apache restart failed after SSL installed

I must have done something wrong with SSL installation? I can't think of anything else that's changed. Now apache won't start.

Here's my situation. I have one domain/IP with one SSL certificate. I just added another domain on the same linode. Got another IP to install the new SSL certificate for new domain. The new SSL certificate was from bluehost. Because it was purchased by someone else, I generated a request file and sent it to him so he can get a certificate file back from bluehost. I then added the virtual host entry for the new domain and added the SSL entries to point to the certificate file. Below is my new domain configuration file (under /etc/apache2/sites-available).

ServerAdmin admin@cre8ivewear.com

ServerName cre8ivewear.com

ServerAlias www.cre8ivewear.com

DocumentRoot /srv/www/cre8ivewear.com/public_html/

ErrorLog /srv/www/cre8ivewear.com/logs/error.log

CustomLog /srv/www/cre8ivewear.com/logs/access.log combined

ErrorLog "|/usr/sbin/rotatelogs /srv/www/cre8ivewear.com/logs/error.log.%d-%H%M%S 100M"

CustomLog "|bin/rotatelogs /srv/www/cre8ivewear.com/logs/access.log.%Y-%m-%d-%H%M%S 100M" combined

ErrorDocument 404 /404.html

ErrorDocument 500 /500.html

SSLEngine On

SSLCertificateFile /etc/apache2/ssl/www.cre8ivewear.com.crt

SSLCertificateKeyFile /etc/apache2/ssl/www.cre8ivewear.com.key

ServerAdmin admin@cre8ivewear.com

ServerName cre8ivewear.com

ServerAlias www.cre8ivewear.com

DocumentRoot /srv/www/cre8ivewear.com/public_html/

ErrorLog /srv/www/cre8ivewear.com/logs/error.log

CustomLog /srv/www/cre8ivewear.com/logs/access.log combined

ErrorLog "|/usr/sbin/rotatelogs /srv/www/cre8ivewear.com/logs/error.log.%d-%H%M%S 100M"

CustomLog "|bin/rotatelogs /srv/www/cre8ivewear.com/logs/access.log.%Y-%m-%d-%H%M%S 100M" combined

ErrorDocument 404 /404.html

ErrorDocument 500 /500.html

What's wrong?

3 Replies

I was briefly able to access your site just now, and it was presenting a self-signed cert for a li-xxx.members.linode.com host. so you at least had that working…

what error is apache giving you when you try to start?

I have two domains on the same linode, with one apache server. When I tried to disable the new domain, apache started fine, with of course only one domain accessible. When I tried to enable both domains, apache won't start. By the way, both SSL certificates (for both domains) are commercial certificates, so that should not show up as self-signed? I don't know what was set wrong.

Here's the /var/log/apache2/error.log file.

PHP Deprecated: Comments starting with '#' are deprecated in /etc/php5/apache2/php.ini on line 879 in Unknown on line 0

PHP Deprecated: Comments starting with '#' are deprecated in /etc/php5/apache2/conf.d/mcrypt.ini on line 1 in Unknown on line 0

PHP Warning: Module 'curl' already loaded in Unknown on line 0

[Sun Jul 31 06:25:02 2011] [warn] RSA server certificate CommonName (CN) `li216-227.members.linode.com' does NOT match server name!?

[Sun Jul 31 06:25:02 2011] [notice] Apache/2.2.14 (Ubuntu) PHP/5.3.2-1ubuntu4.7 with Suhosin-Patch mod_ssl/2.2.14 OpenSSL/0.9.8k configured – resuming normal operations

[Sun Jul 31 14:32:07 2011] [error] server reached MaxClients setting, consider raising the MaxClients setting

[Mon Aug 01 23:24:22 2011] [notice] child pid 11123 exit signal Segmentation fault (11)

[Mon Aug 01 23:24:23 2011] [notice] child pid 10628 exit signal Segmentation fault (11)

[Mon Aug 01 23:24:23 2011] [notice] child pid 11124 exit signal Segmentation fault (11)

[Tue Aug 02 00:02:10 2011] [notice] child pid 10947 exit signal Segmentation fault (11)

