[BlueOnyx:26738] Re: (no subject)

[Herbert Rubin]

Hi,

This issue is related to Let's Encrypt. The process is failing to get a
renewal of the certificate. I believe there is a strange catch-22. It
rewrites the vhosts/site2 file in some damaged way.
Then httpd does not properly restart. Then letsencrypt fails obviously and
we are in a down webserver state.

This is happening over and over again because of the expired certificate.

Jan 29 12:04:58 d06 pperld /usr/sau[1802823]: pperld
/usr/sausalito/handlers/base/ssl/le_install.pl: : WARNING: CertFail: 1 - NO
VALID CERT WAS GENERATED!!
Jan 29 12:04:58 d06 cced(smd)[1802819]: client 5:handlers/base/ssl/
le_install.pl: SET  49 . SSL LEclientRet =
"{\"Error\":\"[[base-ssl.LE_CA_Request_Error]]\",\"Status\":\"1\",\"ErrMsg\":\"

I turned off Let's Encrypt auto renew for this one site. That solved my
problem termporarily.
Its not damaging the site2 apache config file anymore.

Herb


On Sun, Jan 28, 2024 at 9:56 AM Herbert Rubin <herbr at pfinders.com> wrote:

> Hi,
>
> I am seeing strange behaviour where one of my site files is getting
> rewritten improperly and apache will not restart.
>
> This section is rewritten with a bad suPHP line:
>
> <IfModule mod_suphp.c>
>     suPHP_Engine on
>     suPHP_UserGroup apache site2
>     AddType application/ .php
>     AddHandler  .php .php5 .php4 .php3 .phtml
>     suPHP_AddHandler
>     suPHP_ConfigPath /home/.sites/site2/wwwroot/
> </IfModule>
>
> It should say:
>
> suPHP_AddHandler x-httpd-suphp
>
> My other site files that have the same configuration are fine.
>
> Jan 28 03:34:58 d06 systemd[1]: Starting One-time temporary TLS key
> generation for httpd.service...
> Jan 28 03:34:58 d06 systemd[1]: httpd-init.service: Deactivated
> successfully.
> Jan 28 03:34:58 d06 systemd[1]: Finished One-time temporary TLS key
> generation for httpd.service.
> Jan 28 03:34:58 d06 systemd[1]: Starting The Apache HTTP Server...
> Jan 28 03:34:58 d06 cced(smd)[1626586]: client [0:1626582] has admin rights
> Jan 28 03:34:58 d06 httpd[1626582]: AH00526: Syntax error on line 46 of
> /etc/httpd/conf/vhosts/site2:
> Jan 28 03:34:58 d06 httpd[1626582]: suPHP_AddHandler requires at least one
> argument, Tells mod_suphp to handle these MIME-types
> Jan 28 03:34:58 d06 systemd[1]: httpd.service: Main process exited,
> code=exited, status=1/FAILURE
> Jan 28 03:34:58 d06 systemd[1]: httpd.service: Failed with result
> 'exit-code'.
> Jan 28 03:34:58 d06 systemd[1]: Failed to start The Apache HTTP Server.
>
> I can hand fix it and start apache myself but it will rewrite the file
> improperly again and attempt to restart apache.
>
> Herb
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20240129/e196d692/attachment.html>