ls -alR /opt/fog/snapins/ssl OUTPUT:

fogadmin@usktfoglp001:/opt/fog/snapins$ ls -alR
.:
total 406536
drwxrwxrwx 3 fog www-data 4096 Dec 10 06:23 .
drwxr-xr-x 5 root root 4096 Jan 9 2019 …
drwxrwxrwx 3 fog www-data 4096 Apr 7 07:41 ssl
-rwxr-xr-x 1 fogadmin fogadmin 416273072 Dec 10 06:27 SymRedistributable.exe

./ssl:
total 24
drwxrwxrwx 3 fog www-data 4096 Apr 7 07:41 .
drwxrwxrwx 3 fog www-data 4096 Dec 10 06:23 …
drwxrwxrwx 2 fog www-data 4096 Dec 10 06:23 CA
-rw-r–r-- 1 root root 102 Apr 7 08:41 ca.cnf
-rwxr-xr-x 1 fogadmin fogadmin 1590 Dec 10 06:23 fog.csr
-rwxrwxrwx 1 fog www-data 3243 Jan 9 2019 .srvprivate.key

./ssl/CA:
total 24
drwxrwxrwx 2 fog www-data 4096 Dec 10 06:23 .
drwxrwxrwx 3 fog www-data 4096 Apr 7 07:41 …
-rwxrwxrwx 1 fog www-data 3243 Jan 9 2019 .fogCA.key
-rwxr-xr-x 1 fogadmin fogadmin 1801 Dec 10 06:23 .fogCA.pem
-rwxrwxrwx 1 fog www-data 41 Apr 7 08:41 .fogCA.srl
-rwxr-xr-x 1 fogadmin fogadmin 17 Dec 10 06:23 .srl
fogadmin@usktfoglp001:/opt/fog/snapins$

ls -alR /var/www/html/fog/managment/other OUTPUT:

fogadmin@usktfoglp001:/var/www/html/fog/management/other$ ls -alR
.:
total 56
drwxr-xr-x 3 root root 4096 Apr 7 08:41 .
drwxr-xr-x 10 root root 4096 Apr 7 08:41 …
-rw-r–r-- 1 root root 35141 Apr 7 08:41 gpl-3.0.txt
-rw-r–r-- 1 root root 6152 Apr 7 08:41 index.php
drwxr-xr-x 2 root root 4096 Apr 7 08:41 ssl

./ssl:
total 8
drwxr-xr-x 2 root root 4096 Apr 7 08:41 .
drwxr-xr-x 3 root root 4096 Apr 7 08:41 …
-rw-r–r-- 1 root root 0 Apr 7 08:41 srvpublic.crt
fogadmin@usktfoglp001:/var/www/html/fog/management/other$

md5sum /opt/fog/snapins/ssl/CA/.fogCA.pem /var/www/html/fog/management/other/ca.cert.pm OUTPUT:

a4ee8c62634fc51e11a59965f8ebde85 /opt/fog/snapins/ssl/CA/.fogCA.pem
md5sum: /var/www/html/fog/management/other/ca.cert.pm: No such file or directory
fogadmin@usktfoglp001:~$

openssl x509 -noout -modulus -in /opt/fog/snapins/ssl/CA/.fogCA.pem | openssl md5 OUTPUT:

(stdin)= f8b599032ea17eddacb8cd45b94d32a5

openssl rsa -noout -modulus -in /opt/fog/snapins/ssl/CA/.fogCA.key | openssl md5 OUTPUT:

(stdin)= 707d08d4139a901ed6fec151abd68bf7

openssl verify -verbose -CAfile /opt/fog/snapins/ssl/CA/.fogCA.pem /var/www/fog/management/other/ssl/srvpublic.crt OUTPUT:

unable to load certificate
139785451083520:error:0909006C:PEM routines:get_name:no start line:…/crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE

