Cells wont start after SSL cert install

Pydio Cells
1

So I needed to stand up an internet accessible instance of pydio cells and it needs to have a valid SSL cert. While waiting for the cert I stood up pydio cells with a local signed cert and it worked fine. Once I got the crt and the private key (pem format) I went through the ‘cells configure sites’ menu and changed it to a custom SSL cert. I restarted the cell service and now it no longer listens on TCP/443.

Nothing listening on 443
root@pydio:~# netstat -anp | grep 443
root@pydio:~#

root@pydio:~# systemctl status cells
● cells.service - Pydio Cells
     Loaded: loaded (/etc/systemd/system/cells.service; enabled; vendor preset: enabled)
     Active: active (running) since Wed 2021-12-22 22:55:59 UTC; 18s ago
       Docs: https://pydio.com
   Main PID: 2349 (cells)
      Tasks: 194 (limit: 7028)
     Memory: 419.9M
     CGroup: /system.slice/cells.service
             ├─2349 /opt/pydio/bin/cells start
             ├─2371 /opt/pydio/bin/cells start --fork --config local --registry grpc://:8000 --broker grpc://:8003 ^pydio.grpc.tasks$
             ├─2372 /opt/pydio/bin/cells start --fork --config local --registry grpc://:8000 --broker grpc://:8003 ^pydio.grpc.data.sync.pydiods1$
             ├─2373 /opt/pydio/bin/cells start --fork --config local --registry grpc://:8000 --broker grpc://:8003 ^pydio.grpc.jobs$
             ├─2374 /opt/pydio/bin/cells start --fork --config local --registry grpc://:8000 --broker grpc://:8003 ^pydio.grpc.data.sync.personal$
             ├─2380 /opt/pydio/bin/cells start --fork --config local --registry grpc://:8000 --broker grpc://:8003 ^pydio.gateway.websocket$
             ├─2394 /opt/pydio/bin/cells start --fork --config local --registry grpc://:8000 --broker grpc://:8003 ^pydio.grpc.data.sync.cellsdata$
             ├─2410 /opt/pydio/bin/cells start --fork --config local --registry grpc://:8000 --broker grpc://:8003 ^pydio.grpc.data.sync.thumbnails$
             ├─2414 /opt/pydio/bin/cells start --fork --config local --registry grpc://:8000 --broker grpc://:8003 ^pydio.grpc.data.objects.local1$
             ├─2424 /opt/pydio/bin/cells start --fork --config local --registry grpc://:8000 --broker grpc://:8003 ^pydio.grpc.data.sync.versions$
             ├─2437 /opt/pydio/bin/cells start --fork --config local --registry grpc://:8000 --broker grpc://:8003 ^pydio.grpc.search$
             ├─2493 /opt/pydio/bin/cells start --fork --config local --registry grpc://:8000 --broker grpc://:8003 ^pydio.grpc.data.index.pydiods1$
             ├─2498 /opt/pydio/bin/cells start --fork --config local --registry grpc://:8000 --broker grpc://:8003 ^pydio.grpc.data.index.versions$
             ├─2500 /opt/pydio/bin/cells start --fork --config local --registry grpc://:8000 --broker grpc://:8003 ^pydio.grpc.data.index.personal$
             ├─2501 /opt/pydio/bin/cells start --fork --config local --registry grpc://:8000 --broker grpc://:8003 ^pydio.grpc.data.index.cellsdata$
             └─2510 /opt/pydio/bin/cells start --fork --config local --registry grpc://:8000 --broker grpc://:8003 ^pydio.grpc.data.index.thumbnails$

Dec 22 22:56:06 pydio cells[2349]: 2021-12-22T22:56:06.221Z        INFO        pydio.grpc.data.sync.cellsdata        Trying to contact object service data.objects.loca>
Dec 22 22:56:06 pydio cells[2349]: 2021-12-22T22:56:06.226Z        INFO        pydio.grpc.data.sync.cellsdata        Successfully listed objects from bucket cellsdata
Dec 22 22:56:06 pydio cells[2349]: 2021-12-22T22:56:06.231Z        INFO        pydio.grpc.data.sync.cellsdata        Started
Dec 22 22:56:06 pydio cells[2349]: 2021-12-22T22:56:06.235Z        INFO        pydio.grpc.data.sync.thumbnails        Trying to contact object service data.objects.loc>
Dec 22 22:56:06 pydio cells[2349]: 2021-12-22T22:56:06.243Z        INFO        pydio.grpc.data.sync.thumbnails        Successfully listed objects from bucket thumbs
Dec 22 22:56:06 pydio cells[2349]: 2021-12-22T22:56:06.251Z        INFO        pydio.grpc.data.sync.thumbnails        Started
Dec 22 22:56:06 pydio cells[2349]: 2021-12-22T22:56:06.409Z        INFO        pydio.grpc.data.sync.personal        Started
Dec 22 22:56:06 pydio cells[2349]: 2021-12-22T22:56:06.577Z        INFO        pydio.grpc.data.sync.versions        StartedDec 22 22:56:10 pydio cells[2349]: 2021-12-22T22:56:10.235Z        WARN                Caddy Instance not ready yet - Resend restart event
Dec 22 22:56:15 pydio cells[2349]: 2021-12-22T22:56:15.237Z        WARN                Caddy Instance not ready yet - Resend restart event

then this repeats for ever…

        "TLSConfig": {
          "Certificate": {
            "CertFile": "/home/pydio/pydio.crt",
            "KeyFile": "/home/pydio/privatekey.pem"
          }
        }

crt and private key files exist…

root@pydio:~# ls -ahl /home/pydio/pydio.crt
-rwxr--r-- 1 pydio pydio 2.2K Dec 22 22:14 /home/pydio/pydio.crt
root@pydio:~# ls -ahl /home/pydio/privatekey.pem
-rwxr--r-- 1 pydio pydio 912 Dec 22 22:16 /home/pydio/privatekey.pem
root@pydio:~#

If I switch it back to locally signed, it starts right up again.
root@pydio:~# netstat -anp | grep 443
tcp6 0 0 :::443 :::* LISTEN 3325/cells
root@pydio:~#

What am I missing??

2

Hello @doublejz ,

Could you show me what the cells configure sites command displays right now, if you have the correct configuration with cells bound to port 443, you should be able to see it .

3

It looks like it was a bad cert file or pem file. I had them re-issued again and dropped them ontop of the existing ones and everything is running correctly now.

root@pydio:~# netstat -anp | grep 443 | grep LISTEN
tcp6       0      0 :::44435                :::*                    LISTEN      735/cells
tcp6       0      0 :::443                  :::*                    LISTEN      735/cells
root@pydio:~#