Hi Pekka,

did you try to clear your browser cookies? This sounds a bit like you have changed the settings for the session management and now the system tries to decode/decrypt stuff from an older session/setting.

Oliver

On 4/17/26 11:27, Pekka Länsiaho wrote:
Hello again,

We have been a bit slow with the system updates, and since v3.32 was a breaking change we had to put off updates entirely for a while, so I am trying to remediate that now. I have managed to upgrade configuration following instructions in the change log https://openxpki.readthedocs.io/en/master/upgrading.html#release-v3-32, and got both server and client services running after upgrade to v3.32.15 and using community config v3.32.8. (Old system version was v3.30.9, not quite sure which config version, but I believe the community branch commit was 17b96e5)
System is running Debian 12.13.

/openxpkictl status server/ and /client/ both report running and accepting requests, and both clients and serviced logs have no indication of errors.

However, when accessing webui at https://openxpki/webui/index/#/openxpki/welcome, application error appears: "/The webserver did not return the expected data. Possible causes: OpenXPKI client is not running; authentication session has expired; an internal error. HTTP code: 503/".

And upon inspecting /var/log/openxpki/webui.log, I am met with these lines: /ERR Unable to decrypt cookie (AES: Data size must be multiple of blocksize (16 bytes) at /usr/share/perl5/Crypt/CBC.pm line 492.) at /usr/share/perl5/OpenXPKI/Client/Service/WebUI/SessionCookie.pm line 214./ /ERR Error creating backend client: Unable to connect to socket [sid=....]/
/ERR Backend service is not reachable or not responding [sid=....]/

I tried to look at the newly provided 'sampleconfig.sh' file to see if there was a step I might have missed compared to a fresh system install, but couldn't immediately point to any particular step, unfortunately.

Help would be much appreciated, my eyes grow tired of comparing things.


best regards,
Pekka


_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

--
Protect your environment -  close windows and adopt a penguin!
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to