I am trying to install SSL, but I cant restart apache
/opt/bitnami/apache2/conf# sudo /opt/bitnami/ctlscript.sh restart apache
Unmonitored apache
Syntax OK
/opt/bitnami/apache2/scripts/ctl.sh : apache not running
Syntax OK
/opt/bitnami/apache2/scripts/ctl.sh : httpd could not be started
Monitored apache
and got this error in log file
[Sun Oct 06 10:18:18.967677 2019] [ssl:error] [pid 16507:tid 140079867070208] AH02579: Init: Private key not found
[Sun Oct 06 10:18:18.967727 2019] [ssl:error] [pid 16507:tid 140079867070208] SSL Library Error: error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Sun Oct 06 10:18:18.967742 2019] [ssl:error] [pid 16507:tid 140079867070208] SSL Library Error: error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error
[Sun Oct 06 10:18:18.967753 2019] [ssl:error] [pid 16507:tid 140079867070208] SSL Library Error: error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Sun Oct 06 10:18:18.967765 2019] [ssl:error] [pid 16507:tid 140079867070208] SSL Library Error: error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error (Type=RSA)
[Sun Oct 06 10:18:18.967776 2019] [ssl:error] [pid 16507:tid 140079867070208] SSL Library Error: error:04093004:rsa routines:OLD_RSA_PRIV_DECODE:RSA lib
[Sun Oct 06 10:18:18.967787 2019] [ssl:error] [pid 16507:tid 140079867070208] SSL Library Error: error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Sun Oct 06 10:18:18.967798 2019] [ssl:error] [pid 16507:tid 140079867070208] SSL Library Error: error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error (Type=PKCS8_PRIV_KEY_INFO)
[Sun Oct 06 10:18:18.967803 2019] [ssl:emerg] [pid 16507:tid 140079867070208] AH02312: Fatal error initialising mod_ssl, exiting.
[Sun Oct 06 10:18:18.967807 2019] [ssl:emerg] [pid 16507:tid 140079867070208] AH02564: Failed to configure encrypted (?) private key mysite.com:443:0, check /opt/bitnami/apache2/conf/4ea303957fff9adb.pem
AH00016: Configuration Failed
Related
I have just downloaded SSL certificate from cheapsslsecurity, but apache is giving above errors.
[Sun Jul 17 15:30:01.256726 2022] [ssl:emerg] [pid 3640] SSL Library Error: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
[Sun Jul 17 15:30:01.256729 2022] [ssl:emerg] [pid 3640] AH02312: Fatal error initialising mod_ssl, exiting.
[Sun Jul 17 16:00:01.434769 2022] [suexec:notice] [pid 3698] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Sun Jul 17 16:00:01.439767 2022] [ssl:emerg] [pid 3698] AH02238: Unable to configure RSA server private key
[Sun Jul 17 16:00:01.439859 2022] [ssl:emerg] [pid 3698] SSL Library Error: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
[Sun Jul 17 16:00:01.439862 2022] [ssl:emerg] [pid 3698] AH02312: Fatal error initialising mod_ssl, exiting.
Things I tried
Checked private key and certificate key and they are matching
In SSL certificate entered the path for crt file. Private key entered the private key file. In SSLCACertificateFile entered the bundle path provided by the site.
Removed spaces from private key
Encoding of private key file is UTF-8 and also tried changing .txt to .key
Checked validity of certificae and it is of next year
im at that point, that i couldnt solve the problem now anymore ... seriosly, i was so stupid, checked the letsencrypt ssl and simultanously created a self signed certificate. however, i think with that i have broken the SSL config. other domains working with letsencrypt, except that one domain/website even after new creating it. i cant find logs outside of the log printed below.
