Update from Plesk11.5 to 12.0 -> Apache2 doesn't start anymore

[DragonGun]

Hey,

i just updated my Plesk to 12.0.8 and since then the Apache2 doesn't start anymore.

Error Messages:

[Mon Jun 16 21:32:13 2014] [error] Init: Unable to read server certificate from file /opt/psa/var/certificates/certrWNGW7m
[Mon Jun 16 21:32:13 2014] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Mon Jun 16 21:32:13 2014] [error] SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error

I checked the certificate and it seems to be ok.

If i try to recreate the Configs via Plesk i get this error message in Plesk itself:

Konfigurieren des Webservers nicht möglich:Execution failed. 
Command: httpdmng Arguments: Array ( [0] => --reconfigure-all ) 
Details: Execution failed. 
Command: httpdmng Arguments: Array ( [0] => --reconfigure-server [1] => -no-restart ) 
Details: [2014-06-16 22:28:19] ERR [util_exec] proc_close() failed [2014-06-16 22:28:23] ERR [util_exec] proc_close() failed [2014-06-16 22:28:23] ERR [panel] Apache config (14029504960.91736300) generation failed: 
Template_Exception: nginx: [emerg] PEM_read_bio_X509_AUX("/opt/psa/var/certificates/certrWNGW7m") failed (SSL: error:0D07209B:asn1 encoding routines:ASN1_get_object:too long error:0D068066:asn1 encoding routines:ASN1_CHECK_TLEN:bad object header error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error:Type=X509 error:0906700D:PEM routines:PEM_ASN1_read_bio:ASN1 lib)
nginx: configuration file /etc/nginx/nginx.conf test failed file: /opt/psa/admin/plib/Template/Writer/Webserver/Abstract.php line: 75 code: 0 
nginx: [emerg] PEM_read_bio_X509_AUX("/opt/psa/var/certificates/certrWNGW7m") failed (SSL: error:0D07209B:asn1 encoding routines:ASN1_get_object:too long error:0D068066:asn1 encoding routines:ASN1_CHECK_TLEN:bad object header error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error:Type=X509 error:0906700D:PEM routines:PEM_ASN1_read_bio:ASN1 lib) 
nginx: configuration file /etc/nginx/nginx.conf test failed

Any advice or help?

 

[IRM1989]

Hey,

i just updated my Plesk to 12.0.8 and since then the Apache2 doesn't start anymore.

Error Messages:

[Mon Jun 16 21:32:13 2014] [error] Init: Unable to read server certificate from file /opt/psa/var/certificates/certrWNGW7m
[Mon Jun 16 21:32:13 2014] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Mon Jun 16 21:32:13 2014] [error] SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error

I checked the certificate and it seems to be ok.

If i try to recreate the Configs via Plesk i get this error message in Plesk itself:

Konfigurieren des Webservers nicht möglich:Execution failed. 
Command: httpdmng Arguments: Array ( [0] => --reconfigure-all ) 
Details: Execution failed. 
Command: httpdmng Arguments: Array ( [0] => --reconfigure-server [1] => -no-restart ) 
Details: [2014-06-16 22:28:19] ERR [util_exec] proc_close() failed [2014-06-16 22:28:23] ERR [util_exec] proc_close() failed [2014-06-16 22:28:23] ERR [panel] Apache config (14029504960.91736300) generation failed: 
Template_Exception: nginx: [emerg] PEM_read_bio_X509_AUX("/opt/psa/var/certificates/certrWNGW7m") failed (SSL: error:0D07209B:asn1 encoding routines:ASN1_get_object:too long error:0D068066:asn1 encoding routines:ASN1_CHECK_TLEN:bad object header error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error:Type=X509 error:0906700D:PEM routines:PEM_ASN1_read_bio:ASN1 lib)
nginx: configuration file /etc/nginx/nginx.conf test failed file: /opt/psa/admin/plib/Template/Writer/Webserver/Abstract.php line: 75 code: 0 
nginx: [emerg] PEM_read_bio_X509_AUX("/opt/psa/var/certificates/certrWNGW7m") failed (SSL: error:0D07209B:asn1 encoding routines:ASN1_get_object:too long error:0D068066:asn1 encoding routines:ASN1_CHECK_TLEN:bad object header error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error:Type=X509 error:0906700D:PEM routines:PEM_ASN1_read_bio:ASN1 lib) 
nginx: configuration file /etc/nginx/nginx.conf test failed

Any advice or help?

