webmin
Setting SSL Encryption results in PEM format error
Error message: Failed to save SSL options : The SSL private key file /etc/webmin/miniserv.pem does not exist or does not contain a PEM format key
Reproduction: Clean install, open SSL Encryption and click "Save" without any changes.
Workaround: Editing miniserv.conf directly.
@MHeuvel & @jcameron: I think this was introduced in commit f52cb3a, where I have a more detailed comment.
Fix: remove the extra space character from webmin/webmin-lib.pl line 1037, so that it reads:
...)?PRIVATE KEY...
instead of
...)? PRIVATE KEY...
This is still broken. Just tried in a new installation and even in the interface it verifies and show in "Current certificate", webmin keeps serving the self-signed. Any workaround or fix?
Ruben,
As a workaround, I have edited the /etc/webmin/miniserv.conf file to have entries similar to:
keyfile=/path/to/ssl_key.key certfile=/path/to/ssl_certificate.cer extracas=/path/to/ca_certificate.cer
You need to reload webmin to put the new certificates into effect.
On Mon, Apr 9, 2018 at 10:06 PM, Rubén Pérez [email protected] wrote:
This is still broken. Just tried in a new installation and even in the interface it verifies and show in "Current certificate", webmin keeps serving the self-signed. Any workaround or fix?
— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/webmin/webmin/issues/653#issuecomment-379959368, or mute the thread https://github.com/notifications/unsubscribe-auth/AHM_jLqfPDEk8G_kJ9LLmONPNXQmZG00ks5tnCHCgaJpZM4P21mo .
@chrispolley @RixzZ It's probably a bug the fact that webmin doesn't seem to install the valid letsencrypt TLS cert to its own web server miniserv.pl in miniserv.conf. Self signed certs should no longer be the default when you have valid secure letsencrypt certs available at no cost.
Thanks for both your replies. I finally figure out a 'good' way while this fails.
In my case I have Virtualmin too, with a Virtual Server using the hostname. I generated the Let's Encrypt certificate from the Manage Certificates virtual server section. That created the proper files in the home folder of the virtual server.
Then I just had to specify those files from the Webmin SSL certificates section.
Seems like the files that are generated in /etc/webmin/ by the Webmin SSL section are not working, but if you generate the LE certificate from Virtualmin it just works.
Ruben,
As a workaround, I have edited the /etc/webmin/miniserv.conf file to have entries similar to:
keyfile=/path/to/ssl_key.key For letsencrypt it is privkey.pem then certfile=/path/to/ssl_certificate.cer and this is cert.pem extracas=/path/to/ca_certificate.cer and this is chain.pem
pls correct me if i'm wrong, but for me it works.
Pit
