Re: [users@httpd] SSL certificate update failed - httpd-2.4.6-90.el7

2020-01-07 Thread @lbutlr
On 07 Jan 2020, at 21:20, Sac Isilia wrote: > "apache and IIS are communicating is where your problem appears to be" - How > to trace that IIS and apache are communicating. No Idea, I do not use IIS. > Because the existing certificate works fine. The problem arises only when new > certificate

Re: [users@httpd] SSL certificate update failed - httpd-2.4.6-90.el7

2020-01-07 Thread Sac Isilia
Hi Kremels, "apache and IIS are communicating is where your problem appears to be" - How to trace that IIS and apache are communicating. Because the existing certificate works fine. The problem arises only when new certificate is updated. The server on which website is hosted runs on Linux and was

Re: [users@httpd] SSL certificate update failed - httpd-2.4.6-90.el7

2020-01-07 Thread @lbutlr
On 07 Jan 2020, at 06:53, Sac Isilia wrote: > apachectl -S This isn’t going to help as long as the server facing the outside is an IIS server and not apache. However apache and IIS are communicating is where your problem appears to be. I bet if you can access the apache server directly without

Re: [users@httpd] SSL certificate update failed - httpd-2.4.6-90.el7

2020-01-07 Thread Sac Isilia
Hi Daniel, Below is the output of the command that you suggested. [root@amdc2webl06 conf.d]# apachectl -S [Tue Jan 07 08:49:25.470093 2020] [so:warn] [pid 16970] AH01574: module php7_module is already loaded, skipping [Tue Jan 07 08:49:25.470194 2020] [so:warn] [pid 16970] AH01574: module rewrite

Re: [users@httpd] SSL certificate update failed - httpd-2.4.6-90.el7

2020-01-07 Thread Daniel Ferradal
Hello, 1º the way to verify is the openssl commands we mentioned earlier. 2º no, you clearly do not have that in the server that reports those warnings, or if you do, that virtualhost is alright and the problem is the other virtualhosts that report the warning, like: amdc2webl06.dmz.local:443 <--

Re: [users@httpd] SSL certificate update failed - httpd-2.4.6-90.el7

2020-01-07 Thread Sac Isilia
Hi Daniel , That makes sense. I will needing help as I have very less knowledge of Apache and instead messing things up please help me in below queries. "you probably are using the public name but the certs you are really using are local names or the opposite" - How to verify this on the Linux. "

Re: [users@httpd] SSL certificate update failed - httpd-2.4.6-90.el7

2020-01-07 Thread Daniel Ferradal
Hello, The key to your certificate issues lies in the warning messages like this one: AH01909: RSA certificate configured for amdc2webl06.dmz.local:443 does NOT include an ID which matches the server name. So you probably are using the public name but the certs you are really using are local nam

Re: [users@httpd] SSL certificate update failed - httpd-2.4.6-90.el7

2020-01-07 Thread Sac Isilia
Hi Daniel, If we want to disable this Proxy setting in httpd - how will we do that ? I can see below logs in the file . If the SSL settings is all correct then I think we can try to disable the Proxy setting that you mentioned but I don't know how to do that. [root@amdc2webl06 logs]# tail -f ssl_

Re: [users@httpd] SSL certificate update failed - httpd-2.4.6-90.el7

2020-01-07 Thread Daniel Ferradal
As I see it, even if it is IIS it is configured correctly and replying otherwise you would not even reach the point of the 502 error which refers to a backend to the server you are talking to is trying to contact What I would do is: * Find out why something else seems to be replying * Supposing it

Re: [users@httpd] SSL certificate update failed - httpd-2.4.6-90.el7

2020-01-07 Thread Sac Isilia
Hi Daniel, Let me clarify the whole chain of events 1. We received a request to renew the SSL certificate that is set to expire on 23rd Jan 2020 2. Post which we generated the CSR and sent the .csr file to the Digicert (RapidSSL) to issue us a wild card certificate with 2 years warranty. 3. They

Re: [users@httpd] SSL certificate update failed - httpd-2.4.6-90.el7

2020-01-07 Thread Daniel Ferradal
I have no clue about Azure, sorry. But I can tell the server that responds says it is not Apache, if that is some kind of frontend (the IIS server that is replying), maybe that one is acting as a client proxing to the apache you mentioned earlier, that would explain the errors and confirm what I m

Re: [users@httpd] SSL certificate update failed - httpd-2.4.6-90.el7

2020-01-07 Thread Sac Isilia
Hi Daniel, The server on which SSL certificate is installed runs RHEL but recently the server was migrated to Azure two months ago. Is there need to be done from Azure end as well? Regards Sachin Kumar On Tue, 7 Jan 2020, 15:44 Daniel Ferradal, wrote: > I'm confused now. The server responding

Re: [users@httpd] SSL certificate update failed - httpd-2.4.6-90.el7

2020-01-07 Thread Daniel Ferradal
I'm confused now. The server responding says it is a IIS server, not Apache. "Server: Microsoft-IIS/10.0" And the 502 is while it is trying to proxy somewhere, so... El mar., 7 ene. 2020 a las 6:11, Sac Isilia () escribió: > > Hi Daniel/Team, > > I ran the command as you suggested - curl -vI htt