Matlab web app server error updating SSL Cert and Key files

My SSL/TLS cert expires every 60days and requires me to update the .pem files on my web app server hosted on AWS. I stop the server to change the files but get the following logs path error when restarting. MATLAB Web App Server service failed to start. No logs were written. Check that "logs_path" is writable by the service users. The only work around I’ve found is uninstall and reinstalling, which can be tedious with license sometimes. Any help replacing SSL .pem files would be great. I wonder if it’s if the old cert and key are stuck cached somewhere? The .pem files work on reinstall. Does the server license file expire after a certain time?

Answer 1

[Isha]

Hello,

MathWorks imposes strict requirements: Enable SSL on MATLAB Web App Server - MATLAB & Simulink

• The certificate must be PEM format.
• Intermediate certificates are not supported.
• The private key must:
• be unencrypted (no password)
• be 2048–4096 bits
• be readable only by the server user
• The paths set in webapps-config must point to the correct files.

If any of these is wrong, the server silently fails.

MathWorks specifies that you must update the certificate via the webapps-config command-line tool, not by manually replacing files.

webapps-config - Configure MATLAB Web App Server from the command line on Windows, Linux, and macOS systems - MATLAB

Hope this helps.

[Nolan]

Thank you for the info Isha.

I have the correct .pem files as the SSL works initially when the server is installed. When the SSL cert expires I am then required to update the .pem files with the new cert. This is where it falls apart. If I uninstall and reinstall the server they work, If I update them in a current server they do not.

My process:

• the cert .pem files expire or the new one is availeble (there is an overlap period).
• I stop the server.
• I use webapps-config to change the file paths (I've tried new folders, new names, overwriting the old ones)
• I restart the sever
• I get the logging path has changed error.
• disabling SSL does allow the server to start.