this. if so, it would be incorrect and unwanted behavior. i think in order to open a jira, it needs to be tried against a fresh install and all patched up prior to running, then re-running the script. if it continues to happen a jira would be in order.
https://"sipx.domain.com"
https://sipx.murray-hotel.com
at the end.
thanks~

perhaps re-run the script and manually input the host and sipdomain (instead of hitting enter) to see if it removes the quotes.
This will wipe all configuration data from this server. Are you sure? [ enter 'y' or 'n' ] : y
IP address : 192.168.X.26
Would you like to configure your system's network settings? [ enter 'y' or 'n' ] : n
Is this the first server in your cluster? [ enter 'y' or 'n' ] : y
Configuring as the first server...
Tip: Use '"sipx.domain.com"' as your SIP domain if you are
setting up for the first time or if you know you are only going to setup one
server. This can make configuration easier. You can always change the value
later.
Enter SIP domain name [ press enter for 'domain.com"' ] : sipx.domain.com
Initial setup, this may take a few minutes...
Finishing system configuration, almost done...
done.
In a few more minutes you will be able to access the administration
https://"sipx.domain.com"

Post by Douglas Hubler
Somehow you might have double quotes around your host name. When
running sipxecs-setup, did you put double quotes around your host
name?

[Kurt Albershardt]

Created http://track.sipfoundry.org/browse/XX-10340

Quite likely a release a blocker, but not my call.

Post by Kurt Albershardt
NETWORKING="yes"
GATEWAYDEV="venet0"
NETWORKING_IPV6="yes"
IPV6_DEFAULTDEV="venet0"
HOSTNAME="sipx.domain.com"
IP address : 192.168.X.26
Would you like to configure your system's network settings? [ enter 'y' or 'n' ] : n
Is this the first server in your cluster? [ enter 'y' or 'n' ] : y
Configuring as the first server...
Tip: Use '"sipx.domain.com"' as your SIP domain if you are
setting up for the first time or if you know you are only going to setup one
server. This can make configuration easier. You can always change the value
later.
Initial setup, this may take a few minutes...
Finishing system configuration, almost done...
done.
In a few more minutes you will be able to access the administration
https://"sipx.domain.com"

Post by Kurt Albershardt
Happened the first time I ran the script, FWIW.
Install was updated 2-3x before I ran setup (due to dependency glitches) so it's not a good test case.
I'll re-install on a clean VM and try again.

i might venture a guess that re-running the script and taking the defaults are doing this. if so, it would be incorrect and unwanted behavior. i think in order to open a jira, it needs to be tried against a fresh install and all patched up prior to running, then re-running the script. if it continues to happen a jira would be in order.
https://"sipx.domain.com"
https://sipx.murray-hotel.com
at the end.
thanks~

perhaps re-run the script and manually input the host and sipdomain (instead of hitting enter) to see if it removes the quotes.
This will wipe all configuration data from this server. Are you sure? [ enter 'y' or 'n' ] : y
IP address : 192.168.X.26
Would you like to configure your system's network settings? [ enter 'y' or 'n' ] : n
Is this the first server in your cluster? [ enter 'y' or 'n' ] : y
Configuring as the first server...
Tip: Use '"sipx.domain.com"' as your SIP domain if you are
setting up for the first time or if you know you are only going to setup one
server. This can make configuration easier. You can always change the value
later.
Enter SIP domain name [ press enter for 'domain.com"' ] : sipx.domain.com
Initial setup, this may take a few minutes...
Finishing system configuration, almost done...
done.
In a few more minutes you will be able to access the administration
https://"sipx.domain.com"

Post by Douglas Hubler
Somehow you might have double quotes around your host name. When
running sipxecs-setup, did you put double quotes around your host
name?

_______________________________________________
sipx-users mailing list
List Archive: http://list.sipfoundry.org/archive/sipx-users/

[Kurt Albershardt]

Fixed in latest 4.6.0-233 CentOS RPMs.

thanks~

Post by Kurt Albershardt
Created http://track.sipfoundry.org/browse/XX-10340
Quite likely a release blocker, but not my call.