[SOLVED] Locked put of PVE 7.3-4 GUI

[kwat]

All:

I'm running the latest version of PVE. While trying to add SSL certs, I've locked myself out and cannot login via GUI.
I get a timeout message when accessing the GUI. I can still use ssh. Is there a way for me to rollback back to before I added the ssl cert?

I did make a backup of /etc earlier today but don't know if that helps any.

 

[bbgeek17]

https://forum.proxmox.com/threads/rebuild-ssl-certificate-for-updated-domain-name.25057/#post-125710

---

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox

 

[kwat]

https://forum.proxmox.com/threads/rebuild-ssl-certificate-for-updated-domain-name.25057/#post-125710

---

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmoxI tried

https://forum.proxmox.com/threads/rebuild-ssl-certificate-for-updated-domain-name.25057/#post-125710

---

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox

I entered pvecm updatecerts --force and removed the cert I made from the windows cert store. This did not solve the problem. Am I missing something?

 

[bbgeek17]

its hard to say as I dont know what else you may have changed on your system and its exact state.
Have you tried a reboot or service restart since running the cert update?
systemctl try-reload-or-restart pvedaemon pveproxy pvestatd pvescheduler

---

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox

 

[kwat]

its hard to say as I dont know what else you may have changed on your system and its exact state.
Have you tried a reboot or service restart since running the cert update?
systemctl try-reload-or-restart pvedaemon pveproxy pvestatd pvescheduler

---

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox

After creating the cert, I uploaded it to PVE from Datacenter>pve>Certificates>Upload Custom Certificate. I copied the cert into both the Private Key and Certificate Chain fields. I made no other changes. Got same results after rebooting after running the cert update.

From another PVE host, I can see the option to Delete Custom Certificate button next to the Upload Custom Certificate button. Is there a way to delete the custom cert from the CLI?

 

[kwat]

I was able to resolve the problem by:
1/ deleting the certs I created pveproxy-ssl.key and pveproxy-ssl.pem in /etc/pve/nodes/pve
2/ run pvecm --updatecerts -f
3/ reboot system

I am NOT an expert in this so if any thinks I did somethin that should not be done, please correct post. But I have GUI (no https) access again!