Location of SSL Manual certificates after update to 3.0.0

Symlink · February 25, 2021, 2:21pm

Hi,

I followed procedure :

Updated to ubuntu 20.04

I ran all the procedure all the way to :

sudo dpkg-reconfigure passbolt-ce-server

Answer the following way:

No to mysql configuration
Yes to nginx configuration

You can then select the SSL method that suits best your needs.

I am at the select your SSL fullchain key (because I selected manual SSL because during the first install I generated the SSL certificate myself)

I don’t see my key.pem nor my cert.pem anywhere on the server anymore.

Am I correct in assuming I need those original files or I can generate new ones using this :

Thanks again for your time and help.

diego · February 25, 2021, 2:44pm

Hi @Symlink,

The ubuntu package should copy your certs from the initial location to a known location. This location should be:

/etc/ssl/certs/your_cert_filename
and
/etc/ssl/private/your_key_filename

For your cert and key respectively. Also these locations should be reflected on your /etc/passbolt/nginx-ssl.conf on the lines starting with:

ssl_certificate
ssl_certificate_key

If this is not the case let us know.

Symlink · February 25, 2021, 3:52pm

Hi diego,

Thanks for your support. I am lost

I tried to manual ssl with :
/etc/ssl/certs/passbolt_certificate.crt
and
/etc/ssl/certs/passbolt_private.key

That were present in the folder.

