Nagios Support Forum

Hello:
I noted that Nagios XI had an upgrade so I ran a local backup this morning which completed with the extension ".tar.gz" (size 854.61 Mb - I take snapshots of my work and document them).
I ran the 5.2.7 upgrade after the local backup completed.
I noted that while in the web admin page the upgrade process appeared to be hung (the "spinner" kept going) for over 20 minutes. I never had Nagios XI backups take that long before, so I refreshed the web page in my browser and then noted that the Nagios XI web admin page wouldn't come back up/online. This has not happened before.

I checked the Linux RHEL 6.x server and the server is still up and "top -c" shows some activity going on.

I did "ps -ef | grep httpd" and noted that Apache wasn't running, so I tried to start Apache, and it Failed.

The error message referenced the following SSL Cert information within "/etc/httpd/conf.d/nagiosxi.conf":
"SSLCertificateFile /etc/pki/tls/certs/ca.crt"
"SSLCertificateKeyFile /etc/pki/tls/private/ca.key"

but the following files existed in the path:
-rw-r--r-- 1 root root 753868 Sep 3 2013 ca-bundle.crt
-rw-r--r-- 1 root root 974993 Sep 3 2013 ca-bundle.trust.crt
-rw-------. 1 root root 1192 Jun 12 2013 localhost.crt
-rwxr-xr-x 1 root root 610 Apr 7 2014 make-dummy-cert*
-rw-r--r-- 1 root root 2242 Apr 7 2014 Makefile
-rwxr-xr-x 1 root root 829 Apr 7 2014 renew-dummy-cert*


HELP, PLEASE!

Can you assist with getting this back up or get me back to version 5.2.5 since this is a physical box and I can't go back to a VM snapshot?

Thank you.

Well, I checked my Simpana backups and noted that there never was a "ca.crt" nor "ca.key" file, and changed the file references to "localhost.crt" and "localhost.key", respectively, then restarted Apache, and the web Admin page did come back online, but something is VERY wrong, as per my snapshot.

I have run a restore of my last backup, as per https://assets.nagios.com/downloads/nag ... ios-XI.pdf, but the site is still hosed (2nd pic). What happens is if you click on the hyperlink "Access Nagios XI", the URL it points to is "https://<our-NagiosXI-web-page-with-no-trailing-"/">nagiosxi/" <--- should be https://<dns-name>/nagiosxi" but redirects to "https://<dns-name>nagiosxi" which has no "/" before "nagiosxi".

So, local backup didn't work.

I REALLY REALLY REALLY want to avoid a full restore here.

Well, I've restored from my last 2 local backups and still have the same issue.

I'm quite pizzed, to say the least.

Looks like it may be file permissions and/or PHP errors, are you seeing anything in your /var/log/httpd/error_log or /var/log/httpd/ssl_error_log that may give us any indication?

Most recent information found in "/var/log/httpd/error_log":

"
[Fri Apr 08 14:19:06 2016] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 08 14:19:06 2016] [notice] Apache/2.2.15 (Unix) DAV/2 PHP/5.3.3 mod_ssl/2.2.15 OpenSSL/1.0.0-fips configured -- resuming normal operations
[Fri Apr 08 14:25:47 2016] [notice] caught SIGTERM, shutting down
[Fri Apr 08 14:25:47 2016] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Fri Apr 08 14:25:47 2016] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 08 14:25:47 2016] [notice] Digest: generating secret for digest authentication ...
[Fri Apr 08 14:25:47 2016] [notice] Digest: done
[Fri Apr 08 14:25:47 2016] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 08 14:25:47 2016] [notice] Apache/2.2.15 (Unix) DAV/2 PHP/5.3.3 mod_ssl/2.2.15 OpenSSL/1.0.0-fips configured -- resuming normal operations
"

ssl_error.log only had "[Fri Apr 08 14:29:10 2016] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)"

This might need a remote session - can you send in a ticket and reference this thread? I don't think we'll have time today to squeeze in a remote, but next week we can set something up for sure.

In the ticket, please also attach your /etc/httpd directory contents, as I think this is an Apache misconfig.

tmcdonald wrote:This might need a remote session - can you send in a ticket and reference this thread? I don't think we'll have time today to squeeze in a remote, but next week we can set something up for sure.

In the ticket, please also attach your /etc/httpd directory contents, as I think this is an Apache misconfig.

This is a production, crucial system that we have so that our systems are monitored and . "Next week" is not acceptable. Whatever upgrade 5.7.2 did, it made a mess of this system.

Doing a full restore right now. We can't wait.

PhilG wrote:Doing a full restore right now. We can't wait.

Decided we won't do a "Full" restore since we would mess up Simpana, and much everthing else.

I think the Nagios Core is still communicating and sending out warnings of Hosts/Services that existed at the time the backup contained those items but since were removed.

I have found the following:
https://support.nagios.com/forum/viewto ... 2&start=10
and
https://support.nagios.com/forum/viewto ... =6&t=35572
which gave:
https://assets.nagios.com/downloads/nag ... s%20XI.pdf

Our Nagios XI 5.2.5 system was running fine with no issues until I ran the upgrade to 5.2.7 through the web Admin. Now, I when trying access https://<NagiosXI server admin DNS> the page looks like this: