[SOLVED] SSL Expired - Login failed. Please try again

[zolthar]

My SSL expired - yes I know, I have been busy/lazy when not busy and then realised!

With the expired SSL, I was able to login. Using the following guide to change the SSL:
domain.com:8006/pmg-docs/pmg-admin-guide.html#_ssl_certificate

openssl req -newkey rsa:2048 -nodes -keyout wildcard.domain.key -out wildcard.domain.csr
cat wildcard.domain.key wildcard.domain.crt wildcard.domain.ca-bundle >/etc/pmg/pmg-api.pem
systemctl restart pmgproxy

Following the guide, I have included the various certs:

-----BEGIN RSA PRIVATE KEY-----
(Your Private Key (domain.key)
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
(Your Primary SSL certificate: domain.crt)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(Your Intermediate certificate: commercial_ca.crt)
-----END CERTIFICATE-----

Did a restart

sudo systemctl restart pmgproxy.service

This then lead to me unable to login throwing the following error:
"Login failed. Please try again"

I then did the following without success either:

1. Deleted pmg-csrf.key
2. Duplicated the pmg-api.pem to pmg-tls.pem
3. Created another user with SUDO privileges
4. Rebooted instance

However I am still unable to login. I can log onto the server with the same username without issues. I am sure I just missed something. The SSL has been successfully applied as on browsers it is now green.

Any help or thoughts would be much appreciated.

 

[zolthar]

This is strange - however if I revert the certificate to the old expired one - it works (albeit SSL warning)

I upgraded from 6.3-4 to 6.4-4 and the problem persisted. I tried updating via the GUI, but that really stuffed up the SSL and I was not even able to load the page.

 

[zolthar]

... strangely enough after I rebooted and then reinstalled the old expired certificate I was able to login again.

Updated the SSL and now good to go - except now getting a TLS error. I think this is a different topic.