Koozali.org: home of the SME Server

Obsolete Releases => SME Server 7.x => Topic started by: katumba on December 07, 2006, 07:47:40 PM

Title: ssl.key issues
Post by: katumba on December 07, 2006, 07:47:40 PM

a web designer told me that the server needed a new key and crt from CA in order for the site to be secure. I followed the steps from here:
http://mirror.contribs.org/smeserver/contribs//nickcritten/howtos/ssl.htm

with no errors. Now, the site won't come up at all. I can ping it, and ssh into it just fine. Where can i look to start troubleshooting?

thanks.

Title: ssl.key issues
Post by: byte on December 07, 2006, 08:13:23 PM

Have a look in the log files i.e.

/var/log/httpd

Title: error_log
Post by: katumba on December 07, 2006, 08:21:10 PM

[Thu Dec 07 12:52:53 2006] [crit] (28)No space left on device: mod_rewrite: could not create rewrite_log_lock
Configuration Failed

This is what I got from that file.

Title: Re: error_log
Post by: byte on December 07, 2006, 08:24:16 PM

Quote from: "katumba"

[Thu Dec 07 12:52:53 2006] [crit] (28)No space left on device: mod_rewrite: could not create rewrite_log_lock
Configuration Failed

Seen this before, take a look at this bug...

http://bugs.contribs.org/show_bug.cgi?id=2035

*edit* Please post your findings to the bug report.

Title: Re: error_log
Post by: katumba on December 07, 2006, 08:59:56 PM

Quote from: "byte"

Quote from: "katumba"

[Thu Dec 07 12:52:53 2006] [crit] (28)No space left on device: mod_rewrite: could not create rewrite_log_lock
Configuration Failed

Seen this before, take a look at this bug...

http://bugs.contribs.org/show_bug.cgi?id=2035

*edit* Please post your findings to the bug report.

That script fixed it. thanks!!!

Title: Re: error_log
Post by: byte on December 07, 2006, 10:40:01 PM

Quote from: "katumba"

That script fixed it. thanks!!!

It shouldn't need that script to fix it as it's not fixed it for anyone else, what we really need is people to report to bug tracker and explain what they did so the core devs can decide a proper fix in the sme code.

Title: ssl.key issues
Post by: katumba on December 07, 2006, 11:52:13 PM

hmm. well, restarting httpd got the web site back up, but on reboot it's still down. Oh well, i'll just reimage it.

thanks.

Title: ssl.key issues
Post by: CharlieBrady on December 08, 2006, 12:59:02 AM

Quote from: "katumba"

hmm. well, restarting httpd got the web site back up, but on reboot it's still down. Oh well, i'll just reimage it.

That's both unnecessary, and will only get you back to where you started. What did the 'web designer' believe was insecure about the original setup?

Title: ssl.key issues
Post by: katumba on December 08, 2006, 06:39:11 AM

Thats my original thinking. here is the first email:

"I need to get an SSL certificate installed on the website.com web server.  If there is some sort of control panel (PLESK?) we can log into to generate a CSR, then we can take care of this, if not we are going to need your assistance setting this up."

my reply:

"The server already generates its own ssl cert.  There is no need to generate one.
You can view it by typing: less /etc/httpd/conf/ssl.csr/server.csr
After logging into it with putty or something similar."

His answer:

"We generally do not like to configure servers that are not our own for liability reasons.  Is it available for you to handle the SSL purchase\install?

If you would like us to handle the purchase, then you can email me the CSR, and I can email you back the certificate to install.

Let me know,"

So, that's what i'm up against...

Title: Re: ssl.key issues
Post by: william_syd on December 08, 2006, 08:24:11 AM

Quote from: "katumba"

I followed the steps from here:
http://mirror.contribs.org/smeserver/contribs//nickcritten/howtos/ssl.htm

Did you end up doing it as per this how to ?

http://mirror.contribs.org/smeserver/contribs//nickcritten/howtos/ssl7.htm

Title: ssl.key issues
Post by: katumba on December 08, 2006, 05:00:17 PM

No, I didn't see that how-to. I tried the one in my first post. That one seems better, though.

Title: Re: ssl.key issues
Post by: katumba on December 08, 2006, 09:14:12 PM

Quote from: "william_syd"

Quote from: "katumba"

I followed the steps from here:
http://mirror.contribs.org/smeserver/contribs//nickcritten/howtos/ssl.htm

Did you end up doing it as per this how to ?

http://mirror.contribs.org/smeserver/contribs//nickcritten/howtos/ssl7.htm

Any help with this would be great. I just ran the instruction from that how-to listed above after reimaging the box. It gives out normal http docs ok, however errors out on https stuff...

Title: ssl.key issues
Post by: william_syd on December 08, 2006, 11:45:09 PM

I don't use that howto so I'm unable to help.

There are other threads that discuss that howto but I don't remember if there was any mention of a problem with the final howto.

Logs are your friend. They may give an insight into whats going wrong.