On Thu, February 22, 2024 11:30, Martin Bartosch wrote:
> Hi,
>
>> I have discovered that my literal reading of README.md and the Quickstart
>> guide
>> led me to copy the /usr/local/share/examples/openxpki/htdocs/ directory to
>> /var/local/www/openxpki/ whereas it appears that I instead should have copied
>> the contents thereof. This I have now done and I get a different error.
>>
>> I now see the openxpki logo on a grey page with the following error message
>> box:
>>
>> Application Error
>>
>> [
>> "There was an error while processing the data received from the server: ",
>> {}
>> ]
>>
>> This probably means that I have misconfigured, or failed to configure
>> something
>> else.
>>
>> Any clues as to what that may be?
>
> Is mod_fcgid enabled in Apache? Check if the fcgi scripts are actually
> executed, if mod_fcgid is not enabled you will see the raw output of the CGI
> script in the development console or your browser.
apachectl -t -D DUMP_MODULES | grep fastcgi
fastcgi_module (shared)
I think that error message is likely the raw output of the CGI script.
>
> Check the web server error log file for hints.
>
> If fcgi is enabled, check the web server log files, typically at
> /var/log/openxpki/webui.log, you should see log messages there.
> If none are to be seen,
I stopped apache, emptied the log files, restarted apache, and navigated to
openxpki. These are all of the log entries created.
cat /var/log/httpd/apache24/openxpki/openxpki-3_ssl_error.log
[Thu Feb 22 12:17:11.627936 2024] [ssl:warn] [pid 52215] AH01909:
openxpki.hamilton.harte-lyne.ca:443:0 server certificate does NOT include an ID
which matches the server name
[Thu Feb 22 12:17:11.634189 2024] [ssl:warn] [pid 52216] AH01909:
openxpki.hamilton.harte-lyne.ca:443:0 server certificate does NOT include an ID
which matches the server name
cat /var/log/httpd/apache24/main/main_no_io_access.log
192.168.216.89 - - [22/Feb/2024:12:17:16 -0500] "GET /openxpki/ HTTP/1.1" 304 -
"-" "Mozilla/5.0 (X11; FreeBSD amd64; rv:122.0) Gecko/20100101 Firefox/122.0"
192.168.216.89 - - [22/Feb/2024:12:17:17 -0500] "GET /openxpki/localconfig.yaml
HTTP/1.1" 404 196 "https://192.168.216.89/openxpki/"; "Mozilla/5.0 (X11; FreeBSD
amd64; rv:122.0) Gecko/20100101 Firefox/122.0"
192.168.216.89 - - [22/Feb/2024:12:17:17 -0500] "GET
/openxpki/cgi-bin/webui.fcgi?page=welcome&target=top&_=1708622237008 HTTP/1.1"
200 10717 "https://192.168.216.89/openxpki/"; "Mozilla/5.0 (X11; FreeBSD amd64;
rv:122.0) Gecko/20100101 Firefox/122.0"
cat /var/log/httpd/apache24/openxpki/openxpki-3_ssl_error.log
192.168.216.89 - - [22/Feb/2024:10:20:07 -0500] "GET /openxpki/ HTTP/1.1" 304 -
"-" "Mozilla/5.0 (X11; FreeBSD amd64; rv:122.0) Gecko/20100101 Firefox/122.0"
192.168.216.89 - - [22/Feb/2024:10:20:07 -0500] "GET /openxpki/localconfig.yaml
HTTP/1.1" 404 196 "https://192.168.216.89/openxpki/"; "Mozilla/5.0 (X11; FreeBSD
amd64; rv:122.0) Gecko/20100101 Firefox/122.0"
192.168.216.89 - - [22/Feb/2024:10:20:07 -0500] "GET
/openxpki/cgi-bin/webui.fcgi?page=welcome&target=top&_=1708615207787 HTTP/1.1"
200 10717 "https://192.168.216.89/openxpki/"; "Mozilla/5.0 (X11; FreeBSD amd64;
rv:122.0) Gecko/20100101 Firefox/122.0"
The log files you mention were previously created, although the permissions are
660.
ll /var/log/openxpki/*
-rw-rw---- 1 openxpki openxpki 519 Feb 14 09:56 /var/log/openxpki/audit.log
-rw-rw---- 1 openxpki openxpki 10472 Feb 14 10:57
/var/log/openxpki/catchall.log
-rw-rw---- 1 openxpki openxpki 1096 Feb 13 08:35
/var/log/openxpki/deprecated.log
-rw-rw---- 1 openxpki openxpki 6283 Feb 14 10:36
/var/log/openxpki/openxpki.log
-rw-rw---- 1 www www 0 Feb 8 09:12 /var/log/openxpki/scep.log
-rw-rw---- 1 www www 0 Feb 8 09:12 /var/log/openxpki/soap.log
-rw-rw---- 1 openxpki openxpki 2371 Feb 13 08:35
/var/log/openxpki/stderr.log
-rw-rw---- 1 www www 0 Feb 8 09:12 /var/log/openxpki/webui.log
-rw-rw---- 1 openxpki openxpki 74 Feb 14 10:36
/var/log/openxpki/workflows.log
On Thu, February 22, 2024 11:43, Sergei Vyshenski wrote:
>
> pkg info --pkg-message p5-openxpki
>
Is there something in particular in this documentation to which you wish to
draw my attention? To the best of my ability to determine I have already used
this information in my installation. I am using the system openssl, /var/tmp/
and so forth exist. The openxpki log files have the pkg recommended permissions
and owners.
Thanks,
--
*** e-Mail is NOT a SECURE channel ***
Do NOT transmit sensitive data via e-Mail
Unencrypted messages have no legal claim to privacy
Do NOT open attachments nor follow links sent by e-Mail
James B. Byrne mailto:[email protected]
Harte & Lyne Limited http://www.harte-lyne.ca
9 Brockley Drive vox: +1 905 561 1241
Hamilton, Ontario fax: +1 905 561 0757
Canada L8E 3C3
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users
