LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Server (https://www.linuxquestions.org/questions/linux-server-73/)
-   -   CentOS 5.5 (5.6) SSL Problem (https://www.linuxquestions.org/questions/linux-server-73/centos-5-5-5-6-ssl-problem-874090/)

baldur2630 04-10-2011 05:49 AM

CentOS 5.5 (5.6) SSL Problem
 
I installed a new CentOS 5.5 Server. When I ran yum update, it seems to have updated to CentOS 5.6. It asked for a reboot, so I rebooted the server.

Next I setup some Virtual Hosts (Name-based) exactly the same as my CentOS 5.4 server. When I tried to restart the httpd service, it refuses to start because it seems to want an SSL Certificate.

I didn't install SSL, and I don't WANT SSL, because we use these servers to test web site development internally and on the CentOS 5.4 Server, have have 10 name-based Virtual hosts running and all I want to do is move them to the new server (all Servers run under VMware ESX 4.x)

I don't think I did anything wrong other than to do the updates.

Any ideas on how to fix this and get rid of the SSL?

bathory 04-10-2011 07:43 AM

Hi,

You can uninstall mod_ssl, or just move /etc/httpd/conf.d/ssl.conf to /etc/httpd/conf.d/ssl.conf-BAK, so apache does not read the ssl configuration part. In this case you should also check httpd.conf and comment out every reference to ssl.

Regards

baldur2630 04-10-2011 08:37 AM

I renamed ssl.conf as you suggested. There were NO references to SSL in httpd.conf. I restart Apache and I get the following messages in the log :-

[Sun Apr 10 15:35:00 2011] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Sun Apr 10 15:35:00 2011] [error] Password for slot internal is incorrect.
[Sun Apr 10 15:35:00 2011] [error] NSS initialization failed. Certificate database: /etc/httpd/alias.
[Sun Apr 10 15:35:00 2011] [error] SSL Library Error: -8177 The security password entered is incorrect

bathory 04-10-2011 10:38 AM

I guess you've run into this bug
Solution is in post #15

Regards

baldur2630 04-11-2011 01:55 AM

No, I fixed it. I renamed nss.conf to nss.conf-BAK as well as now it's working fine.


All times are GMT -5. The time now is 04:10 AM.