starting apache "failed" whed adding SSL

Discussion in 'ISPConfig 3 Priority Support' started by livetv, Jan 13, 2015.

Page 1 of 2
  1. livetv

    livetv Member

    Code:
    /etc/init.d/apache2 start
    killall apache2
    apache2: no process found

    Code:
    netstat -tap
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 *:pop3                  *:*                     LISTEN      4187/dovecot
tcp        0      0 *:imap2                 *:*                     LISTEN      4187/dovecot
tcp        0      0 *:ssmtp                 *:*                     LISTEN      4375/master
tcp        0      0 *:ftp                   *:*                     LISTEN      3971/pure-ftpd (SER
tcp        0      0 vps-1612:domain *:*                     LISTEN      1820/named
tcp        0      0 localhost:domain        *:*                     LISTEN      1820/named
tcp        0      0 *:ssh                   *:*                     LISTEN      2008/sshd
tcp        0      0 *:smtp                  *:*                     LISTEN      4375/master
tcp        0      0 localhost:953           *:*                     LISTEN      1820/named
tcp        0      0 *:microsoft-ds          *:*                     LISTEN      1790/smbd
tcp        0      0 *:imaps                 *:*                     LISTEN      4187/dovecot
tcp        0      0 *:nrpe                  *:*                     LISTEN      3932/nrpe
tcp        0      0 *:pop3s                 *:*                     LISTEN      4187/dovecot
tcp        0      0 localhost:10024         *:*                     LISTEN      2818/amavisd-new (m
tcp        0      0 localhost:10025         *:*                     LISTEN      4375/master
tcp        0      0 *:mysql                 *:*                     LISTEN      2657/mysqld
tcp        0      0 *:submission            *:*                     LISTEN      4375/master
tcp        0      0 localhost:9003          *:*                     LISTEN      1947/php-fpm.conf)
tcp        0      0 localhost:11211         *:*                     LISTEN      1917/memcached
tcp        0      0 *:netbios-ssn           *:*                     LISTEN      1790/smbd
tcp        0      0 localhost:mysql         localhost:41303         ESTABLISHED 2657/mysqld
tcp        0      0 localhost:mysql         localhost:38543         ESTABLISHED 2657/mysqld
tcp        0      0 localhost:38544         localhost:mysql         ESTABLISHED 29645/trivial-rewri
tcp        0      0 localhost:mysql         localhost:41265         ESTABLISHED 2657/mysqld
tcp        0      0 localhost:mysql         localhost:38542         ESTABLISHED 2657/mysqld
tcp        0      0 localhost:mysql         localhost:38544         ESTABLISHED 2657/mysqld
tcp        0     64 vps-16121.m:ssh 89-139-182-248.bb.:4550 ESTABLISHED 26691/0
tcp        0      0 localhost:38542         localhost:mysql         ESTABLISHED 29646/proxymap
tcp        0      0 vps-16121.m:ssh 89-139-182-248.bb.:1817 ESTABLISHED 27036/sshd: root@no
tcp        0      0 localhost:mysql         localhost:38594         ESTABLISHED 2657/mysqld
tcp        0      0 localhost:38594         localhost:mysql         ESTABLISHED 29649/error
tcp        0      0 localhost:mysql         localhost:38593         ESTABLISHED 2657/mysqld
tcp        0      0 vps-16121.m:ssh 62-210-180-62.rev:55065 ESTABLISHED 29742/sshd: root [p
tcp        0      0 localhost:38593         localhost:mysql         ESTABLISHED 29650/error
tcp        0      0 localhost:38543         localhost:mysql         ESTABLISHED 29646/proxymap
tcp6       0      0 [::]:pop3               [::]:*                  LISTEN      4187/dovecot
tcp6       0      0 [::]:9998               [::]:*                  LISTEN      1723/java
tcp6       0      0 [::]:imap2              [::]:*                  LISTEN      4187/dovecot
tcp6       0      0 [::]:1935               [::]:*                  LISTEN      1723/java
tcp6       0      0 [::]:9999               [::]:*                  LISTEN      1723/java
tcp6       0      0 [::]:ssmtp              [::]:*                  LISTEN      4375/master
tcp6       0      0 localhost:tproxy        [::]:*                  LISTEN      1723/java
tcp6       0      0 [::]:ftp                [::]:*                  LISTEN      3971/pure-ftpd (SER
tcp6       0      0 [::]:domain             [::]:*                  LISTEN      1820/named
tcp6       0      0 [::]:ssh                [::]:*                  LISTEN      2008/sshd
tcp6       0      0 [::]:5080               [::]:*                  LISTEN      1723/java
tcp6       0      0 [::]:smtp               [::]:*                  LISTEN      4375/master
tcp6       0      0 localhost:953           [::]:*                  LISTEN      1820/named
tcp6       0      0 [::]:microsoft-ds       [::]:*                  LISTEN      1790/smbd
tcp6       0      0 [::]:imaps              [::]:*                  LISTEN      4187/dovecot
tcp6       0      0 [::]:pop3s              [::]:*                  LISTEN      4187/dovecot
tcp6       0      0 [::]:submission         [::]:*                  LISTEN      4375/master
tcp6       0      0 [::]:netbios-ssn        [::]:*                  LISTEN      1790/smbd
tcp6       0      0 localhost:44034         localhost:ftp           TIME_WAIT   -
tcp6       0      0 vps-16121.:1935 89-139-182-248.bb.:2178 ESTABLISHED 1723/java
tcp6       0      0 localhost:41265         localhost:mysql         ESTABLISHED 1723/java
tcp6       0      0 vps-16121.:1935 89-139-182-248.bb.:2198 ESTABLISHED 1723/java
tcp6       0      0 vps-16121.:5080 89-139-182-248.bb.:2142 ESTABLISHED 1723/java
tcp6       0      0 localhost:41303         localhost:mysql         ESTABLISHED 1723/java
tcp6       0      0 vps-16121.:5080 89-139-182-248.bb.:4002 ESTABLISHED 1723/java
    Thank you
     
