Issue starting Apache2

Discussion in 'Installation/Configuration' started by Dave B, Jan 24, 2021.

Page 3 of 4
  1. Dave B

    Dave B Member

    Yeah, everything is up to date.
    I have run both apt-get update and apt-get upgrade and there was nothing to update
     
    Dave B, Jan 27, 2021
    #41
  2. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    When you ran the forced update and let it create a cert, what was the output?
     
    Th0m, Jan 27, 2021
    #42
  3. Dave B

    Dave B Member

    Hi, Th0m
    Looks like that might be the issue, The output is below.
    How would I resolve this?

    Code:
    Create new ISPConfig SSL certificate (yes,no) [no]: yes

Checking / creating certificate for server1.dutyhosts.net
Using certificate path /root/.acme.sh/server1.dutyhosts.net
Server's public ip(s) (185.144.158.127, 2a07:3b80:0:3d37:3f12:6885:96af:53f5) not found in A/AAAA records for server1.dutyhosts.net: 104.21.45.29, 172.67.208.54, ,
Ignore DNS check and continue to request certificate? (y,n) [n]: y

Using apache for certificate validation
[Wed 27 Jan 2021 06:57:16 PM UTC] server1.dutyhosts.net:Verify error:Invalid response from http://server1.dutyhosts.net/.well-known/acme-challenge/cQrfIycQLGgTVxl1zXTTJrBHKPPIb6nbjCYQcxhposA [2606:4700:3035::6815:2d1d]:
[Wed 27 Jan 2021 06:57:16 PM UTC] Please check log file for more details: /var/log/ispconfig/acme.log
Issuing certificate via acme.sh failed. Please check that your hostname can be verified by letsencrypt
Could not issue letsencrypt certificate, falling back to self-signed.
Generating RSA private key, 4096 bit long modulus (2 primes)
..........................................++++
.++++
e is 65537 (0x010001)
     
    Dave B, Jan 27, 2021
    #43
  4. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Alright, so the DNS records for server1.dutyhosts.net do not point to the correct IP. It will create a self signed cert that should work, but you are not accesing the correct server, so you are debugging the wrong system. Fix the DNS records.
     
    Th0m, Jan 27, 2021
    #44
  5. Dave B

    Dave B Member

    Unless I'm missing something the DNS record is correct

    upload_2021-1-27_19-23-56.png

    Although the DNS checker shows what i presume to be the Cloudflare IPs.

    upload_2021-1-27_19-26-0.png
     
    Dave B, Jan 27, 2021
    #45
  6. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Can you share the content of /var/log/ispconfig/acme.log?
     
    Th0m, Jan 27, 2021
    #46
  7. Dave B

    Dave B Member

    Sure this is attached.
    but even if the issue was with the hostname DNS wouldn't the server IP still give access? (https://185.144.158.127:8080/index.php)
     

    Attached Files:

    Dave B, Jan 27, 2021
    #47
  8. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Can you try removing the CF proxy?
     
    Th0m, Jan 27, 2021
    #48
  9. Dave B

    Dave B Member

    That's been done.

    upload_2021-1-27_19-59-6.png
     
    Dave B, Jan 27, 2021
    #49
  10. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    And then run the force update again to generate a cert?
     
    Th0m, Jan 27, 2021
    #50
  11. Dave B

    Dave B Member

    Still no luck, unfortunately.

    Code:
    Create new ISPConfig SSL certificate (yes,no) [no]: yes

Checking / creating certificate for server1.dutyhosts.net
Using certificate path /root/.acme.sh/server1.dutyhosts.net
Using apache for certificate validation
[Wed 27 Jan 2021 08:11:29 PM UTC] server1.dutyhosts.net:Verify error:Invalid response from http://server1.dutyhosts.net/.well-known/acme-challenge/SKQq0GWeTg7i4KqgBa31j_mKONX5lZKx_8id0tjjpmk [185.144.158.127]:
[Wed 27 Jan 2021 08:11:29 PM UTC] Please check log file for more details: /var/log/ispconfig/acme.log
Issuing certificate via acme.sh failed. Please check that your hostname can be verified by letsencrypt
Could not issue letsencrypt certificate, falling back to self-signed.
Generating RSA private key, 4096 bit long modulus (2 primes)
...........................................................................................................................................++++
.................................................................................++++
e is 65537 (0x010001)
     
    Dave B, Jan 27, 2021
    #51
  12. Dave B

    Dave B Member

    Evening all

    Any further ideas in what can be done to resolve this issue?
     
    Dave B, Jan 28, 2021
    #52
  13. Jesse Norell

    Jesse Norell Well-Known Member Staff Member Howtoforge Staff

    Jesse Norell, Jan 28, 2021
    #53
  14. Dave B

    Dave B Member

    Hi Jesse
    That doesn't seem to have worked, unfortunately.

