Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Search
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo

Cloudron Forum

Apps | Demo | Docs | Install
  1. Cloudron Forum
  2. Support
  3. SSL error after upgrading to 5.6.0 on ubuntu 16

SSL error after upgrading to 5.6.0 on ubuntu 16

Scheduled Pinned Locked Moved Solved Support
dashboardsslupgrade
17 Posts 6 Posters 2.6k Views 6 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M Offline
      M Offline
      msbt
      App Dev
      wrote on last edited by girish
      #1

      This might be another issue that probably only very few people encounter, but since the upgrade to 5.6.0 I can't access the cloudron dashboard on one of my machines. Firefox throws an SSL_ERROR_RX_UNEXPECTED_NEW_SESSION_TICKET error with the headline "Secure Connection Failed", Chrome does the same, only calls it ERR_SSL_PROTOCOL_ERROR. For whatever reason Firefox does work in private mode, Chrome does not. I've already rebooted the machine but that didn't change anything.

      I did find this page and that one which might be related.

      All the apps are working fine as usual, only the dashboard does not. Quick fyi: This is my last 16.04 machine (the dedicated one which I also mentioned here). There are some warnings in the logs but nothing that I could link to this issue.

      1 Reply Last reply
      1
      • girishG Offline
        girishG Offline
        girish
        Staff
        wrote on last edited by
        #2

        @msbt Does systemctl restart nginx help? If not, can you send me the domain of your Cloudron to support@cloudron.io ?

        1 Reply Last reply
        0
        • M Offline
          M Offline
          msbt
          App Dev
          wrote on last edited by
          #3

          Hey @girish, just tried, didn't work and now apps stopped working either (before, not after), sent you the information you need. Thanks in advance!

          1 Reply Last reply
          0
          • M Offline
            M Offline
            msbt
            App Dev
            wrote on last edited by
            #4

            This is resolved, another issue promtly fixed, gotta love cloudron and its devs 👍

            1 Reply Last reply
            1
            • girishG Offline
              girishG Offline
              girish
              Staff
              wrote on last edited by
              #5

              The issue was some of the app configs had ssl_session_tickets off and some didn't . It seems nginx has some issue if they are inconsistent (see also https://github.com/nginx-proxy/nginx-proxy/issues/580#issuecomment-249587149).

              If someone else hits this:

              • cd /etc/nginx/applications
              • Remove all the configs except my.domain.com
              • systemctl restart nginx
              • Then, go to Location view of each app and click Save to get each back online.
              mehdiM 1 Reply Last reply
              1
              • girishG girish

                The issue was some of the app configs had ssl_session_tickets off and some didn't . It seems nginx has some issue if they are inconsistent (see also https://github.com/nginx-proxy/nginx-proxy/issues/580#issuecomment-249587149).

                If someone else hits this:

                • cd /etc/nginx/applications
                • Remove all the configs except my.domain.com
                • systemctl restart nginx
                • Then, go to Location view of each app and click Save to get each back online.
                mehdiM Offline
                mehdiM Offline
                mehdi
                App Dev
                wrote on last edited by
                #6

                @girish Did this have something do to with 16.04, or was it unrelated, just random ?

                1 Reply Last reply
                0
                • girishG Offline
                  girishG Offline
                  girish
                  Staff
                  wrote on last edited by
                  #7

                  @mehdi Indeed, the server was on 16.04. How is that related btw? Do you think it's related to having old openssl libraries or something?

                  1 Reply Last reply
                  0
                  • M Offline
                    M Offline
                    msbt
                    App Dev
                    wrote on last edited by
                    #8

                    I think @mehdi was curious if it was related to 16.04, not suggested that it was 😉

                    All I can say is that this is my oldest cloudron machine still running that hasn't been migrated at some point - 2y+ I reckon - and it has been subject to a lot of testing and building over time, so could be a number of reasons why that happened.

                    mehdiM 1 Reply Last reply
                    0
                    • M msbt

                      I think @mehdi was curious if it was related to 16.04, not suggested that it was 😉

                      All I can say is that this is my oldest cloudron machine still running that hasn't been migrated at some point - 2y+ I reckon - and it has been subject to a lot of testing and building over time, so could be a number of reasons why that happened.

                      mehdiM Offline
                      mehdiM Offline
                      mehdi
                      App Dev
                      wrote on last edited by
                      #9

                      Yes, I was only asking whether it was related to the server being 16.04, not suggesting anything ^^

                      I'll let you guys know when my 16.04 server updates to 5.6 if it causes any issue.