Following is the error.log of Apache2:
[Wed Jul 03 17:46:02.826733 2019] [ssl:warn] [pid 10839] AH01909: kronos.pixelcode.at:8080:0 server certificate does NOT include an ID which matches the server name
[Wed Jul 03 17:46:02.826780 2019] [ssl:error] [pid 10839] AH02217: ssl_stapling_init_cert: can't retrieve issuer certificate! [subject: emailAddress=admin#alphaground.net,CN=alphaground.net,O=Alphaground,L=Telfs,ST=Austria,C=AT / issuer: emailAddress=admin#alphaground.net,CN=alphaground.net,O=Alphaground,L=Telfs,ST=Austria,C=AT / serial: 0A5E411BEFE1832A40230F6F9BC1B0E1F7078CF8 / notbefore: Jun 19 18:42:15 2019 GMT / notafter: Jun 16 18:42:15 2029 GMT]
[Wed Jul 03 17:46:02.826796 2019] [ssl:error] [pid 10839] AH02604: Unable to configure certificate kronos.pixelcode.at:8080:0 for stapling
[Wed Jul 03 17:46:02.826847 2019] [:error] [pid 10839] python_init: Python version mismatch, expected '2.7.6', found '2.7.16'.
[Wed Jul 03 17:46:02.826884 2019] [:error] [pid 10839] python_init: Python executable found '/usr/bin/python'.
[Wed Jul 03 17:46:02.826886 2019] [:error] [pid 10839] python_init: Python path being used '/usr/lib/python2.7:/usr/lib/python2.7/plat-x86_64-linux-gnu:/usr/lib/python2.7/lib-tk:/usr/lib/python2.7/lib-old:/usr/lib/python2.7/lib-dynload'.
[Wed Jul 03 17:46:02.826895 2019] [:notice] [pid 10839] mod_python: Creating 8 session mutexes based on 150 max processes and 0 max threads.
[Wed Jul 03 17:46:02.826898 2019] [:notice] [pid 10839] mod_python: using mutex_directory /tmp
[Wed Jul 03 17:46:02.833564 2019] [mpm_prefork:notice] [pid 10839] AH00163: Apache/2.4.38 (Ubuntu) mod_fcgid/2.3.9 OpenSSL/1.1.1b mod_python/3.3.1 Python/2.7.16 configured -- resuming normal operations
[Wed Jul 03 17:46:02.833582 2019] [core:notice] [pid 10839] AH00094: Command line: '/usr/sbin/apache2'
[Wed Jul 03 17:50:02.673254 2019] [mpm_prefork:notice] [pid 10839] AH00169: caught SIGTERM, shutting down
[Wed Jul 03 17:50:02.783814 2019] [ssl:warn] [pid 11384] AH01906: kronos.pixelcode.at:8080:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Jul 03 17:50:02.783845 2019] [ssl:warn] [pid 11384] AH01909: kronos.pixelcode.at:8080:0 server certificate does NOT include an ID which matches the server name
[Wed Jul 03 17:50:02.783917 2019] [ssl:error] [pid 11384] AH02217: ssl_stapling_init_cert: can't retrieve issuer certificate! [subject: emailAddress=admin#alphaground.net,CN=alphaground.net,O=Alphaground,L=Telfs,ST=Austria,C=AT / issuer: emailAddress=admin#alphaground.net,CN=alphaground.net,O=Alphaground,L=Telfs,ST=Austria,C=AT / serial: 0A5E411BEFE1832A40230F6F9BC1B0E1F7078CF8 / notbefore: Jun 19 18:42:15 2019 GMT / notafter: Jun 16 18:42:15 2029 GMT]
[Wed Jul 03 17:50:02.783924 2019] [ssl:error] [pid 11384] AH02604: Unable to configure certificate kronos.pixelcode.at:8080:0 for stapling
[Wed Jul 03 17:50:02.783955 2019] [suexec:notice] [pid 11384] AH01232: suEXEC mechanism enabled (wrapper: /usr/lib/apache2/suexec)
[Wed Jul 03 17:50:02.811836 2019] [ssl:warn] [pid 11390] AH01906: kronos.pixelcode.at:8080:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Jul 03 17:50:02.811851 2019] [ssl:warn] [pid 11390] AH01909: kronos.pixelcode.at:8080:0 server certificate does NOT include an ID which matches the server name
[Wed Jul 03 17:50:02.811904 2019] [ssl:error] [pid 11390] AH02217: ssl_stapling_init_cert: can't retrieve issuer certificate! [subject: emailAddress=admin#alphaground.net,CN=alphaground.net,O=Alphaground,L=Telfs,ST=Austria,C=AT / issuer: emailAddress=admin#alphaground.net,CN=alphaground.net,O=Alphaground,L=Telfs,ST=Austria,C=AT / serial: 0A5E411BEFE1832A40230F6F9BC1B0E1F7078CF8 / notbefore: Jun 19 18:42:15 2019 GMT / notafter: Jun 16 18:42:15 2029 GMT]
[Wed Jul 03 17:50:02.811909 2019] [ssl:error] [pid 11390] AH02604: Unable to configure certificate kronos.pixelcode.at:8080:0 for stapling
[Wed Jul 03 17:50:02.811980 2019] [:error] [pid 11390] python_init: Python version mismatch, expected '2.7.6', found '2.7.16'.
