topic Cannot start demisto service after changing certificates. in Cortex XSOAR Discussions

Cannot start demisto service after changing certificates.

amados — Mon, 10 Apr 2023 20:41:45 GMT

Hello folks,

I followed the steps here to change the GUI certs to new self-signed certificates, but the service doesn't come back up.

I found below error in server tail.

error Could not load scheduled jobs [error 'database not open'] (source: /builds/GOPATH/src/gitlab.xdr.pan.local/xdr/xsoar/server/services/queue.go:1153)

warning Failed to load engines for upgrade [error 'database not open'] (source: /builds/GOPATH/src/gitlab.xdr.pan.local/xdr/xsoar/server/services/engine.go:353)

Can anyone let me know the way to troubleshoot database issue.

Regards,

Ahmed

Re: Cannot start demisto service after changing certificates.

jfernandes1 — Tue, 11 Apr 2023 04:34:18 GMT

Hi @amados, Might be a permission issue, ensure that the pem and cert files are owned by the demisto user.

If the issue persists, I would recommend raising a support case.

Re: Cannot start demisto service after changing certificates.

MRaj — Wed, 12 Jul 2023 12:19:22 GMT

This issue can happen if the certificates are not correct. Just recheck the permissions of cert.key and cert.pem at /usr/local/demisto folder and ensure that the owner is set to demisto user with demisto group i.e demisto:demisto. If it still fails, just cat the cert.pem and cert.key files to recheck the certificates and key.