Same here. Help us please!

[Tue Jun 17 21:21:14 2014] [error] Init: Unable to read server certificate from file /opt/psa/var/certificates/certz9CYI4J
[Tue Jun 17 21:21:14 2014] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Tue Jun 17 21:21:14 2014] [error] SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error

 

[IgorG]

Try to fix it with

# /usr/local/psa/bin/reconfigurator --autoconfigure
# /usr/local/psa/admin/sbin/httpdmng --reconfigure-all
# /etc/init.d/nginx restart

 

[IRM1989]

# /usr/local/psa/bin/reconfigurator --autoconfigure
PRODUCT_ROOT_D

/usr/local/psa/admin/sbin/httpdmng --reconfigure-all
PHP Fatal error: Class 'PleskFatalException' not found in /opt/psa/admin/plib/Conf.php on line 61

# /etc/init.d/nginx restart
nginx: [emerg] PEM_read_bio_X509_AUX("/opt/psa/var/certificates/certz9CYI4J") failed (SSL: error:0906D064EM routinesEM_read_bio:bad base64 decode)
nginx: configuration file /etc/nginx/nginx.conf test failed

 

[IgorG]

Have you tried bootstrapper repair?

 

[IRM1989]

Yes:

# /usr/local/psa/bootstrapper/pp12.0.18-bootstrapper/bootstrapper.sh repair
Started bootstrapper repair procedure. This may take a while.
Certain actions may be skipped if not applicable.

-- Warning: Skipping the data of table mysql.event. Specify the --events option explicitly.
Finishing up upgrade procedures and rerunning previously failed upgrade actions...
===> Cumulative APS controller database (apsc) upgrade and repair has been started.
===> Cumulative upgrade and repair of APS controller database has been completed.

**** Product repair started.

===> Checking for previous installation ... found.
Started bootstrapper repair procedure. This may take a while.
Certain actions may be skipped if not applicable.

Trying to start service mysql... /usr/sbin/mysqld (pid 1031) is running...
done
Trying to establish test connection... connected
done
Trying to start service mysql... /usr/sbin/mysqld (pid 1031) is running...
done
Trying to establish test connection... connected
done
Trying to find psa database... version is 012000018
Version is OK, no need to create psa database.
Trying to backup MySQL database... Warning: Not dumping MySQL database 'atmail' as it doesn't exist
done
MySQL databases are dumped to /var/lib/psa/dumps/mysql.preupgrade.12.0.18-12.0.18.20140618-080216.dump.gz
Finishing up upgrade procedures and rerunning previously failed upgrade actions...
===> Cumulative APS controller database (apsc) upgrade and repair has been started.
Upgrade or repair for 'apsc' (stage 'prep') is not required
Trying to backup MySQL database... done
MySQL databases are dumped to /var/lib/psa/dumps/mysql.preupgrade.apsc.12.0.18-12.0.18.20140618-080219.dump.gz
===> Cumulative upgrade and repair of APS controller database has been completed.
PHP Fatal error: Class 'PleskFatalException' not found in /opt/psa/admin/plib/Conf.php on line 61
Trying to reset database user password for 'apsc@'... done
PHP Fatal error: Class 'PleskFatalException' not found in /opt/psa/admin/plib/Conf.php on line 61

WARNING!
Some problems are found during fix credentials for APS controller database(see log file: /var/log/plesk/install/plesk_12.0.18_repair.log)

Continue...

