HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)
-   General (http://www.howtoforge.com/forums/forumdisplay.php?f=15)
-   -   Apache will not load if SSL is enabled (http://www.howtoforge.com/forums/showthread.php?t=25883)

cephlon 8th August 2008 23:32

Apache will not load if SSL is enabled
 
I have a fresh install of ISPconfig on CentOS 4
I install an SSL certificate for my site and I went to restart apache. Apache will not start if I have the SSL enabled for the site.
Here is the output from the error log:

Code:

[Fri Aug 08 11:29:04 2008] [error] an unknown filter was not added: PHP
[Fri Aug 08 11:29:09 2008] [notice] caught SIGTERM, shutting down
[Fri Aug 08 11:29:10 2008] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Fri Aug 08 11:29:10 2008] [notice] Digest: generating secret for digest authentication ...
[Fri Aug 08 11:29:10 2008] [notice] Digest: done
[Fri Aug 08 11:29:10 2008] [notice] Apache/2.0.52 (CentOS) configured -- resuming normal operations
[Fri Aug 08 11:29:15 2008] [error] an unknown filter was not added: PHP
[Fri Aug 08 11:29:15 2008] [error] an unknown filter was not added: PHP
[Fri Aug 08 11:29:20 2008] [notice] SIGHUP received.  Attempting to restart
[Fri Aug 08 11:29:20 2008] [notice] Digest: generating secret for digest authentication ...
[Fri Aug 08 11:29:20 2008] [notice] Digest: done
[Fri Aug 08 11:29:22 2008] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Fri Aug 08 11:29:23 2008] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Fri Aug 08 11:29:42 2008] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Fri Aug 08 11:29:43 2008] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Fri Aug 08 11:29:43 2008] [notice] Digest: generating secret for digest authentication ...
[Fri Aug 08 11:29:43 2008] [notice] Digest: done
[Fri Aug 08 11:29:44 2008] [error] an unknown filter was not added: PHP
[Fri Aug 08 11:29:44 2008] [error] an unknown filter was not added: PHP
[Fri Aug 08 11:29:44 2008] [notice] Apache/2.0.52 (CentOS) configured -- resuming normal operations
[Fri Aug 08 11:29:45 2008] [error] an unknown filter was not added: PHP
[Fri Aug 08 11:29:45 2008] [error] an unknown filter was not added: PHP
[Fri Aug 08 11:29:46 2008] [error] an unknown filter was not added: PHP
[Fri Aug 08 11:29:46 2008] [error] an unknown filter was not added: PHP
[Fri Aug 08 11:29:48 2008] [error] an unknown filter was not added: PHP
[Fri Aug 08 11:29:48 2008] [error] an unknown filter was not added: PHP


falko 9th August 2008 12:04

Quote:

[Fri Aug 08 11:29:45 2008] [error] an unknown filter was not added: PHP
Take a look here: http://www.howtoforge.com/forums/sho...che2_php%22%5D

Are there any errors in the SSL error log?

cephlon 11th August 2008 00:07

Thank you That did it.

I still seem to be having an issue with the certificate though. If I try to go to https://mydomain.com, I get a invalid security certificate warning.

I went through the install process several times in ISPconfig,but it doesn't seem to make a difference. It seems to be pulling the self-signed certificate, not the one I bought from Godaddy. How to I change the server config so that the IP is not shared and so it will use the specific certificate?

cephlon 11th August 2008 03:59

Well I spoke too soon.

Code:

$go_info["server"]["apache2_php"] = 'both';

to:

$go_info["server"]["apache2_php"] = 'addtype';

Worked for a while, but I had to restart apache after changing my php.ini file and now my site won't load if I check SSL.

I rechecked the config.inc.php file and it hasn't changed.

Is there any hope for ISPconfig supporting SSL? I really like it but I need SSL support.

till 11th August 2008 10:14

Quote:

Is there any hope for ISPconfig supporting SSL?
What a question ;) ISPConfig supports SSL, otherwise there were not the SSL checkboxes.

Please post the exact error messages that you get in the error log of the website when you turn on SSL.

cephlon 11th August 2008 19:45

I guess I should have said "MY" install of IspConfig :)

Which error log, the httpd error log?

till 11th August 2008 23:44

Yes, please look in the gloabl apache error log and in the error log of the website which is inside of the log directory in the website root.

cephlon 12th August 2008 01:51

Well I figured out from the log why the site wouldn't come up with ssl enabled. There was a private key mismatch error, so I deleted the certificate.

I redid the entire SSL process outlined here: http://www.ispconfig.org/downloads/m..._src.htm#4_2_4

But I still get:
Secure Connection Failed

www.alohabroadband.com uses an invalid security certificate.

The certificate is not trusted because it is self signed.

(Error code: sec_error_ca_cert_invalid)

In Firefox, when I click to add exception and view the certificate, it is not the one I installed from GoDaddy. Is it pulling the certificate from a different place? The cert in my /ssl directory matches exactly the cert from Godaddy.
Hmm... any help is appreciated.

falko 12th August 2008 18:36

Did you install the cert as described here? http://www.howtoforge.com/faq/14_49_en.html

cephlon 12th August 2008 20:44

Quote:

Originally Posted by falko (Post 140627)
Did you install the cert as described here? http://www.howtoforge.com/faq/14_49_en.html

That link says the exact same thing as the link I posted above.
http://www.ispconfig.org/downloads/m..._src.htm#4_2_4


All times are GMT +2. The time now is 15:01.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.