Re: Product Bug h5bp/tls/certificate_files.conf

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 





On Fri, 10 Feb 2023, 23:21 Paul, <stormy22@xxxxxxxxx> wrote:
On 2023-02-10 12:50, Zahid Rahman wrote:
> It is hardcoded in the original file  see   repository.
> https://github.com/h5bp/server-configs-apache/blob/main/h5bp/tls/certificate_files.conf <https://github.com/h5bp/server-configs-apache/blob/main/h5bp/tls/certificate_files.conf>

Unless I'm mistaken this is the htppd.apache.org mailing list. You refer
to github, where there is a lot of very good material and some
potentially less reliable by-products.  In no way am I suggesting that
"/blob/main/h5bp/" is short of common sense, but *if* you have followed
that thread, perhaps your questions and solutions lie there?
>
> As I am  using letsencrypt   I do not need to  include the file 
> h5bp/tls/certificate_files.conf  as suggested by Florian.

So what does 'Florian' say about your failure? (apologies, I have no
clue about who he/she might be; from my records, not a participant in
this mailing list.)
>
> I included this file because it was suggested  I should in the template
> https://github.com/h5bp/server-configs-apache/blob/main/vhosts/templates/example.com.conf <https://github.com/h5bp/server-configs-apache/blob/main/vhosts/templates/example.com.conf>


I think the failure to detect there is already an encryption  in place in the virtual host conf file ,  the error handler's failure to inform the user accordingly  is a product bug. 


With respect "h5bp" advertises that it is "A bunch of people creating
open source software. Fork a project and get involved!" with 39 members
(<https://h5bp.org/> retrieved 2023-02-10).  Apache is somewhat
exponentially more widespread.

Please move your questions to where they belong.

Good luck.

Paul
  ---
Tired old sys-admin



>
>
>
>
>
>
>
> On Fri, 10 Feb 2023, 17:26 Paul, <stormy22@xxxxxxxxx
> <mailto:stormy22@xxxxxxxxx>> wrote:
>
>     On 2023-02-10 09:38, Zahid Rahman wrote:
>      > *my apache2 installation directory is /etc/apache2 not /usr/local
>      > *
>      > *looks like some kind of hard coding error
>
>     OK -- so what/why did you "hard code" to /usr/local ?
>
>      > *$ syst$emctl status apache2.service*
>
>     Assuming this is a typo for "systemctl status apache2.service"
>     [snip]
>      >       Active: failed (Result: exit-code) since Fri 2023-02-10
>     14:29:33
>      > UTC; 12s ago
>     [snip]
>      > Feb 10 14:29:33 ubuntu apachectl[16627]: AH00526: Syntax error on
>     line
>      > 29 of
>     /etc/apache2/backbutton_configs/h5bp/tls/certificate_files.conf:
>      > Feb 10 14:29:33 ubuntu apachectl[16627]: SSLCertificateFile: file
>      > *'/usr/local/*apache2/certs/default.crt' does not exist or is empty
>
>     OK -- again, what/how/why did you hard code to /usr/local? Obviously
>     Apache can't find it. If it truly exists, permissions? (and that's a
>     long shot.)
>     [snip]
>
>      > *$ journalctl -xeu apache2.service*
>     [snip]
>      > Feb 10 13:52:48 ubuntu apachectl[15717]: AH00526: Syntax error on
>     line
>      > 29 of
>     /etc/apache2/backbutton_configs/h5bp/tls/certificate_files.conf:
>      > Feb 10 13:52:48 ubuntu apachectl[15717]: SSLCertificateFile: file
>      > '*/usr/local/*apache2/certs/default.crt' does not exist or is empty
>
>     Same error.
>
>     Critical thinking, a rather old-fashioned concept, suggests that you
>     might, eventually, last-ditch, examine the meaning of the words "does
>     not exist".
>
>     Good luck.
>
>     Best,
>     Paul
>     ---
>     Tired old sys-admin, who gave up crystal ball gazing in 1954 using
>     FORTRAN on an IBM 704
>
>     ---------------------------------------------------------------------
>     To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>     <mailto:users-unsubscribe@xxxxxxxxxxxxxxxx>
>     For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>     <mailto:users-help@xxxxxxxxxxxxxxxx>
>


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux