SUSE Manager webUI error 404 after upgrade
This document (000021047) is provided subject to the disclaimer at the end of this document.
After the upgrade to SUSE Manager 4.3, the following is reported when trying to open the webUI:
### HTTP Status 404 – not found Type Status Report Description The origin server did not find a current representation for the target resource or is not willing to disclose that one exists. Apache Tomcat/9.0.36 ###
In the postgresql logs the below entries can be seen:
[unknown] [unknown] LOG: could not accept SSL connection: no suitable signature algorithm
Re-create the server certificate and replace the old one:
rhn-ssl-tool --gen-server --dir="/root/ssl-build" --set-country="COUNTRY" \ --set-state="STATE" --set-city="CITY" --set-org="ORGANIZATION" \ --set-org-unit="ORGANIZATION UNIT" --set-email="email@example.com" \ --set-hostname="susemanager.example.com" --set-cname="example.com" mgr-ssl-cert-setup --root-ca-file=<Path_to_Root_CA_Certificate> \ --server-cert-file=<Server_Cert_File> --server-key-file=<Server_Key_File> spacewalk-service stop systemctl restart postgresql.service spacewalk-service start /usr/bin/rhn-ssl-dbstore --ca-cert=<Path_to_Root_CA_Certificate>
An old signature algorithm is used in the server certificate:
Certificate: Data: Version: 3 (0x2) Serial Number: xxx Signature Algorithm: sha1WithRSAEncryption Issuer: ...
The "sha1WithRSAEncryption" certificate algorithm is old and declared as insecure. It was used as the default in the past, but this was changed a while ago.
Documentation related to certificates:
This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.
- Document ID:000021047
- Creation Date: 18-Jul-2023
- Modified Date:18-Jul-2023
- SUSE Manager Server
For questions or concerns with the SUSE Knowledgebase please contact: tidfeedback[at]suse.com