[Wed Jul 03 17:50:02.812037 2019] [:error] [pid 11390] python_init: Python executable found '/usr/bin/python'.
[Wed Jul 03 17:50:02.812046 2019] [:error] [pid 11390] python_init: Python path being used '/usr/lib/python2.7:/usr/lib/python2.7/plat-x86_64-linux-gnu:/usr/lib/python2.7/lib-tk:/usr/lib/python2.7/lib-old:/usr/lib/python2.7/lib-dynload'.
[Wed Jul 03 17:50:02.812095 2019] [:notice] [pid 11390] mod_python: Creating 8 session mutexes based on 150 max processes and 0 max threads.
[Wed Jul 03 17:50:02.812099 2019] [:notice] [pid 11390] mod_python: using mutex_directory /tmp
[Wed Jul 03 17:50:02.819199 2019] [mpm_prefork:notice] [pid 11390] AH00163: Apache/2.4.38 (Ubuntu) mod_fcgid/2.3.9 OpenSSL/1.1.1b mod_python/3.3.1 Python/2.7.16 configured -- resuming normal operations
[Wed Jul 03 17:50:02.819215 2019] [core:notice] [pid 11390] AH00094: Command line: '/usr/sbin/apache2'
thats what my error.log tries me to say, but it already worked with other domains. i think there have to be a config, where it tries to get or whatever the old certificate. letsencrypt shows me no error, and the server.sh from ispconfig no error too.
I recreated the website/domain in ispconfig, but i still get the same error. other domains works with no error at all. im really really sure, the problem was with check letsencrypt and create a certificate at the same time.
i read through the config in the .vhost but there is nothing in the ssl section...
Problem solved. If you stuck or get the same error, also check your IPv6 settings in DNS. I had two Numbers flipped. So IPv4 was correct, but IPv6 not and i got no error about it.
After reinstalling the server, i ended up with the same problem, so i struggled through the DNS settings. And e voila, AAAA IPv6 correct and the cert was generated perfect.
Getting following error while starting the Apache. Tried all possible things found on Stackoverflow or google -
[Thu Jun 14 05:03:22.973799 2018] [ssl:trace2] [pid 13154] ssl_engine_rand.c(126): Init: Seeding PRNG with 144 bytes of entropy
[Thu Jun 14 05:03:22.973834 2018] [ssl:info] [pid 13154] AH01887: Init: Initializing (virtual) servers for SSL
[Thu Jun 14 05:03:22.973840 2018] [ssl:info] [pid 13154] AH01876: mod_ssl/2.4.25 compiled against Server: Apache/2.4.25, Library: OpenSSL/1.0.2h
[Thu Jun 14 05:03:22.973858 2018] [http2:debug] [pid 13154] mod_http2.c(103): AH03089: initializing post config dry run
[Thu Jun 14 05:03:22.974292 2018] [core:emerg] [pid 13154] (22)Invalid argument: AH00024: Couldn't set permissions on the rewrite-map mutex; check User and Group directives
AH00016: Configuration Failed
I start the apache2 server in the Debian 8 machine and have the output provided:
$ sudo /etc/init.d/apache2 start
[ ok ] Starting apache2 (via systemctl): apache2.service.
