Can't run mod_ssl?

[jstacklin]

Hello, whenever I enmod mod_ssl, it gives me this error in apache:

Code:

[Wed Apr 26 08:17:59.453103 2017] [:notice] [pid 6518] mod_bw : Memory Allocated 0 bytes (each conf takes 48 bytes)
[Wed Apr 26 08:17:59.453188 2017] [:notice] [pid 6518] mod_bw : Version 0.92 - Initialized [0 Confs]
[Wed Apr 26 08:17:59.479391 2017] [mpm_prefork:notice] [pid 6518] AH00163: Apache/2.4.7 (Ubuntu) configured -- resuming normal operations
[Wed Apr 26 08:17:59.479428 2017] [core:notice] [pid 6518] AH00094: Command line: '/usr/sbin/apache2'
[Wed Apr 26 08:20:31.250667 2017] [mpm_prefork:notice] [pid 6518] AH00169: caught SIGTERM, shutting down
[Wed Apr 26 08:20:32.340331 2017] [:notice] [pid 6616] mod_bw : Memory Allocated 0 bytes (each conf takes 48 bytes)
[Wed Apr 26 08:20:32.340426 2017] [:notice] [pid 6616] mod_bw : Version 0.92 - Initialized [0 Confs]
[Wed Apr 26 08:20:32.368202 2017] [mpm_prefork:notice] [pid 6616] AH00163: Apache/2.4.7 (Ubuntu) configured -- resuming normal operations
[Wed Apr 26 08:20:32.368236 2017] [core:notice] [pid 6616] AH00094: Command line: '/usr/sbin/apache2'
[Wed Apr 26 08:20:44.756913 2017] [mpm_prefork:notice] [pid 6616] AH00169: caught SIGTERM, shutting down
[Wed Apr 26 08:20:45.853162 2017] [ssl:emerg] [pid 6671] AH02240: Server should be SSL-aware but has no certificate configured [Hint: SSLCertificateFile] ((null):0)
[Wed Apr 26 08:20:45.853234 2017] [ssl:emerg] [pid 6671] AH02312: Fatal error initialising mod_ssl, exiting.

What am I doing wrong? I followed the instructions here: http://docs.sentora.org/?node=21 but to no avail. Can I edit the global conf for sentora?

Further, now when I dismod mod_ssl, i get the following:

Code:

root@ohioiproject:/var/log/apache2# a2dismod ssl
Module ssl disabled.
To activate the new configuration, you need to run:
 service apache2 restart
root@ohioiproject:/var/log/apache2# service apache2 restart
* Restarting web server apache2                                                                                                                                                 [fail]
* The apache2 configtest failed.
Output of config test was:
AH00548: NameVirtualHost has no effect and will be removed in the next release /etc/sentora/configs/apache/httpd-vhosts.conf:32
AH00526: Syntax error on line 34 of /etc/sentora/configs/apache/httpd-vhosts.conf:
Invalid command 'SSLEngine', perhaps misspelled or defined by a module not included in the server configuration
Action 'configtest' failed.
The Apache error log may have more information.

And the log follows up with:

Code:

[Wed Apr 26 08:20:32.368202 2017] [mpm_prefork:notice] [pid 6616] AH00163: Apache/2.4.7 (Ubuntu) configured -- resuming normal operations
[Wed Apr 26 08:20:32.368236 2017] [core:notice] [pid 6616] AH00094: Command line: '/usr/sbin/apache2'
[Wed Apr 26 08:20:44.756913 2017] [mpm_prefork:notice] [pid 6616] AH00169: caught SIGTERM, shutting down
[Wed Apr 26 08:20:45.853162 2017] [ssl:emerg] [pid 6671] AH02240: Server should be SSL-aware but has no certificate configured [Hint: SSLCertificateFile] ((null):0)
[Wed Apr 26 08:20:45.853234 2017] [ssl:emerg] [pid 6671] AH02312: Fatal error initialising mod_ssl, exiting.

But that makes it seem like I didn't disable mod_ssl! But as you can see from the terminal above, I did! Please help, if you can. Anything is greatly appreciated. 



WARNING TO THE ADMINS WHO MIGHT OFFER HELP: I HAVE UPDATED THE SERVER TO PHP7.0 AND CONFIRMED EVERYTHING SECURE AND WORKING, I UNDERSTAND THIS MAY AFFECT THE WAY THE PROGRAM WORKS AND ACCEPT THAT ANY HELP YOU MAY GIVE MAY CORRUPT, DESTROY, OR EFFECT PARTS OF MY SERVER IN WAYS THAT YOU DID NOT INTEND TO DO, AND THE BLAME FOR DOING SO LIES SQUARELY ON MY SHOULDERS IF I BREAK SOMETHING.

