Problem ssl subdomain access Control Panel

[franmm25]

All works fine and SSL for domains perfect, but if i have this domain, for example www.test.com and add cp in DNS for example for create cp.test.com and access to my admin CP all works, yes, but in the moment i create SSL for admin CP, all fail, and when access control panel from Ip or from for example subdomain, redirect as index of domain www.test.com, really no sense.

For Fix this situation i restore backup of vhosts apache configuration and restart apache, and until running daemon delete SSL for subdomain access Control Panel as Admin, and this fix all, but i think there are some problem because i see the file of vhosts of configuration and show well.

I don´t know if know from Sentora Team what happend, thanks

# Configuration for Sentora control panel.
<VirtualHost *:443>
ServerAdmin info@test.com
DocumentRoot "/etc/sentora/panel/"
ServerName cp.test.com

<Directory "/etc/sentora/panel/">
Options +FollowSymLinks -Indexes
AllowOverride All
Require all granted
</Directory>

AddType application/x-httpd-php .php

#php_admin_value

open_basedir "/var/sentora/:/etc/sentora/"
php_admin_value sp.configuration_file "/etc/sentora/configs/php/sp/sentora.rules"

# PHP Admin Values
php_admin_value session.save_path "/var/sentora/sessions"

ErrorLog "/var/sentora/logs/sentora-error.log"
CustomLog "/var/sentora/logs/sentora-access.log" combined
CustomLog "/var/sentora/logs/sentora-bandwidth.log" common

ErrorDocument 500 /etc/static/errorpages/500.html
ErrorDocument 404 /etc/static/errorpages/404.html
ErrorDocument 403 /etc/static/errorpages/403.html
ErrorDocument 510 /etc/static/errorpages/510.html

# Custom settings are loaded below this line (if any exist)

</VirtualHost>
################################################################

# Configuration for Sentora control panel SSL.
<VirtualHost *:443>
ServerAdmin info@test.com
DocumentRoot "/etc/sentora/panel/"
ServerName cp.test.com

<Directory "/etc/sentora/panel/">
Options +FollowSymLinks -Indexes
AllowOverride All
Require all granted
</Directory>

AddType application/x-httpd-php .php

#php_admin_value

open_basedir "/var/sentora/:/etc/sentora/"
php_admin_value sp.configuration_file "/etc/sentora/configs/php/sp/sentora.rules"

# PHP Admin Values
php_admin_value session.save_path "/var/sentora/sessions"

ErrorLog "/var/sentora/logs/sentora-error.log"
CustomLog "/var/sentora/logs/sentora-access.log" combined
CustomLog "/var/sentora/logs/sentora-bandwidth.log" common

ErrorDocument 500 /etc/static/errorpages/500.html
ErrorDocument 404 /etc/static/errorpages/404.html
ErrorDocument 403 /etc/static/errorpages/403.html
ErrorDocument 510 /etc/static/errorpages/510.html

# Made from Sencrypt - letsencrypt - start

SSLEngine On
SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
SSLHonorCipherOrder on
SSLCipherSuite "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305HE-RSA-AES128-GCM-SHA256HE-RSA-AES256-GCM-SHA384"
SSLCertificateFile /var/sentora/hostdata/zadmin/ssl/sencrypt/letsencrypt/cp.test.com/cert.pem
SSLCertificateKeyFile /var/sentora/hostdata/zadmin/ssl/sencrypt/letsencrypt/cp.test.com/private.pem
SSLCACertificateFile /var/sentora/hostdata/zadmin/ssl/sencrypt/letsencrypt/cp.test.com/chain.pem
# Made from Sencrypt - letsencrypt - end


# Custom settings are loaded below this line (if any exist)

</VirtualHost>

[franmm25]

I identified the problem and tested it and it is that when putting ssl to the Sentora subdomain, the same entry with the same port is repeated in httpd-vhosts.conf twice as 443 instead of once with port 80 and once with port 443, Changed manually and restarted Apache, it is accessed perfectly with http and https for the subdomain, but when the daemon runs it again overwrites the subdomain with 443 twice, I don't know what solution could be given to this, greetings

[Jettaman]

I identified the problem and tested it and it is that when putting ssl to the Sentora subdomain, the same entry with the same port is repeated in httpd-vhosts.conf twice as 443 instead of once with port 80 and once with port 443, Changed manually and restarted Apache, it is accessed perfectly with http and https for the subdomain, but when the daemon runs it again overwrites the subdomain with 443 twice, I don't know what solution could be given to this, greetings

Hi franmm25,

I would be glad to help. If I may start with a few questions.