Now, when checking the status, I find this output provided below,
$ sudo systemctl -l status apache2
● apache2.service - LSB: Apache2 web server
Loaded: loaded (/etc/init.d/apache2)
Drop-In: /lib/systemd/system/apache2.service.d
└─forking.conf
Active: inactive (dead) since Fri 2018-01-05 18:53:18 BDT; 2min 56s ago
Process: 9603 ExecStop=/etc/init.d/apache2 stop (code=exited, status=0/SUCCESS)
Process: 9585 ExecStart=/etc/init.d/apache2 start (code=exited, status=0/SUCCESS)
Jan 05 18:53:18 debian8 apache2[9585]: Starting web server: apache2AH00558: apache2: Could not reliably determine the server's fully qualified domain name, using 127.0.0.1. Set the 'ServerName' directive globally to suppress this message
Jan 05 18:53:18 debian8 apache2[9585]: Action 'start' failed.
Jan 05 18:53:18 debian8 apache2[9585]: The Apache error log may have more information.
Jan 05 18:53:18 debian8 apache2[9585]: .
Jan 05 18:53:18 debian8 apache2[9603]: Stopping web server: apache2.
The line informs that, Jan 05 18:53:18 debian8 apache2[9585]: Action 'start' failed. I assume that means the apache server is not running.
I looked for the error log and find,
$ sudo cat /var/log/apache2/error.log
[Fri Jan 05 07:31:23.141452 2018] [ssl:warn] [pid 1905] AH01916: Init: (local.test:443) You configured HTTP(80) on the standard HTTPS(443) port!
[Fri Jan 05 07:31:23.141542 2018] [mpm_prefork:notice] [pid 1905] AH00163: Apache/2.4.10 (Debian) OpenSSL/1.0.1t configured -- resuming normal operations
[Fri Jan 05 07:31:23.141550 2018] [core:notice] [pid 1905] AH00094: Command line: '/usr/sbin/apache2'
[Fri Jan 05 10:27:07.347727 2018] [mpm_prefork:notice] [pid 1905] AH00169: caught SIGTERM, shutting down
[Fri Jan 05 10:45:01.716439 2018] [ssl:warn] [pid 1754] AH01916: Init: (local.test:443) You configured HTTP(80) on the standard HTTPS(443) port!
[Fri Jan 05 10:45:01.928468 2018] [ssl:warn] [pid 1793] AH01916: Init: (local.test:443) You configured HTTP(80) on the standard HTTPS(443) port!
[Fri Jan 05 10:45:01.948283 2018] [mpm_prefork:notice] [pid 1793] AH00163: Apache/2.4.10 (Debian) OpenSSL/1.0.1t configured -- resuming normal operations
[Fri Jan 05 10:45:01.948331 2018] [core:notice] [pid 1793] AH00094: Command line: '/usr/sbin/apache2'
[Fri Jan 05 10:57:54.207319 2018] [mpm_prefork:notice] [pid 1793] AH00169: caught SIGTERM, shutting down
[Fri Jan 05 10:59:21.635105 2018] [ssl:warn] [pid 1801] AH01916: Init: (local.test:443) You configured HTTP(80) on the standard HTTPS(443) port!
[Fri Jan 05 10:59:21.766752 2018] [ssl:warn] [pid 1837] AH01916: Init: (local.test:443) You configured HTTP(80) on the standard HTTPS(443) port!
[Fri Jan 05 10:59:21.770769 2018] [mpm_prefork:notice] [pid 1837] AH00163: Apache/2.4.10 (Debian) OpenSSL/1.0.1t configured -- resuming normal operations
[Fri Jan 05 10:59:21.770827 2018] [core:notice] [pid 1837] AH00094: Command line: '/usr/sbin/apache2'
[Fri Jan 05 11:29:49.123102 2018] [mpm_prefork:notice] [pid 1837] AH00169: caught SIGTERM, shutting down
[Fri Jan 05 11:33:46.931328 2018] [ssl:warn] [pid 1700] AH01916: Init: (local.test:443) You configured HTTP(80) on the standard HTTPS(443) port!
[Fri Jan 05 11:33:47.107058 2018] [ssl:warn] [pid 1750] AH01916: Init: (local.test:443) You configured HTTP(80) on the standard HTTPS(443) port!
