[6.933] Can't change webadmin-certificate

[Suppentrulli]

Hi,

on the "Webadmin HTTPS certificate"-page i entered by mistake a wrong ip-address (hostname-field).

Now, i can't set it up with the correct ip-address. It always says "WebAdmin certificate regenerated", that is true - i can see the new certificate on the certificate-management-page, but the webadmin still uses (and shows) the old one - the new certificate is unused.

[tom]

There's an error message missing on that page. The reason for the failure is most probably that you already have a WebAdmin cert for the name/ip that you are specifying.

Easy workaround: go to "Certificate Management". Delete the existing "WebAdmin certificate for IP.ADD.RE.SS" entry, then repeat the process. It should then work.

[Suppentrulli]

Hello Tom,

there was already a certificate for my firewall, correct. But it was built with the dyndns-hostname, not with an ip-address. I tried to generate a certificate with the internal ip-address and that did not work. I had to delete the old certificate first (as described in your workaround), that worked.

[tom]

Glad that it worked.

If the problem shoud reappear, please check /tmp/confd-debug.log while trying to re-generate the cert.

[Suppentrulli]

The problem is reproducible on my fresh test-installation. On basic setup i used my hostname (external interface dns). When trying to change the certificate to internal IP-address the certificate is generated but not used.

On which part of the logfile are you interested in? I'm asking because i have to make it anonymous...