My aegir install on ubuntu was just upgraded.
My system verifies with ssl.
but when I goto https://mysite.com it just hangs and there is nothing in the logs.

Comments

SocialNicheGuru’s picture

SocialNicheGuru CreditAttribution: SocialNicheGuru commented

Do I have to reverify my entire system? any pointers would be greatly appreciated.

SocialNicheGuru’s picture

SocialNicheGuru CreditAttribution: SocialNicheGuru commented
Title: SSL no longer working on April 9 upgrade » SSL as of April 9 - have to re-select radio button for encryption key
Status: Active » Closed (works as designed)

I had to verify the server again.
Once all platforms and sites were re-verified, I had to edit each site that was ssl enabled.
The appropriate radio was selected for type of encryption.
However, I had to select the radio button for the encryption key key again.
Then re-verfiy the site.
Clear all caches.

Is it necessary to have to re-select the encryption key?

ergonlogic’s picture

ergonlogic
he/him
Primary language English
Location Montréal, Québec 🇨🇦
CreditAttribution: ergonlogic commented
Title: SSL as of April 9 - have to re-select radio button for encryption key » SSL requires re-selecting radio button for encryption key
Project: Provision » Hosting
Status: Closed (works as designed) » Needs work
Issue tags: +aegir-ssl

I merged in the dev-sni branch in order to #1926520: Support Server Name Indication (SNI) for SSL. This is part of a broader initiative to refactor SSL. See: #2466977: [META] SSL refactor. I'm re-opening this issue, and tagging it with aegir-ssl to maintain visibility on this behaviour.

  • helmo committed 2d9c1ca on 
    Issue #2469179: Improve saving a new SSL key
  • helmo committed 3cbfc23 on 
    Issue #2469179: Remove duplicate call to hosting_ssl_filter_key, its in...
helmo’s picture

helmo CreditAttribution: helmo at Initfour websolutions commented
Status: Needs work » Needs review

I've added two commits that improve saving the certificate record to our database.

What I saw was that on a new site, with 'Generate a new encryption key.' selected and a name specified. The option was not selected directly after installation. I had to edit the site node and select the new certificate.

  • helmo committed 2d9c1ca on 7.x-4.x 
    Issue #2469179: Improve saving a new SSL key
  • helmo committed 3cbfc23 on 7.x-4.x
    Issue #2469179: Remove duplicate call to hosting_ssl_filter_key, its in...
helmo’s picture

helmo CreditAttribution: helmo at Initfour websolutions commented
Status: Needs review » Fixed

Please re-open if there is more todo.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.