Hi can somebody help httpd down

Discussion in 'ISPConfig 3 Priority Support' started by JIMCBYRNE, Nov 7, 2016.

  1. JIMCBYRNE

    JIMCBYRNE New Member

    hi can anybody help I had ispconfig working perfect until I tried to install a class 1 cert from startssl.com now I have an error httpd down can anybody guide to to where I made mistake thank you

    Please can anybody guide me I had everything working perfect httpd down
    root@serv1:/home/james# /usr/local/ispconfig/server/server.sh
    ipcrm: not enough arguments
    Usage:
    ipcrm [options]
    ipcrm shm|msg|sem <id>...
    Options:
    -m, --shmem-id <id> remove shared memory segment by id
    -M, --shmem-key <key> remove shared memory segment by key
    -q, --queue-id <id> remove message queue by id
    -Q, --queue-key <key> remove message queue by key
    -s, --semaphore-id <id> remove semaphore by id
    -S, --semaphore-key <key> remove semaphore by key
    -a, --all[=shm|msg|sem] remove all (in the specified category)
    -v, --verbose explain what is being done
    -h, --help display this help and exit
    -V, --version output version information and exit
    For more details see ipcrm(1).
    07.11.2016-00:05 - ERROR - httpd is down! Rescue will not help!

    finished.
    root@serv1:/home/james# root@serv1:/home/james#
    bash: root@serv1:/home/james#: No such file or directory
    root@serv1:/home/james# ifconfig -a
    eth0 Link encap:Ethernet HWaddr 00:19:d1:8a:58:82
    inet addr:192.168.1.8 Bcast:192.168.1.255 Mask:255.255.255.0
    inet6 addr: fe80::219:d1ff:fe8a:5882/64 Scope:Link
    inet6 addr: fd00:f0f2:49c8:b42:219:d1ff:fe8a:5882/64 Scope:Global
    UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
    RX packets:8074 errors:0 dropped:1 overruns:0 frame:0
    TX packets:5421 errors:0 dropped:0 overruns:0 carrier:0
    collisions:0 txqueuelen:1000
    RX bytes:834323 (814.7 KiB) TX bytes:618017 (603.5 KiB)
    Interrupt:20 Memory:d0300000-d0320000
    lo Link encap:Local Loopback
    inet addr:127.0.0.1 Mask:255.0.0.0
    inet6 addr: ::1/128 Scope:Host
    UP LOOPBACK RUNNING MTU:65536 Metric:1
    RX packets:4740 errors:0 dropped:0 overruns:0 frame:0
    TX packets:4740 errors:0 dropped:0 overruns:0 carrier:0
    collisions:0 txqueuelen:0
    RX bytes:684893 (668.8 KiB) TX bytes:684893 (668.8 KiB)
    root@serv1:/home/james#
    I deleted all certs in ispconf/ssl
    and ran the update for ispconfig
    I created a new cert
    any help please my server is only for my own use and learning Linux please help:(
    Any help with httpd down cant connect 127.0.0.1 connection refused please I'm only learning Linux need help;)
    root@serv1:/home/james# netstat -tap
    Active Internet connections (servers and established)
    Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
    tcp 0 0 *:imaps *:* LISTEN 1/init
    tcp 0 0 *:pop3s *:* LISTEN 610/dovecot
    tcp 0 0 localhost.localdo:10024 *:* LISTEN 3236/amavisd-new (m
    tcp 0 0 localhost.localdo:10025 *:* LISTEN 3229/master
    tcp 0 0 localhost.localdo:10026 *:* LISTEN 3236/amavisd-new (m
    tcp 0 0 localhost.localdo:mysql *:* LISTEN 1381/mysqld
    tcp 0 0 localhost.localdo:10027 *:* LISTEN 3229/master
    tcp 0 0 *:submission *:* LISTEN 3229/master
    tcp 0 0 localhost.localdo:11211 *:* LISTEN 572/memcached
    tcp 0 0 localhost.localdom:6379 *:* LISTEN 678/redis-server 12
    tcp 0 0 *:pop3 *:* LISTEN 610/dovecot
    tcp 0 0 *:imap2 *:* LISTEN 1/init
    tcp 0 0 *:sunrpc *:* LISTEN 458/rpcbind
    tcp 0 0 *:urd *:* LISTEN 3229/master
    tcp 0 0 *:49140 *:* LISTEN 479/rpc.statd
    tcp 0 0 serv1.creativewe:domain *:* LISTEN 576/named
    tcp 0 0 localhost.locald:domain *:* LISTEN 576/named
    tcp 0 0 *:ssh *:* LISTEN 569/sshd
    tcp 0 0 localhost.localdoma:ipp *:* LISTEN 1470/cupsd
    tcp 0 0 *:smtp *:* LISTEN 3229/master
    tcp 0 0 localhost.localdoma:953 *:* LISTEN 576/named
    tcp 0 0 localhost.localdo:58882 localhost.localdo:mysql ESTABLISHED 5108/proxymap
    tcp 0 0 localhost.localdo:mysql localhost.localdo:58883 ESTABLISHED 1381/mysqld
    tcp 0 0 localhost.localdo:mysql localhost.localdo:58319 ESTABLISHED 1381/mysqld
    tcp 0 0 localhost.localdo:mysql localhost.localdo:58885 ESTABLISHED 1381/mysqld
    tcp 0 0 localhost.localdo:mysql localhost.localdo:58882 ESTABLISHED 1381/mysqld
    tcp 0 0 localhost.localdo:58887 localhost.localdo:mysql ESTABLISHED 5108/proxymap
    tcp 0 0 localhost.localdo:58884 localhost.localdo:mysql ESTABLISHED 5108/proxymap
    tcp 0 4336 serv1.creativewebir:ssh 192.168.1.23:51456 ESTABLISHED 29946/sshd: james [
    tcp 0 0 localhost.localdo:mysql localhost.localdo:58302 ESTABLISHED 1381/mysqld
    tcp 0 0 serv1.creativewebi:smtp 192.168.1.23:52463 TIME_WAIT -
    tcp 0 0 localhost.localdo:58885 localhost.localdo:mysql ESTABLISHED 5108/proxymap
    tcp 0 0 localhost.localdo:mysql localhost.localdo:58887 ESTABLISHED 1381/mysqld
    tcp 0 0 localhost.localdo:58302 localhost.localdo:mysql ESTABLISHED 3276/amavisd-new (c
    tcp 0 0 localhost.localdo:58883 localhost.localdo:mysql ESTABLISHED 5108/proxymap
    tcp 0 0 localhost.localdo:mysql localhost.localdo:58884 ESTABLISHED 1381/mysqld
    tcp 0 0 localhost.localdo:10025 localhost.localdo:50366 TIME_WAIT -
    tcp 0 0 serv1.creati:submission 192.168.1.23:52465 TIME_WAIT -
    tcp 0 0 localhost.localdo:58886 localhost.localdo:mysql ESTABLISHED 5116/trivial-rewrit
    tcp 0 0 localhost.localdo:58319 localhost.localdo:mysql ESTABLISHED 3277/amavisd-new (c
    tcp 0 0 localhost.localdo:mysql localhost.localdo:58886 ESTABLISHED 1381/mysqld
    tcp6 0 0 [::]:imaps [::]:* LISTEN 1/init
    tcp6 0 0 [::]:pop3s [::]:* LISTEN 610/dovecot
    tcp6 0 0 localhost:10024 [::]:* LISTEN 3236/amavisd-new (m
    tcp6 0 0 localhost:10026 [::]:* LISTEN 3236/amavisd-new (m
    tcp6 0 0 [::]:submission [::]:* LISTEN 3229/master
    tcp6 0 0 [::]:pop3 [::]:* LISTEN 610/dovecot
    tcp6 0 0 [::]:imap2 [::]:* LISTEN 1/init
    tcp6 0 0 [::]:sunrpc [::]:* LISTEN 458/rpcbind
    tcp6 0 0 [::]:urd [::]:* LISTEN 3229/master
    tcp6 0 0 [::]:38676 [::]:* LISTEN 479/rpc.statd
    tcp6 0 0 [::]:domain [::]:* LISTEN 576/named
    tcp6 0 0 [::]:ssh [::]:* LISTEN 569/sshd
    tcp6 0 0 localhost:ipp [::]:* LISTEN 1470/cupsd
    tcp6 0 0 [::]:smtp [::]:* LISTEN 3229/master
    tcp6 0 0 localhost:953 [::]:* LISTEN 576/named
    tcp6 1 0 localhost:40242 localhost:ipp CLOSE_WAIT 1471/cups-browsed
    root@serv1:/home/james#
     
  2. sjau

    sjau Local Meanie Moderator

    What distro / what httpd server?
    Checked server logs? Are there errors?
    Code:
    systemctl restart apache2
    
    Code:
    systemctl restart nginx
    
     
  3. till

    till Super Moderator Staff Member ISPConfig Developer

    Most likely the ssl cert and key don't match (or the cert files are corrupted / incomplete), as httpd will not start in this case when it can't open the ssl cert with the provided key.

    Where did you add the ssl cert? In a website or is it a cert for the ispconfig interface that you added manually?
     
