Bug 10713 - Webmin problem
Summary: Webmin problem
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 3
Hardware: i586 Linux
Priority: Normal normal
Target Milestone: ---
Assignee: David Walser
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on: 13013
Blocks:
  Show dependency treegraph
 
Reported: 2013-07-06 11:33 CEST by Piotr Mackowiak
Modified: 2014-03-15 17:41 CET (History)
2 users (show)

See Also:
Source RPM: webmin-1.620-3.mga3
CVE:
Status comment:


Attachments

Description Piotr Mackowiak 2013-07-06 11:33:26 CEST
Description of problem:

Webmin does not support and even recognise existing on PC openssl so it takes openvpn and CA facility as not installed. It is because CA and SSL related fils are located in a little bit different subdirs than Webmin look for.
Upgrade Webmin to newer version (from build-in Webmin option) cause Webmin does not work at all.


Version-Release number of selected component (if applicable):

Webmin ver 1.62


How reproducible:
Every time I try to use Webmin

Steps to Reproduce:
1. install openssl and openvpn
2.Install Webmin from official M3 repo
3.try to set-up from Webmin menu OpenVPN + CA


Reproducible: 

Steps to Reproduce:
Comment 1 David Walser 2013-07-08 16:50:34 CEST
(In reply to Piotr Mackowiak from comment #0)
> Description of problem:
> 
> Webmin does not support and even recognise existing on PC openssl so it
> takes openvpn and CA facility as not installed. It is because CA and SSL
> related fils are located in a little bit different subdirs than Webmin look
> for.

Could you give more details on this?  What are the subdirs it is looking in and should be looking in?

> Upgrade Webmin to newer version (from build-in Webmin option) cause Webmin
> does not work at all.

I certainly wouldn't expect such an option to work, and in fact we should disable it.  Where do you see this option?

CC: sysadmin-bugs => luigiwalser
Component: Release (media or process) => RPM Packages
Source RPM: Official Mageia 3 repo => webmin-1.620-3.mga3

Comment 2 Piotr Mackowiak 2013-07-08 20:29:47 CEST
For example

Webmin -> Servers -> OpenVPN+CA

openssl.cnf batch file not found

The OpenSSL package can be automatically installed by Webmin. Click here to have it downloaded and installed using URPMI.Or reconfigure paths using Module Configuration.

But OpenSSL is already installed on this machine.

The option to upgrade Webmin to new version is in maim menu (first screen) of Webmin, just below Webmin logo and summary of computer resources.

Probably the only difference between Your instance of Webmin and my one is interface language. I dont know is it importent or not.
Comment 3 David Walser 2013-07-16 20:49:04 CEST
Hi, sorry I couldn't get back to you sooner, work's been crazy.

(In reply to Piotr Mackowiak from comment #2)
> For example
> 
> Webmin -> Servers -> OpenVPN+CA
> 
> openssl.cnf batch file not found

OK.  I'm on Mageia 2 at the moment, which doesn't give this error, but I do see that the path we set to the cnf file in the Mageia 3 package is no longer valid.

Currently they are both using a cnf file that ships with openvpn, but its path changed in the Mageia 3 version of openvpn.  I'm not sure if this is even the correct file to be using in either case, as a cnf file also ships with openssl itself.

Could you try editing the file:
/usr/share/webmin/openvpn/config-*-linux

and for the "openssl_home=" line, change it to look like each of the following (one at a time) and restart the webmin service, and let me know which one seems to be the correct one?
openssl_home=/usr/share/openvpn/easy-rsa/openssl-1.0.0.cnf
openssl_home=/etc/pki/tls/openssl.cnf

> The option to upgrade Webmin to new version is in maim menu (first screen)
> of Webmin, just below Webmin logo and summary of computer resources.

I'm not seeing that.  The only thing I see at the bottom there is a link to install updates to packages on the system.  Can you post or link a screenshot?
Comment 4 Piotr Mackowiak 2013-07-16 21:56:42 CEST
None of this work:

openssl_home=/usr/share/openvpn/easy-rsa/openssl-1.0.0.cnf
openssl_home=/etc/pki/tls/openssl.cnf

Still the same error:

openssl.cnf batch file not found

Screenshot (Polish language):

https://dl.dropboxusercontent.com/u/79280403/zrzut%20ekranu4.png.

"Aktualizuj Webmina teraz" means "Update Webmin now"

CC: (none) => mackowiakp

Comment 5 David Walser 2013-07-24 21:55:22 CEST
OK, I'm pretty sure openssl_home=/etc/pki/tls/openssl.cnf is correct.

I changed it to that and it seemed to work.  I'll change that in SVN.

As for the update notification, I can't get it to show, but that's probably because I'm behind a proxy here.  When I first logged into webmin, I could see it trying to load for a while; that was probably it checking for the update.

It turns out that this can be turned off through Webmin itself, if you into the Webmin's settings, and Index Page options, tell it not to check for Webmin and module updates.

This will add nowebminup=1 and nomoduleup=1 to /etc/webmin/config.  The whole /etc/webmin directory is created dynamically by Webmin and not owned by the package (wow this is ugly).  I wonder if adding the same settings to /usr/share/webmin/webmin/config would work.

Looking at how the code works though, it looks like the best way to disable this in the package would be to patch it to add "1" as an argument whenever it calls the &webmin::show_webmin_notifications() function.  That way it won't check for these updates no matter what you have that setting set to.  It is called from these files:
index.cgi
blue-theme/right.cgi
gray-theme/right.cgi
mscstyle3/index.cgi
Comment 6 David Walser 2013-08-13 19:41:58 CEST
I patched the show_webmin_notification calls as indicated in the previous comment.

Both of these issues should be fixed in webmin-1.640-1.mga4.

I don't intend to backport an update to Mageia 3 unless more security issues are fixed.

The Cauldron package should work fine on Mageia 3, so you could test it if you'd like to.
David Walser 2013-08-14 00:51:27 CEST

Assignee: bugsquad => luigiwalser

David Walser 2014-03-13 18:15:23 CET

Depends on: (none) => 13013

Comment 7 David Walser 2014-03-15 17:41:08 CET
Fixed in a Mageia 3 update in Bug 13013.  Thanks again for the report.

Status: NEW => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.