Advertisement
Correllion115

Passbolt Health Check 03/31/22 7:38PM

Mar 31st, 2022
64
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.76 KB | None | 0 0
  1. Environment
  2.  
  3. [PASS] PHP version 7.4.25.
  4. [PASS] PCRE compiled with unicode support.
  5. [PASS] The temporary directory and its content are writable and not executable.
  6. [PASS] The logs directory and its content are writable.
  7. [PASS] GD or Imagick extension is installed.
  8. [PASS] Intl extension is installed.
  9. [PASS] Mbstring extension is installed.
  10.  
  11. Config files
  12.  
  13. [PASS] The application config file is present
  14. [WARN] The passbolt config file is missing in /etc/passbolt/
  15. [HELP] Copy /etc/passbolt/passbolt.default.php to /etc/passbolt/passbolt.php
  16. [HELP] The passbolt config file is not required if passbolt is configured with environment variables
  17.  
  18. Core config
  19.  
  20. [PASS] Debug mode is off.
  21. [PASS] Cache is working.
  22. [PASS] Unique value set for security.salt
  23. [PASS] Full base url is set to https://passbolt.vestibule.duckdns.org
  24. [PASS] App.fullBaseUrl validation OK.
  25. [FAIL] Could not reach the /healthcheck/status with the url specified in App.fullBaseUrl
  26. [HELP] Check that the domain name is correct in config/passbolt.php
  27. [HELP] Check the network settings
  28.  
  29. SSL Certificate
  30.  
  31. [FAIL] SSL peer certificate does not validate
  32. [FAIL] Hostname does not match when validating certificates.
  33. [WARN] Using a self-signed certificate
  34. [HELP] Check https://help.passbolt.com/faq/hosting/troubleshoot-ssl
  35.  
  36. Database
  37.  
  38. [PASS] The application is able to connect to the database
  39. [PASS] 1 tables found
  40. [FAIL] No default content found
  41. [HELP] Run the install script to set the default content such as roles and permission types
  42. [HELP] sudo su -s /bin/bash -c "/usr/share/php/passbolt/bin/cake passbolt install" root
  43. [PASS] The database schema up to date.
  44.  
  45. GPG Configuration
  46.  
  47. [PASS] PHP GPG Module is installed and loaded.
  48. [PASS] The environment variable GNUPGHOME is set to /var/lib/passbolt/.gnupg.
  49. [PASS] The directory /var/lib/passbolt/.gnupg containing the keyring is writable by the webserver user.
  50. [FAIL] The server OpenPGP key is not set
  51. [HELP] Create a key, export it and add the fingerprint to config/passbolt.php
  52. [HELP] See. https://www.passbolt.com/help/tech/install#toc_gpg
  53. [PASS] The public key file is defined in config/passbolt.php and readable.
  54. [PASS] The private key file is defined in config/passbolt.php and readable.
  55. [FAIL] The server key fingerprint doesn't match the one defined in config/passbolt.php.
  56. [HELP] Double check the key fingerprint, example:
  57. [HELP] sudo su -s /bin/bash -c "gpg --list-keys --fingerprint --home /var/lib/passbolt/.gnupg" root | grep -i -B 2 'SERVER_KEY_EMAIL'
  58. [HELP] SERVER_KEY_EMAIL: The email you used when you generated the server key.
  59. [HELP] See. https://www.passbolt.com/help/tech/install#toc_gpg
  60. [FAIL] The server public key defined in the config/passbolt.php (or environment variables) is not in the keyring
  61. [HELP] Import the private server key in the keyring of the webserver user.
  62. [HELP] you can try:
  63. [HELP] sudo su -s /bin/bash -c "gpg --home /var/lib/passbolt/.gnupg --import /etc/passbolt/gpg/serverkey_private.asc" root
  64. [FAIL] The server key does not have a valid email id.
  65. [HELP] Edit or generate another key with a valid email id.
  66.  
  67. Application configuration
  68.  
  69. [PASS] Using latest passbolt version (3.5.0).
  70. [PASS] Passbolt is configured to force SSL use.
  71. [PASS] App.fullBaseUrl is set to HTTPS.
  72. [PASS] Selenium API endpoints are disabled.
  73. [PASS] Search engine robots are told not to index content.
  74. [PASS] Registration is closed, only administrators can add users.
  75. [PASS] Serving the compiled version of the javascript app
  76. [PASS] All email notifications will be sent.
  77.  
  78. JWT Authentication
  79.  
  80. [PASS] The JWT Authentication plugin is enabled
  81. [PASS] The /etc/passbolt/jwt/ directory is not writable.
  82. [PASS] A valid JWT key pair was found
  83.  
  84. [FAIL] 8 error(s) found. Hang in there!
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement