is ssl.conf needed with certbot/lets encrypt set up

Discussion in 'Installation/Configuration' started by isn, May 14, 2019.

  1. isn

    isn Member

    I have centos 7 started with ispconfig perfect server 7.2 Centos and ispconfig 3

    I am up to date with 3.1.13 ispconfig.
    Along the way I shoehorned letsencrypt into the mix getting it from github.
    On a recent update httpd apache failed to start with this error message:


    May 14 07:06:37 instance-7 systemd[1]: Starting The Apache HTTP Server...May 14 07:06:37 instance-7 httpd[19206]: AH00548: NameVirtualHost has no effect and will be removed in the next release /etc/httpd/conf/httpd.conf:356May 14 07:06:37 instance-7 systemd[1]: httpd.service: main process exited, code=exited, status=1/FAILUREMay 14 07:06:37 instance-7 kill[19208]: kill: cannot find process ""May 14 07:06:37 instance-7 systemd[1]: httpd.service: control process exited, code=exited status=1May 14 07:06:37 instance-7 systemd[1]: Failed to start The Apache HTTP Server.May 14 07:06:37 instance-7 systemd[1]: Unit httpd.service entered failed state.May 14 07:06:37 instance-7 systemd[1]: httpd.service failed.[root@instance-7 ~]#



    The quick fix was to mv ssl.conf to /root/ and apache started fine.

    But I am worried about security and stability. I am rolling out new servers with php 7.3 and galera cluster database replication

    --------------------------

    Questions:
    1) Do I need ssl.conf. If yes suggest please a compatible configuration
    2) I want to have ispconfig/httpd running on a two node load balanced two server configuration using galera cluster data replication. Please suggest a general approach that preserves httpd log integrity and allows me to see consolidated awstats data
     
  2. isn

    isn Member

    uploading ssl.conf
     

    Attached Files:

Share This Page