After changing the certificates, authentication does not work. "Login failed. Please try again."

[vipksmosar]

Hello,

Virtual Environment 5.2-1
I used this instruction to obtain and install certificates https://pve.proxmox.com/wiki/HTTPS_Certificate_Configuration_(Version_4.x,_5.0_and_5.1).
Certificates were installed, but the web interface stopped accepting the password. For any credentials - "Login failed. Please try again."
I tried to return to the default settings, but the problem persisted.

Please tell me how can I fix it?

 

[Stoiko Ivanov]

For any credentials - "Login failed. Please try again."

I don't think this is related to the certificates (but maybe something happend while you replaced the certificates

Log in via ssh and check the journal for hints to what is not working: let `journalctl -f`run while you try to login to the webinterface

I hope this helps!

 

[vipksmosar]

Thanks for the answer.

When I try to log in via the web, these events appear in the log.

Nov 21 14:17:14 pve pveproxy[25367]: dh params schmorp1539: failed to set DH parameters at /usr/share/perl5/PVE/APIServer/AnyEvent.pm line 614.
Nov 21 14:17:14 pve pveproxy[25367]: problem with client 83.149.23.168; ssl3_ctx_ctrl: dh key too small

What can be wrong? Do you have any ideas what else I can do?

 

[Stoiko Ivanov]

hmm - did you set any custom dh_params?
please post:
* `pveversion -v`
* `cat /etc/default/pveproxy`

else this might be the result of running 5.2 (which is a bit dated) - recently many clients increased the minimal acceptable size of DH-params to 2048

consider upgrading to 5.4 or even better to 6.0!
if this is not an option you can also set custom dh-parameters (of at least 2048 bits) in /etc/default/pveproxy - see `man pveproxy`

I hope this helps!