• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Apache httpd won't start.

B

boxlocks

Guest
Running: Plesk for Linux, Ver. 9.2.3, Linux 2.6.18-194.8.1.el5, 64Bit

I overwrote the file /etc/httpd/conf/httpd.pem

Apache won't start. Error logs say the server name is mismatched.

Is there anyway to rebuild this file or create a new one?

Logs:
/var/log/httpd/error_log
Fri Sep 16 23:50:09 2011] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Fri Sep 16 23:50:09 2011] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Sep 16 23:50:09 2011] [warn] RSA server certificate CommonName (CN) `trinity.domain.com' does NOT match server name!?
[Fri Sep 16 23:50:09 2011] [warn] RSA server certificate CommonName (CN) `domain.com' does NOT match server name!?
[Fri Sep 16 23:50:09 2011] [warn] RSA server certificate CommonName (CN) `domain.com' does NOT match server name!?
[Fri Sep 16 23:50:09 2011] [warn] RSA server certificate CommonName (CN) `domain.com' does NOT match server name!?
[Fri Sep 16 23:50:09 2011] [warn] RSA server certificate CommonName (CN) `domain.com' does NOT match server name!?
[Fri Sep 16 23:50:09 2011] [warn] RSA server certificate CommonName (CN) `domain.com' does NOT match server name!?
[Fri Sep 16 23:50:09 2011] [warn] RSA server certificate CommonName (CN) `domain.com' does NOT match server name!?
[Fri Sep 16 23:50:09 2011] [warn] RSA server certificate CommonName (CN) `domain.com' does NOT match server name!?
[Fri Sep 16 23:50:09 2011] [warn] RSA server certificate CommonName (CN) `domain.com' does NOT match server name!?
[Fri Sep 16 23:50:09 2011] [warn] RSA server certificate CommonName (CN) `domain.com' does NOT match server name!?
[Fri Sep 16 23:50:09 2011] [warn] RSA server certificate CommonName (CN) `domain.com' does NOT match server name!?

/var/log/httpd/ssl_error_log
[Fri Sep 16 23:51:43 2011] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Sep 16 23:51:43 2011] [warn] RSA server certificate CommonName (CN) `localhost.localdomain' does NOT match server name!?
[Fri Sep 16 23:51:43 2011] [error] Unable to configure RSA server private key
[Fri Sep 16 23:51:43 2011] [error] SSL Library Error: 185073780 error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch




Thank you.
 
Last edited by a moderator:
Try something like this


openssl genrsa 1024 > host.key
openssl req -new -x509 -nodes -sha1 -days 365 -key host.key > host.cert
cat host.cert host.key > httpd.pem

Now the httpd.pem should be placed in '/etc/httpd/conf' and the plesk services restarted.

/etc/init.d/psa stopall
/etc/init.d/psa startall
 
in logs I dont see critical errors, that's just warnings. it would be better if you show us traceview of start process: sh -x /etc/init.d/httpd start
 
Back
Top