cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
524
Views
5
Helpful
4
Replies

Lighttpd Issue After TC6 Upgrade

Justin Ferello
Level 5
Level 5

All,

Has anyone else run into issues with lighttpd after upgrading to TC6?  I had a customer yesterday upgrade to TC6 and after the upgrade they could no longer access the codec via HTTP or HTTPS.  After further investigation I found that the lighttpd service was not running and when I tried to start it I would get an SSL error.  Additionally I found that the default certificate that comes with the codec was named 'migration.pem' instead of 'selfsigned.pem'.

I was able to resolve the issue by deleting the 'migration.pem' cert, then I started the lighttpd service which auto generated a new cert called 'selfsigned.pem' in the correct folder, now they can access the codec via HTTP again.        

Is this a bug by chance or just a one off thing?

Thank you,

Justin Ferello
Technical Support Specialist
KBZ, a Cisco Authorized Distributor
http://www.kbz.com
e/v: justin.ferello@kbz.com       

Thank you,
Justin Ferello
Technical Support Specialist, ScanSource KBZ
1 Accepted Solution

Accepted Solutions

CSCue52815 - Lighthttpd doesnt start up if verifyclientcert is on and no cert is inst

$ /etc/init.d/S75lighttpd restart
Stopping lighttpd
Starting lighttpd
2013-02-07 11:24:17: (network.c.590) SSL:
error:00000000:lib(0):func(0):reason(0) /config/certs/ca/default.pem 
Failed to start the web server.

Workaround

Turn off CA list verification using the following command:
xConfiguration NetworkServices HTTPS VerifyClientCertificate: Off

Once this is off, you can access the web server (after a reboot) of the unit and upload the CA list before you optionally turn this feature back on.

Fixed in TC 6.1

/Magnus

View solution in original post

4 Replies 4

Magnus Ohm
Cisco Employee
Cisco Employee

Hi Justin

Did the customer specifically upgrade to TC6.0?

/Magnus

Magnus,

Yes the upgraded to TC6.0.1 specifically.

Thank you,

Justin Ferello
Technical Support Specialist
KBZ, a Cisco Authorized Distributor
http://www.kbz.com
e/v: justin.ferello@kbz.com

Thank you,
Justin Ferello
Technical Support Specialist, ScanSource KBZ

CSCue52815 - Lighthttpd doesnt start up if verifyclientcert is on and no cert is inst

$ /etc/init.d/S75lighttpd restart
Stopping lighttpd
Starting lighttpd
2013-02-07 11:24:17: (network.c.590) SSL:
error:00000000:lib(0):func(0):reason(0) /config/certs/ca/default.pem 
Failed to start the web server.

Workaround

Turn off CA list verification using the following command:
xConfiguration NetworkServices HTTPS VerifyClientCertificate: Off

Once this is off, you can access the web server (after a reboot) of the unit and upload the CA list before you optionally turn this feature back on.

Fixed in TC 6.1

/Magnus

Magnus,

This is correct, the exact issue I was running into.  Thank you for looking into this.

Thank you,

Justin Ferello
Technical Support Specialist
KBZ, a Cisco Authorized Distributor
http://www.kbz.com
e/v: justin.ferello@kbz.com

Thank you,
Justin Ferello
Technical Support Specialist, ScanSource KBZ
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: