Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : SSL stoped working

[null]

My SSL server stoped working today and I don't know why.

It was working yesterday.

I checked the logs and nothing special there.

Can somebody tell me what else I have to do and check to make it work?

Thanks in advance

[SROHost]

What logs did you check? The apache error log or SSL log? It depends what you use for SSL, but Apache with mod_ssl will default to putting SSL logs in the apache log directory with names ssl_engine_log and ssl_request_log.

[null]

This is a Cpanel server and SSL logs are located in /var/log

So i checked the log and found this

[01/Sep/2003 16:39:13 32173] [info] Init: Loading certificate & private key of SSL-aware server secure.www-lab.com:443
[01/Sep/2003 16:39:14 32174] [info] Init: Configuring server secure.www-lab.com:443 for SSL protocol
[01/Sep/2003 16:39:27 32180] [info] Connection to child 0 established (server secure.www-lab.com:443, client 67.167.41.130)
[01/Sep/2003 16:39:27 32180] [info] Seeding PRNG with 1160 bytes of entropy
[01/Sep/2003 16:39:27 32180] [info] Connection: Client IP: 67.167.41.130, Protocol: SSLv3, Cipher: RC4-MD5 (128/128 bits)
[01/Sep/2003 16:39:27 32180] [info] Initial (No.1) HTTPS request received for child 0 (server secure.www-lab.com:443)
[01/Sep/2003 16:39:27 32180] [info] Connection to child 0 closed with unclean shutdown (server secure.www-lab.com:443,
client 67.167.41.130)
[01/Sep/2003 16:39:29 32181] [info] Connection to child 1 established (server secure.www-lab.com:443, client 67.167.41.130)
[01/Sep/2003 16:39:29 32181] [info] Seeding PRNG with 1160 bytes of entropy
[01/Sep/2003 16:39:29 32181] [info] Connection: Client IP: 67.167.41.130, Protocol: SSLv3, Cipher: RC4-MD5 (128/128 bits)
[01/Sep/2003 16:39:29 32181] [info] Initial (No.1) HTTPS request received for child 1 (server secure.www-lab.com:443)
[01/Sep/2003 16:39:29 32181] [info] Connection to child 1 closed with unclean shutdown (server secure.www-lab.com:443,
client 67.167.41.130)

What's wrong with this SSL host?

Thanks

[ravegti1]

maybe the cert expired?

[null]

No, it expires in January

[sprintserve]

Run ps -aux

check your apache process. Do they have -DSSL switch?

If not, try

/etc/init.d/httpd stop
/etc/init.d/httpd start

[eddy2099]

Expired SSL will still run but just issue a warning to the browser.

[sprintserve]

Originally posted by eddy2099
Expired SSL will still run but just issue a warning to the browser.

exactly. it's likely to be apache's issue

[null]

It was an apache issue. I don't know how, but the DocumentRoot was pointing to directory other from the one I had before.

Thank you guys for technical support

Need some coffee ...

[sprintserve]

DocumentRoot? that's a configuration in httpd.conf. Is it for a particular virtual domain or for the whole server?

Another simple way is just to reinstall the SSL cert.

[null]

Yes, it is for virtual host, it all works now

[sprintserve]

Ok. Glad it works out. Cheers.

[null]

Thanks for help

[chico540]

i have the same problem but the do root looks to be ok. should i switch this domain to a dedicated ip address rather than shared? im usin cpanel server too....
thanks