Soap_Error2

[Daniel B]

Working on setting up a new install, interworx module, Centos7, php 5.6.  I already have libxml2 as well as php-soap installed, so not sure why it's popping up now.  Anyone have any ideas?  First time I've installed on Centos7 so didn't know if there is a new requirement I am missing?

 

[ctrl_name] => /nodeworx/users
[action] => listWorkingUser
[input] => Array
(
[perms] => Array
(
[0] => NODEWORXUSER
)

)

)

getResponse Results (Line: 304)
stdClass Object
(
[status] => error
[response] => soap_error2
[log] =>
)

[cloudrck]

Is there more to the error? You check your php/webserver logs?

 

Have you looked at https://www.blesta.com/forums/index.php?/topic/5156-interworx-module-gives-soap-error2/

[Michael]

Hello Daniel, I've replied in our ticket this is a PHP 5.6 issue fixed in 4.0.

[Paul]

Hello Daniel, I've replied in our ticket this is a PHP 5.6 issue fixed in 4.0.

 

Yes, PHP 5.6 defaults SoapClient() to require SSL verify_peer, and since the Interworx API SSL cert is not valid it's an issue. We are disabling verify_peer (reluctantly) in v4, and fixing another bug that prevents you from using http:// instead of https:// when adding an Interworx server to the module.

 

Edit: This may be helpful in explaining the issue http://stackoverflow.com/questions/18465567/php-soapclient-verify-peer-true-fails-with-ca-signed-certificate

[Daniel B]

Yes, PHP 5.6 defaults SoapClient() to require SSL verify_peer, and since the Interworx API SSL cert is not valid it's an issue. We are disabling verify_peer (reluctantly) in v4, and fixing another bug that prevents you from using http:// instead of https:// when adding an Interworx server to the module.

 

Edit: This may be helpful in explaining the issue http://stackoverflow.com/questions/18465567/php-soapclient-verify-peer-true-fails-with-ca-signed-certificate

 

hopefully this isn't the beginning of security lapses with interworx...

[Paul]

hopefully this isn't the beginning of security lapses with interworx...

 

Yeah, hopefully not. I installed a valid SSL certificate on our dev Interworx server, and it still failed to work. I suspect there may be something else going on that they could easily correct. Then they could just use letsencrypt.org instead of self-signed certs.

[Daniel B]

Yeah, hopefully not. I installed a valid SSL certificate on our dev Interworx server, and it still failed to work. I suspect there may be something else going on that they could easily correct. Then they could just use letsencrypt.org instead of self-signed certs.

 

Yeah, I thought it was interesting getting back into my server and updating things...adding the new Interworx LetsEncrypt module...but it only works for Siteworx accounts, doesn't allow Nodeworx to use it to create certs for services

[Paul]

I suppose you could do it yourself https://letsencrypt.org/getting-started/

[Daniel B]

I suppose you could do it yourself https://letsencrypt.org/getting-started/

 

I'm going to, just thought is was strange that they spent the time to create a module for letencrypt...and didn't allow it to work for service certs...

[Paul]

I'm going to, just thought is was strange that they spent the time to create a module for letencrypt...and didn't allow it to work for service certs...

 

What's your experience with Let's Encrypt? I was looking at it today, and it looks really promising. I'm not sure if people are using it instead of paid certs for production environments, or mainly as a way to just "secure everything" that wouldn't otherwise get a cert. I'm all for encrypting everything (cough Snowden cough NSA), and the automation for new/renew is great, especially since the certs are good for only 90 days. I've still come across only 1 website using Let's Encrypt that I'm aware of.

[Daniel B]

What's your experience with Let's Encrypt? I was looking at it today, and it looks really promising. I'm not sure if people are using it instead of paid certs for production environments, or mainly as a way to just "secure everything" that wouldn't otherwise get a cert. I'm all for encrypting everything (cough Snowden cough NSA), and the automation for new/renew is great, especially since the certs are good for only 90 days. I've still come across only 1 website using Let's Encrypt that I'm aware of.

 

I've been following it for a while, and I'd say it's going to be more of an "Encrypt Everything" tool, they aren't planning on doing anything more than low level single domain certs, debating wildcard (but leaning towards not), no EV certs, etc.

 

I'm going to use it everywhere I normally would have spent 6 bucks on a cheap cert, but anything else I'll probably keep using the higher level certificates.

 

Truthfully, I could see plugins for cpanel/interworx/etc set to automatically generate and install certs and renew them for every single domain on the server...really no reason not to now.