質問編集履歴
4
ssl.confで指定されたerror.logの追加
    
        title	
    CHANGED
    
    | 
         
            File without changes
         
     | 
    
        body	
    CHANGED
    
    | 
         @@ -57,10 +57,16 @@ 
     | 
|
| 
       57 
57 
     | 
    
         
             
            ```
         
     | 
| 
       58 
58 
     | 
    
         | 
| 
       59 
59 
     | 
    
         
             
            ```log
         
     | 
| 
       60 
     | 
    
         
            -
            //error.log
         
     | 
| 
      
 60 
     | 
    
         
            +
            //error.log (httpd.confで指定されているlog)
         
     | 
| 
       61 
61 
     | 
    
         
             
            AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
         
     | 
| 
       62 
62 
     | 
    
         
             
            ```
         
     | 
| 
       63 
63 
     | 
    
         | 
| 
      
 64 
     | 
    
         
            +
            ```log
         
     | 
| 
      
 65 
     | 
    
         
            +
            //error.log (ssl.confで指定されているlog
         
     | 
| 
      
 66 
     | 
    
         
            +
             [ssl:emerg] [pid 556664] SSL Library Error: error:140AD009:SSL routines:SSL_CTX_use_certificate_file:PEM lib
         
     | 
| 
      
 67 
     | 
    
         
            +
            ```
         
     | 
| 
      
 68 
     | 
    
         
            +
             
     | 
| 
      
 69 
     | 
    
         
            +
             
     | 
| 
       64 
70 
     | 
    
         
             
            ### 該当のソースコード
         
     | 
| 
       65 
71 
     | 
    
         | 
| 
       66 
72 
     | 
    
         
             
            ```conf
         
     | 
3
ssl.confの追加
    
        title	
    CHANGED
    
    | 
         
            File without changes
         
     | 
    
        body	
    CHANGED
    
    | 
         @@ -235,7 +235,35 @@ 
     | 
|
| 
       235 
235 
     | 
    
         
             
              SSLCertificateChainFile /etc/httpd/conf/certs/xx.co.jp.ca
         
     | 
| 
       236 
236 
     | 
    
         
             
            </VirtualHost>
         
     | 
| 
       237 
237 
     | 
    
         
             
            ```
         
     | 
| 
      
 238 
     | 
    
         
            +
            ```conf
         
     | 
| 
      
 239 
     | 
    
         
            +
            #ssl.conf
         
     | 
| 
      
 240 
     | 
    
         
            +
            LoadModule ssl_module modules/mod_ssl.so
         
     | 
| 
       238 
241 
     | 
    
         | 
| 
      
 242 
     | 
    
         
            +
            Listen 443
         
     | 
| 
      
 243 
     | 
    
         
            +
             
     | 
| 
      
 244 
     | 
    
         
            +
            AddType application/x-x509-ca-cert .crt
         
     | 
| 
      
 245 
     | 
    
         
            +
            AddType application/x-pkcs7-crl    .crl
         
     | 
| 
      
 246 
     | 
    
         
            +
             
     | 
| 
      
 247 
     | 
    
         
            +
            SSLPassPhraseDialog  builtin
         
     | 
| 
      
 248 
     | 
    
         
            +
             
     | 
| 
      
 249 
     | 
    
         
            +
            #SSLSessionCache        dc:UNIX:/var/cache/mod_ssl/distcache
         
     | 
| 
      
 250 
     | 
    
         
            +
            SSLSessionCache         shmcb:/var/cache/mod_ssl/scache(512000)
         
     | 
| 
      
 251 
     | 
    
         
            +
            SSLSessionCacheTimeout  300
         
     | 
| 
      
 252 
     | 
    
         
            +
             
     | 
| 
      
 253 
     | 
    
         
            +
            SSLMutex default
         
     | 
| 
      
 254 
     | 
    
         
            +
             
     | 
| 
      
 255 
     | 
    
         
            +
            SSLRandomSeed startup file:/dev/urandom  256
         
     | 
| 
      
 256 
     | 
    
         
            +
            SSLRandomSeed connect builtin
         
     | 
| 
      
 257 
     | 
    
         
            +
             
     | 
| 
      
 258 
     | 
    
         
            +
            SSLCryptoDevice builtin
         
     | 
| 
      
 259 
     | 
    
         
            +
             
     | 
| 
      
 260 
     | 
    
         
            +
            SSLProtocol all -SSLv2 -SSLv3
         
     | 
| 
      
 261 
     | 
    
         
            +
            SSLCipherSuite RSA+xxx
         
     | 
| 
      
 262 
     | 
    
         
            +
             
     | 
| 
      
 263 
     | 
    
         
            +
            SSLCertificateKeyFile   /etc/httpd/conf/certs/wildcard.bb-f.net_2020.key.pem
         