[Fri Jan 05 11:33:47.120610 2018] [mpm_prefork:notice] [pid 1750] AH00163: Apache/2.4.10 (Debian) OpenSSL/1.0.1t configured -- resuming normal operations
[Fri Jan 05 11:33:47.120650 2018] [core:notice] [pid 1750] AH00094: Command line: '/usr/sbin/apache2'
[Fri Jan 05 14:34:06.958963 2018] [mpm_prefork:notice] [pid 1750] AH00169: caught SIGTERM, shutting down
[Fri Jan 05 14:34:08.857489 2018] [ssl:emerg] [pid 31187] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/apache2/cxClient443.draglet.test-error.log for more information
AH00016: Configuration Failed
[Fri Jan 05 14:48:49.228927 2018] [ssl:emerg] [pid 2360] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/apache2/cxClient443.draglet.test-error.log for more information
AH00016: Configuration Failed
[Fri Jan 05 14:56:07.665868 2018] [ssl:emerg] [pid 4309] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/apache2/cxClient443.draglet.test-error.log for more information
AH00016: Configuration Failed
[Fri Jan 05 14:56:29.491940 2018] [ssl:emerg] [pid 4465] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/apache2/cxClient443.draglet.test-error.log for more information
AH00016: Configuration Failed
[Fri Jan 05 15:01:14.384576 2018] [ssl:emerg] [pid 5618] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/apache2/cxClient443.draglet.test-error.log for more information
AH00016: Configuration Failed
[Fri Jan 05 15:01:18.064625 2018] [ssl:emerg] [pid 5704] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/apache2/cxClient443.draglet.test-error.log for more information
AH00016: Configuration Failed
[Fri Jan 05 15:01:52.921632 2018] [ssl:emerg] [pid 5893] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/apache2/cxClient443.draglet.test-error.log for more information
AH00016: Configuration Failed
[Fri Jan 05 15:23:58.732664 2018] [ssl:emerg] [pid 11914] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/apache2/cxClient443.draglet.test-error.log for more information
AH00016: Configuration Failed
[Fri Jan 05 15:24:13.462265 2018] [ssl:emerg] [pid 14259] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/apache2/cxClient443.draglet.test-error.log for more information
AH00016: Configuration Failed
[Fri Jan 05 15:29:12.703894 2018] [ssl:emerg] [pid 15379] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/apache2/cxClient443.draglet.test-error.log for more information
AH00016: Configuration Failed
[Fri Jan 05 16:14:41.286196 2018] [ssl:emerg] [pid 26572] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/apache2/cxClient443.draglet.test-error.log for more information
AH00016: Configuration Failed
[Fri Jan 05 16:14:55.140590 2018] [ssl:emerg] [pid 26682] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/apache2/cxClient443.draglet.test-error.log for more information
AH00016: Configuration Failed
[Fri Jan 05 16:15:30.060982 2018] [ssl:emerg] [pid 26854] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/apache2/cxClient443.draglet.test-error.log for more information
AH00016: Configuration Failed
[Fri Jan 05 18:53:18.353757 2018] [ssl:emerg] [pid 9599] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/apache2/cxClient443.draglet.test-error.log for more information
AH00016: Configuration Failed
The error log for the cxClient443.draglet.test-error.log provided below,
$ sudo nano /var/log/apache2/cxClient443.draglet.test-error.log
[Fri Jan 05 07:31:23.141321 2018] [ssl:warn] [pid 1905] AH01906: cxClient443.draglet.test:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Jan 05 07:31:23.141365 2018] [ssl:warn] [pid 1905] AH01909: cxClient443.draglet.test:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 05 10:45:01.715668 2018] [ssl:warn] [pid 1754] AH01906: cxClient443.draglet.test:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Jan 05 10:45:01.716274 2018] [ssl:warn] [pid 1754] AH01909: cxClient443.draglet.test:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 05 10:45:01.928326 2018] [ssl:warn] [pid 1793] AH01906: cxClient443.draglet.test:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Jan 