  4. JIMCBYRNE

    JIMCBYRNE New Member

    Hi and thank you for you reply
    I added the certs to the ispconfig folders at /usr/local/ispconfig/interface/ssl
    but I deleted all the certs that were there and re ran the ispconfig installer and got a new cert so all the certs are the default certs the the ispconfig intaller made when I ran the installation
    here
    root@serv1:/usr/local/ispconfig/interface/ssl# dir
    empty.dir ispserver.crt ispserver.csr ispserver.key ispserver.key.secure
    root@serv1:/usr/local/ispconfig/interface/ssl#
    thank you
     
  5. JIMCBYRNE

    JIMCBYRNE New Member

    /debian_version
    8.6
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    Ok, and does apache start again after you recreated the ssl certs?
     
  7. JIMCBYRNE

    JIMCBYRNE New Member

    yes
     
  8. JIMCBYRNE

    JIMCBYRNE New Member

    mail seems to be working
    but when I try access https://127.0.0.1:8080 or server address 192.168.1.8:8080 or localhost:8080 I get a connection refused
     
  9. till

    till Super Moderator Staff Member ISPConfig Developer

  10. JIMCBYRNE

    JIMCBYRNE New Member

    ##### SERVER #####
    IP-address (as per hostname): ***.***.***.***
    IP-address(es) (as per ifconfig): ***.***.***.***
    [INFO] ISPConfig is installed.
    ##### ISPCONFIG #####
    ISPConfig version is 3.1.1p1

    ##### VERSION CHECK #####
    [INFO] php (cli) version is 5.6.27-0+deb8u1
    [INFO] php-cgi (used for cgi php in default vhost!) is version 5.6.27-0+deb8u1
    ##### PORT CHECK #####
    [WARN] Port 8080 (ISPConfig) seems NOT to be listening
    [WARN] Port 8081 (ISPConfig Apps) seems NOT to be listening
    [WARN] Port 80 (Webserver) seems NOT to be listening
    [WARN] Port 443 (Webserver SSL) seems NOT to be listening
    [WARN] Port 21 (FTP server) seems NOT to be listening
    ##### MAIL SERVER CHECK #####

    ##### RUNNING SERVER PROCESSES #####
    [WARN] I could not determine which web server is running.
    [INFO] I found the following mail server(s):
    Postfix (PID 1953)
    [INFO] I found the following pop3 server(s):
    Dovecot (PID 602)
    [INFO] I found the following imap server(s):
    Unknown process (init) (PID 1)
    [WARN] I could not determine which ftp server is running.
    ##### LISTENING PORTS #####
    (only ()
    Local (Address)
    [anywhere]:993 (1/init)
    [anywhere]:995 (602/dovecot)
    [localhost]:10024 (1952/amavisd-new)
    [localhost]:10025 (1953/master)
    [localhost]:10026 (1952/amavisd-new)
    [anywhere]:3306 (1322/mysqld)
    [localhost]:10027 (1953/master)
    [anywhere]:587 (1953/master)
    [localhost]:11211 (555/memcached)
    [localhost]:6379 (641/redis-server)
    [anywhere]:110 (602/dovecot)
    [anywhere]:143 (1/init)
    [anywhere]:111 (441/rpcbind)
    [anywhere]:465 (1953/master)
    [anywhere]:35890 (463/rpc.statd)
    ***.***.***.***:53 (562/named)
    [localhost]:53 (562/named)
    [anywhere]:22 (552/sshd)
    [localhost]:631 (1328/cupsd)
    [anywhere]:25 (1953/master)
    [localhost]:953 (562/named)
    *:*:*:*::*:993 (1/init)
    *:*:*:*::*:43074 (463/rpc.statd)
    *:*:*:*::*:995 (602/dovecot)
    *:*:*:*::*:10024 (1952/amavisd-new)
    *:*:*:*::*:10026 (1952/amavisd-new)
    *:*:*:*::*:587 (1953/master)
    [localhost]10 (602/dovecot)
    [localhost]43 (1/init)
    [localhost]11 (441/rpcbind)
    *:*:*:*::*:465 (1953/master)
    *:*:*:*::*:53 (562/named)
    *:*:*:*::*:22 (552/sshd)
    *:*:*:*::*:631 (1328/cupsd)
    *:*:*:*::*:25 (1953/master)
    *:*:*:*::*:953 (562/named)


