Cannot start demisto service after changing certificates.

[amados]

Hello folks,

I followed the steps here to change the GUI certs to new self-signed certificates, but the service doesn't come back up.

I found below error in server tail.

error Could not load scheduled jobs [error 'database not open'] (source: /builds/GOPATH/src/gitlab.xdr.pan.local/xdr/xsoar/server/services/queue.go:1153)

warning Failed to load engines for upgrade [error 'database not open'] (source: /builds/GOPATH/src/gitlab.xdr.pan.local/xdr/xsoar/server/services/engine.go:353)

Can anyone let me know the way to troubleshoot database issue.

Regards,

Ahmed

[jfernandes1]

Hi @amados, Might be a permission issue, ensure that the pem and cert files are owned by the demisto user. 

If the issue persists, I would recommend raising a support case.

[MRaj]

This issue can happen if the certificates are not correct. Just recheck the permissions of cert.key and cert.pem at /usr/local/demisto folder and ensure that the owner is set to demisto user with demisto group i.e demisto:demisto. If it still fails, just cat the cert.pem and cert.key files to recheck the certificates and key.