Apacheが立ち上がらないのですが、エラーコードの理由がわかりません

Question

現在ConohaのVPSでSSL証明書更新のために作業をしているのですが、Apacheで下のエラーコードが出ており修正箇所がわかりません。
ずっと'exit-code'結果でのエラーとなっています。お手数お掛け致しますが、ご指摘のほどよろしくお願いします。

参考サイトは以下のようになります。ConohaのVPSで独自SSLの設定情報が少ないためあまり時間がかかっております。
http://sharetube.jp/article/12274/

エラーコードの追加です。

直近のエラーログになります
[Tue Apr 05 14:35:13.098881 2022] [ssl:emerg] [pid 1633:tid 140443037178176] AH02580: Init: Pass phrase incorrect for key www.texttest.com:443:0
[Tue Apr 05 14:35:13.098919 2022] [ssl:emerg] [pid 1633:tid 140443037178176] SSL Library Error: error:0D0680A8:asn1 encoding routines:asn1_check_tlen:wrong tag
[Tue Apr 05 14:35:13.098933 2022] [ssl:emerg] [pid 1633:tid 140443037178176] SSL Library Error: error:0D08303A:asn1 encoding routines:asn1_template_noexp_d2i:nested asn1 error
[Tue Apr 05 14:35:13.098941 2022] [ssl:emerg] [pid 1633:tid 140443037178176] SSL Library Error: error:0D0680A8:asn1 encoding routines:asn1_check_tlen:wrong tag
[Tue Apr 05 14:35:13.098951 2022] [ssl:emerg] [pid 1633:tid 140443037178176] SSL Library Error: error:0D07803A:asn1 encoding routines:asn1_item_embed_d2i:nested asn1 error (Type=RSAPrivateKey)
[Tue Apr 05 14:35:13.098962 2022] [ssl:emerg] [pid 1633:tid 140443037178176] SSL Library Error: error:04093004:rsa routines:old_rsa_priv_decode:RSA lib
[Tue Apr 05 14:35:13.098971 2022] [ssl:emerg] [pid 1633:tid 140443037178176] SSL Library Error: error:0D0680A8:asn1 encoding routines:asn1_check_tlen:wrong tag
[Tue Apr 05 14:35:13.098979 2022] [ssl:emerg] [pid 1633:tid 140443037178176] SSL Library Error: error:0D07803A:asn1 encoding routines:asn1_item_embed_d2i:nested asn1 error (Type=PKCS8_PRIV_KEY_INFO)
[Tue Apr 05 14:35:13.098984 2022] [ssl:emerg] [pid 1633:tid 140443037178176] AH02312: Fatal error initialising mod_ssl, exiting.
[Tue Apr 05 14:35:13.098989 2022] [ssl:emerg] [pid 1633:tid 140443037178176] AH02564: Failed to configure encrypted (?) private key www.texttest.com:443:0, check /etc/httpd/conf/ssl.key/server.key
AH00016: Configuration Failed
[Tue Apr 05 14:46:30.477839 2022] [suexec:notice] [pid 1876:tid 140364141693248] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Tue Apr 05 14:46:30.477873 2022] [ssl:warn] [pid 1876:tid 140364141693248] AH01882: Init: this version of mod_ssl was compiled against a newer library (OpenSSL 1.1.1k FIPS 25 Mar 2021, version currently loaded is OpenSSL 1.1.1g FIPS 21 Apr 2020) - may result in undefined or erroneous behavior
[Tue Apr 05 14:46:30.482874 2022] [ssl:emerg] [pid 1876:tid 140364141693248] AH02580: Init: Pass phrase incorrect for key www.texttest.com:443:0
[Tue Apr 05 14:46:30.482919 2022] [ssl:emerg] [pid 1876:tid 140364141693248] SSL Library Error: error:0D0680A8:asn1 encoding routines:asn1_check_tlen:wrong tag
[Tue Apr 05 14:46:30.482947 2022] [ssl:emerg] [pid 1876:tid 140364141693248] SSL Library Error: error:0D08303A:asn1 encoding routines:asn1_template_noexp_d2i:nested asn1 error
[Tue Apr 05 14:46:30.482962 2022] [ssl:emerg] [pid 1876:tid 140364141693248] SSL Library Error: error:0D0680A8:asn1 encoding routines:asn1_check_tlen:wrong tag
[Tue Apr 05 14:46:30.482976 2022] [ssl:emerg] [pid 1876:tid 140364141693248] SSL Library Error: error:0D07803A:asn1 encoding routines:asn1_item_embed_d2i:nested asn1 error (Type=RSAPrivateKey)
[Tue Apr 05 14:46:30.483014 2022] [ssl:emerg] [pid 1876:tid 140364141693248] SSL Library Error: error:04093004:rsa routines:old_rsa_priv_decode:RSA lib
[Tue Apr 05 14:46:30.483023 2022] [ssl:emerg] [pid 1876:tid 140364141693248] SSL Library Error: error:0D0680A8:asn1 encoding routines:asn1_check_tlen:wrong tag
[Tue Apr 05 14:46:30.483031 2022] [ssl:emerg] [pid 1876:tid 140364141693248] SSL Library Error: error:0D07803A:asn1 encoding routines:asn1_item_embed_d2i:nested asn1 error (Type=PKCS8_PRIV_KEY_INFO)
[Tue Apr 05 14:46:30.483035 2022] [ssl:emerg] [pid 1876:tid 140364141693248] AH02312: Fatal error initialising mod_ssl, exiting.
[Tue Apr 05 14:46:30.483039 2022] [ssl:emerg] [pid 1876:tid 140364141693248] AH02564: Failed to configure encrypted (?) private key www.texttest.com:443:0, check /etc/httpd/conf/ssl.key/server.key
AH00016: Configuration Failed
[Tue Apr 05 17:13:59.626159 2022] [suexec:notice] [pid 6945:tid 139721505470784] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Tue Apr 05 17:13:59.629374 2022] [ssl:emerg] [pid 6945:tid 139721505470784] AH02580: Init: Pass phrase incorrect for key www.texttest.com:443:0
[Tue Apr 05 17:13:59.629393 2022] [ssl:emerg] [pid 6945:tid 139721505470784] SSL Library Error: error:0D0680A8:asn1 encoding routines:asn1_check_tlen:wrong tag
[Tue Apr 05 17:13:59.629403 2022] [ssl:emerg] [pid 6945:tid 139721505470784] SSL Library Error: error:0D08303A:asn1 encoding routines:asn1_template_noexp_d2i:nested asn1 error
[Tue Apr 05 17:13:59.629412 2022] [ssl:emerg] [pid 6945:tid 139721505470784] SSL Library Error: error:0D0680A8:asn1 encoding routines:asn1_check_tlen:wrong tag
[Tue Apr 05 17:13:59.629437 2022] [ssl:emerg] [pid 6945:tid 139721505470784] SSL Library Error: error:0D07803A:asn1 encoding routines:asn1_item_embed_d2i:nested asn1 error (Type=RSAPrivateKey)
[Tue Apr 05 17:13:59.629461 2022] [ssl:emerg] [pid 6945:tid 139721505470784] SSL Library Error: error:04093004:rsa routines:old_rsa_priv_decode:RSA lib
[Tue Apr 05 17:13:59.629471 2022] [ssl:emerg] [pid 6945:tid 139721505470784] SSL Library Error: error:0D0680A8:asn1 encoding routines:asn1_check_tlen:wrong tag
[Tue Apr 05 17:13:59.629479 2022] [ssl:emerg] [pid 6945:tid 139721505470784] SSL Library Error: error:0D07803A:asn1 encoding routines:asn1_item_embed_d2i:nested asn1 error (Type=PKCS8_PRIV_KEY_INFO)
[Tue Apr 05 17:13:59.629482 2022] [ssl:emerg] [pid 6945:tid 139721505470784] AH02312: Fatal error initialising mod_ssl, exiting.
[Tue Apr 05 17:13:59.629486 2022] [ssl:emerg] [pid 6945:tid 139721505470784] AH02564: Failed to configure encrypted (?) private key www.texttest.com:443:0, check /etc/httpd/conf/ssl.key/server.key
AH00016: Configuration Failed

