Apache2が起動しない

Question

前提・実現したいこと

SSlを設定しapache2を再起動したところエラーが出てapache2が起動しなくなりました。

エラーメッセージ

● apache2.service - The Apache HTTP Server
   Loaded: loaded (/lib/systemd/system/apache2.service; enabled; vendor preset: enabled)
   Active: failed (Result: exit-code) since Sun 2021-08-01 13:37:29 JST; 1min 0s ago
     Docs: https://httpd.apache.org/docs/2.4/
  Process: 3369 ExecStart=/usr/sbin/apachectl start (code=exited, status=1/FAILURE)

 8月 01 13:37:28 raspberrypi systemd[1]: Starting The Apache HTTP Server...
 8月 01 13:37:28 raspberrypi apachectl[3369]: Action 'start' failed.
 8月 01 13:37:28 raspberrypi apachectl[3369]: The Apache error log may have more information.
 8月 01 13:37:29 raspberrypi systemd[1]: apache2.service: Control process exited, code=exited, status=1/FAILURE
 8月 01 13:37:29 raspberrypi systemd[1]: apache2.service: Failed with result 'exit-code'.
 8月 01 13:37:29 raspberrypi systemd[1]: Failed to start The Apache HTTP Server.
 8月 01 13:38:02 raspberrypi systemd[1]: apache2.service: Unit cannot be reloaded because it is inactive.
~

###error.log

[Sun Aug 01 00:00:04.313110 2021] [ssl:warn] [pid 25660] AH01909: 127.0.1.1:443:0 server certificate does NOT include an ID which matches the server name
[Sun Aug 01 00:00:04.317891 2021] [mpm_prefork:notice] [pid 25660] AH00163: Apache/2.4.38 (Raspbian) OpenSSL/1.1.1d configured -- resuming normal operations
[Sun Aug 01 00:00:04.317978 2021] [core:notice] [pid 25660] AH00094: Command line: '/usr/sbin/apache2'
[Sun Aug 01 07:00:17.762598 2021] [authz_core:error] [pid 31754] [client 143.198.136.88:53978] AH01630: client denied by server configuration: /var/www/html/server-status
[Sun Aug 01 07:00:18.534846 2021] [php7:error] [pid 31756] [client 143.198.136.88:54342] script '/var/www/html/info.php' not found or unable to stat
[Sun Aug 01 11:32:31.478206 2021] [php7:error] [pid 31757] [client 5.188.210.227:60275] script '/var/www/html/echo.php' not found or unable to stat, referer: https://www.google.com/
[Sun Aug 01 13:31:16.291623 2021] [mpm_prefork:notice] [pid 25660] AH00169: caught SIGTERM, shutting down
[Sun Aug 01 13:31:16.519948 2021] [ssl:emerg] [pid 3302] AH02562: Failed to configure certificate 127.0.1.1:443:0 (with chain), check /etc/apache2/ssl/server.crt
[Sun Aug 01 13:31:16.520239 2021] [ssl:emerg] [pid 3302] SSL Library Error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
AH00016: Configuration Failed
[Sun Aug 01 13:37:28.981163 2021] [ssl:emerg] [pid 3372] AH02562: Failed to configure certificate raspberrypi:443:0 (with chain), check /etc/apache2/ssl/server.crt
[Sun Aug 01 13:37:28.981585 2021] [ssl:emerg] [pid 3372] SSL Library Error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
AH00016: Configuration Failed
[Sun Aug 01 13:51:31.687917 2021] [ssl:emerg] [pid 3481] AH02562: Failed to configure certificate raspberrypi:443:0 (with chain), check /etc/apache2/ssl/server.crt
[Sun Aug 01 13:51:31.688191 2021] [ssl:emerg] [pid 3481] SSL Library Error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
AH00016: Configuration Failed
[Sun Aug 01 13:52:35.999488 2021] [ssl:emerg] [pid 3509] AH02562: Failed to configure certificate raspberrypi:443:0 (with chain), check /etc/apache2/ssl/server.crt
[Sun Aug 01 13:52:35.999768 2021] [ssl:emerg] [pid 3509] SSL Library Error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
AH00016: Configuration Failed
[Sun Aug 01 13:58:58.925537 2021] [ssl:emerg] [pid 3544] AH02562: Failed to configure certificate raspberrypi:443:0 (with chain), check /etc/apache2/ssl/server.crt
[Sun Aug 01 13:58:58.925782 2021] [ssl:emerg] [pid 3544] SSL Library Error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
AH00016: Configuration Failed
[Sun Aug 01 13:59:19.683978 2021] [ssl:emerg] [pid 3576] AH02562: Failed to configure certificate raspberrypi:443:0 (with chain), check /etc/apache2/ssl/server.crt
[Sun Aug 01 13:59:19.684278 2021] [ssl:emerg] [pid 3576] SSL Library Error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
AH00016: Configuration Failed
[Sun Aug 01 14:09:23.394461 2021] [ssl:emerg] [pid 3696] AH02562: Failed to configure certificate raspberrypi:443:0 (with chain), check /etc/apache2/ssl/server.crt
[Sun Aug 01 14:09:23.394810 2021] [ssl:emerg] [pid 3696] SSL Library Error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
AH00016: Configuration Failed
[Sun Aug 01 14:29:22.133782 2021] [ssl:emerg] [pid 3843] AH02562: Failed to configure certificate raspberrypi:443:0 (with chain), check /etc/apache2/ssl/server.crt
[Sun Aug 01 14:29:22.134088 2021] [ssl:emerg] [pid 3843] SSL Library Error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
AH00016: Configuration Failed
[Sun Aug 01 14:30:59.485511 2021] [ssl:emerg] [pid 3865] AH02562: Failed to configure certificate 127.0.1.1:443:0 (with chain), check /etc/apache2/ssl/server.crt
[Sun Aug 01 14:30:59.485786 2021] [ssl:emerg] [pid 3865] SSL Library Error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
AH00016: Configuration Failed
[Sun Aug 01 14:36:40.657332 2021] [ssl:emerg] [pid 3908] AH02562: Failed to configure certificate raspberrypi:443:0 (with chain), check /etc/apache2/ssl/server.crt
[Sun Aug 01 14:36:40.657940 2021] [ssl:emerg] [pid 3908] SSL Library Error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
AH00016: Configuration Failed

###試したこと
・80番443番ポートをkill

補足情報（FW/ツールのバージョンなど）

raspberry pi 3B+
Apache 2.4.38
Open SSL (SAN設定済み)
Servername　設定済み

Comments

[hoshi-takanori]

apache2 のエラーログ (たぶん /var/log/apache2/error.log あたりにあるかも) をご確認ください。
また、設定内容も貼りましょう。

[AbeTakashi]

[Sun Aug 01 14:36:40.657332 2021] [ssl:emerg] [pid 3908] AH02562: Failed to configure certificate raspberrypi:443:0 (with chain), check /etc/apache2/ssl/server.crt

とあり、/etc/apache2/ssl/server.crt をチェックしろと書いてありますが、こちらは対応されたのでしょうか？　質問文から読み取れる情報としてはこれ以外はないと思います。

[mumeinosato]

server.crtは証明書なので問題ないと思いますが。

Answer 1

keyを2048で生成する。

sudo openssl genrsa -des3 -out server.key 2048