A
Adambplusplus
Guest
Good morning, everybody. This is more of a warning than anything else; just to help out those who are having similar problems as me.
Last night, two of my plesk 9.2 servers did a 'yum update' as they do every week around this time. However, this week, 2 minutes after the yum update, the Plesk Control panel stopped working altogether. Trying to restart psa /etc/init.d/psa restart, or trying to restart sw-cp-server, /etc/init.d/sw-cp-server restart , would report that the plesk control panel wasn't starting. All my hosted web sites worked fine; no problems apart from the control panel.
Plesk isnt' much for logging, and the only logs I could find explaining this were in /var/log/sw-cp-server/error_log, which was this:
2010-03-25 09:58:15: (log.c.75) server started
2010-03-25 09:58:15: (network.c.336) SSL: error:00000000:lib(0):func(0):reason(0)
That's it, which is a pretty nondescript error.
I went through looking for SSL certificates, since maybe one of them got botched, or maybe it was expired and, plesk 9.2 doesn't like expired certs, and the like.
However, I dug through my /var/log/yum.log, and found that mod_ssl, openssl, and httpd were updated immediately before the problem started.
So, I did this, in /var/log:
[root@server1]# grep openssl rpmpkgs rpmpkgs.1
rpmpkgs
penssl-0.9.8e-12.el5_4.6.i686.rpm
rpmpkgs.1
penssl-0.9.8e-12.el5_4.1.i686.rpm
[root@server1]# grep mod_ssl rpmpkgs rpmpkgs.1
rpmpkgs:mod_ssl-2.2.3-31.el5_4.4.i386.rpm
rpmpkgs.1:mod_ssl-2.2.3-31.el5_4.2.i386.rpm
[root@server1]# grep httpd rpmpkgs rpmpkgs.1
rpmpkgs:httpd-2.2.3-31.el5_4.4.i386.rpm
rpmpkgs.1:httpd-2.2.3-31.el5_4.2.i386.rpm
Aha, we had a slight change in those packages. Red Hat is very good at providing backwards compatibility, but something inside the sw-cp-server doesn't jive with the newer version of /lib/ssl.so.6 (symlinked to /lib/libssl.so.0.9.8e) and it won't run, period.
I logged into RHN, grabbed the previous versions of the packages, and installed them with:
rpm -Uvh --oldpackage *.rpm
They went in fine, I restarted apache, and restarted psa, and everything is peachy keen now.
I put this in /etc/yum.conf:
exclude=mod_ssl* openssl* httpd*
which will keep those packages from getting updated. This will likely cause problems updating in the future, and might cascade to other applications (for example, if another program needs a newer version of openssl to work properly) but for now, it's working.
Parallels, I'd encourage you to look into this issue, and then fix it. It's a bugger to figure out the first time, but I'll certainly know what to do in the future when this happens.
Last night, two of my plesk 9.2 servers did a 'yum update' as they do every week around this time. However, this week, 2 minutes after the yum update, the Plesk Control panel stopped working altogether. Trying to restart psa /etc/init.d/psa restart, or trying to restart sw-cp-server, /etc/init.d/sw-cp-server restart , would report that the plesk control panel wasn't starting. All my hosted web sites worked fine; no problems apart from the control panel.
Plesk isnt' much for logging, and the only logs I could find explaining this were in /var/log/sw-cp-server/error_log, which was this:
2010-03-25 09:58:15: (log.c.75) server started
2010-03-25 09:58:15: (network.c.336) SSL: error:00000000:lib(0):func(0):reason(0)
That's it, which is a pretty nondescript error.
I went through looking for SSL certificates, since maybe one of them got botched, or maybe it was expired and, plesk 9.2 doesn't like expired certs, and the like.
However, I dug through my /var/log/yum.log, and found that mod_ssl, openssl, and httpd were updated immediately before the problem started.
So, I did this, in /var/log:
[root@server1]# grep openssl rpmpkgs rpmpkgs.1
rpmpkgs
rpmpkgs.1
[root@server1]# grep mod_ssl rpmpkgs rpmpkgs.1
rpmpkgs:mod_ssl-2.2.3-31.el5_4.4.i386.rpm
rpmpkgs.1:mod_ssl-2.2.3-31.el5_4.2.i386.rpm
[root@server1]# grep httpd rpmpkgs rpmpkgs.1
rpmpkgs:httpd-2.2.3-31.el5_4.4.i386.rpm
rpmpkgs.1:httpd-2.2.3-31.el5_4.2.i386.rpm
Aha, we had a slight change in those packages. Red Hat is very good at providing backwards compatibility, but something inside the sw-cp-server doesn't jive with the newer version of /lib/ssl.so.6 (symlinked to /lib/libssl.so.0.9.8e) and it won't run, period.
I logged into RHN, grabbed the previous versions of the packages, and installed them with:
rpm -Uvh --oldpackage *.rpm
They went in fine, I restarted apache, and restarted psa, and everything is peachy keen now.
I put this in /etc/yum.conf:
exclude=mod_ssl* openssl* httpd*
which will keep those packages from getting updated. This will likely cause problems updating in the future, and might cascade to other applications (for example, if another program needs a newer version of openssl to work properly) but for now, it's working.
Parallels, I'd encourage you to look into this issue, and then fix it. It's a bugger to figure out the first time, but I'll certainly know what to do in the future when this happens.