[Tue Aug 02 00:02:24 2011] [notice] child pid 10836 exit signal Segmentation fault (11)

[Tue Aug 02 00:02:38 2011] [notice] child pid 11112 exit signal Segmentation fault (11)

[Tue Aug 02 00:03:02 2011] [notice] child pid 10945 exit signal Segmentation fault (11)

[Tue Aug 02 00:03:07 2011] [notice] child pid 11110 exit signal Segmentation fault (11)

[Wed Aug 03 19:04:23 2011] [notice] caught SIGTERM, shutting down

[Wed Aug 03 19:04:24 2011] [warn] RSA server certificate CommonName (CN) `li216-227.members.linode.com' does NOT match server name!?

[Wed Aug 03 19:04:31 2011] [warn] RSA server certificate CommonName (CN) `li216-227.members.linode.com' does NOT match server name!?

[Wed Aug 03 19:06:35 2011] [warn] RSA server certificate CommonName (CN) `li216-227.members.linode.com' does NOT match server name!?

[Wed Aug 03 19:08:16 2011] [warn] RSA server certificate CommonName (CN) `li216-227.members.linode.com' does NOT match server name!?

[Wed Aug 03 19:13:13 2011] [warn] RSA server certificate CommonName (CN) `li216-227.members.linode.com' does NOT match server name!?

[Wed Aug 03 19:22:41 2011] [warn] RSA server certificate CommonName (CN) `li216-227.members.linode.com' does NOT match server name!?

[Wed Aug 03 19:31:26 2011] [warn] RSA server certificate CommonName (CN) `li216-227.members.linode.com' does NOT match server name!?

[Wed Aug 03 19:51:33 2011] [warn] RSA server certificate CommonName (CN) `li216-227.members.linode.com' does NOT match server name!?

[Wed Aug 03 20:01:26 2011] [warn] RSA server certificate CommonName (CN) `li216-227.members.linode.com' does NOT match server name!?

PHP Deprecated: Comments starting with '#' are deprecated in /etc/php5/apache2/php.ini on line 879 in Unknown on line 0

PHP Deprecated: Comments starting with '#' are deprecated in /etc/php5/apache2/conf.d/mcrypt.ini on line 1 in Unknown on line 0

PHP Warning: Module 'curl' already loaded in Unknown on line 0

[Wed Aug 03 20:01:27 2011] [warn] RSA server certificate CommonName (CN) `li216-227.members.linode.com' does NOT match server name!?

[Wed Aug 03 20:01:27 2011] [notice] Apache/2.2.14 (Ubuntu) PHP/5.3.2-1ubuntu4.7 with Suhosin-Patch mod_ssl/2.2.14 OpenSSL/0.9.8k configured – resuming normal operations

[Wed Aug 03 20:36:48 2011] [error] [client 76.170.59.240] File does not exist: /var/www/favicon.ico

[Wed Aug 03 20:37:36 2011] [notice] Graceful restart requested, doing restart

PHP Deprecated: Comments starting with '#' are deprecated in /etc/php5/apache2/php.ini on line 879 in Unknown on line 0

PHP Deprecated: Comments starting with '#' are deprecated in /etc/php5/apache2/conf.d/mcrypt.ini on line 1 in Unknown on line 0

PHP Warning: Module 'curl' already loaded in Unknown on line 0

[Wed Aug 03 20:37:36 2011] [warn] RSA server certificate CommonName (CN) `li216-227.members.linode.com' does NOT match server name!?

Looks like you have it up now? At least the cre8ivewear.com sites are working. What is the other domain?

Also, you're still using a self signed cert:

~~![](<URL url=)http://brianlance.net/images/cre8ivewear_ssl.jpg" />

Is your apache config referencing the correct SSL certificate file(s)?~~

Reply

Please enter an answer
Tips:

You can mention users to notify them: @username

You can use Markdown to format your question. For more examples see the Markdown Cheatsheet.

> I’m a blockquote.

I’m a blockquote.

[I'm a link] (https://www.google.com)

I'm a link

**I am bold** I am bold

*I am italicized* I am italicized

Community Code of Conduct