質問編集履歴
4
ssl.confで指定されたerror.logの追加
title
CHANGED
File without changes
|
body
CHANGED
@@ -57,10 +57,16 @@
|
|
57
57
|
```
|
58
58
|
|
59
59
|
```log
|
60
|
-
//error.log
|
60
|
+
//error.log (httpd.confで指定されているlog)
|
61
61
|
AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
|
62
62
|
```
|
63
63
|
|
64
|
+
```log
|
65
|
+
//error.log (ssl.confで指定されているlog
|
66
|
+
[ssl:emerg] [pid 556664] SSL Library Error: error:140AD009:SSL routines:SSL_CTX_use_certificate_file:PEM lib
|
67
|
+
```
|
68
|
+
|
69
|
+
|
64
70
|
### 該当のソースコード
|
65
71
|
|
66
72
|
```conf
|
3
ssl.confの追加
title
CHANGED
File without changes
|
body
CHANGED
@@ -235,7 +235,35 @@
|
|
235
235
|
SSLCertificateChainFile /etc/httpd/conf/certs/xx.co.jp.ca
|
236
236
|
</VirtualHost>
|
237
237
|
```
|
238
|
+
```conf
|
239
|
+
#ssl.conf
|
240
|
+
LoadModule ssl_module modules/mod_ssl.so
|
238
241
|
|
242
|
+
Listen 443
|
243
|
+
|
244
|
+
AddType application/x-x509-ca-cert .crt
|
245
|
+
AddType application/x-pkcs7-crl .crl
|
246
|
+
|
247
|
+
SSLPassPhraseDialog builtin
|
248
|
+
|
249
|
+
#SSLSessionCache dc:UNIX:/var/cache/mod_ssl/distcache
|
250
|
+
SSLSessionCache shmcb:/var/cache/mod_ssl/scache(512000)
|
251
|
+
SSLSessionCacheTimeout 300
|
252
|
+
|
253
|
+
SSLMutex default
|
254
|
+
|
255
|
+
SSLRandomSeed startup file:/dev/urandom 256
|
256
|
+
SSLRandomSeed connect builtin
|
257
|
+
|
258
|
+
SSLCryptoDevice builtin
|
259
|
+
|
260
|
+
SSLProtocol all -SSLv2 -SSLv3
|
261
|
+
SSLCipherSuite RSA+xxx
|
262
|
+
|
263
|
+
SSLCertificateKeyFile /etc/httpd/conf/certs/wildcard.bb-f.net_2020.key.pem
|
264
|
+
SSLCertificateFile /etc/httpd/conf/certs/wildcard.bb-f.net_2020.crt
|
265
|
+
SSLCertificateChainFile /etc/httpd/conf/certs/FujiSSxxx.ca
|
266
|
+
```
|
239
267
|
### 補足情報(FW/ツールのバージョンなど)
|
240
268
|
apache 2.4.37
|
241
269
|
cent os 8.2
|
2
バージョンの追加など
title
CHANGED
File without changes
|
body
CHANGED
@@ -3,8 +3,8 @@
|
|
3
3
|
TLSのバージョンサポートが終了し、サーバーの移行作業をしています。
|
4
4
|
前のサーバーにあったSSL証明書、httpd.confなどを新サーバーに移行し、
|
5
5
|
systemctl restart httpdを実行したところ、エラーになりました。
|
6
|
+
何が原因か分からず、困っております。
|
6
7
|
|
7
|
-
|
8
8
|
###エラーメッセージ
|
9
9
|
|
10
10
|
```
|
@@ -25,28 +25,28 @@
|
|
25
25
|
Main PID: 556613 (code=exited, status=1/FAILURE)
|
26
26
|
Status: "Reading configuration..."
|
27
27
|
|
28
|
-
Nov 27 11:44:53 web06.
|
28
|
+
Nov 27 11:44:53 web06.xx.com systemd[1]: Starting The Apache HTTP Server...
|
29
|
-
Nov 27 11:44:53 web06.
|
29
|
+
Nov 27 11:44:53 web06.xx.com systemd[1]: httpd.service: Main process exited, code=exi>
|
30
|
-
Nov 27 11:44:53 web06.
|
30
|
+
Nov 27 11:44:53 web06.xx.com systemd[1]: httpd.service: Failed with result 'exit-code>
|
31
|
-
Nov 27 11:44:53 web06.
|
31
|
+
Nov 27 11:44:53 web06.xx.com systemd[1]: Failed to start The Apache HTTP Server.
|
32
32
|
```
|
33
33
|
```
|
34
34
|
[root@ ~] journalctl -xe
|
35
35
|
-- Unit sysstat-collect.service has finished starting up.
|
36
36
|
--
|
37
37
|
-- The start-up result is done.
|
38
|
-
Nov 27 11:44:34 web06.
|
38
|
+
Nov 27 11:44:34 web06.xx.com postfix/smtpd[556608]: connect from unknown[193.169.254.107]>
|
39
|
-
Nov 27 11:44:35 web06.
|
39
|
+
Nov 27 11:44:35 web06.xx.com postfix/smtpd[556608]: lost connection after AUTH from unknown[193.169.254.107]>
|
40
|
-
Nov 27 11:44:35 web06.