    I have attached the acme log

    Code:
    Using certificate path /root/.acme.sh/server1.dutyhosts.net
Using apache for certificate validation
[Thu 28 Jan 2021 08:22:24 PM UTC] server1.dutyhosts.net:Verify error:Invalid response from http://server1.dutyhosts.net/.well-known/acme-challenge/IWmW4zG-tWTEofWqhRWh-zgkR0gt8Fbju3_Pl874UBE [185.144.158.127]:
[Thu 28 Jan 2021 08:22:24 PM UTC] Please check log file for more details: /var/log/ispconfig/acme.log
Issuing certificate via acme.sh failed. Please check that your hostname can be verified by letsencrypt
Could not issue letsencrypt certificate, falling back to self-signed.
     

    Attached Files:

    Dave B, Jan 28, 2021
    #54
  15. Jesse Norell

    Jesse Norell Well-Known Member Staff Member Howtoforge Staff

    Jesse Norell, Jan 28, 2021
    #55
  16. Dave B

    Dave B Member

    I've done that and if you click the link you can see the text

    Untitled.png
     
    Dave B, Jan 28, 2021
    #56
  17. Jesse Norell

    Jesse Norell Well-Known Member Staff Member Howtoforge Staff

    What do you have in your apache access and error logs for that verification request (Thu 28 Jan 2021 08:22:24 PM UTC)?
     
    Jesse Norell, Jan 28, 2021
    #57
  18. Dave B

    Dave B Member

    The Access log shows.
    Code:
    ::1 - - [28/Jan/2021:08:19:02 +0000] "GET / HTTP/1.1" 200 10959 "-" "Mozilla/5.0 (ISPConfig monitor)"
::1 - - [28/Jan/2021:08:20:01 +0000] "GET / HTTP/1.1" 200 10959 "-" "Mozilla/5.0 (ISPConfig monitor)"
::1 - - [28/Jan/2021:08:20:02 +0000] "GET / HTTP/1.1" 200 10959 "-" "Mozilla/5.0 (ISPConfig monitor)"
::1 - - [28/Jan/2021:08:21:01 +0000] "GET / HTTP/1.1" 200 10959 "-" "Mozilla/5.0 (ISPConfig monitor)"
::1 - - [28/Jan/2021:08:22:01 +0000] "GET / HTTP/1.1" 200 10959 "-" "Mozilla/5.0 (ISPConfig monitor)"
::1 - - [28/Jan/2021:08:23:01 +0000] "GET / HTTP/1.1" 200 10959 "-" "Mozilla/5.0 (ISPConfig monitor)"
::1 - - [28/Jan/2021:08:24:02 +0000] "GET / HTTP/1.1" 200 10959 "-" "Mozilla/5.0 (ISPConfig monitor)"
::1 - - [28/Jan/2021:08:25:01 +0000] "GET / HTTP/1.1" 200 10959 "-" "Mozilla/5.0 (ISPConfig monitor)"
::1 - - [28/Jan/2021:08:25:02 +0000] "GET / HTTP/1.1" 200 10959 "-" "Mozilla/5.0 (ISPConfig monitor)"
    And the error log shows
    Code:
    [Thu Jan 28 00:00:05.816018 2021] [mpm_prefork:warn] [pid 38908] AH00167: long lost child came home! (pid 38920)
[Thu Jan 28 08:32:37.575802 2021] [php7:error] [pid 42930] [client 111.179.52.234:60594] script '/var/www/html/index.php' not found or unable to stat
     
    Dave B, Jan 28, 2021
    #58
  19. Jesse Norell

    Jesse Norell Well-Known Member Staff Member Howtoforge Staff

    In your access log you'll find a request for '/.well-known/acme-challenge/IWmW4zG-tWTEofWqhRWh-zgkR0gt8Fbju3_Pl874UBE' from lets encrypt's verification server, unless maybe they have old dns info cached (cloudflare's ip?) and that's what's causing your problem.
     
    Jesse Norell, Jan 29, 2021
    #59
  20. Dave B

    Dave B Member

    Sorry i misread and noticed you put PM on the end ha
    How would this be resolved?

    Code:
    3.128.26.105 - - [28/Jan/2021:20:22:22 +0000] "GET /.well-known/acme-challenge/IWmW4zG-tWTEofWqhRWh-zgkR0gt8Fbju3_Pl874UBE HTTP/1.1" 403 363 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)"
34.211.6.84 - - [28/Jan/2021:20:22:22 +0000] "GET /.well-known/acme-challenge/IWmW4zG-tWTEofWqhRWh-zgkR0gt8Fbju3_Pl874UBE HTTP/1.1" 403 363 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)"
52.28.236.88 - - [28/Jan/2021:20:22:22 +0000] "GET /.well-known/acme-challenge/IWmW4zG-tWTEofWqhRWh-zgkR0gt8Fbju3_Pl874UBE HTTP/1.1" 403 363 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)"
66.133.109.36 - - [28/Jan/2021:20:22:22 +0000] "GET /.well-known/acme-challenge/IWmW4zG-tWTEofWqhRWh-zgkR0gt8Fbju3_Pl874UBE HTTP/1.1" 403 363 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)"
     
    Dave B, Jan 29, 2021
    #60
Page 3 of 4

Share This Page