• Debian 11 is approaching its end-of-life (vendor EOL date - August 31, 2026). Plesk Obsidian 18.0.80 will be the last release to support it.
    If you are running Plesk Obsidian on Debian 11, we recommend you upgrade those servers to Debian 12 using our dist-upgrade tool.
  • We plan to deprecate and remove the support for XML RPC protocol versions earlier than 1.6.9.1 in Plesk Obsidian 18.0.82. We strongly recommend that you update all existing integrations using earlier versions of the XML RPC protocol to comply with the version 1.6.9.1 specification.

Apache httpd won't start.

B

boxlocks

Guest
Running: Plesk for Linux, Ver. 9.2.3, Linux 2.6.18-194.8.1.el5, 64Bit

I overwrote the file /etc/httpd/conf/httpd.pem

Apache won't start. Error logs say the server name is mismatched.

Is there anyway to rebuild this file or create a new one?

Logs:
/var/log/httpd/error_log
Fri Sep 16 23:50:09 2011] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Fri Sep 16 23:50:09 2011] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Sep 16 23:50:09 2011] [warn] RSA server certificate CommonName (CN) `trinity.domain.com' does NOT match server name!?
[Fri Sep 16 23:50:09 2011] [warn] RSA server certificate CommonName (CN) `domain.com' does NOT match server name!?
[Fri Sep 16 23:50:09 2011] [warn] RSA server certificate CommonName (CN) `domain.com' does NOT match server name!?
[Fri Sep 16 23:50:09 2011] [warn] RSA server certificate CommonName (CN) `domain.com' does NOT match server name!?
[Fri Sep 16 23:50:09 2011] [warn] RSA server certificate CommonName (CN) `domain.com' does NOT match server name!?
[Fri Sep 16 23:50:09 2011] [warn] RSA server certificate CommonName (CN) `domain.com' does NOT match server name!?
[Fri Sep 16 23:50:09 2011] [warn] RSA server certificate CommonName (CN) `domain.com' does NOT match server name!?
[Fri Sep 16 23:50:09 2011] [warn] RSA server certificate CommonName (CN) `domain.com' does NOT match server name!?
[Fri Sep 16 23:50:09 2011] [warn] RSA server certificate CommonName (CN) `domain.com' does NOT match server name!?
[Fri Sep 16 23:50:09 2011] [warn] RSA server certificate CommonName (CN) `domain.com' does NOT match server name!?
[Fri Sep 16 23:50:09 2011] [warn] RSA server certificate CommonName (CN) `domain.com' does NOT match server name!?

/var/log/httpd/ssl_error_log
[Fri Sep 16 23:51:43 2011] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Sep 16 23:51:43 2011] [warn] RSA server certificate CommonName (CN) `localhost.localdomain' does NOT match server name!?
[Fri Sep 16 23:51:43 2011] [error] Unable to configure RSA server private key
[Fri Sep 16 23:51:43 2011] [error] SSL Library Error: 185073780 error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch




Thank you.
 
Last edited by a moderator:
Try something like this


openssl genrsa 1024 > host.key
openssl req -new -x509 -nodes -sha1 -days 365 -key host.key > host.cert
cat host.cert host.key > httpd.pem

Now the httpd.pem should be placed in '/etc/httpd/conf' and the plesk services restarted.

/etc/init.d/psa stopall
/etc/init.d/psa startall
 
in logs I dont see critical errors, that's just warnings. it would be better if you show us traceview of start process: sh -x /etc/init.d/httpd start
 
Back
Top