Distribution EOLE

Sur un zephir déjà instancié avec un certificat autosigné (instance eole)

Maj-Auto
reconfigure
gen_config => modification autosigné en let'sencrypt
reconfigure

Erreur durant le reconfigure :

--------------------------------------------------------------------------------------------------------------------------------------------------------------
                                                              Exécution des scripts posttemplate                                                              
--------------------------------------------------------------------------------------------------------------------------------------------------------------
run-parts: executing /usr/share/eole/posttemplate/00-alogs reconfigure
run-parts: executing /usr/share/eole/posttemplate/00-annuaire reconfigure
cp: impossible d'évaluer '/etc/ssl/certs/eole_fullchain.pem': Aucun fichier ou dossier de ce nom
run-parts: /usr/share/eole/posttemplate/00-annuaire exited with return code 1
Erreur : posttemplate

les parties concernant les certificats ce sont bien exécutés :

--------------------------------------------------------------------------------------------------------------------------------------------------------------
                                                              Exécution des scripts pretemplate                                                               
--------------------------------------------------------------------------------------------------------------------------------------------------------------
run-parts: executing /usr/share/eole/pretemplate/00-annuaire reconfigure

## Gestion du mot de passe LDAP ##
run-parts: executing /usr/share/eole/pretemplate/00-letsencrypt reconfigure
Prise en compte des nouveaux certificats Let’s Encrypt :
run-parts: executing /usr/share/eole/letsencrypt/hooks-post.d/50-ead reconfigure
run-parts: executing /usr/share/eole/letsencrypt/hooks-post.d/99-restart reconfigure
run-parts: executing /usr/share/eole/pretemplate/00-network reconfigure
Instanciation du fichier '/etc/eole/network/interface_0.conf' depuis '/var/lib/creole/interface_0.conf'
Création du lien '/etc/systemd/network/10-netplan-enp2s0.network.d/eole.conf' -> '/etc/eole/network/interface_0.conf'
run-parts: executing /usr/share/eole/pretemplate/00-partitioning reconfigure
run-parts: executing /usr/share/eole/pretemplate/00-resolvconf reconfigure
run-parts: executing /usr/share/eole/pretemplate/00-reverseproxy reconfigure
run-parts: executing /usr/share/eole/pretemplate/00-timezone reconfigure
run-parts: executing /usr/share/eole/pretemplate/01-uucp reconfigure
usermod : aucun changement
run-parts: executing /usr/share/eole/pretemplate/01-zephir-modules reconfigure

## Mise à jour des modules par défaut ##
run-parts: executing /usr/share/eole/pretemplate/03-eole-postgresql reconfigure

.
.
.
.

--------------------------------------------------------------------------------------------------------------------------------------------------------------
                                                                  Génération des certificats                                                                  
--------------------------------------------------------------------------------------------------------------------------------------------------------------
Doing /usr/lib/ssl/certs
WARNING: Skipping duplicate certificate ca-certificates.crt
WARNING: Skipping duplicate certificate ca-certificates.crt
WARNING: Skipping duplicate certificate ca_local.crt
WARNING: Skipping duplicate certificate ca_local.crt
WARNING: Skipping duplicate certificate eole.pem
WARNING: Skipping duplicate certificate eole.pem
WARNING: Skipping duplicate certificate isrgrootx1.pem
WARNING: Skipping duplicate certificate isrgrootx1.pem
WARNING: Skipping duplicate certificate local_selfsigned_ca.pem
WARNING: Skipping duplicate certificate local_selfsigned_ca.pem
Updating certificates in /etc/ssl/certs...
0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.

Dans les logs journalctl seul retour : mai 06 13:45:19 zephir zephir[12386]: RECONFIGURE => ERR : Erreur : posttemplate

Les scripts suivants s'éxécute sans problème :
/usr/share/eole/pretemplate/00-letsencrypt
/usr/lib/ssl/certs

un cat de /etc/ssl/certs/eole.crt affiche :

-----BEGIN CERTIFICATE-----
#le certificat
#.......
-----END CERTIFICATE-----
-----BEGIN PRIVATE KEY-----
#la key
#........
-----END PRIVATE KEY-----

Pour partir d'un zephir vierge.
1. copie du config.eol avec letsencrypt activé.
2. démarrage d'un zephir-2.9.0.daily
3. scp du config.eol avec letsencrypt
4. instance
=> reproduction du bug :

--------------------------------------------------------------------------------------------------------------------------------------------------------------
                                                                  Génération des certificats                                                                  
--------------------------------------------------------------------------------------------------------------------------------------------------------------
Doing /usr/lib/ssl/certs
WARNING: Skipping duplicate certificate ca-certificates.crt
WARNING: Skipping duplicate certificate ca-certificates.crt
WARNING: Skipping duplicate certificate isrgrootx1.pem
WARNING: Skipping duplicate certificate isrgrootx1.pem
* Génération du certificat de la CA
Génération de la liste de révocation (CRL)
Updating certificates in /etc/ssl/certs...
rehash: warning: skipping duplicate certificate in ISRG_Root_X1.pem
rehash: warning: skipping duplicate certificate in local_selfsigned_ca.pem
rehash: warning: skipping duplicate certificate in ca.crt
rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
1 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
* Certificat /etc/ssl/certs/eole.crt généré
* Certificat /etc/postgresql/14/main/server.crt généré
--------------------------------------------------------------------------------------------------------------------------------------------------------------
                                                              Exécution des scripts posttemplate                                                              
--------------------------------------------------------------------------------------------------------------------------------------------------------------
run-parts: executing /usr/share/eole/posttemplate/00-alogs instance
run-parts: executing /usr/share/eole/posttemplate/00-annuaire instance
cp: impossible d'évaluer '/etc/ssl/certs/eole_fullchain.pem': Aucun fichier ou dossier de ce nom
run-parts: /usr/share/eole/posttemplate/00-annuaire exited with return code 1
Erreur : posttemplate