     | 
| 
      
 264 
     | 
    
         
            +
            SSLCertificateFile      /etc/httpd/conf/certs/wildcard.bb-f.net_2020.crt
         
     | 
| 
      
 265 
     | 
    
         
            +
            SSLCertificateChainFile /etc/httpd/conf/certs/FujiSSxxx.ca
         
     | 
| 
      
 266 
     | 
    
         
            +
            ```
         
     | 
| 
       239 
267 
     | 
    
         
             
            ### 補足情報(FW/ツールのバージョンなど)
         
     | 
| 
       240 
268 
     | 
    
         
             
            apache 2.4.37
         
     | 
| 
       241 
269 
     | 
    
         
             
            cent os 8.2
         
     | 
2
バージョンの追加など
    
        title	
    CHANGED
    
    | 
         
            File without changes
         
     | 
    
        body	
    CHANGED
    
    | 
         @@ -3,8 +3,8 @@ 
     | 
|
| 
       3 
3 
     | 
    
         
             
            TLSのバージョンサポートが終了し、サーバーの移行作業をしています。
         
     | 
| 
       4 
4 
     | 
    
         
             
            前のサーバーにあったSSL証明書、httpd.confなどを新サーバーに移行し、
         
     | 
| 
       5 
5 
     | 
    
         
             
            systemctl restart httpdを実行したところ、エラーになりました。
         
     | 
| 
      
 6 
     | 
    
         
            +
            何が原因か分からず、困っております。
         
     | 
| 
       6 
7 
     | 
    
         | 
| 
       7 
     | 
    
         
            -
             
     | 
| 
       8 
8 
     | 
    
         
             
            ###エラーメッセージ
         
     | 
| 
       9 
9 
     | 
    
         | 
| 
       10 
10 
     | 
    
         
             
            ```
         
     | 
| 
         @@ -25,28 +25,28 @@ 
     | 
|
| 
       25 
25 
     | 
    
         
             
             Main PID: 556613 (code=exited, status=1/FAILURE)
         
     | 
| 
       26 
26 
     | 
    
         
             
               Status: "Reading configuration..."
         
     | 
| 
       27 
27 
     | 
    
         | 
| 
       28 
     | 
    
         
            -
            Nov 27 11:44:53 web06. 
     | 
| 
      
 28 
     | 
    
         
            +
            Nov 27 11:44:53 web06.xx.com systemd[1]: Starting The Apache HTTP Server...
         
     | 
| 
       29 
     | 
    
         
            -
            Nov 27 11:44:53 web06. 
     | 
| 
      
 29 
     | 
    
         
            +
            Nov 27 11:44:53 web06.xx.com systemd[1]: httpd.service: Main process exited, code=exi>
         
     | 
| 
       30 
     | 
    
         
            -
            Nov 27 11:44:53 web06. 
     | 
| 
      
 30 
     | 
    
         
            +
            Nov 27 11:44:53 web06.xx.com systemd[1]: httpd.service: Failed with result 'exit-code>
         
     | 
| 
       31 
     | 
    
         
            -
            Nov 27 11:44:53 web06. 
     | 
| 
      
 31 
     | 
    
         
            +
            Nov 27 11:44:53 web06.xx.com systemd[1]: Failed to start The Apache HTTP Server.
         
     | 
| 
       32 
32 
     | 
    
         
             
            ```
         
     | 
| 
       33 
33 
     | 
    
         
             
            ```
         
     | 
| 
       34 
34 
     | 
    
         
             
            [root@ ~] journalctl -xe
         
     | 
| 
       35 
35 
     | 
    
         
             
            -- Unit sysstat-collect.service has finished starting up.
         
     | 
| 
       36 
36 
     | 
    
         
             
            -- 
         
     | 
| 
       37 
37 
     | 
    
         
             
            -- The start-up result is done.
         
