SSL Certificate Issues - Can't log into Nodeworx

Hi,

I was trying to replace and update the SSL certificate via Nodeworx. I generated a self signed certificate and completed the new certificate process via a 3rd party vendor for an SSL. When I went back in to update all services and add the new SSL information, something bad happened.

So bad, that I cannot log into nodeworx or siteworx control panels via http or https. My websites are still up, and I can SSH into the server, but I can’t get to the control panel to fix whatever is wrong.

Any help on fixing this or getting back access to nodeworx or siteworx?

Thanks

Hi hostpanda

There’s a few thoughts as to what’s wrong

Firstly, are you sure it’s not your web browser stopping your access - self signed SSL should make the browser ask and tell you it’s not trusted - but http will not, so I don’t think it’s this

So, can you log into server by ssh, and run as root or sudo service iworx restart

Any errors, please can you post

Has this resolved issue

If not, can you restart Apache service httpd restart

Has this resolved issue

If not, can you restart server

Has this resolved issue

If not, it you look at iworx logs ~iWorx/logs I think it is and post any errors

I hope that helps

Many thanks

John

Hi John,

Thank you so much for your help.
Here is the error when I attempted to service iworx restart

Syntax error on line 102 of /home/interworx/etc/httpd/httpd-custom.conf:
SSLCipherSuite takes one argument, Colon-delimited list of permitted SSL Ciphers (`XXX:…:XXX’ - see manual)
Starting InterWorx-web: [FAILED]

Any suggestions on fixing this?

Hi John,

I solved this issue by editing the http-custom.conf by adding this SSL Cipher:
EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS

Thanks again.

John,
When I use sslshopper.com and check my SSL it reports no SSL is installed. I have it installed properly as pages are showing up secured via SSL.
Any Idea??
[TABLE=“class: checker_messages, width: 736”]
[TR]
[TD=“class: passed”] [/TD]
[TD][h=3]hostpanda.net resolves to 107.189.36.26[/h][/TD]
[/TR]
[TR]
[/TR]
[TR]
[TD=“class: passed”] [/TD]
[TD][h=3]Server Type: Apache/2.2.31 (Unix)[/h][/TD]
[/TR]
[TR]
[/TR]
[TR]
[TD=“class: failed”] [/TD]
[TD][h=3]No SSL certificates were found on hostpanda.net. Make sure that the name resolves to the correct server and that the SSL port (default is 443) is open on your server’s firewall.[/h][/TD]
[/TR]
[/TABLE]

Hi hostpanda

Glad you resolved it.

Sslshopper, I have never had a good test using them, but further checks using sslchecker and qualys, show everything is fine, and I tested a few domains on different platforms.

I tested your domain on qualys, which was rated A with a chain issue been noted. Easy to resolve though, you have an extra chain download which needs removing as it is already known by web browsers.

However, it should not cause any issues if you don’t remove it

I hope that helps

Many thanks

John