Project

General

Profile

Bug #74353

Restart nginx after editing SSL certificate

Added by Eduard Avetisyan almost 3 years ago. Updated over 2 years ago.

Status:
Done
Priority:
No priority
Assignee:
-
Category:
GUI (new)
Target version:
Seen in:
Severity:
New
Reason for Closing:
Reason for Blocked:
Needs QA:
No
Needs Doc:
No
Needs Merging:
No
Needs Automation:
No
Support Suite Ticket:
n/a
Hardware Configuration:
ChangeLog Required:
No

Description

A certificate we used doesn't comply with the new security standards and has been updated.
I've imported the new certificate, then choose it from the system->general menu to be used for gui, then removed the old one.
The webpages however continue to use the old insecure one, firefox doesn't let connect it anymore, for instance.
As suggested in another issue with the same name, I'm opening a new one and attaching the debug log, if it helps.
Same issue is observed on another node with 11.2-U1 version.
Thanks for any help!

Associated revisions

Revision cf41e314 (diff)
Added by Erin Clark almost 3 years ago

Add rule to restart web service when certificate for UI is changed in system general Ticket: #74353

Revision a0ac60ed (diff)
Added by Erin Clark almost 3 years ago

Add rule to restart web service when certificate for UI is changed in system general Ticket: #74353 (cherry picked from commit cf41e314f3a523b9e3b3c7c70aee5579cd5ab5ac)

History

#1 Updated by Dru Lavigne almost 3 years ago

  • Category changed from GUI (new) to Middleware
  • Assignee changed from Release Council to Vladimir Vinogradenko
  • Private changed from No to Yes

#3 Updated by William Grzybowski almost 3 years ago

  • Assignee changed from Vladimir Vinogradenko to Waqar Ahmed
  • Target version changed from Backlog to 11.2-U3

Waqar, what are your thoughts on this?

If memory serves me well its the client (in this case UI) that has to restart the service, because some sort of chicken-and-egg situation?

#4 Updated by Waqar Ahmed almost 3 years ago

  • Category changed from Middleware to GUI (new)
  • Assignee changed from Waqar Ahmed to Anonymous

#6 Updated by Anonymous almost 3 years ago

  • Status changed from Unscreened to In Progress

#7 Updated by Anonymous almost 3 years ago

Testing criteria: In System > General choose a different certificate for https and the prompt to restart the webservice should come up, upon restarting the webservice the page should reload with the new certificate.

#8 Updated by Anonymous almost 3 years ago

  • Status changed from In Progress to Ready for Testing
  • Needs Merging changed from Yes to No

#9 Updated by Dru Lavigne almost 3 years ago

  • File deleted (debug-etna-20190208142621.tgz)

#10 Updated by Dru Lavigne almost 3 years ago

  • Private changed from Yes to No
  • Needs Doc changed from Yes to No

#12 Avatar?id=55038&size=24x24 Updated by Zackary Welch over 2 years ago

  • Status changed from Ready for Testing to Passed Testing
  • Needs QA changed from Yes to No

Correctly restarted the service after SSL certificate was changed, so this seems fixed in 11.2-U3.

#14 Updated by Dru Lavigne over 2 years ago

  • Status changed from Passed Testing to Done

Also available in: Atom PDF