@Sebastian-Roth said in Think I deleted my SSL keys/Failed SSL:

./installfog.sh -K

just wanted to add to anyone else that stumbles across this… the -K was definately needed(guess it resets the encryption keys client side?)

@Sebastian-Roth

Once again thanks for all the hard work,

got a notification this time but no e-mail notifications as is typically default with forums I am sure its just set as opt in here and I never did that…(just changed it now in settings)

makes total sense that a field specifically labeled as IP where I entered a host-name might cause problems, Due to having to move things to different IP addresses over the years due to either poor planning or not foreseeing how many of one type of thing I would end up with I try to avoid referring to things by IP address whenever possible(never had to rename a main server but I have had to move its “address”) so I tried it and it seemed to work(in my defense cause and effect were many steps apart)

thanks again, Ill fix this tomorrow and all should be good.

@Sebastian-Roth
Sorry, I have been busy with other things and for some reason the forum didn’t notify me of a reply(even when checking Notifications in the forum) hopefully this can be solved, or atleast would be nice to know where I went wrong as to not do it again Thanks for the excellent software and any help you can provide.

worth noting one of the main reasons I was upgrading was because I changed the hostname from CentOS to fogserver so that was changed in the /opt/fog/.fogsettings and on the hostname and the ipaddress where touched(I entered IP address as the hostname because it seemed to work(maybe not) and I was doing all of this due to a need to change my entire subnet and referring to things by address is a PITA)

Version: 1.5.8

Install time: Fri 30 Aug 2019 03:38:39 PM PDT

ipaddress=‘fogserver.office.company.com’
copybackold=‘0’
interface=‘eth0’
submask=‘255.255.255.0’
hostname=‘FogServer.office.company.com’

here is my foginstall.log
https://pastebin.com/MK7uqz31

fog_error_1.5.7.log
https://pastebin.com/W1dXHyHZ

fog_error_1.5.8.log
https://pastebin.com/cX3H1Xsq

all of the clients are now not able to communicate to the server, even new registrations. here is alog from a client that was just registered via PXE host registration and the client was installed before imaging it(so… september 2019):
https://pastebin.com/4EE7raNL

and maybe most important of all here is the log file(renamed old one so this is fresh) from that same computer after removing fog client and then downloading and re-installing the smart-installer from fogserver/fog/client I can verify that http://fogserver/fog/management/other/ssl/ is indeed an empty folder

https://pastebin.com/ZX7LUYGS

Series of events…
had to change all computers to a different Subnet…
3 computers in the office have a crappy BIOS and get stuck ina reboot loop because they cannot access the redirect from the TFTP server.

no problem iv had to update fog before this will be easy

[root@CentOS fogproject]# git pull
Already up-to-date.
[root@CentOS fogproject]# cd bin
[root@CentOS bin]# ./
error_logs/    installfog.sh  
[root@CentOS bin]# ./installfog.sh

* Creating SSL Certificate....................................Failed!

ok after some web searching several forum posts say to run

./installfog.sh -K

but still get

* Creating SSL Certificate....................................Failed!

ok… ./installfog.sh --help oh there is an option here to just continue if an error occurs… ill do that as I don’t actually need it to create SSL keys as they already exist.

./installfog.sh -X
.....
* Creating SSL Certificate....................................Failed!
OK
 * Creating auth pub key and cert..............................OK
 * Resetting SSL Permissions...................................OK
 * Setting up Apache virtual host (no SSL).....................OK
 * Starting and checking status of web services................OK
 * Changing permissions on apache log files....................OK
 * Backing up database.........................................Done

all is good my TFTP server is now working and the 3 computers stuck in a reboot loop startup…
I then tell Fog to reboot one as a test and it fails… check its log and it cannot authenticate so reset the encryption keys on that host in the fog management website and it still cannot authenticate…

so I am fairly certain I overwrote my SSL keys and have 30 machines that I cannot control through fog anymore… is there a backup of SSL keys anyplace?

now what?