SSL Proxmox Gateway

[Juliano Silva]

Proxmox, gateway has stopped working how to solve Panel?

https://204.xxxxxxxx:8006/

This online server my board this offline

 

[tom]

If you cannot access the web gui, check the journal/syslog for any error. Did you try to "customize" something?

How much RAM do you have? You need at least 2 GB Ram.

 

[Juliano Silva]

This is changes, tried to install my SSL proxmox Panel gateway offline


SSL certificate
Access to the administration web interface is always done via https. The default certificate is never valid
for your browser and you get always warnings.
If you want to get rid of these warnings, you have to generate a valid certificate for your server.
Login to your Proxmox via ssh or use the console:
openssl req -newkey rsa:2048 -nodes -keyout key.pem -out req.pem
Follow the instructions on the screen, see this example:
Country Name (2 letter code) [AU]: AT
State or Province Name (full name) [Some-State]:Vienna
Locality Name (eg, city) []:Vienna
Organization Name (eg, company) [Internet Widgits Pty Ltd]: Proxmox GmbH
Organizational Unit Name (eg, section) []roxmox Mail Gateway
Common Name (eg, YOUR name) []: yourproxmox.yourdomain.com
Email Address []:support@yourdomain.com
Please enter the following ’extra’ attributes to be sent with your -
certificate request
A challenge password []: not necessary
An optional company name []: not necessary
After you finished this certificate request you have to send the file req.pem to your Certification Authority
(CA). The CA will issue the certificate (BASE64 encoded) based on your request – save this file as cert.
pem to your Proxmox.
To activate the new certificate, do the following on your Proxmox:
cat key.pem cert.pem >/etc/pmg/pmg-api.pem
The restart the API servers
systemctl restart pmgproxy
Test your new certificate by using your browser.

 

[dietmar]

This is changes, tried to install my SSL proxmox Panel gateway offline

What CA do you use?

 

[Juliano Silva]

Jan 29 03:52:36 prox pmgproxy[16384]: worker exit
Jan 29 03:52:37 prox pmgproxy[12094]: worker 16384 finished
Jan 29 03:52:37 prox pmgproxy[12094]: starting 1 worker(s)
Jan 29 03:52:37 prox pmgproxy[12094]: worker 16414 started
Jan 29 03:52:37 prox pmgproxy[16414]: /etc/pmg/pmg-api.pem: failed to use local certificate chain (cert_file or cert) at /usr/share/perl5/PVE/APIServer/AnyEvent.pm line 1642.

 

[Juliano Silva]

What CA do you use?

letsencrypt is compatible?

 

[Juliano Silva]

Revert to default configuration SSL

 

[Juliano Silva]

Thank you, already solved

 

[PhilV]

letsencrypt is compatible?

Hello, yes it is.

 

[Juliano Silva]

Hello, yes it is.

Hello
Friends, you know how I install my letsencrypt is proxmox 4.

 

[tom]

Hello
Friends, you know how I install my letsencrypt is proxmox 4.

what is "proxmox 4"? you talk about the Proxmox Mail Gateway 4, as we are in the Mail Gateway forum?

 

[PhilV]

In PMG 5 (Install via repo over debian 9 container), I simply do as root :

# apt-get install certbot
# certbot certonly -d my.domain.ext

Choose "Spin up a temporary webserver", buy maybe it is possible to use a webserver...

# cd /etc/letsencrypt/live/my.domain.ext
# cat privkey.pem cert.pem >/etc/pmg/pmg-api.pem
# systemctl restart pmgproxy

 

[Juliano Silva]

Thanks, I'm going to test on my Debian 8

In PMG 5 (Install via repo over debian 9 container), I simply do as root :

# apt-get install certbot
# certbot certonly -d my.domain.ext

Choose "Spin up a temporary webserver", buy maybe it is possible to use a webserver...

# cd /etc/letsencrypt/live/my.domain.ext
# cat privkey.pem cert.pem >/etc/pmg/pmg-api.pem
# systemctl restart pmgproxy