Ubuntu-fr

cherubin13

Tentative activation SSL LetsEncrypt & ISPCONFIG = Apache Down

Bonjour,

Sur un serveur web, j'ai configuré quelques petits sites via le panel de gestion ISPConfig 3.
J'ai tenté aujourd'hui de configuré letsencrypt sur le serveur pour la gestion des connexions sécurisées https malheureusement j'ai échoué et le résultat est qu'actuellement apache ne redémarre plus.

service apache2 reload
Job for apache2.service failed. See 'systemctl status apache2.service' and 'journalctl -xn' for details.

`

sudo systemctl status apache2
● apache2.service - LSB: Apache2 web server
Loaded: loaded (/etc/init.d/apache2)
Active: failed (Result: exit-code) since jeu. 2016-07-14 23:49:45 CEST; 9min ago
Process: 6452 ExecStop=/etc/init.d/apache2 stop (code=exited, status=0/SUCCESS)
Process: 6461 ExecStart=/etc/init.d/apache2 start (code=exited, status=1/FAILURE)

juil. 14 23:49:45 ns393365.ip-176-31-112.eu apache2[6461]: Output of config test was:
juil. 14 23:49:45 ns393365.ip-176-31-112.eu apache2[6461]: AH00548: NameVirtualHost has no effect and will be removed in the next release /etc/apa...vhost:7
juil. 14 23:49:45 ns393365.ip-176-31-112.eu apache2[6461]: AH00526: Syntax error on line 54 of /etc/apache2/sites-enabled/000-ispconfig.vhost:
juil. 14 23:49:45 ns393365.ip-176-31-112.eu apache2[6461]: Invalid command 'SSLEngine', perhaps misspelled or defined by a module not included in ...uration
juil. 14 23:49:45 ns393365.ip-176-31-112.eu apache2[6461]: Action 'configtest' failed.
juil. 14 23:49:45 ns393365.ip-176-31-112.eu apache2[6461]: The Apache error log may have more information.
juil. 14 23:49:45 ns393365.ip-176-31-112.eu systemd[1]: apache2.service: control process exited, code=exited status=1
juil. 14 23:49:45 ns393365.ip-176-31-112.eu systemd[1]: Failed to start LSB: Apache2 web server.
juil. 14 23:49:45 ns393365.ip-176-31-112.eu systemd[1]: Unit apache2.service entered failed state.
juil. 14 23:59:03 ns393365.ip-176-31-112.eu systemd[1]: Unit apache2.service cannot be reloaded because it is inactive.
Hint: Some lines were ellipsized, use -l to show in full.

`

journalctl -xn
-- Logs begin at ven. 2016-07-01 03:40:05 CEST, end at ven. 2016-07-15 00:00:02 CEST. --
juil. 15 00:00:01 ns393365.ip-176-31-112.eu CRON[27337]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 > /dev/null | while read line; do echo/bin
juil. 15 00:00:01 ns393365.ip-176-31-112.eu CRON[27334]: pam_unix(cron:session): session closed for user getmail
juil. 15 00:00:02 ns393365.ip-176-31-112.eu CRON[27333]: pam_unix(cron:session): session closed for user root
juil. 15 00:00:02 ns393365.ip-176-31-112.eu pure-ftpd[27537]: (?@127.0.0.1) [INFO] New connection from 127.0.0.1
juil. 15 00:00:02 ns393365.ip-176-31-112.eu pure-ftpd[27537]: (?@127.0.0.1) [INFO] Logout.
juil. 15 00:00:02 ns393365.ip-176-31-112.eu dovecot[10540]: imap-login: Disconnected (disconnected before auth was ready, waited 0 secs): user=<>, rip=127.0
juil. 15 00:00:02 ns393365.ip-176-31-112.eu postfix/smtpd[27543]: connect from localhost.localdomain[127.0.0.1]
juil. 15 00:00:02 ns393365.ip-176-31-112.eu postfix/smtpd[27543]: lost connection after CONNECT from localhost.localdomain[127.0.0.1]
juil. 15 00:00:02 ns393365.ip-176-31-112.eu postfix/smtpd[27543]: disconnect from localhost.localdomain[127.0.0.1]
juil. 15 00:00:02 ns393365.ip-176-31-112.eu dovecot[10540]: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, se
lines 1-11/11 (END)