05 10:45:01.928366 2018] [ssl:warn] [pid 1793] AH01909: cxClient443.draglet.test:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 05 10:59:21.634605 2018] [ssl:warn] [pid 1801] AH01906: cxClient443.draglet.test:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Jan 05 10:59:21.634976 2018] [ssl:warn] [pid 1801] AH01909: cxClient443.draglet.test:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 05 10:59:21.766633 2018] [ssl:warn] [pid 1837] AH01906: cxClient443.draglet.test:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Jan 05 10:59:21.766671 2018] [ssl:warn] [pid 1837] AH01909: cxClient443.draglet.test:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 05 11:33:46.930717 2018] [ssl:warn] [pid 1700] AH01906: cxClient443.draglet.test:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Jan 05 11:33:46.931209 2018] [ssl:warn] [pid 1700] AH01909: cxClient443.draglet.test:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 05 11:33:47.106862 2018] [ssl:warn] [pid 1750] AH01906: cxClient443.draglet.test:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Jan 05 11:33:47.106917 2018] [ssl:warn] [pid 1750] AH01909: cxClient443.draglet.test:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 05 14:34:08.853654 2018] [ssl:emerg] [pid 31187] AH02572: Failed to configure at least one certificate and key for cxClient443.draglet.test:80
[Fri Jan 05 14:34:08.857467 2018] [ssl:emerg] [pid 31187] SSL Library Error: error:140A80B1:SSL routines:SSL_CTX_check_private_key:no certificate assigned
[Fri Jan 05 14:48:49.228822 2018] [ssl:emerg] [pid 2360] AH02572: Failed to configure at least one certificate and key for cxClient443.draglet.test:80
[Fri Jan 05 14:48:49.228920 2018] [ssl:emerg] [pid 2360] SSL Library Error: error:140A80B1:SSL routines:SSL_CTX_check_private_key:no certificate assigned
[Fri Jan 05 14:56:07.665783 2018] [ssl:emerg] [pid 4309] AH02572: Failed to configure at least one certificate and key for cxClient443.draglet.test:80
[Fri Jan 05 14:56:07.665861 2018] [ssl:emerg] [pid 4309] SSL Library Error: error:140A80B1:SSL routines:SSL_CTX_check_private_key:no certificate assigned
[Fri Jan 05 14:56:29.491840 2018] [ssl:emerg] [pid 4465] AH02572: Failed to configure at least one certificate and key for cxClient443.draglet.test:80
[Fri Jan 05 14:56:29.491931 2018] [ssl:emerg] [pid 4465] SSL Library Error: error:140A80B1:SSL routines:SSL_CTX_check_private_key:no certificate assigned
[Fri Jan 05 15:01:14.384494 2018] [ssl:emerg] [pid 5618] AH02572: Failed to configure at least one certificate and key for cxClient443.draglet.test:80
[Fri Jan 05 15:01:14.384569 2018] [ssl:emerg] [pid 5618] SSL Library Error: error:140A80B1:SSL routines:SSL_CTX_check_private_key:no certificate assigned
[Fri Jan 05 15:01:18.064529 2018] [ssl:emerg] [pid 5704] AH02572: Failed to configure at least one certificate and key for cxClient443.draglet.test:80
[Fri Jan 05 15:01:18.064611 2018] [ssl:emerg] [pid 5704] SSL Library Error: error:140A80B1:SSL routines:SSL_CTX_check_private_key:no certificate assigned
[Fri Jan 05 15:01:52.921550 2018] [ssl:emerg] [pid 5893] AH02572: Failed to configure at least one certificate and key for cxClient443.draglet.test:80
[Fri Jan 05 15:01:52.921625 2018] [ssl:emerg] [pid 5893] SSL Library Error: error:140A80B1:SSL routines:SSL_CTX_check_private_key:no certificate assigned
[Fri Jan 05 15:23:58.732592 2018] [ssl:emerg] [pid 11914] AH02572: Failed to configure at least one certificate and key for cxClient443.draglet.test:80
[Fri Jan 05 15:23:58.732657 2018] [ssl:emerg] [pid 11914] SSL Library Error: error:140A80B1:SSL routines:SSL_CTX_check_private_key:no certificate assigned
[Fri Jan 05 15:24:13.462196 2018] [ssl:emerg] [pid 14259] AH02572: Failed to configure at least one certificate and key for cxClient443.draglet.test:80
[Fri Jan 05 15:24:13.462259 2018] [ssl:emerg] [pid 14259] SSL Library Error: error:140A80B1:SSL routines:SSL_CTX_check_private_key:no certificate assigned
[Fri Jan 05 15:29:12.703818 2018] [ssl:emerg] [pid 15379] AH02572: Failed to configure at least one certificate and key for cxClient443.draglet.test:80