    livetv, Jan 13, 2015
    #1
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Where did you add ssl, in the ispconfig.vhost file or in a website?

    and post the output of:

    netstat -ntap | grep 8081
     
    till, Jan 13, 2015
    #2
  3. livetv

    livetv Member

    ssl to ispconfig
    netstat -ntap | grep 8081
    tcp6 0 0 127.0.0.1:8081 :::* LISTEN 1723/java
     
    livetv, Jan 13, 2015
    #3
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    The problem is that the port 8081 which is used by the ispconfig apps vhost is currently used by a java application on your server. you have to change either the port of the java app or the port in the apache apps.vhost file.
     
    till, Jan 13, 2015
    #4
  5. livetv

    livetv Member

    i think i'm doing wrong but changed th 8081 to 8083 in the /etc/apache2/sites-available/apps.vhost
    and
    /etc/init.d/apache2 start
    [....] Starting web server: apache2[Tue Jan 13 09:30:22 2015] [error] VirtualHost _default_:8083 -- mixing * ports and non-* ports with a NameVirtualHost address is not supported, proceeding with undefined results
    [Tue Jan 13 09:30:22 2015] [warn] NameVirtualHost *:443 has no VirtualHosts
    [Tue Jan 13 09:30:22 2015] [warn] NameVirtualHost *:443 has no VirtualHosts
    (98)Address already in use: make_sock: could not bind to address [::]:8080
    . ok
    root@vps-16121:~# /etc/init.d/apache2 status
    Apache2 is NOT running.
     
    livetv, Jan 13, 2015
    #5
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    Please pst the output of:

    netstat -ntap | grep 8080
     
    till, Jan 13, 2015
    #6
  7. livetv

    livetv Member

    netstat -ntap | grep 8080
    nothing
     
    livetv, Jan 13, 2015
    #7
  8. livetv

    livetv Member

    where i need to change and to what?
    in the error.log i found:
    [Tue Jan 13 09:06:26 2015] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
    [Tue Jan 13 09:06:26 2015] [warn] RSA server certificate CommonName (CN) `James' does NOT match server name!?
    [Tue Jan 13 09:06:26 2015] [notice] suEXEC mechanism enabled (wrapper: /usr/lib/apache2/suexec)
    [Tue Jan 13 09:07:38 2015] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
    [Tue Jan 13 09:07:38 2015] [warn] RSA server certificate CommonName (CN) `James' does NOT match server name!?
     
    livetv, Jan 14, 2015
    #8
  9. till

    till Super Moderator Staff Member ISPConfig Developer

    Thats ok. The CA error just measn that this is a self sigend certificate. And th ecrtificate seems to be issued as personal certificate as it has the name of a person as common name and not the server hostname.