===> Cumulative APS controller upgrade and repair (final stage) has been started.
===> Cumulative upgrade and repair of APS controller (final stage) has been completed.
===> Cumulative Plesk database upgrade and repair (revertable stage) has been started.
===> Preparing Plesk database upgrade (revertable stage).
===> Cumulative upgrade and repair of Plesk database (revertable stage) has been completed.
===> Cumulative Plesk upgrade and repair (final stage) has been started.
===> Preparing Plesk upgrade (final stage).
===> Cumulative upgrade and repair of Plesk (final stage) has been completed.
Reconfiguring mail subsystem...
Reconfiguring Apache web server...
Checking for the system groups and users necessary for Apache...
Checking for the group 'www-data'...
Group 'www-data' already exists

Checking for the user 'www-data'...
User 'www-data' already exists

Checking for the group 'psaserv'...
Group 'psaserv' already exists

Checking for the group 'psaserv'...
Trying to add supplementary group 'psaserv' for user 'www-data'... already there
Checking for the group 'psacln'...
Group 'psacln' already exists

Create PPSB support group
Checking for the group 'psasb'...
Group 'psasb' already exists

Checking for the group 'psasb'...
Trying to add supplementary group 'psasb' for user 'psaadm'... already there
Checking for the group 'psasb'...
Trying to add supplementary group 'psasb' for user 'www-data'... already there

===> Installing Apache Server
Trying to stop service apache2... Apache2 is NOT running.
invoke-rc.d: initscript apache2, action "status" failed.
done
Copying apache files... Module ssl already enabled
Module headers already enabled
done
===> Installing /usr/lib/apache2/suexec replacement
Leaving 'diversion of /usr/lib/apache2/suexec to /usr/lib/apache2/suexec.distrib by psa'
Module suexec already enabled
Module include already enabled
Module rewrite already enabled
Module userdir already enabled
Module fcgid already enabled
Module ssl already enabled
Module rpaf already enabled
Module aclr already enabled
Trying to install chrooted environment... `/bin/bash' -> `bash'
`/bin/cat' -> `cat'
`/bin/chmod' -> `chmod'
`/bin/cp' -> `cp'
`/bin/grep' -> `grep'
`/usr/bin/head' -> `head'
`/usr/bin/id' -> `id'
`/bin/less' -> `less'
`/bin/ln' -> `ln'
`/bin/ls' -> `ls'
`/bin/mkdir' -> `mkdir'
`/bin/more' -> `more'
`/bin/mv' -> `mv'
`/bin/pwd' -> `pwd'
`/bin/rm' -> `rm'
`/bin/rmdir' -> `rmdir'
`/bin/sh' -> `sh'
`/usr/bin/tail' -> `tail'
`/bin/touch' -> `touch'
`/usr/bin/du' -> `du'
`/usr/bin/vi' -> `vi'
`/bin/true' -> `true'
`/bin/false' -> `false'
`/usr/bin/scp' -> `scp'
`/usr/bin/groups' -> `groups'
`/usr/bin/wget' -> `wget'
`/usr/bin/zip' -> `zip'
`/usr/bin/unzip' -> `unzip'
`/bin/tar' -> `tar'
`/bin/gzip' -> `gzip'
`/bin/gunzip' -> `gunzip'
`/usr/bin/curl' -> `curl'
Trying to install sftp-server binary into chroot environment... `/usr/lib/openssh/sftp-server' -> `/var/www/vhosts/chroot/usr/lib/openssh/sftp-server'
done
cp: cannot stat `/lib64/libnss_*.so.2': No such file or directory
ln: failed to create hard link `/var/www/vhosts/chroot/etc/resolv.conf' => `/etc/resolv.conf': Invalid cross-device link
done
Checking that /opt/psa/bin/chrootsh registered as login shell...

Trying to start service apache2... Apache2 is NOT running.
invoke-rc.d: initscript apache2, action "status" failed.
* Starting web server apache2
Action 'start' failed.
The Apache error log may have more information.
...fail!
invoke-rc.d: initscript apache2, action "start" failed.

WARNING!
Some problems are found during start(see log file: /var/log/plesk/install/plesk-whc-installation.log)

Continue...