Here is the output lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root -rw-r–r-- 1 lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root -rw-r–r-- 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root -rw-r–r-- 1 root root -rw------- 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root -rw-r–r-- 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root lrwxrwxrwx 1 root root of ls -al of my /etc/ssl/certs/ folder :
45 Feb 14 2019 02265526.0 → Entrust_Root_Certification_Authority_-G2.pem
36 Feb 14 2019 03179a64.0 → Staat_der_Nederlanden_EV_Root_CA.pem
27 Feb 14 2019 062cdee6.0 → GlobalSign_Root_CA-R3.pem
25 Feb 14 2019 064e0aa9.0 → QuoVadis_Root_CA_2_G3.pem
50 Feb 14 2019 06dc52d5.0 → SSL.com_EV_Root_Certification_Authority_RSA_R2.pem
20 Feb 14 2019 080911ac.0 → QuoVadis_Root_CA.pem
54 Feb 14 2019 09789157.0 → Starfield_Services_Root_Certificate_Authority-G2.pem
15 Feb 24 13:09 0a775a30.0 → GTS_Root_R3.pem
16 Feb 14 2019 0b1b94ef.0 → CFCA_EV_ROOT.pem
44 Feb 14 2019 0bf05006.0 → SSL.com_Root_Certification_Authority_ECC.pem
34 Feb 14 2019 0c4c9b6c.0 → Global_Chambersign_Root-2008.pem
32 Feb 24 13:09 0f5dc4f3.0 → UCA_Extended_Validation_Root.pem
26 Feb 14 2019 0f6fa695.0 → GDCA_TrustAUTH_R5_ROOT.pem
15 Feb 24 13:09 1001acf7.0 → GTS_Root_R1.pem
46 Feb 14 2019 106f3e4d.0 → Entrust_Root_Certification_Authority-EC1.pem
49 Feb 14 2019 116bf586.0 → GeoTrust_Primary_Certification_Authority-G2.pem
27 Feb 24 13:09 14bc7599.0 → emSign_ECC_Root_CA-G3.pem
59 Feb 14 2019 1636090b.0 → Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem
23 Feb 14 2019 18856ac4.0 → SecureSign_RootCA11.pem
21 Aug 5 2019 1b65a851 → ssl-cert-snakeoil.pem
21 Feb 24 13:09 1b65a851.0 → ssl-cert-snakeoil.pem
31 Feb 14 2019 1d3472b9.0 → GlobalSign_ECC_Root_CA-R5.pem
37 Feb 14 2019 1e08bfd1.0 → IdenTrust_Public_Sector_Root_CA_1.pem
32 Feb 14 2019 1e09d511.0 → T-TeleSec_GlobalRoot_Class_2.pem
38 Feb 14 2019 244b5494.0 → DigiCert_High_Assurance_EV_Root_CA.pem
23 Feb 24 13:09 2923b3f9.0 → emSign_Root_CA-G1.pem
20 Feb 14 2019 2ae6433e.0 → CA_Disig_Root_R2.pem
26 Feb 14 2019 2b349938.0 → AffirmTrust_Commercial.pem
18 Feb 14 2019 2e5ac55d.0 → DST_Root_CA_X3.pem
59 Feb 14 2019 32888f65.0 → Hellenic_Academic_and_Research_Institutions_RootCA_2015.pem
10 Feb 14 2019 349f2832.0 → EC-ACC.pem
27 Feb 14 2019 3513523f.0 → DigiCert_Global_Root_CA.pem
61 Feb 14 2019 3bde41ac.0 → Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem
26 Feb 14 2019 3e44d2f7.0 → TrustCor_RootCert_CA-2.pem
27 Feb 14 2019 3e45d192.0 → Hongkong_Post_Root_CA_1.pem
45 Feb 24 13:09 3fb36b73.0 → NAVER_Global_Root_Certification_Authority.pem
31 Feb 14 2019 40193066.0 → Certum_Trusted_Network_CA_2.pem
16 Feb 14 2019 4042bcee.0 → ISRG_Root_X1.pem
34 Feb 14 2019 40547a79.0 → COMODO_Certification_Authority.pem
23 Feb 24 13:09 406c9bb1.0 → emSign_Root_CA-C1.pem
43 Feb 14 2019 4304c5e5.0 → Network_Solutions_Certificate_Authority.pem
29 Feb 14 2019 48bec511.0 → Certum_Trusted_Network_CA.pem
27 Feb 14 2019 4a6481c9.0 → GlobalSign_Root_CA-R2.pem
27 Feb 24 13:09 4b718d9b.0 → emSign_ECC_Root_CA-C3.pem
45 Feb 14 2019 4bfab552.0 → Starfield_Root_Certificate_Authority-G2.pem
26 Feb 14 2019 4f316efb.0 → SwissSign_Gold_CA-G2.pem
35 Feb 14 2019 5273a94c.0 → E-Tugra_Certification_Authority.pem
32 Feb 14 2019 5443e9e3.0 → T-TeleSec_GlobalRoot_Class_3.pem
27 Feb 14 2019 54657681.0 → Buypass_Class_2_Root_CA.pem
28 Feb 14 2019 57bcb2da.0 → SwissSign_Silver_CA-G2.pem
38 Feb 14 2019 5a4d6896.0 → Staat_der_Nederlanden_Root_CA-G3.pem
22 Feb 14 2019 5ad8a5d6.0 → GlobalSign_Root_CA.pem
26 Feb 14 2019 5cd81ad7.0 → TeliaSonera_Root_CA_v1.pem
26 Feb 14 2019 5d3033c5.0 → TrustCor_RootCert_CA-1.pem
45 Feb 24 13:09 5e98733a.0 → Entrust_Root_Certification_Authority-G4.pem
23 Feb 14 2019 5f15c80c.0 → TWCA_Global_Root_CA.pem
23 Feb 24 13:09 5f618aec.0 → certSIGN_Root_CA_G2.pem
27 Feb 14 2019 607986c7.0 → DigiCert_Global_Root_G2.pem
15 Feb 24 13:09 626dceaf.0 → GTS_Root_R2.pem
29 Feb 14 2019 653b494a.0 → Baltimore_CyberTrust_Root.pem
27 Feb 24 13:09 68dd7389.0 → Hongkong_Post_Root_CA_3.pem
40 Feb 14 2019 6b99d060.0 → Entrust_Root_Certification_Authority.pem
20 Feb 14 2019 6d41d539.0 → Amazon_Root_CA_2.pem
44 Feb 14 2019 6fa5da56.0 → SSL.com_Root_Certification_Authority_RSA.pem
24 Feb 14 2019 706f604c.0 → XRamp_Global_CA_Root.pem
25 Feb 14 2019 749e9e03.0 → QuoVadis_Root_CA_1_G3.pem
28 Feb 14 2019 75d1b2ed.0 → DigiCert_Trusted_Root_G4.pem