     | 
| 
       38 
     | 
    
         
            -
            Nov 27 11:44:34 web06. 
     | 
| 
      
 38 
     | 
    
         
            +
            Nov 27 11:44:34 web06.xx.com postfix/smtpd[556608]: connect from unknown[193.169.254.107]>
         
     | 
| 
       39 
     | 
    
         
            -
            Nov 27 11:44:35 web06. 
     | 
| 
      
 39 
     | 
    
         
            +
            Nov 27 11:44:35 web06.xx.com postfix/smtpd[556608]: lost connection after AUTH from unknown[193.169.254.107]>
         
     | 
| 
       40 
     | 
    
         
            -
            Nov 27 11:44:35 web06. 
     | 
| 
      
 40 
     | 
    
         
            +
            Nov 27 11:44:35 web06.xx.com postfix/smtpd[556608]: disconnect from unknown[193.169.2254.107] ehlo=1 auth=0/1 commands=1/2>
         
     | 
| 
       41 
     | 
    
         
            -
            Nov 27 11:44:53 web06. 
     | 
| 
      
 41 
     | 
    
         
            +
            Nov 27 11:44:53 web06.xx.com systemd[1]: Starting The Apache HTTP Server...
         
     | 
| 
       42 
42 
     | 
    
         
             
            -- Subject: Unit httpd.service has begun start-up
         
     | 
| 
       43 
43 
     | 
    
         
             
            -- Defined-By: systemd
         
     | 
| 
       44 
44 
     | 
    
         
             
            -- Support: https://access.redhat.com/support
         
     | 
| 
       45 
45 
     | 
    
         
             
            -- 
         
     | 
| 
       46 
46 
     | 
    
         
             
            -- Unit httpd.service has begun starting up.
         
     | 
| 
       47 
     | 
    
         
            -
            Nov 27 11:44:53 web06. 
     | 
| 
      
 47 
     | 
    
         
            +
            Nov 27 11:44:53 web06.xx.com systemd[1]: httpd.service: Main process exited, code=exited ,status=1/FAILURE
         
     | 
| 
       48 
     | 
    
         
            -
            Nov 27 11:44:53 web06. 
     | 
| 
      
 48 
     | 
    
         
            +
            Nov 27 11:44:53 web06.xx.com systemd[1]: httpd.service: Failed with result 'exit-code'.
         
     | 
| 
       49 
     | 
    
         
            -
            Nov 27 11:44:53 web06. 
     | 
| 
      
 49 
     | 
    
         
            +
            Nov 27 11:44:53 web06.xx.com systemd[1]: Failed to start The Apache HTTP Server.
         
     | 
| 
       50 
50 
     | 
    
         
             
            -- Subject: Unit httpd.service has failed
         
     | 
| 
       51 
51 
     | 
    
         
             
            -- Defined-By: systemd
         
     | 
| 
       52 
52 
     | 
    
         
             
            -- Support: https://access.redhat.com/support
         
     | 
| 
         @@ -235,10 +235,7 @@ 
     | 
|
| 
       235 
235 
     | 
    
         
             
              SSLCertificateChainFile /etc/httpd/conf/certs/xx.co.jp.ca
         
     | 
| 
       236 
236 
     | 
    
         
             
            </VirtualHost>
         
     | 
| 
       237 
237 
     | 
    
         
             
            ```
         
     | 
| 
       238 
     | 
    
         
            -
            ### 試したこと
         
     | 
| 
       239 
238 
     | 
    
         | 
| 
       240 
     | 
    
         
            -
            ここに問題に対して試したことを記載してください。
         
     | 
| 
       241 
     | 
    
         
            -
             
     | 
| 
       242 
239 
     | 
    
         
             
            ### 補足情報(FW/ツールのバージョンなど)
         
     | 
| 
       243 
     | 
    
         
            -
             
     | 
| 
       244 
     | 
    
         
            -
             
     | 
| 
      
 240 
     | 
    
         
            +
            apache 2.4.37
         
     | 
| 
      
 241 
     | 
    
         
            +
            cent os 8.2
         
     | 
1
一部修正
    
        title	
    CHANGED
    
    | 
         
            File without changes
         
     | 
    
        body	
    CHANGED
    
    | 
         @@ -206,33 +206,33 @@ 
     | 
|
| 
       206 
206 
     | 
    
         
             
            ```conf
         
     | 
| 
       207 
207 
     | 
    
         
             
            #XX.co.jp.conf
         
     | 
| 
       208 
208 
     | 
    
         
             
            # TEMP
         
     | 
| 
       209 
     | 
    
         
            -
              <DirectoryMatch "/home/www/ 
     | 
| 
      
 209 
     | 
    
         
            +
              <DirectoryMatch "/home/www/xx.co.jp/www/data">
         
     | 
| 
       210 
210 
     | 
    
         
             
                  Header set Pragma no-cache
         
     | 
| 
       211 
211 
     | 
    
         
             
