there is a pureFTP update that has been in my yum manager for a couple months now everytime i try to update it, the ftp server won't run after that and i have to downgrade it to get ftp running... is this a CWP issue?
have you checked in the logs what is the exact issue ?
something about exceeding limits or not setting limits
Job for pure-ftpd.service failed because a configured resource limit was exceeded. See "systemctl status pure-ftpd.service" and "journalctl -xe" for details
Journal says:
Oct 21 06:18:27 ctrl.xfxtechserv.com systemd[1]: PID file /var/run/pure-ftpd.pid not readable (yet?) after start.
Oct 21 06:18:27 ctrl.xfxtechserv.com pure-ftpd[32727]: (?@?) [ERROR] TLS [/etc/pki/tls/certs/server-ftp.crt](308): error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
Oct 21 06:18:27 ctrl.xfxtechserv.com systemd[1]: pure-ftpd.service never wrote its PID file. Failing.
Oct 21 06:18:27 ctrl.xfxtechserv.com systemd[1]: Failed to start Pure-FTPd FTP server.
for me this is SSL cert problem.
i dunno what the problem is with it, if i install it FTP fails if i downgrade it and reboot the server it works.
you simply need to check the error which your ftp server has and if its related with hostname certificate then save your hostname again from cwp and it will generate all required certificates.
Quote from: studio4host on October 31, 2017, 01:50:12 PM
you simply need to check the error which your ftp server has and if its related with hostname certificate then save your hostname again from cwp and it will generate all required certificates.
are you referring to the error i posted above?. I've checked my SSL settings and see no errors according to CWP
yes, try checking all logs if restart doesn't show any error.
Quote from: studio4host on October 31, 2017, 02:56:28 PM
yes, try checking all logs if restart doesn't show any error.
this is what i get when i update it:
pure-ftpd.service - Pure-FTPd FTP server
Loaded: loaded (/usr/lib/systemd/system/pure-ftpd.service; enabled; vendor preset: disabled)
Active: failed (Result: resources) since Tue 2017-10-31 12:21:18 EDT; 35s ago
Process: 32066 ExecStart=/sbin/pure-ftpd /etc/pure-ftpd/pure-ftpd.conf (code=exited, status=0/SUCCESS)
Main PID: 2165 (code=exited, status=0/SUCCESS)
Oct 31 12:21:18 ctrl.xfxtechserv.com systemd[1]: Starting Pure-FTPd FTP server...
Oct 31 12:21:18 ctrl.xfxtechserv.com pure-ftpd[32068]: (?@?) [ERROR] TLS [/etc/pki/tls/certs/server-ftp.crt](308): error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
Oct 31 12:21:18 ctrl.xfxtechserv.com systemd[1]: PID file /var/run/pure-ftpd.pid not readable (yet?) after start.
Oct 31 12:21:18 ctrl.xfxtechserv.com systemd[1]: Failed to start Pure-FTPd FTP server.
Oct 31 12:21:18 ctrl.xfxtechserv.com systemd[1]: Unit pure-ftpd.service entered failed state.
Oct 31 12:21:18 ctrl.xfxtechserv.com systemd[1]: pure-ftpd.service failed.
(from clicking status in cwp)
from ssh console using status command:
~$ systemctl status pure-ftpd.service
● pure-ftpd.service - Pure-FTPd FTP server
Loaded: loaded (/usr/lib/systemd/system/pure-ftpd.service; enabled; vendor preset: disabled)
Active: failed (Result: resources) since Tue 2017-10-31 12:27:22 EDT; 19s ago
Process: 4983 ExecStart=/sbin/pure-ftpd /etc/pure-ftpd/pure-ftpd.conf (code=exited, status=0/SUCCESS)
Main PID: 2165 (code=exited, status=0/SUCCESS)
Oct 31 12:27:22 ctrl.xfxtechserv.com systemd[1]: Starting Pure-FTPd FTP server...
Oct 31 12:27:22 ctrl.xfxtechserv.com systemd[1]: PID file /var/run/pure-ftpd.pid not readable (yet?) after start.
Oct 31 12:27:22 ctrl.xfxtechserv.com pure-ftpd[4984]: (?@?) [ERROR] TLS [/etc/pki/tls/certs/server-ftp.crt](308): error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
Oct 31 12:27:22 ctrl.xfxtechserv.com systemd[1]: pure-ftpd.service never wrote its PID file. Failing.
Oct 31 12:27:22 ctrl.xfxtechserv.com systemd[1]: Failed to start Pure-FTPd FTP server.
Oct 31 12:27:22 ctrl.xfxtechserv.com systemd[1]: Unit pure-ftpd.service entered failed state.
Oct 31 12:27:22 ctrl.xfxtechserv.com systemd[1]: pure-ftpd.service failed.
I have no idea what's wrong with this, if i downgrade it to the previous version it works fine!
you should check your file /etc/pki/tls/certs/server-ftp.crt in it you would have certificate and key which doesn't match and copy content of the certificate/key you are using for your hostname to that file.
Quote from: studio4host on November 01, 2017, 09:22:20 PM
you should check your file /etc/pki/tls/certs/server-ftp.crt in it you would have certificate and key which doesn't match and copy content of the certificate/key you are using for your hostname to that file.
speaking greek to me...lol
simply run this and restart your pure-ftpd service
cat /etc/pki/tls/private/hostname.key > /etc/pki/tls/certs/server-ftp.crt
cat /etc/pki/tls/certs/hostname.crt >> /etc/pki/tls/certs/server-ftp.crt
service pure-ftpd restart
Quote from: studio4host on November 01, 2017, 10:50:48 PM
simply run this and restart your pure-ftpd service
cat /etc/pki/tls/private/hostname.key > /etc/pki/tls/certs/server-ftp.crt
cat /etc/pki/tls/certs/hostname.crt >> /etc/pki/tls/certs/server-ftp.crt
service pure-ftpd restart
Yeah... that didn't work!
Quote from: studio4host on November 01, 2017, 10:50:48 PM
simply run this and restart your pure-ftpd service
cat /etc/pki/tls/private/hostname.key > /etc/pki/tls/certs/server-ftp.crt
cat /etc/pki/tls/certs/hostname.crt >> /etc/pki/tls/certs/server-ftp.crt
service pure-ftpd restart
This worked for me.
However, don't forget to change the "hostname" with your own hostname like cp.yourdomain.com
So, if my hostname is cp.mydomain.com then the commands will be
cat /etc/pki/tls/private/
cp.mydomain.com.key > /etc/pki/tls/certs/server-ftp.crt
cat /etc/pki/tls/certs/
cp.mydomain.com.crt >> /etc/pki/tls/certs/server-ftp.crt
service pure-ftpd restart
Thanks @jamshed_206 this worked like a charm!
I wonder how CWP will surprise when the hostname certificate will have to be renewed.
Quote from: adxp on May 08, 2018, 01:34:13 PM
Thanks @jamshed_206 this worked like a charm!
I wonder how CWP will surprise when the hostname certificate will have to be renewed.
You are welcome