26 Feb 14 2019 76cb8f92.0 → Cybertrust_Global_Root.pem
22 Feb 14 2019 76faf6c0.0 → QuoVadis_Root_CA_3.pem
63 Feb 14 2019 7719f463.0 → Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.pem
35 Feb 24 13:09 773e07ad.0 → OISTE_WISeKey_Global_Root_GC_CA.pem
18 Feb 14 2019 7aaf71c0.0 → TrustCor_ECA-1.pem
31 Feb 14 2019 7f3d5d1d.0 → DigiCert_Assured_ID_Root_G3.pem
34 Feb 14 2019 8160b96c.0 → Microsec_e-Szigno_Root_CA_2009.pem
24 Feb 24 13:09 82578957.0 → passbolt_certificate.crt
20 Feb 14 2019 8cb5ee0f.0 → Amazon_Root_CA_3.pem
20 Feb 14 2019 8d86cdd1.0 → certSIGN_ROOT_CA.pem
49 Feb 24 13:09 8d89cda1.0 → Microsoft_ECC_Root_Certificate_Authority_2017.pem
34 Feb 14 2019 930ac5d2.0 → Actalis_Authentication_Root_CA.pem
26 Feb 14 2019 93bc0acc.0 → AffirmTrust_Networking.pem
48 Feb 14 2019 988a38cb.0 → 'NetLock_Arany=Class_Gold=Főtanúsítvány.pem’
53 Feb 24 13:09 9b5697b0.0 → Trustwave_Global_ECC_P256_Certification_Authority.pem
26 Feb 14 2019 9c2e7d30.0 → Sonera_Class_2_Root_CA.pem
27 Feb 14 2019 9c8dfbd4.0 → AffirmTrust_Premium_ECC.pem
31 Feb 14 2019 9d04f354.0 → DigiCert_Assured_ID_Root_G2.pem
15 Feb 24 13:09 a3418fda.0 → GTS_Root_R4.pem
13 Feb 14 2019 a94d09e5.0 → ACCVRAIZ1.pem
48 Feb 14 2019 ACCVRAIZ1.pem → /usr/share/ca-certificates/mozilla/ACCVRAIZ1.crt
55 Feb 14 2019 AC_RAIZ_FNMT-RCM.pem → /usr/share/ca-certificates/mozilla/AC_RAIZ_FNMT-RCM.crt
69 Feb 14 2019 Actalis_Authentication_Root_CA.pem → /usr/share/ca-certificates/mozilla/Actalis_Authentication_Root_CA.crt
45 Feb 14 2019 aee5f10d.0 → Entrust.net_Premium_2048_Secure_Server_CA.pem
61 Feb 14 2019 AffirmTrust_Commercial.pem → /usr/share/ca-certificates/mozilla/AffirmTrust_Commercial.crt
61 Feb 14 2019 AffirmTrust_Networking.pem → /usr/share/ca-certificates/mozilla/AffirmTrust_Networking.crt
62 Feb 14 2019 AffirmTrust_Premium_ECC.pem → /usr/share/ca-certificates/mozilla/AffirmTrust_Premium_ECC.crt
58 Feb 14 2019 AffirmTrust_Premium.pem → /usr/share/ca-certificates/mozilla/AffirmTrust_Premium.crt
55 Feb 14 2019 Amazon_Root_CA_1.pem → /usr/share/ca-certificates/mozilla/Amazon_Root_CA_1.crt
55 Feb 14 2019 Amazon_Root_CA_2.pem → /usr/share/ca-certificates/mozilla/Amazon_Root_CA_2.crt
55 Feb 14 2019 Amazon_Root_CA_3.pem → /usr/share/ca-certificates/mozilla/Amazon_Root_CA_3.crt
55 Feb 14 2019 Amazon_Root_CA_4.pem → /usr/share/ca-certificates/mozilla/Amazon_Root_CA_4.crt
60 Feb 14 2019 Atos_TrustedRoot_2011.pem → /usr/share/ca-certificates/mozilla/Atos_TrustedRoot_2011.crt
96 Feb 14 2019 Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem → /usr/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt
31 Feb 14 2019 b0e59380.0 → GlobalSign_ECC_Root_CA-R4.pem
31 Feb 14 2019 b1159c4c.0 → DigiCert_Assured_ID_Root_CA.pem
20 Feb 14 2019 b66938e9.0 → Secure_Global_CA.pem
23 Feb 14 2019 b727005e.0 → AffirmTrust_Premium.pem
37 Feb 14 2019 b7a5b843.0 → TWCA_Root_Certification_Authority.pem
64 Feb 14 2019 Baltimore_CyberTrust_Root.pem → /usr/share/ca-certificates/mozilla/Baltimore_CyberTrust_Root.crt
49 Feb 24 13:09 bf53fb88.0 → Microsoft_RSA_Root_Certificate_Authority_2017.pem
62 Feb 14 2019 Buypass_Class_2_Root_CA.pem → /usr/share/ca-certificates/mozilla/Buypass_Class_2_Root_CA.crt
62 Feb 14 2019 Buypass_Class_3_Root_CA.pem → /usr/share/ca-certificates/mozilla/Buypass_Class_3_Root_CA.crt
51 Feb 14 2019 c01cdfa2.0 → VeriSign_Universal_Root_Certification_Authority.pem
22 Feb 24 13:09 c01eb047.0 → UCA_Global_G2_Root.pem
34 Feb 14 2019 c28a8a30.0 → D-TRUST_Root_Class_3_CA_2_2009.pem
36 Feb 14 2019 c47d9980.0 → Chambers_of_Commerce_Root-2008.pem
37 Feb 14 2019 ca6e4ad9.0 → ePKI_Root_Certification_Authority.pem
root root 200313 Feb 25 08:49 ca-certificates.crt
55 Feb 14 2019 CA_Disig_Root_R2.pem → /usr/share/ca-certificates/mozilla/CA_Disig_Root_R2.crt
44 Feb 14 2019 cbf06781.0 → Go_Daddy_Root_Certificate_Authority-G2.pem
14 Feb 14 2019 cc450945.0 → Izenpe.com.pem
34 Feb 14 2019 cd58d51e.0 → Security_Communication_RootCA2.pem
20 Feb 14 2019 cd8c0d63.0 → AC_RAIZ_FNMT-RCM.pem
20 Feb 14 2019 ce5e74ef.0 → Amazon_Root_CA_1.pem
47 Feb 14 2019 Certigna.pem → /usr/share/ca-certificates/mozilla/Certigna.crt
55 Feb 24 13:09 Certigna_Root_CA.pem → /usr/share/ca-certificates/mozilla/Certigna_Root_CA.crt
58 Feb 24 13:09 certSIGN_Root_CA_G2.pem → /usr/share/ca-certificates/mozilla/certSIGN_Root_CA_G2.crt
55 Feb 14 2019 certSIGN_ROOT_CA.pem → /usr/share/ca-certificates/mozilla/certSIGN_ROOT_CA.crt
66 Feb 14 2019 Certum_Trusted_Network_CA_2.pem → /usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA_2.crt
