Converting to SSL Fails

[cardigansam]

When I setup a clean ESPOCRM instance, it runs fine in HTTP (install.sh) mode using the install script. When I try to convert to SSL, either letsencrypt (install.sh --ssl --letsencrypt) fails to verify the files on the domain or when using my own generated keys (install.sh --ssl --owncertificate), it runs until I stop the nginix server and replace the keys and restart with them in place. It's not even listening for TLS connections.

I'm not sure what I'm missing.

Run "clean":

sudo lsof -n -i
COMMAND      PID     USER   FD   TYPE  DEVICE SIZE/OFF NODE NAME
dhclient     675     root    7u  IPv4   29161      0t0  UDP *:bootpc
sshd       47280     root    3u  IPv4  900997      0t0  TCP *:ssh (LISTEN)
sshd       47280     root    4u  IPv6  900999      0t0  TCP *:ssh (LISTEN)
sshd      391205     root    4u  IPv4 7654111      0t0  TCP 192.168.22.213:ssh->192.168.22.168:56015 (ESTABLISHED)
sshd      391211     user    4u  IPv4 7654111      0t0  TCP 192.168.22.213:ssh->192.168.22.168:56015 (ESTABLISHED)
docker-pr 443267     root    4u  IPv4 7909958      0t0  TCP *:http-alt (LISTEN)
docker-pr 443273     root    4u  IPv6 7908300      0t0  TCP *:http-alt (LISTEN)
docker-pr 443601     root    4u  IPv4 7917672      0t0  TCP *:http (LISTEN)
docker-pr 443606     root    4u  IPv6 7916730      0t0  TCP *:http (LISTEN)​

First run after converting to SSL:

COMMAND      PID     USER   FD   TYPE  DEVICE SIZE/OFF NODE NAME
dhclient     675     root    7u  IPv4   29161      0t0  UDP *:bootpc
sshd       47280     root    3u  IPv4  900997      0t0  TCP *:ssh (LISTEN)
sshd       47280     root    4u  IPv6  900999      0t0  TCP *:ssh (LISTEN)
sshd      391205     root    4u  IPv4 7654111      0t0  TCP 192.168.22.213:ssh->192.168.22.168:56015 (ESTABLISHED)
sshd      391211     user    4u  IPv4 7654111      0t0  TCP 192.168.22.213:ssh->192.168.22.168:56015 (ESTABLISHED)
docker-pr 445134     root    4u  IPv4 7922474      0t0  TCP *:http-alt (LISTEN)
docker-pr 445143     root    4u  IPv6 7920273      0t0  TCP *:http-alt (LISTEN)
docker-pr 445638     root    4u  IPv4 7917429      0t0  TCP *:https (LISTEN)
docker-pr 445645     root    4u  IPv6 7918785      0t0  TCP *:https (LISTEN)
docker-pr 445660     root    4u  IPv4 7908940      0t0  TCP *:http (LISTEN)
docker-pr 445668     root    4u  IPv6 7922526      0t0  TCP *:http (LISTEN)​

After restarting with new ssl keys in place:

COMMAND      PID     USER   FD   TYPE  DEVICE SIZE/OFF NODE NAME
dhclient     675     root    7u  IPv4   29161      0t0  UDP *:bootpc
sshd       47280     root    3u  IPv4  900997      0t0  TCP *:ssh (LISTEN)
sshd       47280     root    4u  IPv6  900999      0t0  TCP *:ssh (LISTEN)
sshd      391205     root    4u  IPv4 7654111      0t0  TCP 192.168.22.213:ssh->192.168.22.168:56015 (ESTABLISHED)
sshd      391211     user    4u  IPv4 7654111      0t0  TCP 192.168.22.213:ssh->192.168.22.168:56015 (ESTABLISHED)
docker-pr 446504     root    4u  IPv4 7928879      0t0  TCP *:http-alt (LISTEN)
docker-pr 446510     root    4u  IPv6 7925035      0t0  TCP *:http-alt (LISTEN)​

[lazovic]

Hi cardigansam,

Unfortunately, I can't reproduce this issue. Please tell me, are you running the installation script on a clean server? Do any errors occur in the instance, does it even start? I would be grateful for more details.