Nagios Support Forum

Hello,

I am still having issues with the topic below(last update) but for some reason this topic is locked. Also, would the SSL configuration be retained after performing an upgrade?

Hi lmiltchev.

I ran the commands again from /tmp directory and it worked. However, it did not create the ca.crt file.

Thanks,
Fredericktgfde

Posts: 121
Joined: Thu May 12, 2011 7:55 am
Private message

I can't think of a reason it would get blown away. Do you still have your .crt files in /etc/pki/tls/certs directory? If you do then perhaps Nagios xi just overwrote the Apache config on update. Or perhaps the config that forced the use of SSL on Nagios xi's end was overwritten during the upgrade. If you could verify whether or not you have the .crt file in that aforementioned directory would give us a good direction to go on.

Hi nscott,

I think I might communicated my current status incorrectly. Just to be clear, I have not performed an upgrade and still working on configuring SSL. I followed the instructions properly but for some reason I'm not getting all three files. I'm only getting the ca.csr and ca.key files.

Thanks,
tgfde

tgfde,

Ok, so can you run these command (probably again) and then show me the contents of the directory you ran them in?
Also, just be sure we're on the same page, you are using this documentation right?
http://assets.nagios.com/downloads/nagi ... ios_xi.pdf

nscott,

Below is the same result I get everytime I ran the commands:
[root@cordmon1 tmp]# ls
ca.csr ca.key vmware-root

Yes, we are looking at the same doc.

Thanks.

Does it give you an error when you run the last command?

openssl x509 -req -days 365 -in ca.csr -signkey ca.key -out ca.crt

No, it does not.

I just re-ran the command (openssl x509 -req -days 365 -in ca.csr -signkey ca.key -out ca.crt) again by itself and it worked.

Thanks for all the help.

Any advice on where to look if httpd fails to restart after configuring SSL

Thanks in advanced.

You can look for clues in the Apache log file: