Resolved server certificate does NOT include an ID which matches the server name

[toomanylogins]

I have this problem on both 12.5 and 17.5 clean installs on hyper V VM from apache error log

[Tue Aug 08 16:24:46.553608 2017] [ssl:warn] [pid 1845:tid 140405293938560] AH01909: lists:443:0 server certificate does NOT include an ID which matches the server name
[Tue Aug 08 16:24:46.555192 2017] [ssl:warn] [pid 1845:tid 140405293938560] AH01909: default-192_168_1_20:443:0 server certificate does NOT include an ID which matches the server name
[Tue Aug 08 16:24:46.556815 2017] [suexec:notice] [pid 1845:tid 140405293938560] AH01232: suEXEC mechanism enabled (wrapper: /usr/lib/apache2/suexec)
[Tue Aug 08 16:24:46.592889 2017] [auth_digest:notice] [pid 1846:tid 140405293938560] AH01757: generating secret for digest authentication ...
[Tue Aug 08 16:24:46.598734 2017] [ssl:warn] [pid 1846:tid 140405293938560] AH01909: lists:443:0 server certificate does NOT include an ID which matches the server name
[Tue Aug 08 16:24:46.599659 2017] [ssl:warn] [pid 1846:tid 140405293938560] AH01909: default-192_168_1_20:443:0 server certificate does NOT include an ID which matches the server name
[Tue Aug 08 16:24:46.602593 2017] [mpm_event:notice] [pid 1846:tid 140405293938560] AH00489: Apache/2.4.10 (Ubuntu) mod_fcgid/2.3.9 OpenSSL/1.0.1f configured -- resuming normal operations
[Tue Aug 08 16:24:46.602636 2017] [core:notice] [pid 1846:tid 140405293938560] AH00094: Command line: '/usr/sbin/apache2'
[Tue Aug 08 16:25:00.028927 2017] [mpm_event:notice] [pid 1846:tid 140405293938560] AH00491: caught SIGTERM, shutting down

Admin interface is ok but cannot even display a default web page in front end ?

Anyone got any idea what is issue

 

[UFHH01]

Hi toomanylogins,

pls. use "mpm-prefork" instead of "mpm-event" to avoid such issues.

 

[toomanylogins]

I have tried mpm-prefork as per this post still have issue on both 12.5 and 17.5 on hyper v
Apache crashes on reload and websites show 502 Bad Gateway: seg fault or similar nasty error detected in the parent process

 

[toomanylogins]

I cant even get the default page to open on clean install all updates one empty domain. Seems to be something to do with webmail. UFHH01 Appreciate your help. Thank You. Ive updated my plesk server from version 8 onwards and never had this many issues.

[Tue Aug 08 17:20:55.799794 2017] [ssl:warn] [pid 14805] AH01909: webmail.youdopet.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Aug 08 17:20:55.800884 2017] [ssl:warn] [pid 14805] AH01909: lists:443:0 server certificate does NOT include an ID which matches the server name
[Tue Aug 08 17:20:55.801910 2017] [ssl:warn] [pid 14805] AH01909: default-192_168_1_20:443:0 server certificate does NOT include an ID which matches the server name
[Tue Aug 08 17:20:55.803151 2017] [suexec:notice] [pid 14805] AH01232: suEXEC mechanism enabled (wrapper: /usr/lib/apache2/suexec)
[Tue Aug 08 17:20:55.851089 2017] [auth_digest:notice] [pid 14806] AH01757: generating secret for digest authentication ...
[Tue Aug 08 17:20:55.856285 2017] [ssl:warn] [pid 14806] AH01909: webmail.youdopet.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Aug 08 17:20:55.857292 2017] [ssl:warn] [pid 14806] AH01909: lists:443:0 server certificate does NOT include an ID which matches the server name
[Tue Aug 08 17:20:55.858950 2017] [ssl:warn] [pid 14806] AH01909: default-192_168_1_20:443:0 server certificate does NOT include an ID which matches the server name
[Tue Aug 08 17:20:55.863152 2017] [mpm_prefork:notice] [pid 14806] AH00163: Apache/2.4.10 (Ubuntu) mod_fcgid/2.3.9 OpenSSL/1.0.1f configured -- resuming normal operations
[Tue Aug 08 17:20:55.863196 2017] [core:notice] [pid 14806] AH00094: Command line: '/usr/sbin/apache2'

 

[UFHH01]

Hi toomanylogins,

[Tue Aug 08 17:20:55.799794 2017] [ssl:warn] [pid 14805] AH01909: webmail.youdopet.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Aug 08 17:20:55.800884 2017] [ssl:warn] [pid 14805] AH01909: lists:443:0 server certificate does NOT include an ID which matches the server name
[Tue Aug 08 17:20:55.801910 2017] [ssl:warn] [pid 14805] AH01909: default-192_168_1_20:443:0 server certificate does NOT include an ID which matches the server name

[Tue Aug 08 17:20:55.856285 2017] [ssl:warn] [pid 14806] AH01909: webmail.youdopet.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Aug 08 17:20:55.857292 2017] [ssl:warn] [pid 14806] AH01909: lists:443:0 server certificate does NOT include an ID which matches the server name
[Tue Aug 08 17:20:55.858950 2017] [ssl:warn] [pid 14806] AH01909: default-192_168_1_20:443:0 server certificate does NOT include an ID which matches the server name

Pls. note as well the difference between WARNINGS, NOTICES and ERRORS, when you investigate issues/errors/problems.

You will solve that with correct certificates and their corresponding root certificates on domains and IPs.



Which leaves us now with:

[Tue Aug 08 17:20:55.803151 2017] [suexec:notice] [pid 14805] AH01232: suEXEC mechanism enabled (wrapper: /usr/lib/apache2/suexec)

=> only a NOTICE - nothing more!

[Tue Aug 08 17:20:55.863152 2017] [mpm_prefork:notice] [pid 14806] AH00163: Apache/2.4.10 (Ubuntu) mod_fcgid/2.3.9 OpenSSL/1.0.1f configured -- resuming normal operations
[Tue Aug 08 17:20:55.863196 2017] [core:notice] [pid 14806] AH00094: Command line: '/usr/sbin/apache2'

... and again... ONLY a typical notice... nothing more!

 

[toomanylogins]

Thanks you pointed me in right direction. Turning ssl off manged to get the site working and backup restored. Cant use ssl until I change the dns so I cant get lets encrypt cert. So bit confused as to how to setup new server ready to go before switching dns.