    What exactly did you change before the issues started?
     
    till, Jan 14, 2015
    #9
  10. livetv

    livetv Member

    i think that during the installation of ispconfig ssl, i fiiled instead of adding the server name i add incorrect value
     
    livetv, Jan 14, 2015
    #10
  11. livetv

    livetv Member

    apache2ctl configtest
    [Wed Jan 14 06:31:57 2015] [error] VirtualHost _default_:8081 -- mixing * ports and non-* ports with a NameVirtualHost address is not supported, proceeding with undefined results
    [Wed Jan 14 06:31:57 2015] [warn] NameVirtualHost *:443 has no VirtualHosts
    [Wed Jan 14 06:31:57 2015] [warn] NameVirtualHost *:443 has no VirtualHosts
    Syntax OK
     
    livetv, Jan 14, 2015
    #11
  12. till

    till Super Moderator Staff Member ISPConfig Developer

    Try to edit the ispconfig.vhost file and comment out (add a # in fron) of all lines that start with ssl, then try to restart apache. If the issue is caused by a broken ssl cert, the it should start again. If thats the case, then we can focus on repairung the ssl cert.
     
    till, Jan 14, 2015
    #12
  13. livetv

    livetv Member

    the same, apache2 doesn't start
    # SSL Configuration
    #SSLEngine On
    #SSLProtocol All -SSLv2 -SSLv3
    #SSLCertificateFile /usr/local/ispconfig/interface/ssl/ispserver.crt
    #SSLCertificateKeyFile /usr/local/ispconfig/interface/ssl/ispserver.key
    #SSLCACertificateFile /usr/local/ispconfig/interface/ssl/ispserver.bundle
     
    livetv, Jan 14, 2015
    #13
  14. till

    till Super Moderator Staff Member ISPConfig Developer

    exact same error message?

    (98)Address already in use: make_sock: could not bind to address [::]:8080
     
    till, Jan 14, 2015
    #14
  15. livetv

    livetv Member

    /etc/init.d/apache2 start
    [....] Starting web server: apache2[Wed Jan 14 12:53:47 2015] [error] VirtualHost _default_:8081 -- mixing * ports and non-* ports with a NameVirtualHost address is not supported, proceeding with undefined results
    [Wed Jan 14 12:53:47 2015] [warn] NameVirtualHost *:443 has no VirtualHosts
    [Wed Jan 14 12:53:47 2015] [warn] NameVirtualHost *:443 has no VirtualHosts
    (98)Address already in use: make_sock: could not bind to address [::]:8081
    (98)Address already in use: make_sock: could not bind to address 0.0.0.0:8081
    no listening sockets available, shutting down
    Unable to open logs
    Action 'start' failed.
    The Apache error log may have more information.
    failed!
     
    livetv, Jan 14, 2015
    #15
  16. till

    till Super Moderator Staff Member ISPConfig Developer

    Ok, so you did not change the port of the apps vhost like I suggested in #4 of this thread? Port 8081 is used by your java server, so you cant use the same port in apache. This means you have to change it to e.g. 8082 in the apps.vhost file.
     
    till, Jan 14, 2015
    #16
  17. livetv

    livetv Member

    Before I changed and I returned again and now I've changed and I got -
    /etc/init.d/apache2 start
    [....] Starting web server: apache2[Wed Jan 14 15:25:51 2015] [error] VirtualHos t _default_:8082 -- mixing * ports and non-* ports with a NameVirtualHost addres s is not supported, proceeding with undefined results
    [Wed Jan 14 15:25:51 2015] [warn] NameVirtualHost *:443 has no VirtualHosts
    [Wed Jan 14 15:25:51 2015] [warn] NameVirtualHost *:443 has no VirtualHosts
    (98)Address already in use: make_sock: could not bind to address [::]:8080
    . ok
    root@vps-16121:~# /etc/init.d/apache2 status
    Apache2 is NOT running.
     