64 Feb 14 2019 Certum_Trusted_Network_CA.pem → /usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA.crt
51 Feb 14 2019 CFCA_EV_ROOT.pem → /usr/share/ca-certificates/mozilla/CFCA_EV_ROOT.crt
71 Feb 14 2019 Chambers_of_Commerce_Root-2008.pem → /usr/share/ca-certificates/mozilla/Chambers_of_Commerce_Root-2008.crt
63 Feb 14 2019 Comodo_AAA_Services_root.pem → /usr/share/ca-certificates/mozilla/Comodo_AAA_Services_root.crt
69 Feb 14 2019 COMODO_Certification_Authority.pem → /usr/share/ca-certificates/mozilla/COMODO_Certification_Authority.crt
73 Feb 14 2019 COMODO_ECC_Certification_Authority.pem → /usr/share/ca-certificates/mozilla/COMODO_ECC_Certification_Authority.crt
73 Feb 14 2019 COMODO_RSA_Certification_Authority.pem → /usr/share/ca-certificates/mozilla/COMODO_RSA_Certification_Authority.crt
61 Feb 14 2019 Cybertrust_Global_Root.pem → /usr/share/ca-certificates/mozilla/Cybertrust_Global_Root.crt
37 Feb 14 2019 d4dae3dd.0 → D-TRUST_Root_Class_3_CA_2_EV_2009.pem
38 Feb 14 2019 d6325660.0 → COMODO_RSA_Certification_Authority.pem
22 Feb 14 2019 d7e8dc79.0 → QuoVadis_Root_CA_2.pem
23 Feb 14 2019 d853d49e.0 → Trustis_FPS_Root_CA.pem
53 Feb 24 13:09 d887a5bb.0 → Trustwave_Global_ECC_P384_Certification_Authority.pem
27 Feb 24 13:09 dc4d6a89.0 → GlobalSign_Root_CA-R6.pem
27 Feb 14 2019 dd8e9d41.0 → DigiCert_Global_Root_G3.pem
20 Feb 14 2019 de6d66f3.0 → Amazon_Root_CA_4.pem
66 Feb 14 2019 DigiCert_Assured_ID_Root_CA.pem → /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_CA.crt
66 Feb 14 2019 DigiCert_Assured_ID_Root_G2.pem → /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G2.crt
66 Feb 14 2019 DigiCert_Assured_ID_Root_G3.pem → /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G3.crt
62 Feb 14 2019 DigiCert_Global_Root_CA.pem → /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_CA.crt
62 Feb 14 2019 DigiCert_Global_Root_G2.pem → /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G2.crt
62 Feb 14 2019 DigiCert_Global_Root_G3.pem → /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G3.crt
73 Feb 14 2019 DigiCert_High_Assurance_EV_Root_CA.pem → /usr/share/ca-certificates/mozilla/DigiCert_High_Assurance_EV_Root_CA.crt
63 Feb 14 2019 DigiCert_Trusted_Root_G4.pem → /usr/share/ca-certificates/mozilla/DigiCert_Trusted_Root_G4.crt
53 Feb 14 2019 DST_Root_CA_X3.pem → /usr/share/ca-certificates/mozilla/DST_Root_CA_X3.crt
69 Feb 14 2019 D-TRUST_Root_Class_3_CA_2_2009.pem → /usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_2009.crt
72 Feb 14 2019 D-TRUST_Root_Class_3_CA_2_EV_2009.pem → /usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_EV_2009.crt
12 Feb 14 2019 e113c810.0 → Certigna.pem
25 Feb 14 2019 e18bfb83.0 → QuoVadis_Root_CA_3_G3.pem
25 Feb 14 2019 e36a6752.0 → Atos_TrustedRoot_2011.pem
35 Feb 14 2019 e73d606e.0 → OISTE_WISeKey_Global_Root_GB_CA.pem
25 Feb 24 13:09 e868b802.0 → e-Szigno_Root_CA_2017.pem
27 Feb 14 2019 e8de2f56.0 → Buypass_Class_3_Root_CA.pem
45 Feb 14 2019 EC-ACC.pem → /usr/share/ca-certificates/mozilla/EC-ACC.crt
28 Feb 14 2019 ee64a828.0 → Comodo_AAA_Services_root.pem
38 Feb 14 2019 eed8c118.0 → COMODO_ECC_Certification_Authority.pem
34 Feb 14 2019 ef954a4e.0 → IdenTrust_Commercial_Root_CA_1.pem
62 Feb 24 13:09 emSign_ECC_Root_CA-C3.pem → /usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA-C3.crt
62 Feb 24 13:09 emSign_ECC_Root_CA-G3.pem → /usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA-G3.crt
58 Feb 24 13:09 emSign_Root_CA-C1.pem → /usr/share/ca-certificates/mozilla/emSign_Root_CA-C1.crt
58 Feb 24 13:09 emSign_Root_CA-G1.pem → /usr/share/ca-certificates/mozilla/emSign_Root_CA-G1.crt
80 Feb 14 2019 Entrust.net_Premium_2048_Secure_Server_CA.pem → /usr/share/ca-certificates/mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt
81 Feb 14 2019 Entrust_Root_Certification_Authority-EC1.pem → /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority-EC1.crt
80 Feb 14 2019 Entrust_Root_Certification_Authority-G2.pem → /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority-G2.crt
80 Feb 24 13:09 Entrust_Root_Certification_Authority-G4.pem → /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority-G4.crt
75 Feb 14 2019 Entrust_Root_Certification_Authority.pem → /usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority.crt
72 Feb 14 2019 ePKI_Root_Certification_Authority.pem → /usr/share/ca-certificates/mozilla/ePKI_Root_Certification_Authority.crt
