Installing SSL breaks httpd

Started by ehid, December 13, 2016, 11:10:55 AM

Previous topic - Next topic

ehid

Dear,

When I install my paid SSL on centos web panel, it is breaking my apache web server (httpd).
When I try to start it again, it gives me an error that says: FAILED.

Because httpd is down, all websites are down. If I delete the SSL, the HTTPD also starts again and all websites work like it has to do.

Anyone here that has an idea how this is possible?

Kind regards,
Jordy Klabbers

Sandeep


ehid

#2
[Wed Dec 14 16:21:22 2016] [notice] SIGHUP received.  Attempting to restart
httpd: Could not reliably determine the server's fully qualified domain name, using server1.hostronics.nl for ServerName
[Wed Dec 14 16:21:22 2016] [error] Init: Unable to read server certificate from file /etc/pki/tls/certs/hostronics.nl.cert
[Wed Dec 14 16:21:22 2016] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Wed Dec 14 16:21:22 2016] [error] SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error
[Wed Dec 14 16:21:23 2016] [error] Init: Unable to read server certificate from file /etc/pki/tls/certs/hostronics.nl.cert
[Wed Dec 14 16:21:23 2016] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Wed Dec 14 16:21:23 2016] [error] SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error

After removing SSL
[Wed Dec 14 16:24:40 2016] [warn] Init: Session Cache is not configured [hint: SSLSessionCache]
[Wed Dec 14 16:24:40 2016] [notice] suEXEC mechanism enabled (wrapper: /usr/local/apache/bin/suexec)
[Wed Dec 14 16:24:41 2016] [notice] Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips configured -- resuming normal operations

Sandeep

please contact support for full investigations

ehid

After a week of trying, its fixed.

drseva


studio4host

First you need to check your apache error_log to see the exact issue
tail -f /usr/local/apache/logs/error_log

then if you think that issue is with the hostname ssl you can use this command to generate new self signed  certificate.

sh /scripts/generate_hostname_ssl
VPS & Dedicated server provider with included FREE Managed support for CWP.
http://www.studio4host.com/

*** Don't allow that your server or website is down, choose hosting provider with included expert managed support for your CWP.