Control Web Panel

WebPanel => SSL => Topic started by: emar on September 08, 2023, 04:21:24 AM

Title: Session Cache is not configured [hint: SSLSessionCache]
Post by: emar on September 08, 2023, 04:21:24 AM

Hi,

Any advice on fixing this issue appreciated.

[Fri Sep 08 04:06:59.386698 2023] [ssl:warn] [pid 14456:tid 140467374864256] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache]

I tried a fix from another topic by enabling:

LoadModule socache_memcache_module modules/mod_socache_memcache.so

In: / usr / local / apache / conf / httpd.conf

Title: Re: Session Cache is not configured [hint: SSLSessionCache]
Post by: overseer on September 08, 2023, 02:40:58 PM

Try this module:

Code: [Select]

LoadModule socache_shmcb_module modules/mod_socache_shmcb.soand in /usr/local/apache/conf/extra/httpd-ssl.conf add this line:

Code: [Select]

SSLSessionCache "shmcb:logs/ssl_scache(512000)"Restart Apache.

Title: Re: Session Cache is not configured [hint: SSLSessionCache]
Post by: emar on September 08, 2023, 09:57:03 PM

@overseer

The second module is already active

#   Inter-Process Session Cache:
#   Configure the SSL Session Cache: First the mechanism
#   to use and second the expiring timeout (in seconds).
#SSLSessionCache         "dbm:/usr/local/apache/logs/ssl_scache"
SSLSessionCache        "shmcb:/usr/local/apache/logs/ssl_scache(512000)"
SSLSessionCacheTimeout  300

Title: Re: Session Cache is not configured [hint: SSLSessionCache]
Post by: overseer on September 09, 2023, 05:01:28 PM

That is the default CWP configuration, so it's good to know you haven't manually changed anything to deviate. How about if you manually create the cache file:
touch / usr / local / apache / logs / ssl_scache
Then you may want to rotate or truncate the access_log and (especially) error_log so as to reduce the file size and noise, to keep it current:

Code: [Select]

truncate -s0 / usr / local / apache/ logs / access_log
truncate -s0 / usr / local/ apache / logs/ error_logRestart Apache and watch for your error again. (I was seeing about ~5 instances a day recently.) But do notice that it's just a warning, so not overly concerning.

Note: Of course, delete the spaces in the paths above -- the forum doesn't like some system paths being referenced in posts ;)

Title: Re: Session Cache is not configured [hint: SSLSessionCache]
Post by: emar on September 09, 2023, 11:56:15 PM

Ok done, error log is now cleared, I'll check it again in a while.

BTW I was in / etc / httpd / logs / ssl_error_log
But all I can find is: /etc / httpd_bak / logs, there's no / etc / httpd/

Is that another issue and should I create httpd directory and delete that httpd_bak ?

Title: Re: Session Cache is not configured [hint: SSLSessionCache]
Post by: emar on September 10, 2023, 06:39:03 AM

Other than these messages, the server Apache error log looks pretty clean.

Quote

ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/) configured.
[Sun Sep 10 03:44:42.896658 2023] [:notice] [pid 31661:tid 140076391253888] ModSecurity: APR compiled version="1.6.2"; loaded version="1.6.2"
[Sun Sep 10 03:44:42.896662 2023] [:notice] [pid 31661:tid 140076391253888] ModSecurity: PCRE compiled version="8.32 "; loaded version="8.32 2012-11-30"
[Sun Sep 10 03:44:42.896664 2023] [:notice] [pid 31661:tid 140076391253888] ModSecurity: LIBXML compiled version="2.9.1"
[Sun Sep 10 03:44:42.896698 2023] [:notice] [pid 31661:tid 140076391253888] ModSecurity: StatusEngine call: "2.9.1,Apache/2.4.57 (Unix) Open,1.6.2/1.6.2,8.32/8.32 2012-11-30,(null),2.9.1,cd60d3ee2663c00aca8833d725cbc1a860f"
[Sun Sep 10 03:44:51.005973 2023] [:notice] [pid 31661:tid 140076391253888] ModSecurity: StatusEngine call failed. Query: GIXDSLRRFRAXAYXDKNZA.FBKW42LYFEQE64DFNYWDCLRWFYZC6MJO.GYXDELBYFYZTELZYFYZTEIBSGAYTELJR.GEWTGMBMFBXHK3DMFRZFYYSYY3E.GYYGIM3FMUZDKNRTMM4TAYLD.ME4DQMZTMQ3TENLDM.1694313882.status.modsecurity.org
[Sun Sep 10 03:44:51.204162 2023] [ssl:warn] [pid 31743:tid 140076391253888] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache]