MRatWork Forum by Mustafa Ramadhan

Sawo Project - Kloxo-MR Discussions => Kloxo-MR Technical Helps => Topic started by: azzureal on 2015-10-12, 07:47:53

Title: “Server should be SSL-aware but has no certificate configured [Hint: SSLCertific
Post by: azzureal on 2015-10-12, 07:47:53

I tried fixweb and cleanup and then httpd work well.
But when I rerun apache, it say port already used(by httpd).

So I killed httpd by command and start http.

But I got “Server should be SSL-aware but has no certificate configured [Hint: SSLCertificateFile]” error

and fixweb and cleanup and then httpd work well.

But the same.

Title: Re: “Server should be SSL-aware but has no certificate configured [Hint: SSLCertific
Post by: azzureal on 2015-10-12, 08:11:51

When httpd.event by fixweb is running. I got the below message.

If you are seeing this page, it means that web has not been configured for this domain on this server.

This could be due to the following causes:

    Kloxo has not restarted the web server yet after you added the domain. Please wait for the web server to restart.
     
    The domain is pointing to the wrong Kloxo server. Ping the domain and make sure that the IP matches one of the IPaddress seen in admin home -> ipaddresses
     
    If you are seeing this page when you try to access an IP like http://192.168.1.1, then that means that the IP has not yet been mapped to a domain. Go to client home -> ipaddresses -> ipaddress home -> domain config and map an IP to a domain.
     
    Once you map an IP to a domain, then you have to make sure that the domain pings back to the same IP. Otherwise, if you try to access the domain, you will get this page. So IP -> domain.com should mean that domain.com pings to the same IP.
     

Title: Re: “Server should be SSL-aware but has no certificate configured [Hint: SSLCertific
Post by: MRatWork on 2015-10-12, 08:39:00

Try 'pkill -9 httpd; sh /script/restart-web -y'.

Title: Re: “Server should be SSL-aware but has no certificate configured [Hint: SSLCertific
Post by: azzureal on 2015-10-12, 10:09:23

the same error

[Mon Oct 12 11:42:07 2015] [error] [client 74.86.158.109] FastCGI: incomplete headers (0 bytes) received from server "/home/kloxo/httpd/default/default.0fake"
[Mon Oct 12 11:43:07 2015] [error] [client 74.86.158.109] (2)No such file or directory: FastCGI: failed to connect to server "/home/kloxo/httpd/default/default.0fake": connect() failed
[Mon Oct 12 11:43:07 2015] [error] [client 74.86.158.109] FastCGI: incomplete headers (0 bytes) received from server "/home/kloxo/httpd/default/default.0fake"
[Mon Oct 12 11:43:19 2015] [notice] caught SIGTERM, shutting down
[Mon Oct 12 11:43:19 2015] [alert] (4)Interrupted system call: FastCGI: read() from pipe failed (0)
[Mon Oct 12 11:43:19 2015] [alert] (4)Interrupted system call: FastCGI: the PM is shutting down, Apache seems to have disappeared - bye
[Mon Oct 12 13:09:07 2015] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Mon Oct 12 13:09:07 2015] [error] Server should be SSL-aware but has no certificate configured [Hint: SSLCertificateFile] ((null):0)

Title: Re: “Server should be SSL-aware but has no certificate configured [Hint: SSLCertific
Post by: MRatWork on 2015-10-12, 11:18:57

Try 'sh /script/cleanup' again. Look like something wrong ssl files.

Title: Re: “Server should be SSL-aware but has no certificate configured [Hint: SSLCertific
Post by: azzureal on 2015-10-12, 13:07:16

I tried cleanup but.

[Mon Oct 12 11:43:19 2015] [notice] caught SIGTERM, shutting down
[Mon Oct 12 11:43:19 2015] [alert] (4)Interrupted system call: FastCGI: read() from pipe failed (0)
[Mon Oct 12 11:43:19 2015] [alert] (4)Interrupted system call: FastCGI: the PM is shutting down, Apache seems to have disappeared - bye
[Mon Oct 12 13:09:07 2015] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Mon Oct 12 13:09:07 2015] [error] Server should be SSL-aware but has no certificate configured [Hint: SSLCertificateFile] ((null):0)
[Mon Oct 12 16:09:03 2015] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Mon Oct 12 16:09:03 2015] [error] Server should be SSL-aware but has no certificate configured [Hint: SSLCertificateFile] ((null):0)

Title: Re: “Server should be SSL-aware but has no certificate configured [Hint: SSLCertific
Post by: azzureal on 2015-10-12, 13:54:16

Also i deleted ssl files in ssl folder, after cleanup new file created. but the same.

Title: Re: “Server should be SSL-aware but has no certificate configured [Hint: SSLCertific
Post by: MRatWork on 2015-10-12, 14:48:39

Check SSLCertificateFile and SSLCertificateKeyFile related file where exists or not (read http://blog.noizeramp.com/2010/10/03/apache-2-and-ssl-configuration/)

Title: Re: “Server should be SSL-aware but has no certificate configured [Hint: SSLCertific
Post by: azzureal on 2015-10-12, 15:17:22

I got files.


                SSLEngine on
                SSLProtocol ALL -SSLv2 -SSLv3
                SSLHonorCipherOrder On
                #SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS
                SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL
                SSLCertificateFile /home/kloxo/httpd/ssl/eth0___localhost.pem
                SSLCertificateKeyFile /home/kloxo/httpd/ssl/eth0___localhost.key

ll /home/kloxo/httpd/ssl/
total 24
-rw-r--r-- 1 apache apache  916 Oct 12  2015 eth0___localhost.crt
-rw-r--r-- 1 apache apache  887 Oct 12  2015 eth0___localhost.key
-rw-r--r-- 1 apache apache 1803 Oct 12  2015 eth0___localhost.pem
-rw-r--r-- 1 apache apache  916 Oct 12  2015 yesu.net.crt
-rw-r--r-- 1 apache apache  887 Oct 12  2015 yesu.net.key
-rw-r--r-- 1 apache apache 1803 Oct 12  2015 yesu.net.pem

Title: Re: “Server should be SSL-aware but has no certificate configured [Hint: SSLCertific
Post by: azzureal on 2015-10-12, 15:35:47

Is it possible to disable SSL?

I don't need SSL.

Title: Re: “Server should be SSL-aware but has no certificate configured [Hint: SSLCertific
Post by: MRatWork on 2015-10-12, 16:01:51

By design, no reason to disable ssl.

Try 'sh /script/fixssl'.

Title: Re: “Server should be SSL-aware but has no certificate configured [Hint: SSLCertific
Post by: azzureal on 2015-10-12, 16:36:57

How can I escape this tunnel.

I  spent 2 nights and days.

Title: Re: “Server should be SSL-aware but has no certificate configured [Hint: SSLCertific
Post by: azzureal on 2015-10-12, 16:59:09

I found some conf file problem.

I just leave one conf, it works ok.

Finally possible to escape tunnel.

Title: Re: “Server should be SSL-aware but has no certificate configured [Hint: SSLCertific
Post by: azzureal on 2015-10-12, 18:57:32

One conf file has problem, I removed it, now fine.

Thanks a lot.