Starting proxy...ng...
 
Notifications
Clear all

Starting proxy...nginx: [emerg] cannot load certificate

8 Posts
7 Users
0 Reactions
1,039 Views
(@albertopy007)
Joined: 1 year ago
Posts: 1
Topic starter  

well I have a problem after adding the ssl certificate from the carbonio administration console

Starting proxy...nginx: [emerg] cannot load certificate "/opt/zextras/conf/domaincerts/xxxxxxxx.com.py.crt": PEM_read_bio_X509_AUX() failed (SSL: error:0908F066:PEM routines:get_header_and_data:bad end line)

The problem is very simple since I only have to enter on this line of the certificat

-----END CERTIFICATE----------BEGIN CERTIFICATE-----

so that it looks like this

-----END CERTIFICATE-----

-----BEGIN CERTIFICATE-----

but when you stop and start the services, the webmail does not work as it was doing

I stop the service and upload again and the certificate has the same error, the lines are stuck

-----END CERTIFICATE----------BEGIN CERTIFICATE-----

Is there any way to fix this


   
Quote
(@cvidal)
Joined: 13 years ago
Posts: 21
 

It seems that you have no certificate. Have you verified that the certificate files you uploaded are not empty? What kind of certificate do you have? Let's Encrypt or commercial?


   
ReplyQuote
(@alepertileitbrasil)
Joined: 10 months ago
Posts: 1
 

I tried adding a wildcard certificate to the web panel and got the same error by restarting the proxy service. 


   
ReplyQuote
(@isobytes)
Joined: 8 months ago
Posts: 5
 

Same situation here.

I added a commercial certificate pasting the certificate's text, cert, CA and key.

Proxy service now does no start.

 

How can I revert it?


   
ReplyQuote
(@isobytes)
Joined: 8 months ago
Posts: 5
 

I answer myself.

I have fixed proxy service removing VirtualHostnames

First I got the VirtualHostnames with:

$ zmprov gd [domain_name] |grep -i virtual

And then deleting the VirtualHostnames with:

$ zmprov md [domain_name] -zimbraVirtualHostname [VirtualHostname]

After that, proxy service started like a charm.

 

Hope this helps.

 

Regards,

 

Miguel.


   
ReplyQuote
(@bikesh-mhz)
Joined: 5 months ago
Posts: 1
 

zextras@mail:~$ zmproxyctl restart
Stopping proxy...done.
Starting proxy...nginx: [emerg] cannot load certificate "/opt/zextras/conf/domaincerts/bik****.com.np.crt": PEM_read_bio_X509_AUX() failed (SSL: error:04800066:PEM routines::bad end line)
failed.

I got the same error after loading certificate from Carbonio Admin Panel for a specific domain. Does anyone knows how to install a SSL certificate for each domain separately?


   
ReplyQuote
(@sharif)
Admin
Joined: 3 years ago
Posts: 593
 

@bikesh-mhz 

Are you using let's encrypt or commercial certificate?

Regards,

Sharif


   
ReplyQuote
(@nazar)
Joined: 2 years ago
Posts: 3
 

I got the same error. After loading certificate from Carbonio Admin Panel.

zextras@mail:~$ /opt/zextras/bin/zmproxyctl reload
Reloading proxy...nginx: [emerg] cannot load certificate "/opt/zextras/conf/domaincerts/p***u.crt": PEM_read_bio_X509_AUX() failed (SSL: error:04800066:PEM routines::bad end line)
done.

/opt/zextras/conf/domaincerts/p**u.crt - got an -----END CERTIFICATE----------BEGIN CERTIFICATE-----

How to fix?

 

P.S. using let's encrypt


   
ReplyQuote