Reconfiguring ProFTPD FTP server...
Reconfiguring AWStats web statistics...
Reconfiguring WatchDog...
Restoring SELinux contexts...
Regenerating web servers' configuration files...
Warning: web server configuration is broken. We will try to repair it. This operation can take a lot of time, please do not interrupt the process.

**** Product repair started.

===> Checking for previous installation ... found.
Started bootstrapper repair procedure. This may take a while.
Certain actions may be skipped if not applicable.

Trying to start service mysql... /usr/sbin/mysqld (pid 1031) is running...
done
Trying to establish test connection... connected
done
Trying to start service mysql... /usr/sbin/mysqld (pid 1031) is running...
done
Trying to establish test connection... connected
done
Trying to find psa database... version is 012000018
Version is OK, no need to create psa database.
Trying to backup MySQL database... Warning: Not dumping MySQL database 'atmail' as it doesn't exist
done
MySQL databases are dumped to /var/lib/psa/dumps/mysql.preupgrade.12.0.18-12.0.18.20140618-080216.dump.gz
Finishing up upgrade procedures and rerunning previously failed upgrade actions...
===> Cumulative APS controller database (apsc) upgrade and repair has been started.
Upgrade or repair for 'apsc' (stage 'prep') is not required
Trying to backup MySQL database... done
MySQL databases are dumped to /var/lib/psa/dumps/mysql.preupgrade.apsc.12.0.18-12.0.18.20140618-080219.dump.gz
===> Cumulative upgrade and repair of APS controller database has been completed.
PHP Fatal error: Class 'PleskFatalException' not found in /opt/psa/admin/plib/Conf.php on line 61
Trying to reset database user password for 'apsc@'... done
PHP Fatal error: Class 'PleskFatalException' not found in /opt/psa/admin/plib/Conf.php on line 61

WARNING!
Some problems are found during fix credentials for APS controller database(see log file: /var/log/plesk/install/plesk_12.0.18_repair.log)

Continue...

===> Cumulative APS controller upgrade and repair (final stage) has been started.
Upgrade or repair for 'apsc' (stage 'post') is not required
===> Cumulative upgrade and repair of APS controller (final stage) has been completed.
Trying to reset database user password for 'pma_s7nC5EU_Qdp6@localhost'... done
===> Cumulative Plesk database upgrade and repair (revertable stage) has been started.
Upgrade or repair for 'core' (stage 'prep') is not required
===> Preparing Plesk database upgrade (revertable stage).
Trying to resolve hostname 'h2233790.stratoserver.net' and validate its IP address... done

Trying to set psa database version to 012000018... done
===> Cumulative upgrade and repair of Plesk database (revertable stage) has been completed.
Database is up-to-date
===> Cumulative Plesk upgrade and repair (final stage) has been started.
Upgrade or repair for 'core' (stage 'post') is not required
===> Preparing Plesk upgrade (final stage).
===> Cumulative upgrade and repair of Plesk (final stage) has been completed.
Trying to upgrade and repair SpamAssassin service configuration... Upgrade or repair for 'spamassassin' (stage 'files') is not required
done
Trying to upgrade and repair Courier-IMAP services configuration (prep stage)... Upgrade or repair for 'courier_imap' (stage 'prep') is not required
done
Trying to upgrade and repair Courier-IMAP services configuration (post stage)... Upgrade or repair for 'courier_imap' (stage 'post') is not required
done
Trying to upgrade and repair Courier-IMAP services configuration (bootstrapper-post stage)... Upgrade or repair for 'courier_imap' (stage 'bootstrapper-post') is not required
done
Trying to condrestart service courier-imapd... done
Trying to condrestart service courier-imaps... done
Trying to condrestart service courier-pop3d... done
Trying to condrestart service courier-pop3s... done

 