    ##### IPTABLES #####
    Chain INPUT (policy DROP)
    target prot opt source destination
    fail2ban-postfix-sasl tcp -- [anywhere]/0 [anywhere]/0 multiport dports 25
    fail2ban-dovecot-pop3imap tcp -- [anywhere]/0 [anywhere]/0 multiport dports 110,995,143,993
    fail2ban-pureftpd tcp -- [anywhere]/0 [anywhere]/0 multiport dports 21
    fail2ban-ssh tcp -- [anywhere]/0 [anywhere]/0 multiport dports 22
    DROP tcp -- [anywhere]/0 ***.***.***.***/8
    ACCEPT all -- [anywhere]/0 [anywhere]/0 state RELATED,ESTABLISHED
    ACCEPT all -- [anywhere]/0 [anywhere]/0
    DROP all -- ***.***.***.***/4 [anywhere]/0
    PUB_IN all -- [anywhere]/0 [anywhere]/0
    PUB_IN all -- [anywhere]/0 [anywhere]/0
    PUB_IN all -- [anywhere]/0 [anywhere]/0
    PUB_IN all -- [anywhere]/0 [anywhere]/0
    PUB_IN all -- [anywhere]/0 [anywhere]/0
    PUB_IN all -- [anywhere]/0 [anywhere]/0
    DROP all -- [anywhere]/0 [anywhere]/0
    Chain FORWARD (policy DROP)
    target prot opt source destination
    ACCEPT all -- [anywhere]/0 [anywhere]/0 state RELATED,ESTABLISHED
    DROP all -- [anywhere]/0 [anywhere]/0
    Chain OUTPUT (policy ACCEPT)
    target prot opt source destination
    PUB_OUT all -- [anywhere]/0 [anywhere]/0
    PUB_OUT all -- [anywhere]/0 [anywhere]/0
    PUB_OUT all -- [anywhere]/0 [anywhere]/0
    PUB_OUT all -- [anywhere]/0 [anywhere]/0
    PUB_OUT all -- [anywhere]/0 [anywhere]/0
    PUB_OUT all -- [anywhere]/0 [anywhere]/0
    Chain INT_IN (0 references)
    target prot opt source destination
    ACCEPT icmp -- [anywhere]/0 [anywhere]/0
    DROP all -- [anywhere]/0 [anywhere]/0
    Chain INT_OUT (0 references)
    target prot opt source destination
    ACCEPT icmp -- [anywhere]/0 [anywhere]/0
    ACCEPT all -- [anywhere]/0 [anywhere]/0
    Chain PAROLE (17 references)
    target prot opt source destination
    ACCEPT all -- [anywhere]/0 [anywhere]/0
    Chain PUB_IN (6 references)
    target prot opt source destination
    ACCEPT icmp -- [anywhere]/0 [anywhere]/0 icmptype 3
    ACCEPT icmp -- [anywhere]/0 [anywhere]/0 icmptype 0
    ACCEPT icmp -- [anywhere]/0 [anywhere]/0 icmptype 11
    ACCEPT icmp -- [anywhere]/0 [anywhere]/0 icmptype 8
    PAROLE tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:20
    PAROLE tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:21
    PAROLE tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:22
    PAROLE tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:25
    PAROLE tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:53
    PAROLE tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:80
    PAROLE tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:110
    PAROLE tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:143
    PAROLE tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:443
    PAROLE tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:446
    PAROLE tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:587
    PAROLE tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:993
    PAROLE tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:995
    PAROLE tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:3306
    PAROLE tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:8080
    PAROLE tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:8081
    PAROLE tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:10000
    ACCEPT udp -- [anywhere]/0 [anywhere]/0 udp dpt:53
    ACCEPT udp -- [anywhere]/0 [anywhere]/0 udp dpt:3306
    DROP icmp -- [anywhere]/0 [anywhere]/0
    DROP all -- [anywhere]/0 [anywhere]/0
    Chain PUB_OUT (6 references)
    target prot opt source destination
    ACCEPT all -- [anywhere]/0 [anywhere]/0
    Chain fail2ban-dovecot-pop3imap (1 references)
    target prot opt source destination
    RETURN all -- [anywhere]/0 [anywhere]/0
    Chain fail2ban-postfix-sasl (1 references)
    target prot opt source destination
    RETURN all -- [anywhere]/0 [anywhere]/0
    Chain fail2ban-pureftpd (1 references)
    target prot opt source destination
    RETURN all -- [anywhere]/0 [anywhere]/0
    Chain fail2ban-ssh (1 references)
    target prot opt source destination
    REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable
    RETURN all -- [anywhere]/0 [anywhere]/0
     
  11. till

    till Super Moderator Staff Member ISPConfig Developer

    Ok, seems as if apache is not started. Please restart it with:

    service apache2 restart

    and then try to login to ispconfig again. Check the apache error.log if it does not start.
     
  12. JIMCBYRNE

    JIMCBYRNE New Member

    yes I tried that and I still cant login connection refused 127.0.0.1:8080 and 192.168.1.8:8080 or localhost:8080
     
  13. JIMCBYRNE

    JIMCBYRNE New Member

    apache restarts with no problems with service apache2 restart
     
  14. JIMCBYRNE

    JIMCBYRNE New Member

    Hi Til
    I got it working it was ports.conf and 000-default.conf wrong entries
    can you recommend a good tutitorial for the correct installation of ssl cert from startssl or lets encrypt
    this is the second time I have tried to install cert and got httpd down I'm missing something.
    Thank you for all you help :)
     
  15. till

    till Super Moderator Staff Member ISPConfig Developer

    JIMCBYRNE likes this.

Share This Page