60 Feb 24 13:09 e-Szigno_Root_CA_2017.pem → /usr/share/ca-certificates/mozilla/e-Szigno_Root_CA_2017.crt
70 Feb 14 2019 E-Tugra_Certification_Authority.pem → /usr/share/ca-certificates/mozilla/E-Tugra_Certification_Authority.crt
23 Feb 14 2019 f081611a.0 → Go_Daddy_Class_2_CA.pem
47 Feb 14 2019 f0c70a8d.0 → SSL.com_EV_Root_Certification_Authority_ECC.pem
44 Feb 24 13:09 f249de83.0 → Trustwave_Global_Certification_Authority.pem
41 Feb 14 2019 f30dd6ad.0 → USERTrust_ECC_Certification_Authority.pem
34 Feb 14 2019 f3377b1b.0 → Security_Communication_Root_CA.pem
24 Feb 14 2019 f387163d.0 → Starfield_Class_2_CA.pem
18 Feb 14 2019 f39fc864.0 → SecureTrust_CA.pem
20 Feb 24 13:09 f51bb24c.0 → Certigna_Root_CA.pem
41 Feb 14 2019 fc5a8f99.0 → USERTrust_RSA_Certification_Authority.pem
19 Feb 14 2019 fe8a2cd8.0 → SZAFIR_ROOT_CA2.pem
49 Feb 14 2019 ff34af3f.0 → TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi-Surum_1.pem
61 Feb 14 2019 GDCA_TrustAUTH_R5_ROOT.pem → /usr/share/ca-certificates/mozilla/GDCA_TrustAUTH_R5_ROOT.crt
84 Feb 14 2019 GeoTrust_Primary_Certification_Authority-G2.pem → /usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority-G2.crt
69 Feb 14 2019 Global_Chambersign_Root-2008.pem → /usr/share/ca-certificates/mozilla/Global_Chambersign_Root-2008.crt
66 Feb 14 2019 GlobalSign_ECC_Root_CA-R4.pem → /usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA-R4.crt
66 Feb 14 2019 GlobalSign_ECC_Root_CA-R5.pem → /usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA-R5.crt
57 Feb 14 2019 GlobalSign_Root_CA.pem → /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt
62 Feb 14 2019 GlobalSign_Root_CA-R2.pem → /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA-R2.crt
62 Feb 14 2019 GlobalSign_Root_CA-R3.pem → /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA-R3.crt
62 Feb 24 13:09 GlobalSign_Root_CA-R6.pem → /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA-R6.crt
58 Feb 14 2019 Go_Daddy_Class_2_CA.pem → /usr/share/ca-certificates/mozilla/Go_Daddy_Class_2_CA.crt
79 Feb 14 2019 Go_Daddy_Root_Certificate_Authority-G2.pem → /usr/share/ca-certificates/mozilla/Go_Daddy_Root_Certificate_Authority-G2.crt
50 Feb 24 13:09 GTS_Root_R1.pem → /usr/share/ca-certificates/mozilla/GTS_Root_R1.crt
50 Feb 24 13:09 GTS_Root_R2.pem → /usr/share/ca-certificates/mozilla/GTS_Root_R2.crt
50 Feb 24 13:09 GTS_Root_R3.pem → /usr/share/ca-certificates/mozilla/GTS_Root_R3.crt
50 Feb 24 13:09 GTS_Root_R4.pem → /usr/share/ca-certificates/mozilla/GTS_Root_R4.crt
98 Feb 14 2019 Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.pem → /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt
94 Feb 14 2019 Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem → /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt
94 Feb 14 2019 Hellenic_Academic_and_Research_Institutions_RootCA_2015.pem → /usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt
62 Feb 14 2019 Hongkong_Post_Root_CA_1.pem → /usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_1.crt
62 Feb 24 13:09 Hongkong_Post_Root_CA_3.pem → /usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_3.crt
69 Feb 14 2019 IdenTrust_Commercial_Root_CA_1.pem → /usr/share/ca-certificates/mozilla/IdenTrust_Commercial_Root_CA_1.crt
72 Feb 14 2019 IdenTrust_Public_Sector_Root_CA_1.pem → /usr/share/ca-certificates/mozilla/IdenTrust_Public_Sector_Root_CA_1.crt
51 Feb 14 2019 ISRG_Root_X1.pem → /usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt
49 Feb 14 2019 Izenpe.com.pem → /usr/share/ca-certificates/mozilla/Izenpe.com.crt
0 Feb 25 10:43 lsout
69 Feb 14 2019 Microsec_e-Szigno_Root_CA_2009.pem → /usr/share/ca-certificates/mozilla/Microsec_e-Szigno_Root_CA_2009.crt
84 Feb 24 13:09 Microsoft_ECC_Root_Certificate_Authority_2017.pem → /usr/share/ca-certificates/mozilla/Microsoft_ECC_Root_Certificate_Authority_2017.crt
84 Feb 24 13:09 Microsoft_RSA_Root_Certificate_Authority_2017.pem → /usr/share/ca-certificates/mozilla/Microsoft_RSA_Root_Certificate_Authority_2017.crt
80 Feb 24 13:09 NAVER_Global_Root_Certification_Authority.pem → /usr/share/ca-certificates/mozilla/NAVER_Global_Root_Certification_Authority.crt
83 Feb 14 2019 'NetLock_Arany=Class_Gold=Főtanúsítvány.pem’ → '/usr/share/ca-certificates/mozilla/NetLock_Arany=Class_Gold=Főtanúsítvány.crt’
78 Feb 14 2019 Network_Solutions_Certificate_Authority.pem → /usr/share/ca-certificates/mozilla/Network_Solutions_Certificate_Authority.crt