                      1 Reply Last reply
                      1
                      • darkbenD Offline
                        darkbenD Offline
                        darkben
                        wrote on last edited by
                        #10

                        Hi,

                        same problem here with Cloudron 5.6.0 and ubuntu 16.04.
                        @girish tips solved the problem.

                        1 Reply Last reply
                        1
                        • girishG Offline
                          girishG Offline
                          girish
                          Staff
                          wrote on last edited by
                          #11

                          I think we will push out a 5.6.1 which will re-configure all the apps and thus re-generating nginx configs.

                          1 Reply Last reply
                          0
                          • G Offline
                            G Offline
                            gml
                            wrote on last edited by
                            #12

                            I also got SSL errors after the upgrade, but in Thunderbird. It seems like the default self signed Cert is used.
                            tb.png

                            A possibility to postpone updates for like 2 weeks would be nice, to not run into such things.

                            girishG 1 Reply Last reply
                            0
                            • G gml

                              I also got SSL errors after the upgrade, but in Thunderbird. It seems like the default self signed Cert is used.
                              tb.png

                              A possibility to postpone updates for like 2 weeks would be nice, to not run into such things.

                              girishG Offline
                              girishG Offline
                              girish
                              Staff
                              wrote on last edited by girish
                              #13

                              @gml are you on 5.6.1? As for the updates, starting this release the box code won't auto update anymore and will respect the schedule under settings (it's a single setting for app and box updates)

                              G 1 Reply Last reply
                              0
                              • girishG girish

                                @gml are you on 5.6.1? As for the updates, starting this release the box code won't auto update anymore and will respect the schedule under settings (it's a single setting for app and box updates)

                                G Offline
                                G Offline
                                gml
                                wrote on last edited by
                                #14

                                @girish Just checked, yes i'm already on 5.6.1.
                                And good to know, thx 🙂

                                1 Reply Last reply
                                0
                                • girishG Offline
                                  girishG Offline
                                  girish
                                  Staff
                                  wrote on last edited by
                                  #15

                                  Can you go to Services -> Mail and restart the mail service? Does that help?

                                  1 Reply Last reply
                                  0
                                  • G Offline
                                    G Offline
                                    gml
                                    wrote on last edited by
                                    #16

                                    That seemed to solve it, even if a server reboot did not solve it. I also got a mail, that this was also visible from other mail-servers (not just from my mail client), as I use DANE for certificate pinning.
                                    Thx girish!

                                    O 1 Reply Last reply
                                    0
                                    • G gml

                                      That seemed to solve it, even if a server reboot did not solve it. I also got a mail, that this was also visible from other mail-servers (not just from my mail client), as I use DANE for certificate pinning.
                                      Thx girish!

                                      O Offline
                                      O Offline
                                      odie
                                      wrote on last edited by
                                      #17

                                      @gml said in SSL error after upgrading to 5.6.0 on ubuntu 16:

                                      That seemed to solve it, even if a server reboot did not solve it. I also got a mail, that this was also visible from other mail-servers (not just from my mail client), as I use DANE for certificate pinning.
                                      Thx girish!

                                      I had the same issue. And the same fix. A reboot didn't work, a service restart did the trick. Thanks!

                                      1 Reply Last reply
                                      0
                                      Reply
                                      • Reply as topic
                                      Log in to reply
                                      • Oldest to Newest
                                      • Newest to Oldest
                                      • Most Votes


                                        • Login

                                        • Don't have an account? Register

                                        • Login or register to search.
                                        • First post
                                          Last post
                                        0
                                        • Categories
                                        • Recent
                                        • Tags
                                        • Popular
                                        • Bookmarks
                                        • Search