[Spce-user] nginx failed to start due to the missing ssl folder and dhparam.pem

[Pa Ka]

Hello, it is strange for sure. Below is the steps so you can investigate.
1 Install mr12.3.1 on a vm with ngcp-installer.
2 run ngcp-initial-configuration. At this stage along with other configurations ngcp is functioning.
3. nginx failed to start because of ssl directory and dhparam.pem is missing within /etc/ngcp-config/shared-files/ssl
4 manually created ssl directory. And generated dhparam.pem file. The new ssl directory automatically has permissions like this root:ssl_cert , tried to change to permission to root:root, run ngcpcfg apply. After it revert back to root:ssl_cert . I think there's a script that revert back the permission of the  ssl folder created to root:ssl_cert

That's where the issue lies.

From: Pa Ka <pa.ka12 at outlook.com>
Sent: Tuesday, June 18, 2024 1:30 PM
To: pa.ka12 at outlook.com; spce-user at lists.sipwise.com
Subject: RE: nginx failed to start due to the missing ssl folder and dhparam.pem

Certain services also failed to start due to the missing ssl directory.

This is ngcp-rest-api. Error: ENOENT: no such file or directory, open '/etc/ngcp-config/shared-files/ssl/myserver.key'

Is creating the ssl directory manually a solution? What permission the new created directory will need to have ?

From: Pa Ka <pa.ka12 at outlook.com<mailto:pa.ka12 at outlook.com>>
Sent: Tuesday, June 18, 2024 1:06 PM
To: spce-user at lists.sipwise.com<mailto:spce-user at lists.sipwise.com>
Subject: nginx failed to start due to the missing ssl folder and dhparam.pem

Hello Team, I am not sure if it's a known error. But I have experienced this error in both mr12.3.1 and mr12.4.1 using ngcp-installer. Nginx failed to start.  when performed a test it returns an error below

/etc/ngcp-config/shared-files/ssl/dhparam.pem") failed (SSL: error:80000002
library::No such file or directory

ssl directory is missing within /etc/ngcp-config/shared-files/

Temporary solution. Created ssl directory and generated dhparam.pem with openssl.

Nginx is starting. However, after creating ssl directory and generating dhparam.pem, ngcpcfg apply failed to build.

The error while building
Executing /etc/ngcp-config/templates/var/sipwise/.ssh/authorized_keys.postbuild for /var/sipwise/.ssh/authorized_keys
Error: Build errors detected (see the output above)! Aborting.

Full nginx error before creating manually creating ssl directory

BIO_new_file("/etc/ngcp-config/shared-files/ssl/dhparam.pem") failed (SSL: error:80000002
library::No such file or directory
fopen(/etc/ngcp-config/shared-files/ssl/dhparam.pem, r) error:10000080
routines::no such file) nginx: configuration file /etc/nginx/nginx.conf test failed
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/attachments/20240619/b7f18689/attachment-0001.htm>