Apache not starting after setting up SSL

deesignplay 2019-01-29 04:11:32 UTC #1

Keywords: General - AWS - Technical issue - Secure Connections (SSL/HTTPS)
Description:
Hi Team,
Thanks in advance for this, i followed the blogpost here to create https/SSL version from my site https://www.davidmeents.com/add-ssl-ec2-wordpress-instance-use-https/

but after about a day of working, i started getting the following error where apache refused to start.

AH01882: Init: this version of mod_ssl was compiled against a newer library (OpenSSL 1.0.2q 20 Nov 2018, version currently loaded is OpenSSL 1.0.2o 27 Mar 2018) - may result in undefined or erroneous behavior
[Tue Jan 29 04:03:47.141560 2019] [ssl:emerg] [pid 1974:tid 140707398121216] AH02565: Certificate and private key localhost:443:0 from /opt/bitnami/apache2/conf/server.crt and /opt/bitnami/apache2/conf/server.key do not match
AH00016: Configuration Failed
[Tue Jan 29 04:05:47.139310 2019] [ssl:warn] [pid 1992:tid 139831507146496] AH01882: Init: this version of mod_ssl was compiled against a newer library (OpenSSL 1.0.2q 20 Nov 2018, version currently loaded is OpenSSL 1.0.2o 27 Mar 2018) - may result in undefined or erroneous behavior
[Tue Jan 29 04:05:47.139713 2019] [ssl:emerg] [pid 1992:tid 139831507146496] AH02565: Certificate and private key localhost:443:0 from /opt/bitnami/apache2/conf/server.crt and /opt/bitnami/apache2/conf/server.key do not match
AH00016: Configuration Failed

Then i went back and reversed the changes which was mainly .htaccess file and a couple of entries on wp-admin.php which i reversed cleanly.

For some reason the httpd fails to start on reboot. Can you please help?

deesignplay 2019-01-29 06:49:49 UTC #2

I am looking to reverse back configuration fromHTTPS back to HTTP, Can you please help me

jota 2019-01-29 12:32:53 UTC #3

Hi @deesignplay,

It seems you created a .key file but didn't update the .crt one. Could you please generate new dummy certificate files so you can continue using Apache?

https://docs.bitnami.com/aws/apps/wordpress/administration/create-ssl-certificate-apache/

Apart from this, we have a Support Tool that will gather relevant information for us to review your configuration. Could you please download and execute it on the machine where the stack is running by following the steps described in the guide below?

How to Run the Bitnami Support Tool

Please note that you need to paste the code outputted by the tool in your reply.

deesignplay 2019-01-29 17:35:27 UTC #4

Hi Jota,

Thank you! I will do that and get back to you, there are a couple of things that happened and i wanted your thoughts on this.

So we enabled https / ssl through a AWS load balancer on Sunday
Then the website with SSL was working very well, until it looks like we ran the root's space off becuase of high volume of pictures (data) filling it up. This was 2 days later
That's about when the apache stopped running. Does it make sense to clear up some space and try restarting the webservice. I will setup the new dummy .key and .crt file as per your instructions and get back to you!

Thanks a lot!

deesignplay 2019-01-30 06:15:00 UTC #5

Thanks a lot Jota -

I had a problem where the file system was full -
1. I extended the space and rebooted the AWS instance
2. Then i followed your steps to re-generate the key
3. Once i did that - post a reboot, httpd started fine

Thanks for your instructions - i will re-do the https piece. In your mind which do you recommends as the best step by step mechanism to get this done?

jota 2019-01-30 10:03:09 UTC #6

Hi @deesignplay,

Thank you for letting us know Regarding the Load Balancer and SSL configuration, we have this guide in our documentation that explains how to configure everything, did you take a look at it?

https://docs.bitnami.com/aws/how-to/configure-elb-ssl-aws/

Thanks

deesignplay 2019-01-30 23:14:31 UTC #7

Hi Jota - I will definetly use this and re-setup.
Its truly easy in terms of how we can configure this.
I had a question - If i am deploying something that has live users can i move up a support tier -? So i have the ability to do phone call/screenshares for agility?
That would be my last question - Thanks a ton for your help here

jota 2019-01-31 12:27:31 UTC #8

Hi @deesignplay,

We provide technical support in this community forum but we do not provide professional services or phone / in person support. We suggest you create a backup of your site before starting the process so you can recover it easily

https://docs.bitnami.com/aws/faq/administration/backup-restore-server/

system 2019-02-14 12:27:49 UTC #9

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.

Bitnami provides free all-in-one installers, virtual machines and cloud images for popular open source applications. Get them now!