Updated and Apache2 broke

Discussion in 'Installation/Configuration' started by Falrish, Jul 16, 2020.

  1. Falrish

    Falrish Member

    After I ran the update I had many issues with my servers and they are all offline now.
    When starting Apache2 this is what I get.
    error.log entry
    Code:
    [Thu Jul 16 10:33:49.627082 2020] [ssl:warn] [pid 7448] AH01906: servername.com:8080:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
    [Thu Jul 16 10:33:49.632800 2020] [ssl:error] [pid 7448] AH02217: ssl_stapling_init_cert: can't retrieve issuer certificate! [subject: [email protected],CN=servername.com,O=Internet Widgits Pty Ltd,L=Toronto,ST=ON,C=CA / issuer: [email protected],CN=servername.com,O=Internet Widgits Pty Ltd,L=Toronto,ST=ON,C=CA / serial: CD78C51818812013 / notbefore: Jun 28 18:03:48 2016 GMT / notafter: Jun 26 18:03:48 2026 GMT]
    [Thu Jul 16 10:33:49.632819 2020] [ssl:error] [pid 7448] AH02567: Unable to configure certificate servername.com:8080:0 for stapling
    [Thu Jul 16 10:33:49.633540 2020] [ssl:warn] [pid 7448] AH01906: servername.com:8080:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
    [Thu Jul 16 10:33:49.633613 2020] [ssl:error] [pid 7448] AH02217: ssl_stapling_init_cert: can't retrieve issuer certificate! [subject: [email protected],CN=servername.com,O=Internet Widgits Pty Ltd,L=Toronto,ST=ON,C=CA / issuer: [email protected],CN=servername.com,O=Internet Widgits Pty Ltd,L=Toronto,ST=ON,C=CA / serial: CD78C51818812013 / notbefore: Jun 28 18:03:48 2016 GMT / notafter: Jun 26 18:03:48 2026 GMT]
    [Thu Jul 16 10:33:49.633984 2020] [ssl:error] [pid 7448] AH02567: Unable to configure certificate servername.com:8080:0 for stapling
    [Thu Jul 16 10:33:49.634220 2020] [suexec:notice] [pid 7448] AH01232: suEXEC mechanism enabled (wrapper: /usr/lib/apache2/suexec)
    
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    You run which update?
     
  3. Falrish

    Falrish Member

    /usr/local/ispconfig/server/scripts/ispconfig_update.sh
     
  4. Falrish

    Falrish Member

    i also forced another update, and reconfigured the SSL Certificate, and it is still broken and I cannot get apache2 up.
     
  5. till

    till Super Moderator Staff Member ISPConfig Developer

    According to the error message, apache or another service that uses port 8080 and 8081 is either already started or you have the config file directory in apache2.conf included twice.
     
  6. Falrish

    Falrish Member

    I manually went through every file and commented out the Listens in the vhost files that the system created.
    Now to check if it is all working now.
     
  7. till

    till Super Moderator Staff Member ISPConfig Developer

    That's not what I meant. Take a look into apache2.conf or httpd.conf if there is more then one include for the sites-enabled directory. If there are multiple lines, remove all except one, the right one includes the wholöe directory, so if there is a line that includes sites-enabled/*.conf, then that lines needs to be disabled, it is not from ISPConfig.
     
  8. Falrish

    Falrish Member

    So I have gotten apache2 started but I am now getting Error 500 on all sites, and I cannot access the server's ISPConfig control panel.
    Code:
    # Include generic snippets of statements
    IncludeOptional conf-enabled/*.conf
    
    # Include the virtual host configurations:
    IncludeOptional sites-enabled/
    IncludeOptional sites-enabled/*.vhost
    # vim: syntax=apache ts=4 sw=4 sts=4 sr noet
    
     
  9. till

    till Super Moderator Staff Member ISPConfig Developer

    comment out the line:

    IncludeOptional sites-enabled/*.vhost

    and restart apache. This line has not been added by ISPConfig and must have been added manually. And undo the changes you made in listen lines.
     
  10. Falrish

    Falrish Member

    I commented out the *.vhost line and it starts. Just now stuck on all sites being looped on a 500 internal error
     
  11. till

    till Super Moderator Staff Member ISPConfig Developer

    Check the error.log of the sites to find out why they produce a 500 error.
     
  12. Falrish

    Falrish Member

    Resynced the system twice to get it to work.
     

Share This Page