            </DirectoryMatch>
         
     | 
| 
       212 
     | 
    
         
            -
            <VirtualHost  
     | 
| 
      
 212 
     | 
    
         
            +
            <VirtualHost xx.co.jp:443>
         
     | 
| 
       213 
     | 
    
         
            -
              ServerName  
     | 
| 
      
 213 
     | 
    
         
            +
              ServerName xx.co.jp
         
     | 
| 
       214 
214 
     | 
    
         | 
| 
       215 
215 
     | 
    
         
             
              RewriteEngine On
         
     | 
| 
       216 
     | 
    
         
            -
              RewriteCond %{HTTP_HOST} ^www. 
     | 
| 
      
 216 
     | 
    
         
            +
              RewriteCond %{HTTP_HOST} ^www.xx.co.jp
         
     | 
| 
       217 
     | 
    
         
            -
            #  RewriteRule ^/(.*)$ https:// 
     | 
| 
      
 217 
     | 
    
         
            +
            #  RewriteRule ^/(.*)$ https://xx.co.jp/$1 [R,NE,L]
         
     | 
| 
       218 
     | 
    
         
            -
              RewriteRule ^/(.*)$ http:// 
     | 
| 
      
 218 
     | 
    
         
            +
              RewriteRule ^/(.*)$ http://xx.co.jp/$1 [R=302,NE,L]
         
     | 
| 
       219 
219 
     | 
    
         | 
| 
       220 
220 
     | 
    
         
             
            # TEMP
         
     | 
| 
       221 
221 
     | 
    
         
             
              RewriteCond %{REMOTE_ADDR} !^127.0.0.1$
         
     | 
| 
       222 
222 
     | 
    
         
             
              RewriteCond %{HTTPS} on
         
     | 
| 
       223 
223 
     | 
    
         
             
              RewriteCond %{SERVER_PORT} 443
         
     | 
| 
       224 
     | 
    
         
            -
              RewriteRule ^/(.*)$ http:// 
     | 
| 
      
 224 
     | 
    
         
            +
              RewriteRule ^/(.*)$ http://xx.co.jp/$1 [R=302,NE,L]
         
     | 
| 
       225 
225 
     | 
    
         | 
| 
       226 
     | 
    
         
            -
              ServerAdmin info@ 
     | 
| 
      
 226 
     | 
    
         
            +
              ServerAdmin info@xx.co.jp
         
     | 
| 
       227 
     | 
    
         
            -
              DocumentRoot "/home/www/ 
     | 
| 
      
 227 
     | 
    
         
            +
              DocumentRoot "/home/www/xx.co.jp/www/data"
         
     | 
| 
       228 
     | 
    
         
            -
              CustomLog "|/usr/sbin/rotatelogs /home/www/ 
     | 
| 
      
 228 
     | 
    
         
            +
              CustomLog "|/usr/sbin/rotatelogs /home/www/xx.co.jp/www/log/access_log.%Y%m%d 86400 540" combined env=!no_log
         
     | 
| 
       229 
     | 
    
         
            -
              ErrorLog  "|/usr/sbin/rotatelogs /home/www/ 
     | 
| 
      
 229 
     | 
    
         
            +
              ErrorLog  "|/usr/sbin/rotatelogs /home/www/xx.co.jp/www/log/error_log.%Y%m%d 86400 540"
         
     | 
| 
       230 
230 
     | 
    
         
             
              LogLevel rewrite:trace1
         
     | 
| 
       231 
231 
     | 
    
         | 
| 
       232 
232 
     | 
    
         
             
              SSLEngine On
         
     | 
| 
       233 
     | 
    
         
            -
              SSLCertificateKeyFile   /etc/httpd/conf/certs/ 
     | 
| 
      
 233 
     | 
    
         
            +
              SSLCertificateKeyFile   /etc/httpd/conf/certs/xx.co.jp.key
         
     | 
| 
       234 
     | 
    
         
            -
              SSLCertificateFile      /etc/httpd/conf/certs/ 
     | 
| 
      
 234 
     | 
    
         
            +
              SSLCertificateFile      /etc/httpd/conf/certs/xx.co.jp.crt
         
     | 
| 
       235 
     | 
    
         
            -
              SSLCertificateChainFile /etc/httpd/conf/certs/ 
     | 
| 
      
 235 
     | 
    
         
            +
              SSLCertificateChainFile /etc/httpd/conf/certs/xx.co.jp.ca
         
     | 
| 
       236 
236 
     | 
    
         
             
            </VirtualHost>
         
     | 
| 
       237 
237 
     | 
    
         
             
            ```
         
     | 
| 
       238 
238 
     | 
    
         
             
            ### 試したこと
         
     |