Broken SSL vhost conf?

Discussion in 'Installation/Configuration' started by Rikski, Oct 25, 2016.

  1. Rikski

    Rikski New Member

    Hi,

    I have an SSL issue similar to others but NOT using "Let's encrypt" - I am using my own SSL certs.

    When switching on the SSL option (and completing the SSL tab with fully entered certificate details - as per normal) - website vhost file does not contain any :443 section - always use to work before ISPConfig 3.1.

    Have checked the debug and appears to be calling 'SSL' plugin as per below but no added :443 section in vhost??

    I'm running Apache on Centos 7.2 (Multiserver).

    Code:
    24.10.2016-19:20 - DEBUG - Found 1 changes, starting update process.
    24.10.2016-19:20 - DEBUG - Calling function 'ssl' from plugin 'apache2_plugin' raised by event 'web_domain_update'.
    24.10.2016-19:20 - DEBUG - Calling function 'update' from plugin 'apache2_plugin' raised by event 'web_domain_update'.
    24.10.2016-19:20 - DEBUG - Creating fastcgi starter script: /var/www/php-fcgi-scripts/web32/.php-fcgi-starter
    24.10.2016-19:20 - DEBUG - Writing the vhost file: /etc/httpd/conf/sites-available/[Website name removed on purpose].vhost
    24.10.2016-19:20 - DEBUG - Apache status is: running
    24.10.2016-19:20 - DEBUG - Calling function 'restartHttpd' from module 'web_module'.
    24.10.2016-19:20 - DEBUG - Restarting httpd: systemctl restart httpd.service
    Would be grateful if someone can enlighten me what would cause this to happen after updating to 3.1?

    By the way - excellent work on ISPconfig - it's just fab! ;) - (other than my SSL issue
    at moment (although that is officially TLS now - he he)).

    Thanks in advance

    Rikski
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    The SSL section is not added when the ssl cert and key would cause the apache restart to fail. Check that the ssl key and cert are not broken and that they belong together.
     
  3. Rikski

    Rikski New Member

    Thanks Till, Certificate is known working Cert (copied directly from working site) - as is a wildcard cert. Have recopied to ensure is correct.

    Unfortunately, still no :443 section added to vhost. Anyway way to get debug logs for the 'SSL Plugin' or any other ideas?
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

  5. Rikski

    Rikski New Member

    Thanks - Getting somewhere now - seems to be quota related?
    Code:
    25.10.2016-09:23 - DEBUG - Calling function 'check_phpini_changes' from plugin 'webserver_plugin' raised by action 'server_plugins_loaded'.
    25.10.2016-09:23 - DEBUG - Found 1 changes, starting update process.
    25.10.2016-09:23 - DEBUG - Calling function 'ssl' from plugin 'apache2_plugin' raised by event 'web_domain_update'.
    25.10.2016-09:23 - DEBUG - Calling function 'update' from plugin 'apache2_plugin' raised by event 'web_domain_update'.
    xfs_quota: invalid group name: web32
    xfs_quota: cannot set timer: Function not implemented
    xfs_quota: cannot set timer: Function not implemented
    25.10.2016-09:23 - DEBUG - Creating fastcgi starter script: /var/www/php-fcgi-scripts/web32/.php-fcgi-starter
    25.10.2016-09:23 - DEBUG - Writing the vhost file: /etc/httpd/conf/sites-available/[web site name would be here - removed by rikski].vhost
    25.10.2016-09:23 - DEBUG - Apache status is: running
    25.10.2016-09:23 - DEBUG - Calling function 'restartHttpd' from module 'web_module'.
    25.10.2016-09:23 - DEBUG - Restarting httpd: systemctl restart httpd.service
    25.10.2016-09:23 - DEBUG - Apache restart return value is: 0
    25.10.2016-09:24 - DEBUG - Apache online status after restart is: running
    25.10.2016-09:24 - DEBUG - Processed datalog_id 2162
    25.10.2016-09:24 - DEBUG - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock
    
    Any idea's?

    (going to check the 'How to' server setup for Centos 7.2 to see if something has changed on quota management - although this all use to work ok (Confused...)).

    Thanks

    UPDATE:-
    ------------
    The error shown in the above code section states :-
    Code:
    xfs_quota: invalid group name: web32
    xfs_quota: cannot set timer: Function not implemented
    xfs_quota: cannot set timer: Function not implemented
    Surely it would not find a group called 'web32' in xfs_quota as 'web32' is a user?

    Any idea's?
     
    Last edited: Oct 25, 2016
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    Update ispconfig to current git-stable. Seems as if you run a 3.1dev version which had a bug in GIT for a few days. But the quota issue is not related to ssl.
     
    Rikski likes this.
  7. Rikski

    Rikski New Member

    Ok, thanks for the help with updating to git-stable to resolve 'xfs-quota' issue.

    SSL working fine now - Please accept my apologies for wild goose chase - but I had not saved the certificate at bottom of SSL tab :rolleyes: (Feel like an idiot now).

    Anyway, all working as it should.

    Thanks again.

    (Please mark as closed - thanks)
     

Share This Page