On this particular FOG server (located in our Kent, Washinton office) we have approximately 125 clients on it. And no, I’ve done nothing with the CA. I have a number of other FOG servers around the world which are exhibiting identical behavior when the upgrade is attempted (Creating SSL Certificate Failed). All are running Ubuntu 16.04. FOG versions are all either 1.5.4. or 1.5.5. Should I go ahead and run the commands you gave me? It was unclear as to whether you wanted to hold off until you knew the number of clients we are dealing with on this server.

inflating: packages/clientfiles/SmartInstaller.exe
‘packages/kernels/bzImage’ -> ‘/var/www/fog//service/ipxe/bzImage’
‘packages/kernels/bzImage32’ -> ‘/var/www/fog//service/ipxe/bzImage32’
‘packages/inits/init.xz’ -> ‘/var/www/fog//service/ipxe/init.xz’
‘packages/inits/init_32.xz’ -> ‘/var/www/fog//service/ipxe/init_32.xz’
‘packages/clientfiles/FOGService.msi’ -> ‘/var/www/fog//client/FOGService.msi’
‘packages/clientfiles/SmartInstaller.exe’ -> ‘/var/www/fog//client/SmartInstaller.exe’
mysqlnd
Synchronizing state of apache2.service with SysV init with /lib/systemd/systemd-sysv-install…
Executing /lib/systemd/systemd-sysv-install enable apache2
Synchronizing state of php7.1-fpm.service with SysV init with /lib/systemd/systemd-sysv-install…
Executing /lib/systemd/systemd-sysv-install enable php7.1-fpm
Signature ok
subject=CN = 10.6.210.155
Getting CA Private Key
CA certificate and CA private key do not match
139662081185536:error:06067099:digital envelope routines:EVP_PKEY_copy_parameters:different parameters:…/crypto/evp/p_lib.c:93:
139662081185536:error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch:…/crypto/x509/x509_cmp.c:294:
root@usktfoglp001:~/fogproject/bin/error_logs#

edit:

snmysqlpass=‘fO7hK:KyRMUeKkF71Nho’

As instructed to do I’ve edited my .fogsettings file as follows:

snmysqluser=‘fogstorage’
snmysqlpass=‘fO7hKyRMUeKkF71Nho’

(I had to change the permissions on this file as it was read only, thereafter I was able to save the above)

The current fogstorage database password does not meet high
security standards. We will generate a new password and update
all the settings on this FOG server for you. Please take note
of the following credentials that you need to manually update
on all your storage nodes’ /opt/fog/.fogsettings configuration
files and re-run (!) the FOG installer:
snmysqluser=‘fogstorage’
snmysqlpass=‘fO7hK:KyRMUeKkF71Nho’

Press [Enter] to proceed after you noted down the credentials.

• Setting up MySQL user and database…OK
• Backing up user reports…Done
• Stopping web service…OK
• Setting up Apache and PHP files…OK
• Testing and removing symbolic links if found…OK
• Backing up old data…OK
• Copying new files to web folder…OK
• Creating config file…OK
• Downloading kernel, init and fog-client binaries…Done
• Extracting the binaries archive…OK
• Copying binaries to destination paths…OK
• Enabling apache and fpm services on boot…OK
• Creating SSL Certificate…Failed!
  root@usktfoglp001:~/fogproject/bin/error_logs#

FYI - I’m using the following commands to perform the upgrade:

sudo su -
sudo apt-get update && apt-get install git
git clone https://github.com/FOGProject/fogproject.git /root/fogproject
cd /root/fogproject
cd bin
./installfog.sh

Good morning,
I have been attempting to update our FOG servers from version 1.5.5 to 1.5.8 (all are running on Ubuntu 16.04). I repeatedly get an error message that the SQL username and password are not secure and that the FOG installer will re-create these. It asks me to copy the generated username and password (which I do) and to edit the .fogsettings file accordingly (which I do), then re-run the installer. I hit enter to continue and get the error “Creating SSL Certificate …FAILED”. After re-running the installer it gives me another password (which I change the .fogsettings file with) …hit enter to continue, then the SSL Certificate error comes up again. It’s a perpertual loop. NOTE: My linux skills are very basic, but any assistance would be greatly appreciated.
Thanks in advance,
John