Munin / apache supervision and no http site open

Discussion in 'Installation/Configuration' started by francoisPE, Nov 15, 2023.

  1. francoisPE

    francoisPE Active Member HowtoForge Supporter

    Hello,

    I "close" default site with
    Code:
    a2dissite 000-default
    
    in order to have access only via https (443)
    It opens an issue I discover now... with munin
    Code:
    munin-node-configure --suggest|grep apache
    apache_accesses            | yes  | no [Port 80: Can't connect to 127.0.0.1:80 (SSL connect attempt failed error:1408F10B:SSL routines:ssl3_get_record:wrong version number)]
    apache_processes           | yes  | no [Port 80: Can't connect to 127.0.0.1:80 (SSL connect attempt failed error:1408F10B:SSL routines:ssl3_get_record:wrong version number)]
    apache_volume              | yes  | no [Port 80: Can't connect to 127.0.0.1:80 (SSL connect attempt failed error:1408F10B:SSL routines:ssl3_get_record:wrong version number)]
    
    Is there a simple way to solve that ? I would avoid rewrite munin perl code
    Thanks a lot
    François
     
  2. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Closing port 80 on a webserver is weird already, why wouldn't you just redirect HTTP to HTTPS? Closing port 80 will surely lead to problems...

    And if you really want it closed, close it in the firewall instead.
     
    ahrasis likes this.
  3. francoisPE

    francoisPE Active Member HowtoForge Supporter

    Sorry my question was badly worded...
    I run
    Code:
    a2dissite 000-default
    
    I create a website with my server name ns1.dom.fr and force https to this one.
    So that only https://ns1.dom.fr is responding.

    But now my issue is that munin can't connect to apache
    Code:
    munin-node-configure --suggest|grep apache
    apache_accesses            | yes  | no [Port 80: Can't connect to 127.0.0.1:80 (SSL connect attempt failed error:1408F10B:SSL routines:ssl3_get_record:wrong version number)]
    apache_processes           | yes  | no [Port 80: Can't connect to 127.0.0.1:80 (SSL connect attempt failed error:1408F10B:SSL routines:ssl3_get_record:wrong version number)]
    apache_volume              | yes  | no [Port 80: Can't connect to 127.0.0.1:80 (SSL connect attempt failed error:1408F10B:SSL routines:ssl3_get_record:wrong version number)]
    
    Munin command is
    Code:
      [apache_*]
         env.url   http://127.0.0.1:%d/server-status?auto
         env.ports 80
    
    When I run
    Code:
    curl http://127.0.0.1:80
    it says
    <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
    <html><head>
    <title>301 Moved Permanently</title>
    </head><body>
    <h1>Moved Permanently</h1>
    <p>The document has moved <a href="https://127.0.0.1/">here</a>.</p>
    </body></html>
    
    One way is to modify munin code... I would like to avoid !
    So that is there another solution to open 127.0.0.1:80 ?

    Many thanks
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    According to the error message, you seem to try to do a https connect on port 80, which can not work. you can connect to port 80 only via http and to port 443 only via https.
     
  5. francoisPE

    francoisPE Active Member HowtoForge Supporter

    If you look at curl, it gives : move permanently to https
    My understanding is that is why munin connecting to http port 80 is having SSL issue !

    I would like to know how I can have https redirection only on external IP, not on 127.0.0.1 for 000_default
     
    Last edited: Nov 18, 2023

Share This Page