`

Extrait des logs
`

[Thu Jul 14 22:33:23.678662 2016] [:error] [pid 23826] python_init: Python version mismatch, expected '2.7.5+', found '2.7.9'.
[Thu Jul 14 22:33:23.678876 2016] [:error] [pid 23826] python_init: Python executable found '/usr/bin/python'.
[Thu Jul 14 22:33:23.678897 2016] [:error] [pid 23826] python_init: Python path being used '/usr/lib/python2.7/:/usr/lib/python2.7/plat-x86_64-linux-gnu:/usr/lib/python2.7/lib-tk:/usr/lib/python2.7/lib-old:/usr/lib/python2.7/lib-dynload'.
[Thu Jul 14 22:33:23.678937 2016] [:notice] [pid 23826] mod_python: Creating 8 session mutexes based on 150 max processes and 0 max threads.
[Thu Jul 14 22:33:23.678965 2016] [:notice] [pid 23826] mod_python: using mutex_directory /tmp
[Thu Jul 14 22:33:23.718844 2016] [ssl:warn] [pid 23826] AH01906: ns393365.ip-176-31-112.eu:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Jul 14 22:33:23.720616 2016] [:emerg] [pid 23826] AH00020: Configuration Failed, exiting
[Thu Jul 14 22:36:03.364922 2016] [ssl:warn] [pid 7916] AH01906: ns393365.ip-176-31-112.eu:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
AH00016: Configuration Failed
[Thu Jul 14 23:08:00.289998 2016] [ssl:warn] [pid 766] AH01906: ns393365.ip-176-31-112.eu:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
AH00016: Configuration Failed
[Thu Jul 14 23:17:51.799530 2016] [ssl:warn] [pid 28675] AH01906: ns393365.ip-176-31-112.eu:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Jul 14 23:17:51.801913 2016] [ssl:emerg] [pid 28675] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/ispconfig/httpd/7juin.com/error.log for more information
AH00016: Configuration Failed
[Thu Jul 14 23:23:24.902236 2016] [ssl:warn] [pid 8971] AH01906: ns393365.ip-176-31-112.eu:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Jul 14 23:23:24.904651 2016] [ssl:emerg] [pid 8971] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/ispconfig/httpd/7juin.com/error.log for more information
AH00016: Configuration Failed
[Thu Jul 14 23:32:24.092148 2016] [ssl:warn] [pid 3240] AH01906: ns393365.ip-176-31-112.eu:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Jul 14 23:32:24.094601 2016] [ssl:emerg] [pid 3240] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/ispconfig/httpd/7juin.com/error.log for more information
AH00016: Configuration Failed

`

`

apachectl configtest
AH00548: NameVirtualHost has no effect and will be removed in the next release /etc/apache2/sites-enabled/000-ispconfig.vhost:7
AH00526: Syntax error on line 54 of /etc/apache2/sites-enabled/000-ispconfig.vhost:
Invalid command 'SSLEngine', perhaps misspelled or defined by a module not included in the server configuration
Action 'configtest' failed.
The Apache error log may have more information.

Que puis je faire pour récupérer apache, revenir à a configuration sans https qui était fonctionnelle?

Merci

---

Expert SEO & E-Reputation
CEO de Neuron Partners

bbtux2

Re : Tentative activation SSL LetsEncrypt & ISPCONFIG = Apache Down

Bonjour,

Invalid command 'SSLEngine', perhaps misspelled or defined by a module not included in the server configuration

veut dire qu'apache ne reconnaît pas la commande SSLEngine et qu'elle est peut être défini par un module.

Essaie

sudo a2enmod ssl

.

cherubin13

Re : Tentative activation SSL LetsEncrypt & ISPCONFIG = Apache Down

Salut,

Oui le mod était bien activé, le souci venait au final d'une mauvaise génération du certificat de sécurité avec letsencrypt, donc lorsqu ele panel allait le chercher ça bloquait apache et cie.

---

Expert SEO & E-Reputation
CEO de Neuron Partners