perfSONAR User Q&A and Other Discussion

[Michael Johnson <>]

Hi Viral,

You need to place your SSL certs in
/etc/pwa/auth/

Also, I just realized that the nginx command is wrong in the docs. it should 
be:

docker run \
   --restart=always \
   --net pwa \
   --name nginx \
   -v /etc/pwa/shared:/shared:ro \
   -v /etc/pwa/nginx:/etc/nginx:ro \
   -v /etc/pwa/auth:/certs:ro \
   -p 8000:8000 \
   -p 8443:8443 \
   -p 9443:9443 \
   -d nginx


The part that is different is:
-v /etc/grid-security/host:/certs:ro

changes to

-v /etc/pwa/auth:/certs:ro

I'll update the docs. Let me know if you still have issues.

Thanks,
Michael

On Mon, Jul 30, 2018 at 04:15:18PM +0000, Viral Patel wrote:
> Hi
> I am running PWA alongside a toolkit & followed the document :
>
> http://docs.perfsonar.net/release_candidates/4.1b1/pwa_running_alongside\<http://docs.perfsonar.net/release_candidates/4.1b1/pwa_running_alongside/>
>
> but my nginx container keep restarting , looking at the container log points 
> toward cert error but I do not know how to fix this .
>
>
> [root@perfsonar41 ~]# docker container list -a
>
> CONTAINER ID        IMAGE                 COMMAND                  CREATED    
>          STATUS                        PORTS               NAMES
> 2e5c749da84e        nginx                 "nginx -g 'daemon ..."   2 days ago 
>          Restarting (1) 1 second ago                       nginx
> 6b9af1cb53fb        perfsonar/pwa-pub     "node /app/api/pwa..."   2 days ago 
>          Up 29 seconds                 8080/tcp            pwa-pub1
> cdbe6e467d4f        perfsonar/pwa-admin   "/start.sh"              2 days ago 
>          Up 29 seconds                 80/tcp, 8080/tcp    pwa-admin1
> 2242c69ca3e2        perfsonar/sca-auth    "/app/docker/start.sh"   2 days ago 
>          Up 29 seconds                 80/tcp, 8080/tcp    sca-auth
> c040264d8a6a        mongo                 "docker-entrypoint..."   2 days ago 
>          Up 29 seconds                 27017/tcp           mongo
>
>
> [root@perfsonar41 ~]# docker logs -f --tail 20 nginx
>
> 2018/07/30 16:05:58 [emerg] 1#1: BIO_new_file("/certs/cert.pem") failed (SSL: 
> error:02001002:system library:fopen:No such file or 
> directory:fopen('/certs/cert.pem','r') error:2006D080:BIO routines:BIO_new_file:no such 
> file)
> nginx: [emerg] BIO_new_file("/certs/cert.pem") failed (SSL: 
> error:02001002:system library:fopen:No such file or 
> directory:fopen('/certs/cert.pem','r') error:2006D080:BIO routines:BIO_new_file:no such 
> file)
> 2018/07/30 16:06:03 [warn] 1#1: the "ssl" directive is deprecated, use the "listen 
> ... ssl" directive instead in /etc/nginx/conf.d/pwa.conf:22
> nginx: [warn] the "ssl" directive is deprecated, use the "listen ... ssl" 
> directive instead in /etc/nginx/conf.d/pwa.conf:22
> 2018/07/30 16:06:03 [warn] 1#1: the "ssl" directive is deprecated, use the "listen 
> ... ssl" directive instead in /etc/nginx/conf.d/pwa.conf:63
> nginx: [warn] the "ssl" directive is deprecated, use the "listen ... ssl" 
> directive instead in /etc/nginx/conf.d/pwa.conf:63
> 2018/07/30 16:06:03 [emerg] 1#1: BIO_new_file("/certs/cert.pem") failed (SSL: 
> error:02001002:system library:fopen:No such file or 
> directory:fopen('/certs/cert.pem','r') error:2006D080:BIO routines:BIO_new_file:no such 
> file)
> nginx: [emerg] BIO_new_file("/certs/cert.pem") failed (SSL: 
> error:02001002:system library:fopen:No such file or 
> directory:fopen('/certs/cert.pem','r') error:2006D080:BIO routines:BIO_new_file:no such 
> file)
> 2018/07/30 16:06:09 [warn] 1#1: the "ssl" directive is deprecated, use the "listen 
> ... ssl" directive instead in /etc/nginx/conf.d/pwa.conf:22
> nginx: [warn] the "ssl" directive is deprecated, use the "listen ... ssl" 
> directive instead in /etc/nginx/conf.d/pwa.conf:22
> 2018/07/30 16:06:09 [warn] 1#1: the "ssl" directive is deprecated, use the "listen 
> ... ssl" directive instead in /etc/nginx/conf.d/pwa.conf:63
> nginx: [warn] the "ssl" directive is deprecated, use the "listen ... ssl" 
> directive instead in /etc/nginx/conf.d/pwa.conf:63
> 2018/07/30 16:06:09 [emerg] 1#1: BIO_new_file("/certs/cert.pem") failed (SSL: 
> error:02001002:system library:fopen:No such file or 
> directory:fopen('/certs/cert.pem','r') error:2006D080:BIO routines:BIO_new_file:no such 
> file)
> nginx: [emerg] BIO_new_file("/certs/cert.pem") failed (SSL: 
> error:02001002:system library:fopen:No such file or 
> directory:fopen('/certs/cert.pem','r') error:2006D080:BIO routines:BIO_new_file:no such 
> file)
> 2018/07/30 16:06:17 [warn] 1#1: the "ssl" directive is deprecated, use the "listen 
> ... ssl" directive instead in /etc/nginx/conf.d/pwa.conf:22
> nginx: [warn] the "ssl" directive is deprecated, use the "listen ... ssl" 
> directive instead in /etc/nginx/conf.d/pwa.conf:22
> 2018/07/30 16:06:17 [warn] 1#1: the "ssl" directive is deprecated, use the "listen 
> ... ssl" directive instead in /etc/nginx/conf.d/pwa.conf:63
> nginx: [warn] the "ssl" directive is deprecated, use the "listen ... ssl" 
> directive instead in /etc/nginx/conf.d/pwa.conf:63
> 2018/07/30 16:06:17 [emerg] 1#1: BIO_new_file("/certs/cert.pem") failed (SSL: 
> error:02001002:system library:fopen:No such file or 
> directory:fopen('/certs/cert.pem','r') error:2006D080:BIO routines:BIO_new_file:no such 
> file)
> nginx: [emerg] BIO_new_file("/certs/cert.pem") failed (SSL: 
> error:02001002:system library:fopen:No such file or 
> directory:fopen('/certs/cert.pem','r') error:2006D080:BIO routines:BIO_new_file:no such 
> file)
>
>
>
> Sincerely
> Viral Patel
>
> [SavantLtd Teal - small]
>
> 230 Clearfield Avenue, Suite 113
> Virginia Beach, VA 23462
> 757-463-9120 phone
> 757-463-9158 fax
>
>  | www.savantltd.com


> --
> To unsubscribe from this list: 
> https://lists.internet2.edu/sympa/signoff/perfsonar-user


--
Michael Johnson
GlobalNOC DevOps Engineer

Attachment: smime.p7s
Description: S/MIME cryptographic signature