Macrium Support Forum

Site Manager 8.0.6898 Custom SSL Certs Not Working

https://forum.macrium.com/Topic63364.aspx

By cwagz - 27 July 2022 5:42 PM

I had my own cert and private key working in the previous version of Site Manager. After the update Site Manager is using it's own self-signed certificate and I can no longer get it to use the two cert files that I am pointing to via the security settings.
By Alex - 28 July 2022 7:49 AM

cwagz - 27 July 2022 5:42 PM
I had my own cert and private key working in the previous version of Site Manager. After the update Site Manager is using it's own self-signed certificate and I can no longer get it to use the two cert files that I am pointing to via the security settings.

Hi,
We have changed the way in which the settings are saved (the certificate files have some additional checking done to prevent accidentally setting the wrong things and breaking the web GUI), but the underlying mechanisms for the certificates should not have changed and the upgrade should not have touched those settings. If you would like to create a support ticket at www.macrium.com/support, we can investigate. If you include a link to this post in the ticket, I can make sure the it gets to the appropriate team directly. It may also be useful to include a screenshot of the settings page. If our support team ask for a support upload (they most likely will), this will not contain the certificates themselves for privacy reasons, so you may want to include the public certificate file. 
By Alex - 28 July 2022 5:34 PM

Alex - 28 July 2022 7:49 AM
cwagz - 27 July 2022 5:42 PM
I had my own cert and private key working in the previous version of Site Manager. After the update Site Manager is using it's own self-signed certificate and I can no longer get it to use the two cert files that I am pointing to via the security settings.

Hi,
We have changed the way in which the settings are saved (the certificate files have some additional checking done to prevent accidentally setting the wrong things and breaking the web GUI), but the underlying mechanisms for the certificates should not have changed and the upgrade should not have touched those settings. If you would like to create a support ticket at www.macrium.com/support, we can investigate. If you include a link to this post in the ticket, I can make sure the it gets to the appropriate team directly. It may also be useful to include a screenshot of the settings page. If our support team ask for a support upload (they most likely will), this will not contain the certificates themselves for privacy reasons, so you may want to include the public certificate file. 

Just a quick update - we have identified an issue where our validation code wasn't recognising some passphrase-protected private key files, we will be putting out a fix for this in the next few days - it may be related to this issue.
By cwagz - 2 August 2022 2:23 AM

Alex - 28 July 2022 5:34 PM
Alex - 28 July 2022 7:49 AM
cwagz - 27 July 2022 5:42 PM
I had my own cert and private key working in the previous version of Site Manager. After the update Site Manager is using it's own self-signed certificate and I can no longer get it to use the two cert files that I am pointing to via the security settings.

Hi,
We have changed the way in which the settings are saved (the certificate files have some additional checking done to prevent accidentally setting the wrong things and breaking the web GUI), but the underlying mechanisms for the certificates should not have changed and the upgrade should not have touched those settings. If you would like to create a support ticket at www.macrium.com/support, we can investigate. If you include a link to this post in the ticket, I can make sure the it gets to the appropriate team directly. It may also be useful to include a screenshot of the settings page. If our support team ask for a support upload (they most likely will), this will not contain the certificates themselves for privacy reasons, so you may want to include the public certificate file. 

Just a quick update - we have identified an issue where our validation code wasn't recognising some passphrase-protected private key files, we will be putting out a fix for this in the next few days - it may be related to this issue.

Hi Alex, I went ahead and submitted a support ticket after the latest update did not resolve the issue.

https://help.macrium.com/support/tickets/213177

Thank you.
By Alex - 2 August 2022 8:21 AM

cwagz - 2 August 2022 2:23 AM
Alex - 28 July 2022 5:34 PM
Alex - 28 July 2022 7:49 AM
cwagz - 27 July 2022 5:42 PM
I had my own cert and private key working in the previous version of Site Manager. After the update Site Manager is using it's own self-signed certificate and I can no longer get it to use the two cert files that I am pointing to via the security settings.

