docker-misp icon indicating copy to clipboard operation
docker-misp copied to clipboard

Empty /etc/nginx/certs/dhparams.pem file

Open Rafiot opened this issue 4 years ago • 6 comments

I sometimes endup in a state where /etc/nginx/certs/dhparams.pem exists but is empty.

Would it make sense to test that and force regenerate it there? https://github.com/coolacid/docker-misp/blob/master/server/files/entrypoint_nginx.sh#L166

Rafiot avatar Feb 25 '21 10:02 Rafiot

Zero Byte file? Interesting, wonder why. Is there an easy way to detect the empty file?

coolacid avatar Feb 26 '21 13:02 coolacid

it seems that -s would do the trick.

I've been doing a lot of messing around and I don't have the problem anymore, so I'm unsure in which conditions that happened :/

Rafiot avatar Feb 26 '21 14:02 Rafiot

I wonder if you killed the startup at the wrong time and it started making the file, but couldn't finish?

coolacid avatar Feb 26 '21 14:02 coolacid

that's very possible. I use your docker there: https://github.com/MISP/dockerized_training_environment

Where I setup 20+ instances, with sync links and sharing groups. There is a lot going on, including some black magic, and the OS it's running on had a few interesting issues initially.

Rafiot avatar Feb 26 '21 14:02 Rafiot

Before I got through with the -s test, I'm going to sit and think on it, make sure there's no security issues with "changing" the dhparams - I can't see there being any problem since there's no way nginx could start with an invalid dhparams file.

coolacid avatar Feb 26 '21 14:02 coolacid

oh yeah, nginx was definitely not starting

Rafiot avatar Feb 26 '21 14:02 Rafiot