SSL Certificate Renew

[jtomas]

Hello,

I'm having issues trying renew the ssl certificate on V20 and I need help.

I'm using the same method that I used on last time (last year) on V18. I did convert both the certificate and private key to PEM and replaced the old one but when I run the nginx command to restart the services it show me an error.

 

[Alphabetic]

Be helpful to know the error..

 

[jtomas]

Job for nginx.service failed because the control process exited with error code.
See "systemctl status nginx.service" and "journalctl -xeu nginx.service" for details.

 

[SweetAction]

Run systemctl status nginx.service and see what the errors is.

 

[jtomas]

Follow de error on the log messsge below



root@PBXDSI02:~# systemctl status nginx.service

× nginx.service - A high performance web server and a reverse proxy server

Loaded: loaded (/lib/systemd/system/nginx.service; enabled; preset: enabled)

Active: failed (Result: exit-code) since Mon 2024-05-13 15:00:57 WAT; 14s ago

Duration: 30min 57.473s

Docs: man:nginx(8)

Process: 93131 ExecStartPre=/usr/sbin/nginx -t -q -g daemon on; master_process on; (code=exited, status=1/FAILUR>

CPU: 12ms



May 13 15:00:57 PBXDSI02 systemd[1]: Starting nginx.service - A high performance web server and a reverse proxy serv>

May 13 15:00:57 PBXDSI02 nginx[93131]: 2024/05/13 15:00:57 [warn] 93131#93131: duplicate network "::0/0", value: "0">

May 13 15:00:57 PBXDSI02 nginx[93131]: 2024/05/13 15:00:57 [emerg] 93131#93131: SSL_CTX_use_PrivateKey("/var/lib/3cx>

May 13 15:00:57 PBXDSI02 nginx[93131]: nginx: configuration file /etc/nginx/nginx.conf test failed

May 13 15:00:57 PBXDSI02 systemd[1]: nginx.service: Control process exited, code=exited, status=1/FAILURE

May 13 15:00:57 PBXDSI02 systemd[1]: nginx.service: Failed with result 'exit-code'.

May 13 15:00:57 PBXDSI02 systemd[1]: Failed to start nginx.service - A high performance web server and a reverse pro>

lines 1-15/15 (END)...skipping...

× nginx.service - A high performance web server and a reverse proxy server

Loaded: loaded (/lib/systemd/system/nginx.service; enabled; preset: enabled)

Active: failed (Result: exit-code) since Mon 2024-05-13 15:00:57 WAT; 14s ago

Duration: 30min 57.473s

Docs: man:nginx(8)

Process: 93131 ExecStartPre=/usr/sbin/nginx -t -q -g daemon on; master_process on; (code=exited, status=1/FAILURE)

CPU: 12ms



May 13 15:00:57 PBXDSI02 systemd[1]: Starting nginx.service - A high performance web server and a reverse proxy server...

May 13 15:00:57 PBXDSI02 nginx[93131]: 2024/05/13 15:00:57 [warn] 93131#93131: duplicate network "::0/0", value: "0", old value: "1" in /etc/nginx/sites-enabled/3cxpbx:16

May 13 15:00:57 PBXDSI02 nginx[93131]: 2024/05/13 15:00:57 [emerg] 93131#93131: SSL_CTX_use_PrivateKey("/var/lib/3cxpbx/Bin/nginx/conf/Instance1/pbxdsi.ucall.co.ao-key.pem") failed (SSL: error:05800074:x509 certificate routines::key val>

May 13 15:00:57 PBXDSI02 nginx[93131]: nginx: configuration file /etc/nginx/nginx.conf test failed

May 13 15:00:57 PBXDSI02 systemd[1]: nginx.service: Control process exited, code=exited, status=1/FAILURE

May 13 15:00:57 PBXDSI02 systemd[1]: nginx.service: Failed with result 'exit-code'.

May 13 15:00:57 PBXDSI02 systemd[1]: Failed to start nginx.service - A high performance web server and a reverse proxy server.

 

[SweetAction]

Some issue with the private key... is it present with correct permissions and name?

Run nginx -t and see if there is more details.

 

[jtomas]

You're right. The private key was wrong. One I use the corret private key the situation was solved.
thank you so much for helping me!