---

Addendum: The line it seems to dislike (line 34) is:

Code:

<virtualhost *:443>

from the Sentora-generated vhost file, this is the whole thing:

Code:

# DOMAIN: ohioiproject.co.uk
<virtualhost *:443>
ServerName ohioiproject.co.uk
ServerAlias  www.ohioiproject.co.uk
ServerAdmin admin@ohioiproject.co.uk
DocumentRoot "/var/sentora/hostdata/ohioipro/public_html/ohioiproject_co_uk"
php_admin_value open_basedir "/var/sentora/hostdata/ohioipro/public_html/ohioiproject_co_uk:/var/sentora/temp/"
php_admin_value suhosin.executor.func.blacklist "passthru, show_source, shell_exec, system, pcntl_exec, popen, pclose, proc_open, proc_nice, proc_terminate, proc_get_status, proc_clos$
ErrorLog "/var/sentora/logs/domains/ohioipro/ohioiproject.co.uk-error.log"
CustomLog "/var/sentora/logs/domains/ohioipro/ohioiproject.co.uk-access.log" combined
CustomLog "/var/sentora/logs/domains/ohioipro/ohioiproject.co.uk-bandwidth.log" common
<Directory "/var/sentora/hostdata/ohioipro/public_html/ohioiproject_co_uk">
 Options +FollowSymLinks -Indexes
 AllowOverride All
 Require all granted
</Directory>
AddType application/x-httpd-php .php3 .php

ErrorLog "/var/sentora/logs/domains/ohioipro/ohioiproject.co.uk-error.log"
CustomLog "/var/sentora/logs/domains/ohioipro/ohioiproject.co.uk-access.log" combined
CustomLog "/var/sentora/logs/domains/ohioipro/ohioiproject.co.uk-bandwidth.log" common
<Directory "/var/sentora/hostdata/ohioipro/public_html/ohioiproject_co_uk">
 Options +FollowSymLinks -Indexes
 AllowOverride All
 Require all granted
</Directory>
AddType application/x-httpd-php .php3 .php
ErrorDocument 404 /_errorpages/404.html
ErrorDocument 510 /_errorpages/510.html
ErrorDocument 500 /_errorpages/500.html
ErrorDocument 403 /_errorpages/403.html
DirectoryIndex index.html index.htm index.php index.asp index.aspx index.jsp index.jspa index.shtml index.shtm
# Custom Global Settings (if any exist)

# Custom VH settings (if any exist)

</virtualhost>

Hope this helps in any way shape or form.

[TGates]

It tells you the error:

Code:

Server should be SSL-aware but has no certificate configured [Hint: SSLCertificateFile] ((null):0)

You did not add any of the required SSL lines to the custom vhost entry for that domain.

Even if you are not using Let's Encrypt for your SSL, Read through this: http://docs.sentora.org/?node=103 to learn how to configure the custom vhost entries for the domain you are adding SSL too. (Just change the paths to your certificate files).

Specifically this section:

Changing Sentora port:
On Sentora Panel go to Admin -> Module Admin -> Apache Config > Override a Virtualhost [Select VHost] ->
Tick Port Override.
Forward Port 80 to Overriden Port: 443
Custom Entry:
(Don't forget to replace domain.com with your domain's URL below

Code:

SSLEngine on
SSLProtocol ALL -SSLv2 -SSLv3
SSLHonorCipherOrder On
SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS
SSLCertificateFile /etc/letsencrypt/live/domain.com/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/domain.com/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/domain.com/chain.pem
# Keeping bellow for future upgrades.
# Requires Apache >= 2.4
SSLCompression off

[jstacklin]

(snip)

Thanks TGates. Since I needed to deploy quickly (been bleeding profit for about 5 days now), I had to deploy quickly and lept ahead.

However, for the information you gave me, I did follow that tutorial to a T, and still had the error. I'm curious if that would be caused by something else. When I get a few free days and can pull out my dusty OP770 I will attempt to go back through and see if anything further can be repeatable. Until then, I will mark this closed and just assume I was an idiot with time not on his side so he rushed.

Further: When will Sentora officially support PHP7 and 5.6? The unofficial support is great, but as you mentioned before it could cause issues while troubleshooting and the older versions that they are having us download is no longer supported in the newest OS's.

Thanks again and sorry for wasting your time.