[SOLVED] Private key/certificate issue

Share your tips or issues concerning the WAPT Console or WAPT Agent here
Forum Rules
Community Forum Rules
* English support on www.reddit.com/r/wapt
* French community support is available on this forum
* Please prefix the topic title with [RESOLVED] if it is resolved.
* Please do not edit a topic that is tagged [RESOLVED]. Open a new topic referencing the old one.
* Specify the installed WAPT version, full version, and build number (2.2.1.11957 / 2.2.2.12337 / etc.) as well as the Enterprise/Discovery edition.
* Versions 1.8.2 and earlier are no longer supported. The only questions accepted regarding version 1.8.2 are related to upgrading to a supported version (2.1, 2.2, etc.).
* Specify the server OS (Linux/Windows) and version (Debian Buster/Bullseye - CentOS 7 - Windows Server 2012/2016/2019).
* Specify the OS of the administration/package creation machine and the machine with the problematic agent, if applicable (Windows 7/10/11/Debian 11/etc.).
* Avoid asking multiple questions when opening a topic, otherwise it may be ignored. If there are multiple topics, open separate topics, preferably one after the other and not all at the same time (i.e., do not spam the forum).
* Include code snippets, screenshots, and other images directly in the post. Links to Pastebin, Bitly, and other third-party sites will be systematically removed.
* As with any community forum, support is provided voluntarily by members. If you require commercial support, you can contact Tranquil IT's sales department at 02.40.97.57.55
TFR-CH
Messages: 11
Registration: December 14, 2021 - 3:06 PM

March 13, 2023 - 09:53

Good morning,

After performing a minor update of the WAPT server, I reinstall the console and try to redeploy the agent.
However, since my private key/certificate pair no longer works, it's impossible to do anything (sign packages, modify a machine, etc.)

From what I remember, it seems I checked it, I don't know why (what a mistake) "Install the certificates provided by this installer" during the console installation. I therefore assume that this error is what's causing everything to stop working.
waptsetup.png
waptsetup.png (19.4 KB) Viewed 4540 times
When I try to:

- Check the associated key
- Modify a machine
- Sign a package
- Everything related to the key, actually...

I received the following error message:
key.jpg
key.jpg (16.6 KB) Viewed 4540 times
The private key and the certificate are located in the folder C:\Users\TFR\private\

The certificate is located in the \wapt\ssl\ folder

The password is correct (100%)

But my question is, what do I need to do to get it working again?

WAPT Server version: 2.3.0.13516 Discovery edition
Server OS: Debian 11
Administration machine operating system: Windows 10 22H2

Thank you for your time.
Last edited by TFR-CH on March 13, 2023 - 14:38, edited 1 time.
User avatar
dcardon
WAPT Expert
Messages: 1932
Registration: June 18, 2014 - 09:58
Location: Saint Sébastien sur Loire
Contact :

March 13, 2023 - 2:20 PM

Hello Valentin,

in accordance with the forum rules, I have removed the images linking to the third-party site. Could you please upload them directly to your post?

Thank you very much, Best regards,

Denis
Denis Cardon - Tranquil IT
Share your experiences on WAPT! Send us your blog and article URLs in the "Your Opinion of the forum, and we'll feature them on the WAPT
User avatar
dcardon
WAPT Expert
Messages: 1932
Registration: June 18, 2014 - 09:58
Location: Saint Sébastien sur Loire
Contact :

March 13, 2023 - 4:16 PM

Hi Valentin,

thanks for re-uploading the images.

Do you have an unusual character in your password? We had a similar problem quite a while ago, but it's been a while since we've had any reports about it.

For your information, the certificate located in c:\program files (x86)\wapt\ssl can be retrieved from any computer on your network.

In older versions of WAPT, the certificate and private key were created in c:\private; could the correct key be located there?

Best regards,

Denis
Denis Cardon - Tranquil IT
Share your experiences on WAPT! Send us your blog and article URLs in the "Your Opinion of the forum, and we'll feature them on the WAPT
TFR-CH
Messages: 11
Registration: December 14, 2021 - 3:06 PM

March 14, 2023 - 09:30

Hello,

my password consists only of lowercase letters, uppercase letters, and numbers.

I already have the public certificate (.crt).

By default, my keys were located in C:\private, but after discussing this with moderators on your community Discord server, they suggested I move the folder containing the keys.

My problem isn't the loss of the key pair (private and public). I know where they are stored.

The WAPT console is unable to decrypt the key with the given password after I updated the console.
The key and the certificate are in the same folder, and waptconsole.ini is configured correctly.
The password I entered is correct.
I even tried uninstalling and reinstalling the console, but without success.
User avatar
sfonteneau
WAPT Expert
Messages: 2318
Registered: July 10, 2014 - 11:52 PM
Contact :

March 14, 2023 - 09:45

TFR-CH wrote: March 14, 2023 - 09:30 The WAPT console is unable to decrypt the key with the given password after I updated the console.
Could you try using an older console to check if it works properly with the console in the previous version?

https://wapt.tranquil.it/wapt/releases/?C=M&O=D

Besides, what was the previous version? Your forum post doesn't indicate that.
TFR-CH
Messages: 11
Registration: December 14, 2021 - 3:06 PM

March 14, 2023 - 10:14

I uninstalled console version 2.3.0.13516 and installed the previous version 2.3.0.13505, without success, same error:

error.jpg
error.jpg (23.66 KB) Viewed 4515 times

I only have one computer with the WAPT console installed.

The key and the certificate are in the same folder... I never touched it before installing update 2.3.0.13516
path.jpg
path.jpg (8.3 KB) Viewed 4515 times
In the installer, what does the action: "Install the certificates provided by this installer" do?

I suppose that's where my problem stems from.
User avatar
sfonteneau
WAPT Expert
Messages: 2318
Registered: July 10, 2014 - 11:52 PM
Contact :

March 14, 2023 - 10:19

The "Install the certificates provided by this installer" option installs the Tranquility certificates, that's all.

If your problem persists despite downgrading the console, then the issue isn't related to the upgrade.

Could you check via Tools -> Preferences -> Verify Key?
TFR-CH
Messages: 11
Registration: December 14, 2021 - 3:06 PM

March 14, 2023 - 10:43

All right.

The error message is the same whether I try to check the associated key from the preferences or modify the packages on a machine.


preferences_wapt.jpg
preferences_wapt.jpg (76 KB) Viewed 4510 times
User avatar
sfonteneau
WAPT Expert
Messages: 2318
Registered: July 10, 2014 - 11:52 PM
Contact :

March 14, 2023 - 12:18

TFR-CH wrote: March 14, 2023 - 09:30 By default, my keys were in C:\private, but after exchanging with moderators of your community Discord, they suggested I move the folder containing the keys.
Do you have a snapshot or a backup of the machine's state at that time? To perform a file diff?
TFR-CH
Messages: 11
Registration: December 14, 2021 - 3:06 PM

March 14, 2023 - 12:19

No, I don't have a backup of the machine before the update, unfortunately.
Locked