24.7.10_1 NGINX can't find cert.pem

[Sander85]

Just updated from 24.7.9 to 24.7.10_1 and NGINX stopped working.
Probably because the change:
"system: remove the SSL bundles in default locations"

NGINX can't find /etc/ssl/cert.pem.

Code Select Expand

nginx: [emerg] SSL_CTX_load_verify_locations("/etc/ssl/cert.pem") failed (SSL: error:80000002:system library::No such file or directory:calling fopen(/etc/ssl/cert.pem, r) error:10000080:BIO routines::no such file error:05880002:x509 certificate routines::system lib)
nginx: configuration file /usr/local/etc/nginx/nginx.conf test failed

For a quickfix I created a symlink to /usr/local/etc/ssl/cert.pem.

Code Select Expand

ln -s /usr/local/etc/ssl/cert.pem /etc/ssl/cert.pem

[franco]

Thanks for the report. Will hotfix.

https://github.com/opnsense/plugins/commit/ae922ba2


Cheers,
Franco

[fluxx]

Same for HAProxy

Code Select Expand

[NOTICE] (60472) : haproxy version is 2.8.12-0fdb194
[NOTICE] (60472) : path to executable is /usr/local/sbin/haproxy
[ALERT] (60472) : config : [/usr/local/etc/haproxy.conf.staging:121] : 'server nextcloud_backend/nextcloud_host' : Couldn't open the ca-file '/etc/ssl/cert.pem' (No such file or directory).
[ALERT] (60472) : config : 'ca-file' : unable to load /etc/ssl/cert.pem.
[ALERT] (60472) : config : Error(s) found in configuration file : /usr/local/etc/haproxy.conf.staging
[ALERT] (60472) : config : Fatal errors found in configuration.

[franco]

Yep https://github.com/opnsense/plugins/commit/99ad9d9d