Yep. Looks like we are not getting the restarts.

Dave Loper wrote:

Webconfig restarted for me. The problem I had was that chrome didn't apply the cert because the session was open but in reality, it had changed as evident when I used a different browser.

Hello Dave, I am not convinced. You left the dynamicvpn1.poweredbyclear.com certificate in place. I accessed the server with Firefox through dynamicvpn.howitts.co.uk and got a certificate mismatch. I switched the certificate to dynamicvpn.howitts.co.uk (which also covers dynamicvpn1.poweredbyclear.com) and the webconfig appeared to restart, but I got the same warning. I then opened IE for the first time in months and got the same warning. The warning immediately disappeared in both browsers when I restarted the webconfig manually. I switched the certificate back to yours and the warning did not appear.

If you look in /var/log/webconfig/error_log, you only see two restarts. There is a 1h offset in the log file (I think it is on MST without Daylight Saving) and the two restarts you see are the one I've just done now and the manual one I did in the morning. I'm just doing a third restart do get the certificate back to yours so you can have another look.

Okay, I did "yum --enablerepo=clearos-updates-testing update app-base" without the "system-base". It pulls in "system-base 7.6.5-1.v7"

[root@vm1 ~]# yum --enablerepo=clearos-updates-testing update app-base

Loaded plugins: clearcenter-marketplace, fastestmirror

ClearCenter Marketplace: fetching repositories...

Loading mirror speeds from cached hostfile

 * clearos: mirror1-amsterdam.clearos.com

 * clearos-centos: download4.clearsdn.com

 * clearos-centos-sclo-rh: download4.clearsdn.com

 * clearos-centos-updates: download4.clearsdn.com

 * clearos-centos-verified: mirror1-amsterdam.clearos.com

 * clearos-contribs: mirror1-amsterdam.clearos.com

 * clearos-epel-verified: mirror1-amsterdam.clearos.com

 * clearos-fast-updates: download4.clearsdn.com

 * clearos-infra: mirror1-amsterdam.clearos.com

 * clearos-updates-testing: mirror1-amsterdam.clearos.com

 * clearos-verified: mirror1-amsterdam.clearos.com

 * private-clearcenter-dyndns: download3.clearsdn.com:80

 * private-clearcenter-verified-updates: download1.clearsdn.com:80

clearos-updates-testing                                                                                           | 3.5 kB  00:00:00

(1/2): clearos-updates-testing/7/updateinfo                                                                       |   96 B  00:00:00

(2/2): clearos-updates-testing/7/primary_db                                                                       |  54 kB  00:00:00

Resolving Dependencies

--> Running transaction check

---> Package app-base.noarch 1:2.6.5-1.v7 will be updated

---> Package app-base.noarch 1:2.6.9-2.v7 will be an update

--> Processing Dependency: app-base-core = 1:2.6.9-2.v7 for package: 1:app-base-2.6.9-2.v7.noarch

--> Running transaction check

---> Package app-base-core.noarch 1:2.6.5-1.v7 will be updated

---> Package app-base-core.noarch 1:2.6.9-2.v7 will be an update

--> Processing Dependency: system-base >= 7.6.5 for package: 1:app-base-core-2.6.9-2.v7.noarch

--> Running transaction check

---> Package system-base.x86_64 0:7.6.3-1.v7 will be updated

---> Package system-base.x86_64 0:7.6.5-1.v7 will be an update

--> Finished Dependency Resolution



Dependencies Resolved



=========================================================================================================================================

 Package                         Arch                     Version                        Repository                                 Size

=========================================================================================================================================

Updating:

 app-base                        noarch                   1:2.6.9-2.v7                   clearos-updates-testing                    31 k

Updating for dependencies:

 app-base-core                   noarch                   1:2.6.9-2.v7                   clearos-updates-testing                   454 k

 system-base                     x86_64                   7.6.5-1.v7                     clearos-updates-testing                   8.7 k



Transaction Summary

=========================================================================================================================================

Upgrade  1 Package (+2 Dependent packages)



Total download size: 494 k

Is this ok [y/d/N]: y

Downloading packages:

Delta RPMs disabled because /usr/bin/applydeltarpm not installed.

(1/3): app-base-2.6.9-2.v7.noarch.rpm                                                                             |  31 kB  00:00:00

(2/3): system-base-7.6.5-1.v7.x86_64.rpm                                                                          | 8.7 kB  00:00:00

(3/3): app-base-core-2.6.9-2.v7.noarch.rpm                                                                        | 454 kB  00:00:00

-----------------------------------------------------------------------------------------------------------------------------------------

Total                                                                                                    1.3 MB/s | 494 kB  00:00:00

Running transaction check

Running transaction test

Transaction test succeeded

Running transaction

  Updating   : system-base-7.6.5-1.v7.x86_64                                                                                         1/6

  Updating   : 1:app-base-core-2.6.9-2.v7.noarch                                                                                     2/6

  Updating   : 1:app-base-2.6.9-2.v7.noarch                                                                                          3/6

  Cleanup    : 1:app-base-2.6.5-1.v7.noarch                                                                                          4/6

  Cleanup    : 1:app-base-core-2.6.5-1.v7.noarch                                                                                     5/6

  Cleanup    : system-base-7.6.3-1.v7.x86_64                                                                                         6/6

  Verifying  : system-base-7.6.5-1.v7.x86_64                                                                                         1/6

  Verifying  : 1:app-base-core-2.6.9-2.v7.noarch                                                                                     2/6

  Verifying  : 1:app-base-2.6.9-2.v7.noarch                                                                                          3/6

  Verifying  : 1:app-base-core-2.6.5-1.v7.noarch                                                                                     4/6

  Verifying  : system-base-7.6.3-1.v7.x86_64                                                                                         5/6

  Verifying  : 1:app-base-2.6.5-1.v7.noarch                                                                                          6/6



Updated:

  app-base.noarch 1:2.6.9-2.v7



Dependency Updated:

  app-base-core.noarch 1:2.6.9-2.v7                                    system-base.x86_64 0:7.6.5-1.v7



Complete!

I have a option to select another certificate but I can't test further because I have no domain for this VM.

Webconfig restarted for me. The problem I had was that chrome didn't apply the cert because the session was open but in reality, it had changed as evident when I used a different browser.

I added a dep on system-base version:

http://koji.clearos.com/koji/taskinfo?taskID=23116
https://gitlab.com/clearos/clearfoundation/app-base/issues/15

For the first one (app-base):

yum update app-base system-base enablerepo=clearos-updates-testing

Can you see the certificate option in System > Settings > General Settings and can you use them to select another certificate such as a Let's Encrypt certificate. For the moment there appears to be a new restarting webconfig indicator, but unless I manually restart the webconfig, the new certificate does not seem to be used.

For the second one:

yum update app-marketplace enablerepo=clearos-updates-testing

You'll have to read the bug report to work out how to test. I have not tried to get my mind round it.

What is the best way to test this?

Hi Dave,
https://gitlab.com/clearos/clearfoundation/app-base/issues/14# does not seem to be fully working. In the Dynamic VPN server you have set up for me, I flipped the certificate to the other one which covers two different FQDN's and the new Webconfig Reloading progress indicator popped up (and took a while compared to a manual reload ...) but the certificate it was using did not change until I manually restarted the webconfig.

PM sent

[edit]
Also please note that with this version of app-base, you really want system-base from updates testing as the latest version of app-base you branched from had the rsyslog filter for the secure log removed and put into system-base. To test the app base it would be better to do:

yum update app-base system-base enablerepo=clearos-updates-testing

[/edit]