backup issues - http & ssl certs.

[Herby]

hi,

after restoring the server apache is not starting

/etc/rc.d/init.d/httpd configtest
Syntax error on line 32 of /home/httpd/vhosts/DOMAIN/conf/httpd.include:
SSLCertificateFile: file '/usr/local/psa/var/certificates/cert.135657060' does not exist or is empty

And its right - this certificate does not exist. So I compared with the original server and all Certificates do have other names.

Original Server:

[root@business certificates]# ll
insgesamt 72
-rw-r--r--    1 root     root          699 25. Apr 14:34 cert.118905350
-rw-r--r--    1 root     root          699 25. Apr 14:18 cert.12059175
-rw-r--r--    1 root     root          699 25. Apr 14:30 cert.480058948
-rw-r--r--    1 root     root          699 25. Apr 11:24 cert.578312212
-rw-r--r--    1 root     root          699 25. Apr 14:39 cert.637229498
-rw-r--r--    1 root     root          699 25. Apr 12:55 cert.683877159
-r--------    1 root     root         2755 15. Dez 2004  cert-7I4d2I
-rw-r--r--    1 root     root          699 25. Apr 11:57 cert.895752024
-r--------    1 root     root         2726 21. Dez 2004  cert-8RD3TA
-r--------    1 root     root         2726 21. Dez 2004  cert-9VxX0b
-r--------    1 root     root         2755 15. Dez 2004  cert-DpW6ZP
-r--------    1 root     root         2747 21. Dez 2004  cert-dWQRfi
-r--------    1 root     root         2365 28. Feb 13:28 cert-fyFAIx
-r--------    1 root     root         2763 21. Dez 2004  cert-P7fOfX
-r--------    1 root     root         2747 21. Dez 2004  cert-Rlc8TG
-r--------    1 root     root         2743 21. Dez 2004  cert-Y9KUxJ
-r--------    1 root     root         2743 21. Dez 2004  cert-yYZ23d
-r--------    1 root     root         2755 17. Dez 2004  cert-ZoU2ih

and new Backupserver:

[root@business certificates]# ll
insgesamt 68
-rw-r--r--    1 root     root          711 21. Jun 09:43 cert.143411293
-rw-r--r--    1 root     root         2726 27. Jun 10:02 cert.195571163
-rw-r--r--    1 root     root          703 23. Jun 08:37 cert.235897969
-rw-r--r--    1 root     root          699 21. Jun 11:36 cert.332873149
-rw-r--r--    1 root     root          703 27. Jun 10:02 cert.368140541
-rw-r--r--    1 root     root          699 21. Jun 11:36 cert.532614395
-rw-r--r--    1 root     root          699 23. Jun 08:37 cert.553417566
-rw-r--r--    1 root     root          703 21. Jun 11:36 cert.629069217
-rw-r--r--    1 root     root          699 21. Jun 09:43 cert.654169137
-rw-r--r--    1 root     root          699 27. Jun 10:02 cert.77166327
-rw-r--r--    1 root     root          703 21. Jun 09:43 cert.794008314
-rw-r--r--    1 root     root         2726 21. Jun 09:43 cert.805662176
-rw-r--r--    1 root     root          699 23. Jun 08:37 cert.820364064
-rw-r--r--    1 root     root         2726 21. Jun 09:43 cert.850652132
-rw-r--r--    1 root     root          699 27. Jun 10:02 cert.941509966
-rw-r--r--    1 root     root          699 21. Jun 09:43 cert.959389433
-r--------    1 root     root         3289  8. Mär 13:24 certXnfTkaS

br,
herby

 

[hardweb]

Execute the command:

/usr/local/psa/admin/bin/websrvmng -a

 

[Herby]

i tried this command now, but the same error exists.

br
herby

 

[jamesyeeoc]

Not only different names, but different sizes, and you started with 18 certs, and ended up with 17.

Personally since there are so few certs, I would just re-upload the certs to the restored server via the control panel and be done with it.

 

[Herby]

this would mean also backup the httpd,include files for each domain and restore manually i think ?

 

[jamesyeeoc]

Umm, didn't you keep a separate backup copy of the SSL certs files themselves (not just whatever combined/compressed/tar/gz backup file you restored from? You know, like actually SFTP downloading the .crt/.pem files to a different machine? Ouch....

Search for the original .pem and .crt files and you should be able to re-upload them in the Plesk control panel.

Obviously since the restore gave you a different number of cert files and of the wrong sizes, I personally would not rely on whatever backup you used to perform the restore. Hopefully you have a different backup of the server, or the old harddrive, or a mirror of the old drive which you could mount

(my 2 cents)

 

[Herby]

i have everything - as the old server is still up and running. This is just an emergency test and as I see its good to test.

I backuped and restored only with the plesk console commands for backup and restore. So I double wonder why its not working as expected.