    livetv, Jan 14, 2015
    #17
  18. till

    till Super Moderator Staff Member ISPConfig Developer

    Please post the output of:

    grep -r 8080 /etc/apache2
     
    till, Jan 14, 2015
    #18
  19. livetv

    livetv Member

    grep -r 8080 /etc/apache2
    /etc/apache2/sites-available/ispconfig.vhost: Listen 8080
    /etc/apache2/sites-available/ispconfig.vhost:NameVirtualHost *:8080
    /etc/apache2/sites-available/ispconfig.vhost:<VirtualHost _default_:8080>
    /etc/apache2/ports.conf:Listen 8080
    /etc/apache2/magic:0 lelong&0x8080ffff 0x0000081a application/x-arc lzw
    /etc/apache2/magic:0 lelong&0x8080ffff 0x0000091a application/x-arc squashed
    /etc/apache2/magic:0 lelong&0x8080ffff 0x0000021a application/x-arc uncompressed
    /etc/apache2/magic:0 lelong&0x8080ffff 0x0000031a application/x-arc packed
    /etc/apache2/magic:0 lelong&0x8080ffff 0x0000041a application/x-arc squeezed
    /etc/apache2/magic:0 lelong&0x8080ffff 0x0000061a application/x-arc crunched
    /etc/apache2/magic:0 lelong&0x8080ffff 0x0000081a application/x-arc
    /etc/apache2/magic:0 lelong&0x8080ffff 0x0000091a application/x-arc
    /etc/apache2/magic:0 lelong&0x8080ffff 0x0000021a application/x-arc
    /etc/apache2/magic:0 lelong&0x8080ffff 0x0000031a application/x-arc
    /etc/apache2/magic:0 lelong&0x8080ffff 0x0000041a application/x-arc
    /etc/apache2/magic:0 lelong&0x8080ffff 0x0000061a application/x-arc
    root@vps-1130913-16121:~# clear
    root@vps-1130913-16121:~# grep -r 8080 /etc/apache2
    /etc/apache2/sites-available/ispconfig.vhost: Listen 8080
    /etc/apache2/sites-available/ispconfig.vhost:NameVirtualHost *:8080
    /etc/apache2/sites-available/ispconfig.vhost:<VirtualHost _default_:8080>
    /etc/apache2/ports.conf:Listen 8080
    /etc/apache2/magic:0 lelong&0x8080ffff 0x0000081a application/x-arc lzw
    /etc/apache2/magic:0 lelong&0x8080ffff 0x0000091a application/x-arc squashed
    /etc/apache2/magic:0 lelong&0x8080ffff 0x0000021a application/x-arc uncompressed
    /etc/apache2/magic:0 lelong&0x8080ffff 0x0000031a application/x-arc packed
    /etc/apache2/magic:0 lelong&0x8080ffff 0x0000041a application/x-arc squeezed
    /etc/apache2/magic:0 lelong&0x8080ffff 0x0000061a application/x-arc crunched
    /etc/apache2/magic:0 lelong&0x8080ffff 0x0000081a application/x-arc
    /etc/apache2/magic:0 lelong&0x8080ffff 0x0000091a application/x-arc
    /etc/apache2/magic:0 lelong&0x8080ffff 0x0000021a application/x-arc
    /etc/apache2/magic:0 lelong&0x8080ffff 0x0000031a application/x-arc
    /etc/apache2/magic:0 lelong&0x8080ffff 0x0000041a application/x-arc
    /etc/apache2/magic:0 lelong&0x8080ffff 0x0000061a application/x-arc
     
    livetv, Jan 14, 2015
    #19
  20. till

    till Super Moderator Staff Member ISPConfig Developer

    Edit the file:
    /etc/apache2/ports.conf

    and remove the

    Listen 8080

    line and restart apache.
     
    till, Jan 14, 2015
    #20
Page 1 of 2

Share This Page