Lighttpd Issue After TC6 Upgrade

[Justin Ferello]

All,

Has anyone else run into issues with lighttpd after upgrading to TC6?  I had a customer yesterday upgrade to TC6 and after the upgrade they could no longer access the codec via HTTP or HTTPS.  After further investigation I found that the lighttpd service was not running and when I tried to start it I would get an SSL error.  Additionally I found that the default certificate that comes with the codec was named 'migration.pem' instead of 'selfsigned.pem'.

I was able to resolve the issue by deleting the 'migration.pem' cert, then I started the lighttpd service which auto generated a new cert called 'selfsigned.pem' in the correct folder, now they can access the codec via HTTP again.        

Is this a bug by chance or just a one off thing?

Thank you,

Justin Ferello
Technical Support Specialist
KBZ, a Cisco Authorized Distributor
http://www.kbz.com
e/v: justin.ferello@kbz.com       

[Magnus Ohm]

Hi Justin

Did the customer specifically upgrade to TC6.0?

/Magnus

[Justin Ferello]

Magnus,

Yes the upgraded to TC6.0.1 specifically.

Thank you,

Justin Ferello
Technical Support Specialist
KBZ, a Cisco Authorized Distributor
http://www.kbz.com
e/v: justin.ferello@kbz.com

[Magnus Ohm · Accepted solution]

CSCue52815 - Lighthttpd doesnt start up if verifyclientcert is on and no cert is inst

$ /etc/init.d/S75lighttpd restart
Stopping lighttpd
Starting lighttpd
2013-02-07 11:24:17: (network.c.590) SSL:
error:00000000:lib(0):func(0):reason(0) /config/certs/ca/default.pem 
Failed to start the web server.

Workaround

Turn off CA list verification using the following command:
xConfiguration NetworkServices HTTPS VerifyClientCertificate: Off

Once this is off, you can access the web server (after a reboot) of the unit and upload the CA list before you optionally turn this feature back on.

Fixed in TC 6.1

/Magnus

[Justin Ferello]

Magnus,

This is correct, the exact issue I was running into.  Thank you for looking into this.

Thank you,

Justin Ferello
Technical Support Specialist
KBZ, a Cisco Authorized Distributor
http://www.kbz.com
e/v: justin.ferello@kbz.com