Comments

[otn]

まずは、エラーログファイルを見ましょう。

[madoka-t]

エラーログを見せてもらえると回答しやすいと思います

[KazuhoAkabane]

すいませんlogから持ってきたのですが、これで大丈夫でしょうか。

Answer 1

重要そうなメッセージは次の2つでしょうか。

[Tue Apr 05 14:35:13.098881 2022] [ssl:emerg] [pid 1633:tid 140443037178176] AH02580: Init: Pass phrase incorrect for key www.texttest.com:443:0

[Tue Apr 05 14:35:13.098989 2022] [ssl:emerg] [pid 1633:tid 140443037178176] AH02564: Failed to configure encrypted (?) private key www.texttest.com:443:0, check /etc/httpd/conf/ssl.key/server.key
AH00016: Configuration Failed

Pass phrase incorrect for keyは証明書のパスフレーズが間違っていると言っているようです。

Failed to configure encrypted (?) private key も秘密鍵の構成に誤りがあるというようなことを言っていますね。

恐らくは、証明書のパスフレーズを外してあげる必要があるのだと思います。

以下のコマンドでserver.keyのパスフレーズを取り除いた秘密鍵が作れるので、こちらをサーバに配置してみてください。

openssl rsa -in server.key  -out none-pass-server.key

Comments

[KazuhoAkabane]

ありがとうございます。
これでできたnon-pass-server.keyは、htmlの場所に置けば良いのでしょうか。

[madoka-t]

ファイル名をserver.keyにリネームして/etc/httpd/conf/ssl.key/server.keyを上書きですね

[KazuhoAkabane]

ありがとうございます！まだindex ofのページですが繋がりました！