Force SSL failure

sbenson

I was looking to force SSL and found that you can run the install with a -S. I attempted this and had an error restarting apache

* Setting up SSL FOG Server...................................OK
* Restarting Apache2 for fog vhost............................Failed!

Upon looking into the problem I found that line 9 of the apache conf for fog had a syntax error

Sep 20 14:39:38 Fog-Dev apache2[18425]: AH00526: Syntax error on line 9 of /etc/apache2/sites-enabled/001-fog.conf:
Sep 20 14:39:38 Fog-Dev apache2[18425]: Invalid command '-e<VirtualHost', perhaps misspelled or defined by a module not included in th

Looking into the config file I found this trainwreck.

-e<VirtualHost *:443>\n\tKeepAlive Off\n\tServername 192.168.76.169\n\tDocumentRoot /var/www/html/\n\tSSLEngine On\n\tSSLProtocol all -SSLv3 -SSLv2\n\tSSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA\n\tSSLHonorCipherOrder on\n\tSSLCertificateFile /var/www/html/fog//management/other/ssl/srvpublic.crt\n\tSSLCertificateKeyFile /opt/fog/snapins/ssl//.srvprivate.key\n\tSSLCertificateChainFile /var/www/html/fog//management/other/ca.cert.der\n</VirtualHost>

I can manually fix this(I think), but the install script should have this fixed.
EDIT1:
Update functions.sh. It’s missing a space.

sed -i 's/-e"/-e "/' trunk/lib/common/functions.sh

EDIT2:
After the update to functions.sh it successfully starts apache, but now has and error backing up the database.

* Resetting SSL Permissions...................................OK
* Setting up SSL FOG Server...................................OK
* Restarting Apache2 for fog vhost............................OK
* Changing permissions on apache log files....................OK
* Backing up database.........................................Failed!

Wayne Workman

what version of FOG? Tom may have already fixed this.

Run the installer as snmysqlhost='127.0.0.1' ./installfog.sh -y and see if that works. If so, edit the /opt/fog/.fogsettings file and modify snmysqlhost=

sbenson

define('FOG_VERSION', '1.3.0-RC-10');
        define('FOG_SCHEMA', 234);
        define('FOG_BCACHE_VER', 100);
-        define('FOG_SVN_REVISION', 5954);
+        define('FOG_SVN_REVISION', 5955);
        define('FOG_CLIENT_VERSION', '0.11.5');

sbenson

@Wayne-Workman

Turning on debugging and I found this

* Backing up database.........................................+ return 0
+ [[ -d /home//fog_web_1.3.0-RC-10.BACKUP ]]
+ [[ ! -d /home//fogDBbackups ]]
++ date +%Y%m%d_%I%M%S
+ wget --no-check-certificate -O /home//fogDBbackups/fog_sql_1.3.0-RC-10_20160920_031708.sql http://192.168.76.169//fog//maintenance/backup_db.php '--post-data=type=sql&fogajaxonly=1'
+ errorStat 4
+ local status=4
+ [[ 4 != 0 ]]
+ echo 'Failed!'
Failed!
+ [[ -z '' ]]
+ exit 1

http://192.168.76.169/fog/status/bandwidth.php?type=sql&fogajaxonly=1 is unable to connect
where
http://127.0.0.1/fog/status/bandwidth.php?type=sql&fogajaxonly=1 does work, but provides back

{"dev":"Unknown","rx":0,"tx":0}

EDIT: This is my fault. I am in a devel environment and I am swapping cables as to not mess up the current DHCP server(overlapping ranges, etc). It looks like my IP has changed. The database issue is on my end

sbenson

Ok, so there MIGHT be another issue with SSL and upgrading. I am running the upgrade and it says to go to http://192.168.76.10/fog/management to complete the schema upgrade.

upon doing so I get a “this connection is not secure”. I add the cert and it takes me to the standard dashboard. nothing that updates the schema. I am not sure if the update only shows up when there are actually changes that need to be made or not.

Edit: But it looks like my old IP is still listed inside the database.

Wayne Workman

@sbenson if you just run ./installfog.sh it always tells you to go to the web interface. The db’s schema doesn’t change with every update. If you would rather skip that, you can simply run the installer as ./installfog.sh -y

Tom Elliott

The failed to backup could be any number of things, but it’s most likely the problem of the db not already existing. I don’t know for sure though.

That said, I did fix the -e issue, thank you.

sbenson

@Tom-Elliott the backup was my fault. To gain access to the internet I have to swap cables. When I did the “real” dhcp server gave that server a different ip. The database had the old info.

Force SSL failure

173

11.6k

17.1k

154.6k