Rocket.Chat - "Bad decrypt" error

[prodesk]

Hi all !
I’m still having problems logging in to rocket chat and therefore can’t use it.
The last error I identified is the following:

It was not possible to parse your key, reason: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt

There appears to be problems with decryption.
I am desperate and frustrated: I have never been able to use RocketChat …
Can anyone help me?
Thank you

[RalfBecker]

Googeling for your error - I never seen it before - tells something about incompatible openSSL versions:

https://www.google.com/search?q=It+was+not+possible+to+parse+your+key%2C+reason%3A+error%3A06065064%3Adigital+envelope+routines%3AEVP_DecryptFinal_ex%3Abad+decrypt&oq=It+was+not+possible+to+parse+your+key%2C+reason%3A+error%3A06065064%3Adigital+envelope+routines%3AEVP_DecryptFinal_ex%3Abad+decrypt&aqs=chrome..69i57.521j0j7&sourceid=chrome&ie=UTF-8

Is that a container based installation, because all our containers should have compatible openSSL versions.

Without more information about your environment, it’s hard to say anything. Important is the type of installation, Linux version, webserver version on the host and what certificate you use.

Ralf

[prodesk]

Hi Raf. Thank you for your answer.
Installation on Ubuntu Linux server 18.04.4 - 4.15.0-96-generic x86_64 performed following only the instructions detailed by you in: https://software.opensuse.org/download.html?project=server%3AeGroupWare&package=egroupware-docker.

Rocket and Egroupware configure with: https://github.com/EGroupware/egroupware/wiki/Rocketchat-Integration

I don’t have any SSL certificate, I use Egroupware only on the internal network and therefore without encryption (http://gest.xxxxxxxx.xxx)
Thanks for your help
pier

[RalfBecker]

I don’t have any SSL certificate, I use Egroupware only on the internal network and therefore without encryption

The that is probably the reason for the error you get.

Most simple solution and also the most safe is to get a certificate, eg. a free one from Let’s Encrypt.

Ralf

[prodesk]

OK Ralf.
Unfortunately I have no skills with ssl. Is there a guide on how to implement it for egroupware?
Thank you

[StefanU]

Is there a guide on how to implement it for egroupware?

SSL Encryption with Let's Encrypt

Stefan

[prodesk]

Hallo Stefan und Ralf (@RalfBecker: Hi Ralf. It’s me: I asked you for the link on linkedin!)
I installed thanks to your suggestions Certbot and now my Egroupware work with https:// but the problem with RocketChat remains.
Have you other suggestion ?
Thanks in advance.
Pier

[RalfBecker]

Have you changes the URL:

• in EGroupware: Admin >> OpenId >> Clients
• in EGroupware: Admin >> Rocket.Chat >> Site Configuration
• in Rocket.Chat: Admin >> OAuth >> Custom OAuth: EGroupware

If the error persists, after checking and if necessary fixing the above URLs, when exactly does it happen?
Specially the OpenID Request log is very helpful diagnosing login problems in Rocket.Chat / OpenID Clients.

Ralf

[prodesk]

All the setting are ok with new address https://
This is the log.

Thanks

[prodesk]

else. I don’t understand why the clock in the rocketchat log is 2 hours behind. Can the error depend on this?