5.9 to 5.10 ssl pass phrase now not working

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
bpoole
Posts: 3
Joined: Thu Jan 06, 2022 8:55 am

5.9 to 5.10 ssl pass phrase now not working

Post by bpoole »

I can revert to my snapshot of 5.9 and run service httpd restart, I'll get prompted for SSL pass phrase and type in the one we use. After updating to 5.10 I try the same SSL pass phrase and it doesn't work. Trying to update NagiosXI to latest release.
jsimon
Posts: 113
Joined: Wed Aug 23, 2023 11:27 am

Re: 5.9 to 5.10 ssl pass phrase now not working

Post by jsimon »

Hi @bpoole,

I'm wondering if some of the steps you are taking are being left out, as restarting httpd should not prompt you for an SSL passphrase. What point in the process are you being prompted for this passphrase? Please be as complete as possible to ensure that we can provide proper troubleshooting steps. In addition, can you let us know what OS and version you are running this XI server on?
bpoole
Posts: 3
Joined: Thu Jan 06, 2022 8:55 am

Re: 5.9 to 5.10 ssl pass phrase now not working

Post by bpoole »

@jsimon
Thank you for the response. When we configured NagiosXI with an SSL certificate, this is the SSL Pass Phrase that I have to input after the server is rebooted. I have to go into CentOS (release 7.9.2009) and run service httpd restart, then I’m prompted for the Certificate SSL pass Phrase. Otherwise, we are unable to access the frontend website.
jsimon
Posts: 113
Joined: Wed Aug 23, 2023 11:27 am

Re: 5.9 to 5.10 ssl pass phrase now not working

Post by jsimon »

It sounds like you have a password on your private key, and it's prompting you on service restart, then? I believe the next step to resolve this would be remove the certificate key password:

https://help.cloud66.com/docs/security/ ... passphrase

I can't think of any reasons that this passphrase would change on an XI upgrade, but I would recommend removing that passphrase in this instance, which should let you proceed.
bpoole
Posts: 3
Joined: Thu Jan 06, 2022 8:55 am

Re: 5.9 to 5.10 ssl pass phrase now not working

Post by bpoole »

@jsimon

Thank you for the reply. I added a new certificate without the password. I was able to update to 5.10 then to the latest release.
jsimon
Posts: 113
Joined: Wed Aug 23, 2023 11:27 am

Re: 5.9 to 5.10 ssl pass phrase now not working

Post by jsimon »

Great! I'm glad we were able to get that figured out. I'll go ahead and lock this thread.
Locked