[Spce-user] nginx failed to start due to the missing ssl folder and dhparam.pem

[Pa Ka]

Hello again,

1) Did you install NGCP on a fresh/plain Debian bookworm system (as
opposed to a customized Debian system from your provider or alike)? Yes, I installed NGCP on a Fresh Debian bookworm (azure vm)

2) How did you install NGCP? (Please provide the exact command lines.)
1 downloaded the .deb file,
2 run ngcp-installer, after the installation
3 screen -S ngcp and ngcp-initial-configuration, and the rest of the configuration as in handbook. Then reboot

3) Did you run ngcp-initial-configuration with any special options? No special options. Just as the handbook states screen -S ngcp and ngcp-initial-configuration
Did you reboot your system betwen executing ngcp-installer and
ngcp-initial-configuration as instructed? After the installation I run this command screen -S ngcp and ngcp-initial-configuration. After couple of minutes when initialization was completed, I rebooted.

4) What's inside your /var/log/ngcp-installer.log? I didn't check the ngcp-installer.log at the time of the error. But checking now, I don't see any error beside these below

Removing /etc/systemd/system-preset/01-installer.preset
Calling systemd preset to configure services on the next boot:
Failed to preset all units: File chronyd.service: Link has been severed
Sleeping for 10 seconds (as requested via option 'STATUS_WAIT_SECONDS')


From: Pa Ka <pa.ka12 at outlook.com>
Sent: Wednesday, June 19, 2024 11:08 AM
To: 'Pa Ka' <pa.ka12 at outlook.com>; 'spce-user at lists.sipwise.com' <spce-user at lists.sipwise.com>
Cc: Michael Prokop <mprokop at sipwise.com>
Subject: RE: nginx failed to start due to the missing ssl folder and dhparam.pem

Hello, it is strange for sure. Below is the steps so you can investigate.
1 Install mr12.3.1 on a vm with ngcp-installer.
2 run ngcp-initial-configuration. At this stage along with other configurations ngcp is functioning.
3. nginx failed to start because of ssl directory and dhparam.pem is missing within /etc/ngcp-config/shared-files/ssl
4 manually created ssl directory. And generated dhparam.pem file. The new ssl directory automatically has permissions like this root:ssl_cert , tried to change to permission to root:root, run ngcpcfg apply. After it revert back to root:ssl_cert . I think there's a script that revert back the permission of the  ssl folder created to root:ssl_cert

That's where the issue lies.

From: Pa Ka <pa.ka12 at outlook.com<mailto:pa.ka12 at outlook.com>>
Sent: Tuesday, June 18, 2024 1:30 PM
To: pa.ka12 at outlook.com<mailto:pa.ka12 at outlook.com>; spce-user at lists.sipwise.com<mailto:spce-user at lists.sipwise.com>
Subject: RE: nginx failed to start due to the missing ssl folder and dhparam.pem

Certain services also failed to start due to the missing ssl directory.

This is ngcp-rest-api. Error: ENOENT: no such file or directory, open '/etc/ngcp-config/shared-files/ssl/myserver.key'

Is creating the ssl directory manually a solution? What permission the new created directory will need to have ?

From: Pa Ka <pa.ka12 at outlook.com<mailto:pa.ka12 at outlook.com>>
Sent: Tuesday, June 18, 2024 1:06 PM
To: spce-user at lists.sipwise.com<mailto:spce-user at lists.sipwise.com>
Subject: nginx failed to start due to the missing ssl folder and dhparam.pem

Hello Team, I am not sure if it's a known error. But I have experienced this error in both mr12.3.1 and mr12.4.1 using ngcp-installer. Nginx failed to start.  when performed a test it returns an error below

/etc/ngcp-config/shared-files/ssl/dhparam.pem") failed (SSL: error:80000002
library::No such file or directory

ssl directory is missing within /etc/ngcp-config/shared-files/

Temporary solution. Created ssl directory and generated dhparam.pem with openssl.

Nginx is starting. However, after creating ssl directory and generating dhparam.pem, ngcpcfg apply failed to build.

The error while building
Executing /etc/ngcp-config/templates/var/sipwise/.ssh/authorized_keys.postbuild for /var/sipwise/.ssh/authorized_keys
Error: Build errors detected (see the output above)! Aborting.

Full nginx error before creating manually creating ssl directory

BIO_new_file("/etc/ngcp-config/shared-files/ssl/dhparam.pem") failed (SSL: error:80000002
library::No such file or directory
fopen(/etc/ngcp-config/shared-files/ssl/dhparam.pem, r) error:10000080
routines::no such file) nginx: configuration file /etc/nginx/nginx.conf test failed
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/attachments/20240620/c9b5b0eb/attachment.htm>