try logging into openemr on the home computer and while logged in run the docker exec command that will list the keys in that folder
robert@robert-ideacentre-AIO-520-22IKU:~$ docker exec -it $(docker ps | grep _openemr | cut -f 1 -d " ") ls -lrt sites/default/documents/logs_and_misc/methods
total 4
-rwx------ 1 apache 1000 63 Sep 30 2018 README.md
robert@robert-ideacentre-AIO-520-22IKU:~$
we can try debugging by using the nano text editor which is hopefully installed in your docker
- logout of openemr
- in terminal :
docker exec -it $(docker ps | grep _openemr | cut -f 1 -d " ") nano src/Common/Crypto/CryptoGen.php - hold the
<Ctrl>key and hit the / (forward slash) - type 466 and hit enter to go to that line #
- insert this debugging line above that line
error_log("about to decrypt drive key " . file_get_contents($GLOBALS['OE_SITE_DIR'] . "/documents/logs_and_misc/methods/" . $label));
-
<Ctrl>x to save, Y to save modified buffer, enter to use the file name - refresh openemr login page ( this will look for keys)
- back to terminal and look in error log with this command
docker exec -it $(docker ps | grep _openemr | cut -f 1 -d " ") tail /var/log/apache2/error.log
robert@robert-ideacentre-AIO-520-22IKU:~$ docker exec -it $(docker ps | grep _openemr | cut -f 1 -d " ") nano src/Common/Crypto/CryptoGen.php
OCI runtime exec failed: exec failed: container_linux.go:380: starting container process caused: exec: “nano”: executable file not found in $PATH: unknown
robert@robert-ideacentre-AIO-520-22IKU:~$
The default openemr container only has vi, not nano :(.
how about
docker exec -it $(docker ps | grep _openemr | cut -f 1 -d " ") apk add nanoDebugging line successfully inserted.
robert@robert-ideacentre-AIO-520-22IKU:~$ docker exec -it $(docker ps | grep _openemr | cut -f 1 -d " ") tail /var/log/apache2/error.log
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using 172.18.0.2. Set the 'ServerName' directive globally to suppress this message
[Thu Sep 01 16:15:10.773522 2022] [core:warn] [pid 12] AH00098: pid file /run/apache2/httpd.pid overwritten -- Unclean shutdown of previous Apache run?
[Thu Sep 01 16:15:10.856124 2022] [mpm_prefork:notice] [pid 12] AH00163: Apache/2.4.54 (Unix) OpenSSL/1.1.1q configured -- resuming normal operations
[Thu Sep 01 16:15:10.856179 2022] [core:notice] [pid 12] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using 172.18.0.2. Set the 'ServerName' directive globally to suppress this message
[Fri Sep 02 05:15:19.859319 2022] [mpm_prefork:notice] [pid 13] AH00163: Apache/2.4.54 (Unix) OpenSSL/1.1.1q configured -- resuming normal operations
[Fri Sep 02 05:15:19.859394 2022] [core:notice] [pid 13] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using 172.18.0.2. Set the 'ServerName' directive globally to suppress this message
[Fri Sep 02 14:40:01.794233 2022] [mpm_prefork:notice] [pid 12] AH00163: Apache/2.4.54 (Unix) OpenSSL/1.1.1q configured -- resuming normal operations
[Fri Sep 02 14:40:01.794268 2022] [core:notice] [pid 12] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
robert@robert-ideacentre-AIO-520-22IKU:~$
how about
error_log("testing crypto constructor " . $this->encryptionVersion . " " . $this->keyVersion);
in btw lines 57 and 58 in the CryptoGen.php file?
error_log("testing crypto constructor " . $this->encryptionVersion . " " . $this->keyVersion);
inserted in btw lines 57 and 58 in the CryptoGen.php file.
robert@robert-ideacentre-AIO-520-22IKU:~$ docker exec -it $(docker ps | grep _openemr | cut -f 1 -d " ") tail /var/log/apache2/error.log
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using 172.18.0.2. Set the 'ServerName' directive globally to suppress this message
[Fri Sep 02 05:15:19.859319 2022] [mpm_prefork:notice] [pid 13] AH00163: Apache/2.4.54 (Unix) OpenSSL/1.1.1q configured -- resuming normal operations
[Fri Sep 02 05:15:19.859394 2022] [core:notice] [pid 13] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using 172.18.0.2. Set the 'ServerName' directive globally to suppress this message
[Fri Sep 02 14:40:01.794233 2022] [mpm_prefork:notice] [pid 12] AH00163: Apache/2.4.54 (Unix) OpenSSL/1.1.1q configured -- resuming normal operations
[Fri Sep 02 14:40:01.794268 2022] [core:notice] [pid 12] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using 172.18.0.3. Set the 'ServerName' directive globally to suppress this message
[Fri Sep 02 18:47:57.104845 2022] [core:warn] [pid 12] AH00098: pid file /run/apache2/httpd.pid overwritten -- Unclean shutdown of previous Apache run?
[Fri Sep 02 18:47:57.135810 2022] [mpm_prefork:notice] [pid 12] AH00163: Apache/2.4.54 (Unix) OpenSSL/1.1.1q configured -- resuming normal operations
[Fri Sep 02 18:47:57.135948 2022] [core:notice] [pid 12] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
robert@robert-ideacentre-AIO-520-22IKU:~$
what about docker ps -a?
robert@robert-ideacentre-AIO-520-22IKU:~$ docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
852f705d50c8 openemr/openemr:7.0.0 "./openemr.sh" 13 days ago Up 8 minutes 0.0.0.0:80->80/tcp, :::80->80/tcp, 0.0.0.0:443->443/tcp, :::443->443/tcp openemr_openemr_1
ae8693b8a741 mariadb:10.4 "docker-entrypoint.s…" 10 months ago Up 8 minutes 3306/tcp openemr_mysql_1
robert@robert-ideacentre-AIO-520-22IKU:~$
Should I perhaps wipe it and set it all up again from scratch?
Or try the regular installation again?
So I still do not know:
(1) Why the restore procedure fails to restore the keys to their proper directory.
(2) How it is that I can log into and use openemr normally when the keys are missing.
(3) Whether this is a problem or not.
(4) Whether this is just a chance idiosyncrasy or whether it is a bug in openemr that needs fixing by developers.
Does anybody know?
And importantly to me, what should I do?
Again, thank you.
-
maybe the backup didn’t have keys to copy in
-
you can log in and the keys will be created if missing, trying to find where those keys are has been difficult remotely
-
the keys on the drive would only be a problem if you’re saving sensitive data in globals or need to view the log later on down the road
-
not seeing anything that needs fixing yet
a good strategy is to move to a single instance that can be accessed remotely
-
I checked this. sixa and sixb are present in the backup I restored from, in sites/default/documents/logs_and_misc/methods in openemr.tar.gz.
-
I notice that the keys are packaged with documents. Does this mean that before I brought in my documents, no keys were needed?
Yes, as previously explained, I would like to move to a single instance that can be accessed remotely. And I would like that to be on my home computer. I would just like some reassurance that I can go ahead and do that despite the “missing” keys issue.
the keys aren’t missing since you wouldn’t be able to log in at all
we just haven’t been able to properly execute the command to list them through this channel
So I can safely use this instance as my unique instance to access remotely?
Before starting over, I think I would run
docker exec -it $(docker ps | grep _openemr | cut -f 1 -d " ") find -name sixa
…if only to sate my curiosity.
Gets too involved for me. I’ll leave things as they are. Thanks.