Hello Dominic,

try to apply the maintenance perl addons/pf-maint.pl

This should fix the actual issue.

To renew the certificate you can do it via openssl commands.

create a conf_file.cnf in which you need the following:

[cert]

extendedKeyUsage = serverAuth

then do this command:

openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 -config conf_file.cnf

then fill in the requested informations and move your certificate/key to replace the old one.

Thanks

On 08/14/2017 10:56 AM, dominic--- via PacketFence-users wrote:

Hi All,

I am running version 6.2.1 on CentOS with great success. Untill today!

After a restart of the system Packetfence services fail to start.

 service packetfence start
Redirecting to /bin/systemctl start  packetfence.service
Job for packetfence.service failed because the control process exited with error code. See "systemctl status packetfence.service" and "journalctl -xe" for details.
[root@pf pf]#

[root@pf pf]#
[root@pf pf]# systemctl status packetfence.service
● packetfence.service - PacketFence Service
Loaded: loaded (/usr/lib/systemd/system/packetfence.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since Mon 2017-08-14 16:52:00 CEST; 46s ago Process: 2940 ExecStart=/usr/local/pf/bin/pfcmd service pf start (code=exited, status=255)

Aug 14 16:51:39 pf.kalmar.se pfcmd[2940]: [Mon Aug 14 16:51:39 2017] pfappserver.pm: Cannot determine desired terminal width, using default of 80 columns Aug 14 16:51:40 pf.kalmar.se pfcmd[2940]: AH00548: NameVirtualHost has no effect and will be removed in the next release /usr/local/pf/var/conf/httpd.conf.d/httpd.admin:194
Aug 14 16:51:52 pf.kalmar.se pfcmd[2940]: httpd.admin|start
Aug 14 16:51:52 pf.kalmar.se pfcmd[2940]: Checking configuration sanity...
Aug 14 16:51:59 pf.kalmar.se pfcmd[2940]: FATAL - The certificate used by FreeRADIUS (/usr/local/pf/raddb/certs/server.crt) has expired. Aug 14 16:51:59 pf.kalmar.se pfcmd[2940]: Regenerate a new self-signed certificate or update your current certificate. Aug 14 16:51:59 pf.kalmar.se systemd[1]: packetfence.service: control process exited, code=exited status=255 Aug 14 16:52:00 pf.kalmar.se systemd[1]: Failed to start PacketFence Service. Aug 14 16:52:00 pf.kalmar.se systemd[1]: Unit packetfence.service entered failed state.
Aug 14 16:52:00 pf.kalmar.se systemd[1]: packetfence.service failed.
[root@pf pf]#

Soooo it seems i have a problem with the radius cert?

Does anyone know how to renew this certificate?

best regards

Dominic Kilbride



------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot


_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

--
Antoine Amacher
[email protected]  ::  www.inverse.ca
+1.514.447.4918 x130  :: +1 (866) 353-6153 x130
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence 
(www.packetfence.org)

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to