WebAdmin https://localhost:8443 not responding

[Birger123]

Has been working fine since a couple of weeks. Now WebAdmin does not start at boot. No service listening on port 8443 (nmap localhost). Rest of server seem to be fine.

root@phzentyal01:~# systemctl status service nginx.service
Unit service.service could not be found.
● nginx.service - A high performance web server and a reverse proxy server
   Loaded: loaded (/lib/systemd/system/nginx.service; disabled; vendor preset: enabled)
   Active: failed (Result: exit-code) since Wed 2020-12-30 13:01:13 CET; 8min ago
     Docs: man:nginx(
  Process: 15460 ExecStart=/usr/sbin/nginx -g daemon on; master_process on; (code=exited, status=1/FAILURE)
  Process: 15459 ExecStartPre=/usr/sbin/nginx -t -q -g daemon on; master_process on; (code=exited, status=0/SUCCESS)

dec 30 13:01:10 phzentyal01 systemd[1]: Starting A high performance web server and a reverse proxy server...
dec 30 13:01:10 phzentyal01 nginx[15460]: nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address already in use)
dec 30 13:01:13 phzentyal01 nginx[15460]: nginx: [emerg] still could not bind()
dec 30 13:01:13 phzentyal01 systemd[1]: nginx.service: Control process exited, code=exited status=1
dec 30 13:01:13 phzentyal01 systemd[1]: nginx.service: Failed with result 'exit-code'.
dec 30 13:01:13 phzentyal01 systemd[1]: Failed to start A high performance web server and a reverse proxy server.

/var/log/zentyal/software.log
2020-12-29 01:57:37> Starting automatic update of the following packages: zentyal-ftp zentyal-ca zentyal-core
Reading package lists...
Building dependency tree...
Reading state information...
Setting up zentyal-ca (6.2.1) ...
 * Restarting Zentyal module: ca
   ...done.
Using configuration from /var/lib/zentyal/conf/openssl.cnf
Setting up zentyal-ftp (6.2.1) ...
Processing triggers for man-db (2.8.3-2ubuntu0.1) ...
Processing triggers for zentyal-core (6.2.5) ...
 * Restarting Zentyal module: webadmin
   ...done.
 * Restarting Zentyal module: logs
   ...done.
2020-12-29 01:59:12> Automatic update finished

[Birger123]

/var/log/nginx/error.log
2020/12/30 11:41:32 [emerg] 6291#6291: SSL_CTX_use_PrivateKey_file("/var/lib/zentyal/conf/ssl/ssl.key") failed (SSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch)
2020/12/30 11:45:14 [emerg] 6803#6803: bind() to 0.0.0.0:80 failed (98: Address already in use)

[DracoAn]

I have the same problem.

[richstyles]

  Our Gui is inacsessable today as the issue above, but also the Apache2 module is not found.

Could we get some movement on this please? I wonder if others will have same issue soon.

We run our updates after work hours and this morning we can't access the GUI & and after checking to see if the Apache2 mod is active or
try to restart it, it cant be found.

Is the route of this the Apache web server?

Many thanks

Rich Styles
I.T Dept
Flix Interactive Ltd.

[webmaster]

Hello,

If you continue with the issue, please check out this bug report (2012) and the solution provided in the last comment:

https://github.com/zentyal/zentyal/issues/2012#issuecomment-760304920

BR.

[doncamilo]

 

The command you are looking for isn't

Code: [Select]

systemctl status service nginx.service but this one

Code: [Select]

systemctl status zentyal.webadmin-nginx.service
You should check this one too

Code: [Select]

systemctl status zentyal.webadmin-uwsgi.service
These logs could be useful:

• /var/log/nginx/error.log
• /var/log/zentyal/uwsgi.log
• /var/log/zentyal/zentyal.log

Code: [Select]

2020/12/30 11:41:32 [emerg] 6291#6291: SSL_CTX_use_PrivateKey_file("/var/lib/zentyal/conf/ssl/ssl.key") failed (SSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch)
You have an issue with your SSL key and certificate for Webadmin.

You can check that your key and cert match this way:

Code: [Select]

sudo openssl rsa -in /var/lib/zentyal/conf/ssl/ssl.key -noout -modulus | openssl md5
(stdin)= e4420cbf00bb6017b32a7a29e9aa26ac
sudo openssl x509 -in /var/lib/zentyal/conf/ssl/ssl.pem -noout -modulus | openssl md5
(stdin)= e4420cbf00bb6017b32a7a29e9aa26ac

You can fix it manually by changing the nginx.conf.mas this way:

Code: [Select]

ssl_certificate <% $zentyalconfdir %>ssl/ssl.pem;
ssl_certificate_key <% $zentyalconfdir %>ssl/ssl.pem;

Use the before openssl commands to check the match between the private key in ssl.pem and the public key in the same file.

Cheers!