70 Feb 14 2019 OISTE_WISeKey_Global_Root_GB_CA.pem → /usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GB_CA.crt
70 Feb 24 13:09 OISTE_WISeKey_Global_Root_GC_CA.pem → /usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GC_CA.crt
1480 Jul 16 2019 passbolt_certificate.crt
1708 Jul 16 2019 passbolt_private.key
60 Feb 14 2019 QuoVadis_Root_CA_1_G3.pem → /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_1_G3.crt
60 Feb 14 2019 QuoVadis_Root_CA_2_G3.pem → /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2_G3.crt
57 Feb 14 2019 QuoVadis_Root_CA_2.pem → /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2.crt
60 Feb 14 2019 QuoVadis_Root_CA_3_G3.pem → /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3_G3.crt
57 Feb 14 2019 QuoVadis_Root_CA_3.pem → /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3.crt
55 Feb 14 2019 QuoVadis_Root_CA.pem → /usr/share/ca-certificates/mozilla/QuoVadis_Root_CA.crt
55 Feb 14 2019 Secure_Global_CA.pem → /usr/share/ca-certificates/mozilla/Secure_Global_CA.crt
58 Feb 14 2019 SecureSign_RootCA11.pem → /usr/share/ca-certificates/mozilla/SecureSign_RootCA11.crt
53 Feb 14 2019 SecureTrust_CA.pem → /usr/share/ca-certificates/mozilla/SecureTrust_CA.crt
69 Feb 14 2019 Security_Communication_RootCA2.pem → /usr/share/ca-certificates/mozilla/Security_Communication_RootCA2.crt
69 Feb 14 2019 Security_Communication_Root_CA.pem → /usr/share/ca-certificates/mozilla/Security_Communication_Root_CA.crt
61 Feb 14 2019 Sonera_Class_2_Root_CA.pem → /usr/share/ca-certificates/mozilla/Sonera_Class_2_Root_CA.crt
1127 Aug 5 2019 ssl-cert-snakeoil.pem
82 Feb 14 2019 SSL.com_EV_Root_Certification_Authority_ECC.pem → /usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_ECC.crt
85 Feb 14 2019 SSL.com_EV_Root_Certification_Authority_RSA_R2.pem → /usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt
79 Feb 14 2019 SSL.com_Root_Certification_Authority_ECC.pem → /usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_ECC.crt
79 Feb 14 2019 SSL.com_Root_Certification_Authority_RSA.pem → /usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_RSA.crt
71 Feb 14 2019 Staat_der_Nederlanden_EV_Root_CA.pem → /usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_EV_Root_CA.crt
73 Feb 14 2019 Staat_der_Nederlanden_Root_CA-G3.pem → /usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_Root_CA-G3.crt
59 Feb 14 2019 Starfield_Class_2_CA.pem → /usr/share/ca-certificates/mozilla/Starfield_Class_2_CA.crt
80 Feb 14 2019 Starfield_Root_Certificate_Authority-G2.pem → /usr/share/ca-certificates/mozilla/Starfield_Root_Certificate_Authority-G2.crt
89 Feb 14 2019 Starfield_Services_Root_Certificate_Authority-G2.pem → /usr/share/ca-certificates/mozilla/Starfield_Services_Root_Certificate_Authority-G2.crt
61 Feb 14 2019 SwissSign_Gold_CA-G2.pem → /usr/share/ca-certificates/mozilla/SwissSign_Gold_CA-G2.crt
63 Feb 14 2019 SwissSign_Silver_CA-G2.pem → /usr/share/ca-certificates/mozilla/SwissSign_Silver_CA-G2.crt
54 Feb 14 2019 SZAFIR_ROOT_CA2.pem → /usr/share/ca-certificates/mozilla/SZAFIR_ROOT_CA2.crt
61 Feb 14 2019 TeliaSonera_Root_CA_v1.pem → /usr/share/ca-certificates/mozilla/TeliaSonera_Root_CA_v1.crt
53 Feb 14 2019 TrustCor_ECA-1.pem → /usr/share/ca-certificates/mozilla/TrustCor_ECA-1.crt
61 Feb 14 2019 TrustCor_RootCert_CA-1.pem → /usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-1.crt
61 Feb 14 2019 TrustCor_RootCert_CA-2.pem → /usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-2.crt
58 Feb 14 2019 Trustis_FPS_Root_CA.pem → /usr/share/ca-certificates/mozilla/Trustis_FPS_Root_CA.crt
79 Feb 24 13:09 Trustwave_Global_Certification_Authority.pem → /usr/share/ca-certificates/mozilla/Trustwave_Global_Certification_Authority.crt
88 Feb 24 13:09 Trustwave_Global_ECC_P256_Certification_Authority.pem → /usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P256_Certification_Authority.crt
88 Feb 24 13:09 Trustwave_Global_ECC_P384_Certification_Authority.pem → /usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P384_Certification_Authority.crt
67 Feb 14 2019 T-TeleSec_GlobalRoot_Class_2.pem → /usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_2.crt
67 Feb 14 2019 T-TeleSec_GlobalRoot_Class_3.pem → /usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_3.crt
84 Feb 14 2019 TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi-Surum_1.pem → /usr/share/ca-certificates/mozilla/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi-_Surum_1.crt