[IRM1989]

rest: Trying to upgrade and repair Horde webmail configuration... Upgrade or repair for 'horde' (stage 'files') is not required
done
Trying to upgrade and repair Parallels Premium antivirus (DrWeb) service configuration (bootstrapper-prep stage)... Upgrade or repair for 'drweb' (stage 'bootstrapper-prep') is not required
done
Trying to upgrade and repair Parallels Premium antivirus (DrWeb) service configuration (bootstrapper-post stage)... Upgrade or repair for 'drweb' (stage 'bootstrapper-post') is not required
done
Trying to upgrade and repair Fail2Ban configuration (bootstrapper-prep stage)... Upgrade or repair for 'fail2ban' (stage 'bootstrapper-prep') is not required
done
Trying to upgrade and repair Fail2Ban configuration (bootstrapper-post stage)... Upgrade or repair for 'fail2ban' (stage 'bootstrapper-post') is not required
done
Trying to upgrade and repair Firewall service configuration... Upgrade or repair for 'firewall' (stage 'post') is not required
done
Reconfiguring mail subsystem...
Trying to execute mail_restore to synchronize mail server settings and Plesk Database... ==> Checking for: mailsrv_conf_init... ok
==> Checking for: mail_handlers_init... ok
==> Checking for: mailsrv_entities_dump... ok
==> Checking for: mail_admin_aliases... ok
==> Checking for: mail_auth_dump... fail
==> Checking for: mailman_lists_dump... ok
==> Checking for: mail_kav8_restore... ok
==> Checking for: mail_responder_restore... ok
==> Checking for: mail_imap_restore... fail
==> Checking for: mail_spam_restore... fail
==> Checking for: mail_grey_restore... ok
==> Checking for: mail_mailbox_restore... ok
==> Checking for: mail_spf_restore... ok
==> Checking for: mail_dk_restore... ok
==> Checking for: mail_drweb_restore... ok
==> Checking for: mail_outgoing_restore... fail
==> Checking for: mail_transport_restore... fail
Errors occured in mail restore procedure
Some utilities have exited with errors:
/usr/lib/plesk-9.0/remote_mail_restore/mail_auth_dump
/usr/lib/plesk-9.0/remote_mail_restore/mail_imap_restore
/usr/lib/plesk-9.0/mail_spam_restore
/usr/lib/plesk-9.0/remote_mail_restore/mail_outgoing_restore
/usr/lib/plesk-9.0/remote_mail_restore/mail_transport_restore
done
Reconfiguring Apache web server...
Reconfiguring ProFTPD FTP server...
Reconfiguring AWStats web statistics...
Reconfiguring WatchDog...
PHP Fatal error: Class 'PleskFatalException' not found in /opt/psa/admin/plib/Conf.php on line 61
Restoring SELinux contexts...
Regenerating web servers' configuration files...
PHP Fatal error: Class 'PleskFatalException' not found in /opt/psa/admin/plib/Conf.php on line 61
Warning: web server configuration is broken. We will try to repair it. This operation can take a lot of time, please do not interrupt the process.
Unable to rebuild web server configuration, possible there are broken domains
Trying to reconfigure web-server configurations skipping broken domains... PHP Fatal error: Class 'PleskFatalException' not found in /opt/psa/admin/plib/Conf.php on line 61

WARNING!
Some problems are found during reconfigure web-server configurations skipping broken domains(see log file: /var/log/plesk/install/plesk_12.0.18_repair.log)

Continue...

Cleaning active Panel sessions...

Bootstrapper repair finished.
If problems persist, please check installer logs ('/var/log/plesk/install/plesk_12.0.18_repair.log' and '/var/log/plesk/install/plesk_12.0.18_repair_problems.log') for errors.
If you can't resolve the issue on your own, please address Parallels support.

 

[IgorG]

Please read PM from me.

 

[moritz2581]

i have the same problem. what can i do?

 

[PHornburg]

Same problem. After upgrading from panel or console the apache2 didn´t start. The above mentioned steps didn´t help.
OS Ubuntu 12.04.4 LTS
Panel version 11.5.30 Update #47

 

[IgorG]

Same problem.
Panel version 11.5.30 Update #47

What sort of problem do you have exactly?