[Fri Jan 05 15:29:12.703887 2018] [ssl:emerg] [pid 15379] SSL Library Error: error:140A80B1:SSL routines:SSL_CTX_check_private_key:no certificate assigned
[Fri Jan 05 16:14:41.283388 2018] [ssl:emerg] [pid 26572] AH02572: Failed to configure at least one certificate and key for cxClient443.draglet.test:80
[Fri Jan 05 16:14:41.286169 2018] [ssl:emerg] [pid 26572] SSL Library Error: error:140A80B1:SSL routines:SSL_CTX_check_private_key:no certificate assigned
[Fri Jan 05 16:14:55.140487 2018] [ssl:emerg] [pid 26682] AH02572: Failed to configure at least one certificate and key for cxClient443.draglet.test:80
[Fri Jan 05 16:14:55.140582 2018] [ssl:emerg] [pid 26682] SSL Library Error: error:140A80B1:SSL routines:SSL_CTX_check_private_key:no certificate assigned
[Fri Jan 05 16:15:30.060854 2018] [ssl:emerg] [pid 26854] AH02572: Failed to configure at least one certificate and key for cxClient443.draglet.test:80
[Fri Jan 05 16:15:30.060974 2018] [ssl:emerg] [pid 26854] SSL Library Error: error:140A80B1:SSL routines:SSL_CTX_check_private_key:no certificate assigned
[Fri Jan 05 18:53:18.353682 2018] [ssl:emerg] [pid 9599] AH02572: Failed to configure at least one certificate and key for cxClient443.draglet.test:80
[Fri Jan 05 18:53:18.353750 2018] [ssl:emerg] [pid 9599] SSL Library Error: error:140A80B1:SSL routines:SSL_CTX_check_private_key:no certificate assigned
What is the issue here and how to make the Apache run? I'm using the Linux/ Debian for a month now and still not familiar with everything
I just created a ssl certificate shown here : http://www.tecchannel.de/a/owncloud-9-unter-ubuntu-server-16-04-lts-installieren,3277807,2
now if I start apache I get no error but with service apache2 status I get a error , error log :
[Fri Mar 31 14:55:59.639400 2017] [ssl:error] [pid 21071] AH02579: Init: Private key not found
[Fri Mar 31 14:55:59.639479 2017] [ssl:error] [pid 21071] SSL Library Error: error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Fri Mar 31 14:55:59.639494 2017] [ssl:error] [pid 21071] SSL Library Error: error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error
[Fri Mar 31 14:55:59.639504 2017] [ssl:error] [pid 21071] SSL Library Error: error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Fri Mar 31 14:55:59.639515 2017] [ssl:error] [pid 21071] SSL Library Error: error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error (Type=RSA)
[Fri Mar 31 14:55:59.639526 2017] [ssl:error] [pid 21071] SSL Library Error: error:04093004:rsa routines:OLD_RSA_PRIV_DECODE:RSA lib
[Fri Mar 31 14:55:59.639536 2017] [ssl:error] [pid 21071] SSL Library Error: error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Fri Mar 31 14:55:59.639547 2017] [ssl:error] [pid 21071] SSL Library Error: error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error (Type=PKCS8_PRIV_KEY_INFO)
[Fri Mar 31 14:55:59.639553 2017] [ssl:emerg] [pid 21071] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/apache2/error.log for more information
[Fri Mar 31 14:55:59.639558 2017] [ssl:emerg] [pid 21071] AH02564: Failed to configure encrypted (?) private key localhost:443:0, check /etc/apache2/ssl/apache.crt
AH00016: Configuration Failed
but whats wrong ? the file in /etc/apache2/ssl/apache.crt exists of course ... and why "Private key not found" ? apache.key exists too.
any help ? :(
While generating CRS request, it generates 2 files
example.csr
example.key -> You need to include this file in SSL configuration.
Make sure you have included key file in ssl configuration.
Key file should look like :
-----BEGIN PRIVATE KEY-----
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
-----END PRIVATE KEY-----
I think you should recheck your configuration steps.. After creating the .key file you have to give proper permission so that it should readable and writable by root.
Follow the below link which may solve your problem.
https://www.howtoforge.com/how-to-set-up-an-ssl-vhost-under-apache2-on-ubuntu-9.10-debian-lenny