Symlink · February 25, 2021, 3:52pm

Hi,

I rached max characters in my last message.

Here is the output of my health check

Warning Error: SplFileInfo::openFile(/home/vaultadmin/tmp/cache/persistent/myapp_cake_core_translations_default_en__u_s): failed to open stream: Permission denied in [/home/vaultadmin/vendor/cakephp/cakephp/src/Cache/Engine/FileEngine.php, line 406]

Warning Error: SplFileInfo::openFile(/home/vaultadmin/tmp/cache/persistent/myapp_cake_core_translations_cake_console_en__u_s): failed to open stream: Permission denied in [/home/vaultadmin/vendor/cakephp/cakephp/src/Cache/Engine/FileEngine.php, line 406]

 ____                  __          ____
/ __ \____  _____ ____/ /_  ____  / / /_

/ // / __ `/ / / __ / __ / / _/
/ / // ( | ) // / // / / /
// _,///./_//__/

Open source password manager for teams

Healthcheck shell…Exception: SQLSTATE[HY000] [1045] Access denied for user ‘’@‘localhost’ (using password: NO) in [/home/vaultadmin/vendor/cakephp/cakephp/src/Database/Driver.php, line 92]

Also I do not have the file /etc/passbolt/nginx-ssl.conf so I could not verify the reference.

diego · February 25, 2021, 4:01pm

Hi @Symlink

Something is off, the ubuntu package installation directory is /usr/share/php/passbolt and according with your message your logs are mentioning /hom/vaultadmin this should not be the behaviour.

Maybe your nginx settings are still pointing to your old installation directory?

