I just updated the certificates on our OnDemand server and now Dex is producing an “internal server error” message. Usually when we get the “internal server error” page, I just restart the ondemand-dex service and the error goes away. However, no matter what I do, the “internal server error” page wi…

This issue has been resolved. As it turns out, we switched to a new certificate provider (Sectigo), and that provider is not trusted by Red Hat by default. Once we added their intermediate and root certificates to the CA trust and restarted the services, everything started working. Thanks @tdockendo…

Does this file /etc/pki/tls/certs/ca-bundle.crt exist? Maybe @tdockendorf knows more.

My only guess is the CA that signed your new certificate is not trusted by the system’s CA bundle. We run into this sometimes with LetsEncrypt when a new Intermediate or root CA is used. Also verify the ca-bundle exists at the path in the error per Jeff’s question.

The ca-bundle.crt file does exist. How would I update my systems ca-bundle.crt file?

I just checked the apache logs after reinstalling the ca-certificates package. The error has now changed. It is below: [auth_openidc:error] [pid 1323926:tid 1323962] [client ] oidc_util_http_call: curl_easy_perform() failed on: https://mydomain.edu/dex/.well-known/openid-configuration (SSL certific…

Looks like I didn’t reply properly. @jeff.ohrstrom and @tdockendorf , I have provided the information requested along with an update.

If updating the CA trust doesn’t fix then please provide /etc/ood/dex/config.yaml

@tdockendorf , I checked for updates for the ca-certificates package but none were available. Our /etc/ood/dex/config.yaml file is below: issuer: https://apps.talon.und.edu/dex storage: type: sqlite3 config: file: “/etc/ood/dex/dex.db” web: http: localhost:5556 telemetry: http: 0.0.0.0:5558 static…

Did you add the CA that signed the certificate to central trust store? sudo cp <CA cert> /etc/pki/ca-trust/source/anchors/ sudo update-ca-trust extract

Yes, that did not resolve the issue.

Internal Server Error After Updating SSL Certificates

Get Help

tdockendorf (Trey Dockendorf) June 4, 2026, 9:43pm 7

Unknown certificate authority when using openondemand-dex - #2 by tdockendorf may have some pointers on how to update the CA trust.

Topic		Replies	Views
Error internal 500 after change servername and adding certificates Get Help	5	398	June 9, 2023
Unknown certificate authority when using openondemand-dex Get Help	5	2575	August 26, 2020
Enabling ssl/https failing Get Help question	11	1058	August 4, 2021
Ondemand httpd ssl issue Get Help	5	681	October 23, 2023
Dex with LDAP giving internal server error Get Help	7	2044	March 21, 2022

Internal Server Error After Updating SSL Certificates

Related topics