Hi,
We have changed the way in which the settings are saved (the certificate files have some additional checking done to prevent accidentally setting the wrong things and breaking the web GUI), but the underlying mechanisms for the certificates should not have changed and the upgrade should not have touched those settings. If you would like to create a support ticket at www.macrium.com/support, we can investigate. If you include a link to this post in the ticket, I can make sure the it gets to the appropriate team directly. It may also be useful to include a screenshot of the settings page. If our support team ask for a support upload (they most likely will), this will not contain the certificates themselves for privacy reasons, so you may want to include the public certificate file. 

Just a quick update - we have identified an issue where our validation code wasn't recognising some passphrase-protected private key files, we will be putting out a fix for this in the next few days - it may be related to this issue.

Hi Alex, I went ahead and submitted a support ticket after the latest update did not resolve the issue.

https://help.macrium.com/support/tickets/213177

Thank you.

Hi, I'll have a look and see if I can assist. Just to confirm, when you attempt to update settings with the custom key files, the UI shows an error and the key files revert to the self-signed ones? It's likely that the error has reset the key file paths and you will need to edit them back to the custom ones
By cwagz - 2 August 2022 2:41 PM

Alex - 2 August 2022 8:21 AM
cwagz - 2 August 2022 2:23 AM
Alex - 28 July 2022 5:34 PM
Alex - 28 July 2022 7:49 AM
cwagz - 27 July 2022 5:42 PM
I had my own cert and private key working in the previous version of Site Manager. After the update Site Manager is using it's own self-signed certificate and I can no longer get it to use the two cert files that I am pointing to via the security settings.

Hi,
We have changed the way in which the settings are saved (the certificate files have some additional checking done to prevent accidentally setting the wrong things and breaking the web GUI), but the underlying mechanisms for the certificates should not have changed and the upgrade should not have touched those settings. If you would like to create a support ticket at www.macrium.com/support, we can investigate. If you include a link to this post in the ticket, I can make sure the it gets to the appropriate team directly. It may also be useful to include a screenshot of the settings page. If our support team ask for a support upload (they most likely will), this will not contain the certificates themselves for privacy reasons, so you may want to include the public certificate file. 

Just a quick update - we have identified an issue where our validation code wasn't recognising some passphrase-protected private key files, we will be putting out a fix for this in the next few days - it may be related to this issue.

Hi Alex, I went ahead and submitted a support ticket after the latest update did not resolve the issue.

https://help.macrium.com/support/tickets/213177

Thank you.

Hi, I'll have a look and see if I can assist. Just to confirm, when you attempt to update settings with the custom key files, the UI shows an error and the key files revert to the self-signed ones? It's likely that the error has reset the key file paths and you will need to edit them back to the custom ones

The UI accepts my path to the cert and saves it. However, when Site Manager restarts it is still using the inbuilt self-signed cert. The path and cert files are the same as the ones that were working before the recent Site Manager Updates.
By cwagz - 2 August 2022 2:57 PM


I re-created the cert files and they are working now.
I have no idea why they stopped working after the initial upgrade to 6898. Maybe I messed the files up somehow while trouble shooting and now the issue is resolved in the latest 6906 update.
By Alex - 2 August 2022 3:14 PM

cwagz - 2 August 2022 2:57 PM

I re-created the cert files and they are working now.
I have no idea why they stopped working after the initial upgrade to 6898. Maybe I messed the files up somehow while trouble shooting and now the issue is resolved in the latest 6906 update.

Very unusual! From the symptoms, it sounds like for some reason the data was being saved into the settings for the Site Manager, but that wasn't being correctly read out again on restart. If the server thinks there are no certificate files specified, it will use the default ones - I'm unable to recreate this on our test installations, so I'm not sure what might have caused this. Our support team may ask for log files to see if we can find any clues in them to see what happened.