[solved] HAProxy won't start after upgrade opnsense to OPNsense 21.7. crt-list'

[Rene1]

I got a message in our syslog server

[27490d40-3a1f-4558-9928-2bdd21e29407] Script action failed with Command '/usr/local/opnsense/scripts/OPNsense/HAProxy/syncCerts.py actions --output bootgrid --page-rows '10' --page '1' --search '' --sort-col '' --sort-dir ''' returned non-zero exit status 1. at Traceback (most recent call last):   File /usr/local/opnsense/service/modules/processhandler.py, line 478, in execute     subprocess.check_call(script_command, env=self.config_environment, shell=True,   File /usr/local/lib/python3.8/subprocess.py, line 364, in check_call     raise CalledProcessError(retcode, cmd) subprocess.CalledProcessError: Command '/usr/local/opnsense/scripts/OPNsense/HAProxy/syncCerts.py actions --output bootgrid --page-rows '10' --page '1' --search '' --sort-col '' --sort-dir ''' returned non-zero exit status 1.



Line 478 is marked bold

try:
                    with tempfile.NamedTemporaryFile() as error_stream:
                        with tempfile.NamedTemporaryFile() as output_stream:
                            subprocess.check_call(script_command, env=self.config_environment, shell=True,
                                                  stdout=output_stream, stderr=error_stream)
                            output_stream.seek(0)
                            error_stream.seek(0)
                            script_output = output_stream.read()
                            script_error_output = error_stream.read()
                            if len(script_error_output) > 0:
                                syslog_error('[%s] Script action stderr returned "%s"' %(
                                    message_uuid, script_error_output.strip()[:255]
                                ))
                            return script_output.decode()
                except Exception as script_exception:
                    syslog_error('[%s] Script action failed with %s at %s' % (
                        message_uuid, script_exception, traceback.format_exc()
                    ))
                    return 'Execute error'

[Fright]

ah. this command also does not reapply templates. sorry then
what if in gui:
Services: HAProxy: Settings: ->Real Servers->Real Servers --> Apply ?

[Rene1]

Hi Fright,

attached

Thanks,
Rene

[Rene1]

Hi,

Thanks for your support.

Now it's working again. I reinforced fetching a new letsencrypt certificate before it will expire in Dec.
And voila the directory /tmp/haproxy/ssl/ isn't empty anymore.

Rene

[benyamin]

you reversed 'opnsense-patch -c plugins 31b82cd 18cd9f6' by applying # opnsense-patch -c plugins b1953fc 
just run
opnsense-patch -c plugins 31b82cd 18cd9f6
again

I'll edit my post to say one or the other not both... 8^d

[Fright]

@Rene1
glad to know )
it will be great if you mark the topic as [SOLVED]

[Rene1]

 [solved]