teratail header banner
teratail header banner
質問するログイン新規登録

質問編集履歴

4

ssl.confで指定されたerror.logの追加

2020/11/27 05:43

投稿

youplus40
youplus40

スコア19

title CHANGED
File without changes
body CHANGED
@@ -57,10 +57,16 @@
57
57
  ```
58
58
 
59
59
  ```log
60
- //error.log
60
+ //error.log (httpd.confで指定されているlog)
61
61
  AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
62
62
  ```
63
63
 
64
+ ```log
65
+ //error.log (ssl.confで指定されているlog
66
+ [ssl:emerg] [pid 556664] SSL Library Error: error:140AD009:SSL routines:SSL_CTX_use_certificate_file:PEM lib
67
+ ```
68
+
69
+
64
70
  ### 該当のソースコード
65
71
 
66
72
  ```conf

3

ssl.confの追加

2020/11/27 05:43

投稿

youplus40
youplus40

スコア19

title CHANGED
File without changes
body CHANGED
@@ -235,7 +235,35 @@
235
235
  SSLCertificateChainFile /etc/httpd/conf/certs/xx.co.jp.ca
236
236
  </VirtualHost>
237
237
  ```
238
+ ```conf
239
+ #ssl.conf
240
+ LoadModule ssl_module modules/mod_ssl.so
238
241
 
242
+ Listen 443
243
+
244
+ AddType application/x-x509-ca-cert .crt
245
+ AddType application/x-pkcs7-crl .crl
246
+
247
+ SSLPassPhraseDialog builtin
248
+
249
+ #SSLSessionCache dc:UNIX:/var/cache/mod_ssl/distcache
250
+ SSLSessionCache shmcb:/var/cache/mod_ssl/scache(512000)
251
+ SSLSessionCacheTimeout 300
252
+
253
+ SSLMutex default
254
+
255
+ SSLRandomSeed startup file:/dev/urandom 256
256
+ SSLRandomSeed connect builtin
257
+
258
+ SSLCryptoDevice builtin
259
+
260
+ SSLProtocol all -SSLv2 -SSLv3
261
+ SSLCipherSuite RSA+xxx
262
+
263
+ SSLCertificateKeyFile /etc/httpd/conf/certs/wildcard.bb-f.net_2020.key.pem
264
+ SSLCertificateFile /etc/httpd/conf/certs/wildcard.bb-f.net_2020.crt
265
+ SSLCertificateChainFile /etc/httpd/conf/certs/FujiSSxxx.ca
266
+ ```
239
267
  ### 補足情報(FW/ツールのバージョンなど)
240
268
  apache 2.4.37
241
269
  cent os 8.2

2

バージョンの追加など

2020/11/27 05:21

投稿

youplus40
youplus40

スコア19

title CHANGED
File without changes
body CHANGED
@@ -3,8 +3,8 @@
3
3
  TLSのバージョンサポートが終了し、サーバーの移行作業をしています。
4
4
  前のサーバーにあったSSL証明書、httpd.confなどを新サーバーに移行し、
5
5
  systemctl restart httpdを実行したところ、エラーになりました。
6
+ 何が原因か分からず、困っております。
6
7
 
7
-
8
8
  ###エラーメッセージ
9
9
 
10
10
  ```
@@ -25,28 +25,28 @@
25
25
  Main PID: 556613 (code=exited, status=1/FAILURE)
26
26
  Status: "Reading configuration..."
27
27
 
