httpd failed when I restarted

gunshift · 11-21-2011, 12:47 AM

Dear All,

Apache service (httpd)failed to restart or start, and I found a message from nss_error log in /var/log/httpd that shows:

Certificate not verified: 'Server-Cert'
SSL Library Error: -8181 Certificate has expired
Unable to verify certificate 'Server-Cert'. Add "NSSEnforceValidCerts off" to nss.conf so the server can start until the problem can be resolved.

After I inserted "NSSEnforceValidCerts off" to nss.conf and restarted httpd, and it's work fine.

Could I remove mod_nss?
What is the root cause of this problem?
Please suggest me who wants to solve this problem.

Additional info:
OS:RHEL5.1
Apache:httpd-2.2.3-11

bathory · 11-21-2011, 02:34 AM

Hi,

From the error you get, looks like apache refuses to start in https mode because the certificate has expired.
You can uninstall mod_nss if you don't need it, or use

Code:

NSSEngine off

to disable it from loading until you get a new certificate.
You also comment out the line that includes nss.conf in apache configuration file (httpd.conf)

Regards