- Is this a fresh install?

- What version were you using before, If any?

- What version are you currently using? Your profile stats Zpanel 10.x. Sencrypt does not support Zpanel.

- Have you used another SSL manager module in the past? if so what module?

This issue normally happens when Sencrypt is installed and does not have the proper Sentora core files/DB installed.
Sencrypt requires Sentora v2.0.1+.

[franmm25]

Install is fresh, reinstall OS and put Ubuntu, from here https://docs.sentora.org/?node=22

The last versión using Php 7.4.3, Sentora 2.0.1

Also i test in another server with fresh install han happend the same, only fail when install SSL for subdomain access CP, nothing more.

The problem is in vhost repeat the same port 2 times only for subdomain CP, is strange because the 2 configurations is ok and the only problem is repeat 443 in the first step, if you put 80 works, restart apache and works perfectly but when daemond tun overwrite all.

Actually i test in Ubuntu other time and continue the same, only can fix if delete SSL for subdomain, and dont install other module, etc, nothing more.

Regards.

[TGates]

I think there may be a typo in the Sencrypt module (or apache admin module) where it is getting the port number from the over-ride port (443) and not the default apache port (80).

Looks to be a simple $variable change and it should work. Looking into it.

[Jettaman]

Install is fresh, reinstall OS and put Ubuntu, from here https://docs.sentora.org/?node=22

The last versión using Php 7.4.3, Sentora 2.0.1

Also i test in another server with fresh install han happend the same, only fail when install SSL for subdomain access CP, nothing more.

The problem is in vhost repeat the same port 2 times only for subdomain CP, is strange because the 2 configurations is ok and the only problem is repeat 443 in the first step, if you put 80 works, restart apache and works perfectly but when daemond tun overwrite all.

Actually i test in Ubuntu other time and continue the same, only can fix if delete SSL for subdomain, and dont install other module, etc, nothing more.

Regards.

franmm25,

Did you by chance install crr1969 PHP changer module or any other module? Your Apache_admin hook code is wrong. I have checked default install and all code is correct. Somehow your apache_admin mod code got changed.

[franmm25]

@[franmm25],

Did you by chance install crr1969 PHP changer module or any other module? Your Apache_admin hook code is wrong. I have checked default install and all code is correct. Somehow your apache_admin mod code got changed.

Yes i use this module :

<?xml version="1.0" encoding="utf-8"?>
<module>
    <name>Php_Ver</name>
    <version>100</version>
    <defaultcat>Domain Management</defaultcat>
    <type>user</type>
    <desc>This module enables you to change or configure Php versions on your Domains.</desc>
    <authorname>ccr1969</authorname>
    <authoremail>webmaster@idohost.cf</authoremail>
    <authorurl>https://idohost.cf/</authorurl>
    <updateurl>http://idohost.cf/version.xml</updateurl>
</module>

Also Module Change Php Version add some lines inside vhosts as these :

<Files ~ "\.php$">
SetHandler "proxy:unix:/run/php/php5.6-fpm.sock|fcgi://localhost/"
</Files>

And i add these lines for specific folder with other Php versión, from Apache Module in Sentora only for some domains :

<Directory /var/sentora/hostdata/zadmin/public_html/test_com/tester_version>
<FilesMatch \.php$>
SetHandler "proxy:unix:/run/php/php7.3-fpm.sock|fcgi://localhost/"
</FilesMatch>
</Directory>

Apache Modules :

Code:

access_compat_module (shared)
auth_basic_module (shared)
authn_core_module (shared)
authn_file_module (shared)
authz_core_module (shared)
authz_host_module (shared)
authz_user_module (shared)
autoindex_module (shared)
bw_module (shared)
core_module (static)
deflate_module (shared)
dir_module (shared)
env_module (shared)
filter_module (shared)
http_module (static)
Loaded Modules:
log_config_module (static)
logio_module (static)
mime_module (shared)
mpm_prefork_module (shared)
negotiation_module (shared)
php7_module (shared)
proxy_fcgi_module (shared)
proxy_module (shared)
reqtimeout_module (shared)
rewrite_module (shared)
setenvif_module (shared)
socache_shmcb_module (shared)
so_module (static)
ssl_module (shared)
status_module (shared)
unixd_module (static)
version_module (static)
watchdog_module (static)

The module and all works fine, the only problem is with SSL for subdomain access CP, regards.

[Jettaman]

Yes i use this module :



Also Module Change Php Version add some lines inside vhosts as these :


And i add these lines for specific folder with other Php versión, from Apache Module in Sentora only for some domains :


Apache Modules :

Code:

access_compat_module (shared)
auth_basic_module (shared)
authn_core_module (shared)
authn_file_module (shared)
authz_core_module (shared)
authz_host_module (shared)
authz_user_module (shared)
autoindex_module (shared)
bw_module (shared)
core_module (static)
deflate_module (shared)
dir_module (shared)
env_module (shared)
filter_module (shared)
http_module (static)
Loaded Modules:
log_config_module (static)
logio_module (static)
mime_module (shared)
mpm_prefork_module (shared)
negotiation_module (shared)
php7_module (shared)
proxy_fcgi_module (shared)
proxy_module (shared)
reqtimeout_module (shared)
rewrite_module (shared)
setenvif_module (shared)
socache_shmcb_module (shared)
so_module (static)
ssl_module (shared)
status_module (shared)
unixd_module (static)
version_module (static)
watchdog_module (static)

The module and all works fine, the only problem is with SSL for subdomain access CP, regards.

franmm25,

THAT'S THE ISSUE!!!! CCR1969's PHP changer mod is obsolete with sentora v2.0.1+ core code/files.
He has made changes that no longer work with the new core/files. In his install he replaces main core files to make his module work.

We need to get your system back to default v2.0.1 core files.

Follow these steps below and run commands as ROOT -

Code:

setso --set apache_changed "1717016703"

Code:

setso --set panel_ssl_tx ""

Code:

setso --set apache_port "80"

Code:

setso --set sentora_port "80"

Code:

setso --set dbversion "2.0.0"

Code:

bash <(curl -L -Ss https://sentora.org/update_2.0.1)

This should reset your core and default you back to v2.0.1.

Let me know if you have any issues after you run the following commands. Talk soon.

[franmm25]

@[franmm25],

THAT'S THE ISSUE!!!! CCR1969's PHP changer mod is obsolete with sentora v2.0.1+ core code/files.
He has made changes that no longer work with the new core/files. In his install he replaces main core files to make his module work.

We need to get your system back to default v2.0.1 core files.

Follow these steps below and run commands as ROOT -

Code:

setso --set apache_changed "1717016703"

Code:

setso --set panel_ssl_tx ""

Code:

setso --set apache_port "80"

Code:

setso --set sentora_port "80"

Code:

setso --set dbversion "2.0.0"

Code:

bash <(curl -L -Ss https://sentora.org/update_2.0.1)

This should reset your core and default you back to v2.0.1.

Let me know if you have any issues after you run the following commands. Talk soon.

Thanks, and yes, this fix all for this situation, but how i can use fpm, for change version of php because until always can put different version for each domain include in each folder

<Files ~ "\.php$">
SetHandler "proxy:unix:/run/php/php5.6-fpm.sock|fcgi://localhost/"
</Files>

<Directory /var/sentora/hostdata/zadmin/public_html/test_com/test2>
<FilesMatch \.php$>
SetHandler "proxy:unix:/run/php/php7.3-fpm.sock|fcgi://localhost/"
</FilesMatch>
</Directory>

And is strange because now no have the module for change php version, but i can continue change to php version 5.6, but don´t let me change in folders, for me is the same the module, but in Centos 7 i change this with only install fpm but at the moment no works for me in Ubuntu, if i can install this and others php versions can change manually the version in Apache vhosts and overwrite, and don´t give problems.

Is possible solution for this, thank´s for all your help, regards

[ccr1969]

the only core file that was changed was the OnDaemonRun.hook in module apache hook as it wouldnt write the changes i have looked at this and beleave i ve fixed that issue i dont fet on very much as of late so may be slow on responding
i ve tested  it and it seems to do what its suppose to. On another note if using lets encrypt it over wtites anything thats been placed in custom so letsencrypt needs to be deployed first as php ver does not over writw existing data

Thanks, and yes, this fix all for this situation, but how i can use fpm, for change version of php because until always can put different version for each domain include in each folder



And is strange because now no have the module for change php version, but i can continue change to php version 5.6, but don´t let me change in folders, for me is the same the module, but in Centos 7 i change this with only install fpm but at the moment no works for me in Ubuntu, if i can install this and others php versions can change manually the version in Apache vhosts and overwrite, and don´t give problems.

Is possible solution for this, thank´s for all your help, regards