28
- Nov 27 11:44:53 web06.at-scelta.com systemd[1]: Starting The Apache HTTP Server...
28
+ Nov 27 11:44:53 web06.xx.com systemd[1]: Starting The Apache HTTP Server...
29
- Nov 27 11:44:53 web06.at-scelta.com systemd[1]: httpd.service: Main process exited, code=exi>
29
+ Nov 27 11:44:53 web06.xx.com systemd[1]: httpd.service: Main process exited, code=exi>
30
- Nov 27 11:44:53 web06.at-scelta.com systemd[1]: httpd.service: Failed with result 'exit-code>
30
+ Nov 27 11:44:53 web06.xx.com systemd[1]: httpd.service: Failed with result 'exit-code>
31
- Nov 27 11:44:53 web06.at-scelta.com systemd[1]: Failed to start The Apache HTTP Server.
31
+ Nov 27 11:44:53 web06.xx.com systemd[1]: Failed to start The Apache HTTP Server.
32
32
  ```
33
33
  ```
34
34
  [root@ ~] journalctl -xe
35
35
  -- Unit sysstat-collect.service has finished starting up.
36
36
  --
37
37
  -- The start-up result is done.
38
- Nov 27 11:44:34 web06.at-scelta.com postfix/smtpd[556608]: connect from unknown[193.169.254.107]>
38
+ Nov 27 11:44:34 web06.xx.com postfix/smtpd[556608]: connect from unknown[193.169.254.107]>
39
- Nov 27 11:44:35 web06.at-scelta.com postfix/smtpd[556608]: lost connection after AUTH from unknown[193.169.254.107]>
39
+ Nov 27 11:44:35 web06.xx.com postfix/smtpd[556608]: lost connection after AUTH from unknown[193.169.254.107]>
40
- Nov 27 11:44:35 web06.at-scelta.com postfix/smtpd[556608]: disconnect from unknown[193.169.2254.107] ehlo=1 auth=0/1 commands=1/2>
40
+ Nov 27 11:44:35 web06.xx.com postfix/smtpd[556608]: disconnect from unknown[193.169.2254.107] ehlo=1 auth=0/1 commands=1/2>
41
- Nov 27 11:44:53 web06.at-scelta.com systemd[1]: Starting The Apache HTTP Server...
41
+ Nov 27 11:44:53 web06.xx.com systemd[1]: Starting The Apache HTTP Server...
42
42
  -- Subject: Unit httpd.service has begun start-up
43
43
  -- Defined-By: systemd
44
44
  -- Support: https://access.redhat.com/support
45
45
  --
46
46
  -- Unit httpd.service has begun starting up.
47
- Nov 27 11:44:53 web06.at-scelta.com systemd[1]: httpd.service: Main process exited, code=exited ,status=1/FAILURE
47
+ Nov 27 11:44:53 web06.xx.com systemd[1]: httpd.service: Main process exited, code=exited ,status=1/FAILURE
48
- Nov 27 11:44:53 web06.at-scelta.com systemd[1]: httpd.service: Failed with result 'exit-code'.
48
+ Nov 27 11:44:53 web06.xx.com systemd[1]: httpd.service: Failed with result 'exit-code'.
49
- Nov 27 11:44:53 web06.at-scelta.com systemd[1]: Failed to start The Apache HTTP Server.
49
+ Nov 27 11:44:53 web06.xx.com systemd[1]: Failed to start The Apache HTTP Server.
50
50
  -- Subject: Unit httpd.service has failed
51
51
  -- Defined-By: systemd
52
52
  -- Support: https://access.redhat.com/support
@@ -235,10 +235,7 @@
235
235
  SSLCertificateChainFile /etc/httpd/conf/certs/xx.co.jp.ca
236
236
  </VirtualHost>
237
237
  ```
238
- ### 試したこと
239
238
 
240
- ここに問題に対して試したことを記載してください。
241
-
242
239
  ### 補足情報(FW/ツールのバージョンなど)
243
-
244
- ここにより詳細な情報を記載してください。
240
+ apache 2.4.37
241
+ cent os 8.2

1

一部修正

2020/11/27 05:07

投稿

youplus40
youplus40

スコア19

title CHANGED
File without changes
body CHANGED
@@ -206,33 +206,33 @@
206
206
  ```conf
207
207
  #XX.co.jp.conf
208
208
  # TEMP
209
- <DirectoryMatch "/home/www/abahouse.co.jp/www/data">
209
+ <DirectoryMatch "/home/www/xx.co.jp/www/data">
210
210
  Header set Pragma no-cache
211
211
  </DirectoryMatch>
212
- <VirtualHost abahouse.co.jp:443>
212
+ <VirtualHost xx.co.jp:443>
213
- ServerName abahouse.co.jp
213
+ ServerName xx.co.jp
214
214
 
215
215
  RewriteEngine On
216
- RewriteCond %{HTTP_HOST} ^www.abahouse.co.jp
216
+ RewriteCond %{HTTP_HOST} ^www.xx.co.jp
217
- # RewriteRule ^/(.*)$ https://abahouse.co.jp/$1 [R,NE,L]
217
+ # RewriteRule ^/(.*)$ https://xx.co.jp/$1 [R,NE,L]
218
- RewriteRule ^/(.*)$ http://abahouse.co.jp/$1 [R=302,NE,L]
218
+ RewriteRule ^/(.*)$ http://xx.co.jp/$1 [R=302,NE,L]
219
219
 
220
220
  # TEMP
221
221
  RewriteCond %{REMOTE_ADDR} !^127.0.0.1$
222
222
  RewriteCond %{HTTPS} on
223
223
  RewriteCond %{SERVER_PORT} 443
224
- RewriteRule ^/(.*)$ http://abahouse.co.jp/$1 [R=302,NE,L]
224
+ RewriteRule ^/(.*)$ http://xx.co.jp/$1 [R=302,NE,L]
225
225
 
226
- ServerAdmin info@abahouse.co.jp
226
+ ServerAdmin info@xx.co.jp
227
- DocumentRoot "/home/www/abahouse.co.jp/www/data"
227
+ DocumentRoot "/home/www/xx.co.jp/www/data"
228
- CustomLog "|/usr/sbin/rotatelogs /home/www/abahouse.co.jp/www/log/access_log.%Y%m%d 86400 540" combined env=!no_log
228
+ CustomLog "|/usr/sbin/rotatelogs /home/www/xx.co.jp/www/log/access_log.%Y%m%d 86400 540" combined env=!no_log
229
- ErrorLog "|/usr/sbin/rotatelogs /home/www/abahouse.co.jp/www/log/error_log.%Y%m%d 86400 540"
229
+ ErrorLog "|/usr/sbin/rotatelogs /home/www/xx.co.jp/www/log/error_log.%Y%m%d 86400 540"
230
230
  LogLevel rewrite:trace1
231
231
 
232
232
  SSLEngine On
233
- SSLCertificateKeyFile /etc/httpd/conf/certs/abahouse.co.jp.key
233
+ SSLCertificateKeyFile /etc/httpd/conf/certs/xx.co.jp.key
234
- SSLCertificateFile /etc/httpd/conf/certs/abahouse.co.jp.crt
234
+ SSLCertificateFile /etc/httpd/conf/certs/xx.co.jp.crt
235
- SSLCertificateChainFile /etc/httpd/conf/certs/abahouse.co.jp.ca
235
+ SSLCertificateChainFile /etc/httpd/conf/certs/xx.co.jp.ca
236
236
  </VirtualHost>
237
237
  ```
238
238
  ### 試したこと