We are in the process of migrating this forum. A new space will be available soon. We are sorry for the inconvenience.

Tentative config letsencrypt sur debian ISPCONFIG = apache down


cherubin
15/07/2016, 09h58
Bonjour,

Je suis sur Debian 8 avec le panel de gestion ISPConfig 3.
J'ai tenté hier de configurer letsencrypt sur le serveur pour la gestion des connexions sécurisées https malheureusement j'ai échoué et le résultat est qu'actuellement apache ne redémarre plus.

`
Code:
service apache2 reload
Job for apache2.service failed. See 'systemctl status apache2.service' and 'journalctl -xn' for details.
`

`
Code:
sudo systemctl status apache2
● apache2.service - LSB: Apache2 web server
Loaded: loaded (/etc/init.d/apache2)
Active: failed (Result: exit-code) since jeu. 2016-07-14 23:49:45 CEST; 9min ago
Process: 6452 ExecStop=/etc/init.d/apache2 stop (code=exited, status=0/SUCCESS)
Process: 6461 ExecStart=/etc/init.d/apache2 start (code=exited, status=1/FAILURE)

juil. 14 23:49:45 ns393365.ip-176-31-112.eu apache2[6461]: Output of config test was:
juil. 14 23:49:45 ns393365.ip-176-31-112.eu apache2[6461]: AH00548: NameVirtualHost has no effect and will be removed in the next release /etc/apa...vhost:7
juil. 14 23:49:45 ns393365.ip-176-31-112.eu apache2[6461]: AH00526: Syntax error on line 54 of /etc/apache2/sites-enabled/000-ispconfig.vhost:
juil. 14 23:49:45 ns393365.ip-176-31-112.eu apache2[6461]: Invalid command 'SSLEngine', perhaps misspelled or defined by a module not included in ...uration
juil. 14 23:49:45 ns393365.ip-176-31-112.eu apache2[6461]: Action 'configtest' failed.
juil. 14 23:49:45 ns393365.ip-176-31-112.eu apache2[6461]: The Apache error log may have more information.
juil. 14 23:49:45 ns393365.ip-176-31-112.eu systemd[1]: apache2.service: control process exited, code=exited status=1
juil. 14 23:49:45 ns393365.ip-176-31-112.eu systemd[1]: Failed to start LSB: Apache2 web server.
juil. 14 23:49:45 ns393365.ip-176-31-112.eu systemd[1]: Unit apache2.service entered failed state.
juil. 14 23:59:03 ns393365.ip-176-31-112.eu systemd[1]: Unit apache2.service cannot be reloaded because it is inactive.
Hint: Some lines were ellipsized, use -l to show in full.
`

Code:
journalctl -xn
-- Logs begin at ven. 2016-07-01 03:40:05 CEST, end at ven. 2016-07-15 00:00:02 CEST. --
juil. 15 00:00:01 ns393365.ip-176-31-112.eu CRON[27337]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 > /dev/null | while read line; do echo/bin
juil. 15 00:00:01 ns393365.ip-176-31-112.eu CRON[27334]: pam_unix(cron:session): session closed for user getmail
juil. 15 00:00:02 ns393365.ip-176-31-112.eu CRON[27333]: pam_unix(cron:session): session closed for user root
juil. 15 00:00:02 ns393365.ip-176-31-112.eu pure-ftpd[27537]: (?@127.0.0.1) [INFO] New connection from 127.0.0.1
juil. 15 00:00:02 ns393365.ip-176-31-112.eu pure-ftpd[27537]: (?@127.0.0.1) [INFO] Logout.
juil. 15 00:00:02 ns393365.ip-176-31-112.eu dovecot[10540]: imap-login: Disconnected (disconnected before auth was ready, waited 0 secs): user=<>, rip=127.0
juil. 15 00:00:02 ns393365.ip-176-31-112.eu postfix/smtpd[27543]: connect from localhost.localdomain[127.0.0.1]
juil. 15 00:00:02 ns393365.ip-176-31-112.eu postfix/smtpd[27543]: lost connection after CONNECT from localhost.localdomain[127.0.0.1]
juil. 15 00:00:02 ns393365.ip-176-31-112.eu postfix/smtpd[27543]: disconnect from localhost.localdomain[127.0.0.1]
juil. 15 00:00:02 ns393365.ip-176-31-112.eu dovecot[10540]: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, se
lines 1-11/11 (END)
`

Extrait des logs
`
Code:
[Thu Jul 14 22:33:23.678662 2016] [:error] [pid 23826] python_init: Python version mismatch, expected '2.7.5+', found '2.7.9'.
[Thu Jul 14 22:33:23.678876 2016] [:error] [pid 23826] python_init: Python executable found '/usr/bin/python'.
[Thu Jul 14 22:33:23.678897 2016] [:error] [pid 23826] python_init: Python path being used '/usr/lib/python2.7/:/usr/lib/python2.7/plat-x86_64-linux-gnu:/usr/lib/python2.7/lib-tk:/usr/lib/python2.7/lib-old:/usr/lib/python2.7/lib-dynload'.
[Thu Jul 14 22:33:23.678937 2016] [:notice] [pid 23826] mod_python: Creating 8 session mutexes based on 150 max processes and 0 max threads.
[Thu Jul 14 22:33:23.678965 2016] [:notice] [pid 23826] mod_python: using mutex_directory /tmp
[Thu Jul 14 22:33:23.718844 2016] [ssl:warn] [pid 23826] AH01906: ns393365.ip-176-31-112.eu:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Jul 14 22:33:23.720616 2016] [:emerg] [pid 23826] AH00020: Configuration Failed, exiting
[Thu Jul 14 22:36:03.364922 2016] [ssl:warn] [pid 7916] AH01906: ns393365.ip-176-31-112.eu:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
AH00016: Configuration Failed
[Thu Jul 14 23:08:00.289998 2016] [ssl:warn] [pid 766] AH01906: ns393365.ip-176-31-112.eu:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
AH00016: Configuration Failed
[Thu Jul 14 23:17:51.799530 2016] [ssl:warn] [pid 28675] AH01906: ns393365.ip-176-31-112.eu:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Jul 14 23:17:51.801913 2016] [ssl:emerg] [pid 28675] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/ispconfig/httpd/7juin.com/error.log for more information
AH00016: Configuration Failed
[Thu Jul 14 23:23:24.902236 2016] [ssl:warn] [pid 8971] AH01906: ns393365.ip-176-31-112.eu:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Jul 14 23:23:24.904651 2016] [ssl:emerg] [pid 8971] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/ispconfig/httpd/7juin.com/error.log for more information
AH00016: Configuration Failed
[Thu Jul 14 23:32:24.092148 2016] [ssl:warn] [pid 3240] AH01906: ns393365.ip-176-31-112.eu:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Jul 14 23:32:24.094601 2016] [ssl:emerg] [pid 3240] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/ispconfig/httpd/7juin.com/error.log for more information
AH00016: Configuration Failed
`

`
Code:
apachectl configtest
AH00548: NameVirtualHost has no effect and will be removed in the next release /etc/apache2/sites-enabled/000-ispconfig.vhost:7
AH00526: Syntax error on line 54 of /etc/apache2/sites-enabled/000-ispconfig.vhost:
Invalid command 'SSLEngine', perhaps misspelled or defined by a module not included in the server configuration
Action 'configtest' failed.
The Apache error log may have more information.

Vous auriez une idée pour régler ça et revenir à minima à une config fonctionnelle, sans les certificats de sécurité?

Merci