Linode Forum
Linode Community Forums
 FAQFAQ    SearchSearch    MembersMembers      Register Register 
 LoginLogin [ Anonymous ] 
Post new topic  Reply to topic
Author Message
PostPosted: Wed Aug 03, 2011 10:59 pm 
Offline
Newbie

Joined: Sat Feb 05, 2011 6:36 am
Posts: 3
I must have done something wrong with SSL installation? I can't think of anything else that's changed. Now apache won't start.

Here's my situation. I have one domain/IP with one SSL certificate. I just added another domain on the same linode. Got another IP to install the new SSL certificate for new domain. The new SSL certificate was from bluehost. Because it was purchased by someone else, I generated a request file and sent it to him so he can get a certificate file back from bluehost. I then added the virtual host entry for the new domain and added the SSL entries to point to the certificate file. Below is my new domain configuration file (under /etc/apache2/sites-available).

<VirtualHost 96.126.124.235:80>
ServerAdmin admin@cre8ivewear.com
ServerName cre8ivewear.com
ServerAlias www.cre8ivewear.com
DocumentRoot /srv/www/cre8ivewear.com/public_html/
#ErrorLog /srv/www/cre8ivewear.com/logs/error.log
CustomLog /srv/www/cre8ivewear.com/logs/access.log combined
ErrorLog "|/usr/sbin/rotatelogs /srv/www/cre8ivewear.com/logs/error.log.%d-%H_%M_%S 100M"
#CustomLog "|bin/rotatelogs /srv/www/cre8ivewear.com/logs/access.log.%Y-%m-%d-%H_%M_%S 100M" combined
ErrorDocument 404 /404.html
ErrorDocument 500 /500.html
</VirtualHost>

<VirtualHost 96.126.124.235:443>
SSLEngine On
SSLCertificateFile /etc/apache2/ssl/www.cre8ivewear.com.crt
SSLCertificateKeyFile /etc/apache2/ssl/www.cre8ivewear.com.key

ServerAdmin admin@cre8ivewear.com
ServerName cre8ivewear.com
ServerAlias www.cre8ivewear.com
DocumentRoot /srv/www/cre8ivewear.com/public_html/
#ErrorLog /srv/www/cre8ivewear.com/logs/error.log
CustomLog /srv/www/cre8ivewear.com/logs/access.log combined
ErrorLog "|/usr/sbin/rotatelogs /srv/www/cre8ivewear.com/logs/error.log.%d-%H_%M_%S 100M"
#CustomLog "|bin/rotatelogs /srv/www/cre8ivewear.com/logs/access.log.%Y-%m-%d-%H_%M_%S 100M" combined
ErrorDocument 404 /404.html
ErrorDocument 500 /500.html
</VirtualHost>

What's wrong?


Top
   
 Post subject:
PostPosted: Wed Aug 03, 2011 11:41 pm 
Offline
Senior Member

Joined: Mon Aug 31, 2009 2:33 pm
Posts: 78
Location: The OC
I was briefly able to access your site just now, and it was presenting a self-signed cert for a li-xxx.members.linode.com host. so you at least had that working...

what error is apache giving you when you try to start?


Top
   
 Post subject:
PostPosted: Wed Aug 03, 2011 11:50 pm 
Offline
Newbie

Joined: Sat Feb 05, 2011 6:36 am
Posts: 3
I have two domains on the same linode, with one apache server. When I tried to disable the new domain, apache started fine, with of course only one domain accessible. When I tried to enable both domains, apache won't start. By the way, both SSL certificates (for both domains) are commercial certificates, so that should not show up as self-signed? I don't know what was set wrong.

Here's the /var/log/apache2/error.log file.

PHP Deprecated: Comments starting with '#' are deprecated in /etc/php5/apache2/php.ini on line 879 in Unknown on line 0
PHP Deprecated: Comments starting with '#' are deprecated in /etc/php5/apache2/conf.d/mcrypt.ini on line 1 in Unknown on line 0
PHP Warning: Module 'curl' already loaded in Unknown on line 0
[Sun Jul 31 06:25:02 2011] [warn] RSA server certificate CommonName (CN) `li216-227.members.linode.com' does NOT match server name!?
[Sun Jul 31 06:25:02 2011] [notice] Apache/2.2.14 (Ubuntu) PHP/5.3.2-1ubuntu4.7 with Suhosin-Patch mod_ssl/2.2.14 OpenSSL/0.9.8k configured -- resuming normal operations
[Sun Jul 31 14:32:07 2011] [error] server reached MaxClients setting, consider raising the MaxClients setting
[Mon Aug 01 23:24:22 2011] [notice] child pid 11123 exit signal Segmentation fault (11)
[Mon Aug 01 23:24:23 2011] [notice] child pid 10628 exit signal Segmentation fault (11)
[Mon Aug 01 23:24:23 2011] [notice] child pid 11124 exit signal Segmentation fault (11)
[Tue Aug 02 00:02:10 2011] [notice] child pid 10947 exit signal Segmentation fault (11)
[Tue Aug 02 00:02:24 2011] [notice] child pid 10836 exit signal Segmentation fault (11)
[Tue Aug 02 00:02:38 2011] [notice] child pid 11112 exit signal Segmentation fault (11)
[Tue Aug 02 00:03:02 2011] [notice] child pid 10945 exit signal Segmentation fault (11)
[Tue Aug 02 00:03:07 2011] [notice] child pid 11110 exit signal Segmentation fault (11)
[Wed Aug 03 19:04:23 2011] [notice] caught SIGTERM, shutting down
[Wed Aug 03 19:04:24 2011] [warn] RSA server certificate CommonName (CN) `li216-227.members.linode.com' does NOT match server name!?
[Wed Aug 03 19:04:31 2011] [warn] RSA server certificate CommonName (CN) `li216-227.members.linode.com' does NOT match server name!?
[Wed Aug 03 19:06:35 2011] [warn] RSA server certificate CommonName (CN) `li216-227.members.linode.com' does NOT match server name!?
[Wed Aug 03 19:08:16 2011] [warn] RSA server certificate CommonName (CN) `li216-227.members.linode.com' does NOT match server name!?
[Wed Aug 03 19:13:13 2011] [warn] RSA server certificate CommonName (CN) `li216-227.members.linode.com' does NOT match server name!?
[Wed Aug 03 19:22:41 2011] [warn] RSA server certificate CommonName (CN) `li216-227.members.linode.com' does NOT match server name!?
[Wed Aug 03 19:31:26 2011] [warn] RSA server certificate CommonName (CN) `li216-227.members.linode.com' does NOT match server name!?
[Wed Aug 03 19:51:33 2011] [warn] RSA server certificate CommonName (CN) `li216-227.members.linode.com' does NOT match server name!?
[Wed Aug 03 20:01:26 2011] [warn] RSA server certificate CommonName (CN) `li216-227.members.linode.com' does NOT match server name!?
PHP Deprecated: Comments starting with '#' are deprecated in /etc/php5/apache2/php.ini on line 879 in Unknown on line 0
PHP Deprecated: Comments starting with '#' are deprecated in /etc/php5/apache2/conf.d/mcrypt.ini on line 1 in Unknown on line 0
PHP Warning: Module 'curl' already loaded in Unknown on line 0
[Wed Aug 03 20:01:27 2011] [warn] RSA server certificate CommonName (CN) `li216-227.members.linode.com' does NOT match server name!?
[Wed Aug 03 20:01:27 2011] [notice] Apache/2.2.14 (Ubuntu) PHP/5.3.2-1ubuntu4.7 with Suhosin-Patch mod_ssl/2.2.14 OpenSSL/0.9.8k configured -- resuming normal operations
[Wed Aug 03 20:36:48 2011] [error] [client 76.170.59.240] File does not exist: /var/www/favicon.ico
[Wed Aug 03 20:37:36 2011] [notice] Graceful restart requested, doing restart
PHP Deprecated: Comments starting with '#' are deprecated in /etc/php5/apache2/php.ini on line 879 in Unknown on line 0
PHP Deprecated: Comments starting with '#' are deprecated in /etc/php5/apache2/conf.d/mcrypt.ini on line 1 in Unknown on line 0
PHP Warning: Module 'curl' already loaded in Unknown on line 0
[Wed Aug 03 20:37:36 2011] [warn] RSA server certificate CommonName (CN) `li216-227.members.linode.com' does NOT match server name!?


Top
   
 Post subject:
PostPosted: Thu Aug 04, 2011 11:45 am 
Offline
Senior Member

Joined: Mon Aug 31, 2009 2:33 pm
Posts: 78
Location: The OC
Looks like you have it up now? At least the cre8ivewear.com sites are working. What is the other domain?

Also, you're still using a self signed cert:
Image

Is your apache config referencing the correct SSL certificate file(s)?


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
RSS

Powered by phpBB® Forum Software © phpBB Group