 

[PHornburg]

At the moment I receive the following message, when I try to repair the configuration in the panel:
Konfigurieren des Webservers nicht möglich:Execution failed. Command: httpdmng Arguments: Array ( [0] => --reconfigure-all ) Details: Execution failed. Command: httpdmng Arguments: Array ( [0] => --reconfigure-server ) Details: [2014-06-27 09:51:55] ERR [util_exec] proc_close() failed [2014-06-27 09:51:57] ERR [panel] Apache config (14038555120.86834400) generation failed: Template_Exception: Can not restart web server: Service /etc/init.d/apache2 failed to start Service /etc/init.d/apache2 failed to start file: /opt/psa/admin/plib/Service/Driver/Web/Server/Apache.php line: 104 code: 0 Can not restart web server: Service /etc/init.d/apache2 failed to start Service /etc/init.d/apache2 failed to start
In the console I get:
Execution failed.
Command: httpdmng
Arguments: Array
(
[0] => --reconfigure-server
)

Details: [2014-06-27 09:47:27] ERR [util_exec] proc_close() failed
[2014-06-27 09:47:30] ERR [panel] Apache config (14038552450.19325700) generation failed: Template_Exception: Can not restart web server: Service /etc/init.d/apache2 failed to start
Service /etc/init.d/apache2 failed to start

file: /opt/psa/admin/plib/Service/Driver/Web/Server/Apache.php
line: 104
code: 0
Can not restart web server: Service /etc/init.d/apache2 failed to start
Service /etc/init.d/apache2 failed to start

when trying /usr/local/psa/admin/sbin/httpdmng --reconfigure-all

Would it help you, when I make a clean install and write down the errors?

 

[IgorG]

Do you have any custom vhost templates? Try to remove them.

 

[PHornburg]

No, there is only the standard template. Even if I try to "restore to default" nothing changes.

 

[IgorG]

If I correctly understood you have Plesk 11.5 version? Have you tried this - http://kb.parallels.com/115587?

 

[PHornburg]

No, at the moment I have Plesk 12.0.18.
Under the Ubuntu 12.04.4 LTS - Panel version 11.5.30 Update #47 everything is fine.
Then I tried an upgrade (first within the panel and the second try was with autoinstaller) the result is Ubuntu 12.04.4 LTS - Plesk version 12.0.18 Update #5, last updated at June 27, 2014 04:45 AM with the apache2 error. In both cases I made a fresh install of Plesk 11.5 with no customers and then started the upgrade.

 

[CMolter]

No, at the moment I have Plesk 12.0.18.
Under the Ubuntu 12.04.4 LTS - Panel version 11.5.30 Update #47 everything is fine.
Then I tried an upgrade (first within the panel and the second try was with autoinstaller) the result is Ubuntu 12.04.4 LTS - Plesk version 12.0.18 Update #5, last updated at June 27, 2014 04:45 AM with the apache2 error. In both cases I made a fresh install of Plesk 11.5 with no customers and then started the upgrade.

The same versions and the same procedures led to the same symptoms here.
apache2 error.log:
[Tue Jul 01 02:13:20 2014] [error] Init: Unable to read server certificate from file /opt/psa/var/certificates/certQBoZYtf
[Tue Jul 01 02:13:20 2014] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Tue Jul 01 02:13:20 2014] [error] SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error

 

[PHornburg]

For me I found a solution. I tested it yesterday twice with new installations of Plesk 11.5 and then upgrade to 12.0.8.

There was something wrong with the standard certificates in Plesk 12.0.8

I created a new certificate and made it the standard certificate. Then I changed it under IP addresses.



After that I deleted the "old" standard certificate and started /usr/local/psa/admin/sbin/httpdmng --reconfigure-all

The result: everything fine - apache2 started

 

[IgorG]

It seems that a number of providers have used incorrect method of certificates re-generation due to possible security problems (heartbleed). Because of this broken certificates have been inserted to Plesk database and during Plesk upgrade they have been restored to the file system. As possible workaround you may remove broken certificate and create new, self-signed in Plesk. It will help. But note that you may have trusted certificate. In this case you should contact contact support of your provider and ask them to recover your trusted certificate.

 

[seloka]

Hi Igor. I currently have the exact same problem that IRM1989 had. Can you tell me what you suggested via PM?