Installing SSL breaks httpd

Dear,

When I install my paid SSL on centos web panel, it is breaking my apache web server (httpd).
When I try to start it again, it gives me an error that says: FAILED.

Because httpd is down, all websites are down. If I delete the SSL, the HTTPD also starts again and all websites work like it has to do.

Anyone here that has an idea how this is possible?

Kind regards,
Jordy Klabbers

please check the error log

[Wed Dec 14 16:21:22 2016] [notice] SIGHUP received.  Attempting to restart
httpd: Could not reliably determine the server's fully qualified domain name, using server1.hostronics.nl for ServerName
[Wed Dec 14 16:21:22 2016] [error] Init: Unable to read server certificate from file /etc/pki/tls/certs/hostronics.nl.cert
[Wed Dec 14 16:21:22 2016] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Wed Dec 14 16:21:22 2016] [error] SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error
[Wed Dec 14 16:21:23 2016] [error] Init: Unable to read server certificate from file /etc/pki/tls/certs/hostronics.nl.cert
[Wed Dec 14 16:21:23 2016] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Wed Dec 14 16:21:23 2016] [error] SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error

After removing SSL
[Wed Dec 14 16:24:40 2016] [warn] Init: Session Cache is not configured [hint: SSLSessionCache]
[Wed Dec 14 16:24:40 2016] [notice] suEXEC mechanism enabled (wrapper: /usr/local/apache/bin/suexec)
[Wed Dec 14 16:24:41 2016] [notice] Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips configured -- resuming normal operations

please contact support for full investigations

After a week of trying, its fixed.

After a week of trying, its fixed.

How??
I have same problem

First you need to check your apache error_log to see the exact issue

Code: [Select]

tail -f /usr/local/apache/logs/error_log
then if you think that issue is with the hostname ssl you can use this command to generate new self signed  certificate.

Code: [Select]

sh /scripts/generate_hostname_ssl