Symlink · February 25, 2021, 4:07pm

Hi @diego

I might be wrong but I am looking at /etc/nginx/sites-enabled and I see :
root /usr/share/php/passbolt/webroot;

Which is fine right?

I might have messed up during Ubuntu upgrade 20.04 and selected keep nginx settings ? But I don’t quite see why the upgrade package wouldn’t change the configuration files to reflect the new setup.

Do I need to look at anything specific ?

Symlink · February 25, 2021, 4:37pm

Hi @diego

I tried other steps.

Since I ran sudo -H -u www-data bash -c “./bin/cake passbolt healthcheck” and you mentionned the folder seemed wrong.

I navitaged to /usr/share/php/passbolt/ instead to rerun the command. Here is the output :

Environment

[PASS] PHP version 7.4.3.
[PASS] PCRE compiled with unicode support.
[PASS] The temporary directory and its content are writable.
[PASS] The public image directory and its content are writable.
[PASS] The logs directory and its content are writable.
[PASS] GD or Imagick extension is installed.
[PASS] Intl extension is installed.
[PASS] Mbstring extension is installed.

Config files

[PASS] The application config file is present
[PASS] The passbolt config file is present

Core config

[PASS] Debug mode is off.
[PASS] Cache is working.
[PASS] Unique value set for security.salt
[PASS] Full base url is set to https://mac-svr-pr-vault.macco.local
[PASS] App.fullBaseUrl validation OK.
[FAIL] Could not reach the /healthcheck/status with the url specified in App.fullBaseUrl
[HELP] Check that the domain name is correct in config/passbolt.php
[HELP] Check the network settings

SSL Certificate

[FAIL] SSL peer certificate does not validate
[FAIL] Hostname does not match when validating certificates.
[WARN] Using a self-signed certificate
[HELP] cURL Error (6) Could not resolve host: mac-svr-pr-vault.macco.local

Database

[PASS] The application is able to connect to the database
[PASS] 25 tables found
[PASS] Some default content is present
[PASS] The database schema up to date.

GPG Configuration

[PASS] PHP GPG Module is installed and loaded.
[PASS] The environment variable GNUPGHOME is set to /var/lib/passbolt/.gnupg.
[PASS] The directory /var/lib/passbolt/.gnupg containing the keyring is writable by the webserver user.
[PASS] The server gpg key is not the default one
[PASS] The public key file is defined in config/passbolt.php and readable.
[PASS] The private key file is defined in config/passbolt.php and readable.
[PASS] The server key fingerprint matches the one defined in config/passbolt.php.
[FAIL] The server public key defined in the config/passbolt.php (or environment variables) is not in the keyring
[HELP] Import the private server key in the keyring of the webserver user.
[HELP] you can try:
[HELP] sudo su -s /bin/bash -c “gpg --home /var/lib/passbolt/.gnupg --import /etc/passbolt//gpg/serverkey_private.asc” www-data
[PASS] There is a valid email id defined for the server key.

Application configuration

[FAIL] Could not connect to passbolt repository to check versions It is not possible check if your version is up to date.
[HELP] Check the network configuration to allow this script to check for updates.
[PASS] Passbolt is configured to force SSL use.
[FAIL] App.fullBaseUrl is not set to HTTPS.
[HELP] Check App.fullBaseUrl url scheme in config/passbolt.php.
[PASS] Selenium API endpoints are disabled.
[PASS] Search engine robots are told not to index content.
[PASS] Registration is closed, only administrators can add users.
[PASS] Serving the compiled version of the javascript app
[PASS] All email notifications will be sent.

6 error(s) found. Hang in there!

diego · February 25, 2021, 5:09pm

The contents of /etc/nginx/sites-enabled/passbolt.conf is correct.

I’m thinking if you left something in /etc/nginx/conf.d which is pointing to your old passbolt setup

Symlink · February 25, 2021, 5:21pm

Hi @diego

The content of my conf.d folder in /etc/nginx is empty.

I do seem to have a trouble resolving since the Ubuntu 20.04 upgrade.

if I try to ping anything with it’s FQDN I get :
Temporary failure in name resolution

I tried to look at my netplan configuration :
ens192:
dhcp4: no
addresses:
- XXX.XXX.XXX.134/24
gateway4: XXX.XXX.XXX.254
nameservers:
addresses: [XXX.XXX.XXX.230, XXX.XXX.XXX.231]

and I couldn’t find anything wrong. Now of course I know there are spaces in yaml and when I apply the config with sudo netplan apply it doesn’t give me any configuration error.

I think I’ll have to restore my VM to 2.3 and leave it be I might lack the knowledge to succeed in upgrading.

garrett · February 25, 2021, 8:53pm

@Symlink If you are now using certs for a domain that the old version did not use, you may need to note the domain name in /etc/hosts so that the server knows its own domain:

127.0.0.1 yourdomain.com localhost