Syntax error in certbot dirsrv hook #272

Closed
opened 2020-12-31 10:32:15 +00:00 by greg · 0 comments
Owner

Today I could not log in to Gitea after being logged out after cookie expiry. The error in the dirsrv logs was "SSL peer cannot verify your certificate". It was not an issue for ejabberd, I could still connect.

The cause was a syntax error in the certbot hook for dirsrv, a newline (\n\) that was not escaped in the Chef code and rendered as an actual newline in the script.

I have executed the content of the hook line by line manually on barnard to copy the new cert to dirsrv, the new cert is running on ldap.kosmos.org. I will push the fix to the script in a PR.

Today I could not log in to Gitea after being logged out after cookie expiry. The error in the dirsrv logs was "SSL peer cannot verify your certificate". It was not an issue for ejabberd, I could still connect. The cause was a syntax error in the certbot hook for dirsrv, a newline (`\n\`) that was not escaped in the Chef code and rendered as an actual newline in the script. I have executed the content of the hook line by line manually on barnard to copy the new cert to dirsrv, the new cert is running on ldap.kosmos.org. I will push the fix to the script in a PR.
greg added the
ops
bug
labels 2020-12-31 10:32:15 +00:00
greg self-assigned this 2020-12-31 10:32:15 +00:00
Sign in to join this conversation.
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: kosmos/chef#272
No description provided.