Apache fails to start after ISPConfig 3.0.5.4p6 update

Discussion in 'ISPConfig 3 Priority Support' started by Igor Almeida, May 17, 2015.

  1. Igor Almeida

    Igor Almeida Member

    Apache fails to start after ISPConfig 3.0.5.4p6 update (Updated from ISPConfig 3.0.5.4p5):
    LOG:
    • [Sat May 16 17:45:51.454505 2015] [ssl:warn] [pid 5436] AH01906: RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
    • [Sat May 16 17:45:51.454602 2015] [ssl:emerg] [pid 5436] AH02238: Unable to configure RSA server private key
    • [Sat May 16 17:45:51.454628 2015] [ssl:emerg] [pid 5436] SSL Library Error: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
    • [Sat May 16 17:45:51.454654 2015] [ssl:emerg] [pid 5436] AH02312: Fatal error initialising mod_ssl, exiting.
    A little bit of information here. I have a wildcard ssl certificate installed on the server. It was working perfect. I could access ispconfig through https and the main website. When updated I made sure the recreate SSL was no. But I still have this issue. Please help, websites are down.

    Files inside /usr/local/ispconfig/interface/ssl:
    ADDTrustExternalCARoot.crt
    COMODORSAAddTrustCA.crt
    COMODORSADomainValidationSecureServerCA.crt
    empty.dir
    ispserver.crt
    ispserver.csr
    ispserver.key
    ispserver.key.secure
    [my domain]-bundle
    [my domain].crt
    [my domain].crt_bak
    [my domain].csr
    [my domain].ca-bundle
    [my domain].key
    [my domain].pem

    Any help?
     
    Last edited: Jun 2, 2015
  2. Igor Almeida

    Igor Almeida Member

    I got it working!
    Edited ispconfig.vhost
    sudo nano /etc/apache2/sites-available/ispconfig.vhost
    For some reason the update rewrote this file and changed the name of my certificate!
     
  3. till

    till Super Moderator Staff Member ISPConfig Developer

    This file is alwas updated when you update ispconfig. Instead of editing this file, copy your ssl cert into the ispconfig ssl folder and keep the name of the ispconfig cert. See here for instructions to install ssl certs in ispconfig and other services like postfix, dovecot and pure-ftpd:

    https://www.howtoforge.com/securing...h-a-free-class1-ssl-certificate-from-startssl
     
  4. Igor Almeida

    Igor Almeida Member

    Thank you!
     

Share This Page