portal_dispatcher won't start: SSL: error:0A00018E:SSL routines::ca md too weak

Products

• CA API Developer Portal

Issue/Introduction

After install API Developer Portal Installer Offline 5.2.1.tar.gz

However, portal_dispatcher is not starting. In journalctl, I see the following:

Jul 11 14:54:23 apim-ssg.xxxx.xxxx dockerd[32484]: time="2023-07-11T14:54:23.265695382-04:00" level=error msg="Not continuing with pull after error: errors:\ndenied: requested access to the resource is denied\nunauthorized: authentication required\n"
Jul 11 14:54:23 apim-ssg.xxxx.xxxx dockerd[32484]: time="2023-07-11T14:54:23.265732990-04:00" level=info msg="Ignoring extra error returned from registry" error="unauthorized: authentication required"
Jul 11 14:54:23 apim-ssg.xxxx.xxxx dockerd[32484]: time="2023-07-11T14:54:23.269185348-04:00" level=error msg="pulling image failed" error="pull access denied for caapim/dispatcher, repository does not exist or may require 'docker login': denied: requested access to the resource is denied" module=node/agent/taskmanager node.id=dek5ioqnbrkwvd3ilofxgzq2o service.id=vch5way8byvt7ibsktth0x04z task.id=x1ct1pku8phw7tcwpha5swh2k

Environment

Release : 5.2.1

Cause

SSL Certificate CA is too weak.

Resolution

Saw error in the log: 

[email protected]    | 2023/07/11 20:24:22 [emerg] 1#1: SSL_CTX_use_certificate("/etc/nginx/dispatcher.crt") failed (SSL: error:0A00018E:SSL routines::ca md too weak)

Install a new certificate or replace the certificate CA chain by stronger signed algorithm.  Restart the portal.