|
40
|
+
Nov 27 11:44:35 web06.xx.com postfix/smtpd[556608]: disconnect from unknown[193.169.2254.107] ehlo=1 auth=0/1 commands=1/2>
|
41
|
-
Nov 27 11:44:53 web06.
|
41
|
+
Nov 27 11:44:53 web06.xx.com systemd[1]: Starting The Apache HTTP Server...
|
42
42
|
-- Subject: Unit httpd.service has begun start-up
|
43
43
|
-- Defined-By: systemd
|
44
44
|
-- Support: https://access.redhat.com/support
|
45
45
|
--
|
46
46
|
-- Unit httpd.service has begun starting up.
|
47
|
-
Nov 27 11:44:53 web06.
|
47
|
+
Nov 27 11:44:53 web06.xx.com systemd[1]: httpd.service: Main process exited, code=exited ,status=1/FAILURE
|
48
|
-
Nov 27 11:44:53 web06.
|
48
|
+
Nov 27 11:44:53 web06.xx.com systemd[1]: httpd.service: Failed with result 'exit-code'.
|
49
|
-
Nov 27 11:44:53 web06.
|
49
|
+
Nov 27 11:44:53 web06.xx.com systemd[1]: Failed to start The Apache HTTP Server.
|
50
50
|
-- Subject: Unit httpd.service has failed
|
51
51
|
-- Defined-By: systemd
|
52
52
|
-- Support: https://access.redhat.com/support
|
@@ -235,10 +235,7 @@
|
|
235
235
|
SSLCertificateChainFile /etc/httpd/conf/certs/xx.co.jp.ca
|
236
236
|
</VirtualHost>
|
237
237
|
```
|
238
|
-
### 試したこと
|
239
238
|
|
240
|
-
ここに問題に対して試したことを記載してください。
|
241
|
-
|
242
239
|
### 補足情報(FW/ツールのバージョンなど)
|
243
|
-
|
244
|
-
|
240
|
+
apache 2.4.37
|
241
|
+
cent os 8.2
|
1
一部修正
title
CHANGED
File without changes
|
body
CHANGED
@@ -206,33 +206,33 @@
|
|
206
206
|
```conf
|
207
207
|
#XX.co.jp.conf
|
208
208
|
# TEMP
|
209
|
-
<DirectoryMatch "/home/www/
|
209
|
+
<DirectoryMatch "/home/www/xx.co.jp/www/data">
|
210
210
|
Header set Pragma no-cache
|
211
211
|
</DirectoryMatch>
|
212
|
-
<VirtualHost
|
212
|
+
<VirtualHost xx.co.jp:443>
|
213
|
-
ServerName
|
213
|
+
ServerName xx.co.jp
|
214
214
|
|
215
215
|
RewriteEngine On
|
216
|
-
RewriteCond %{HTTP_HOST} ^www.
|
216
|
+
RewriteCond %{HTTP_HOST} ^www.xx.co.jp
|
217
|
-
# RewriteRule ^/(.*)$ https://
|
217
|
+
# RewriteRule ^/(.*)$ https://xx.co.jp/$1 [R,NE,L]
|
218
|
-
RewriteRule ^/(.*)$ http://
|
218
|
+
RewriteRule ^/(.*)$ http://xx.co.jp/$1 [R=302,NE,L]
|
219
219
|
|
220
220
|
# TEMP
|
221
221
|
RewriteCond %{REMOTE_ADDR} !^127.0.0.1$
|
222
222
|
RewriteCond %{HTTPS} on
|
223
223
|
RewriteCond %{SERVER_PORT} 443
|
224
|
-
RewriteRule ^/(.*)$ http://
|
224
|
+
RewriteRule ^/(.*)$ http://xx.co.jp/$1 [R=302,NE,L]
|
225
225
|
|
226
|
-
ServerAdmin info@
|
226
|
+
ServerAdmin info@xx.co.jp
|
227
|
-
DocumentRoot "/home/www/
|
227
|
+
DocumentRoot "/home/www/xx.co.jp/www/data"
|
228
|
-
CustomLog "|/usr/sbin/rotatelogs /home/www/
|
228
|
+
CustomLog "|/usr/sbin/rotatelogs /home/www/xx.co.jp/www/log/access_log.%Y%m%d 86400 540" combined env=!no_log
|
229
|
-
ErrorLog "|/usr/sbin/rotatelogs /home/www/
|
229
|
+
ErrorLog "|/usr/sbin/rotatelogs /home/www/xx.co.jp/www/log/error_log.%Y%m%d 86400 540"
|
230
230
|
LogLevel rewrite:trace1
|
231
231
|
|
232
232
|
SSLEngine On
|
233
|
-
SSLCertificateKeyFile /etc/httpd/conf/certs/
|
233
|
+
SSLCertificateKeyFile /etc/httpd/conf/certs/xx.co.jp.key
|
234
|
-
SSLCertificateFile /etc/httpd/conf/certs/
|
234
|
+
SSLCertificateFile /etc/httpd/conf/certs/xx.co.jp.crt
|
235
|
-
SSLCertificateChainFile /etc/httpd/conf/certs/
|
235
|
+
SSLCertificateChainFile /etc/httpd/conf/certs/xx.co.jp.ca
|
236
236
|
</VirtualHost>
|
237
237
|
```
|
238
238
|
### 試したこと
|