Help - Search - Members - Calendar
Full Version: Self-signed certificate problems...
The Planet Forums > Control Panels > Plesk
AC Design
Hi -

I'm getting the following in my error_log after each Apache restart.... also I've been unable to connect to RHN up2date, and it said There was an SSL error: [('SSL routines', 'SSL3_GET_SERVER_CERTIFICATE', 'certificate verify failed')] .... so I'm pretty sure it's related to the Certificates area in Plesk. NightHawk advised me a while back to setup a self-signed certificate, and I've done that (hopefully correctly), but the errors have continued.

[Fri Aug 29 16:05:46 2003] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Fri Aug 29 16:05:47 2003] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Aug 29 16:05:47 2003] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Fri Aug 29 16:05:47 2003] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Aug 29 16:05:47 2003] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Aug 29 16:05:47 2003] [warn] RSA server certificate CommonName (CN) `xx.myhostname.xx' does NOT match server name!?
[Fri Aug 29 16:05:47 2003] [notice] Digest: generating secret for digest authentication ...
[Fri Aug 29 16:05:47 2003] [notice] Digest: done
[Fri Aug 29 16:05:48 2003] [notice] Apache configured -- resuming normal operations

(this is the error output, server hostname is masked)

Anyhow... I'm using a Dual-Xeon server, dual SCSI, running Plesk 6.0.1, and no special custom upgrades - it has made this error since the day I got the server from RS. If anyone can advise me on what to do, that'd be excellent icon_smile.gif
Ales
Look at RedHat's website for a new version of up2date. Their SSL cert got old, that's all.

We've updated all of our servers just yesterday, now everything is fine again... for another year icon_smile.gif
Ales
btw, that other error looks quite normal. It's about the certificate that Plesk comes with, which is in Plesk's name. So when you use it on a differently named server (yours and everybody elses here), Apache complains about it.
iamfish
i also have this problem

###################################################
[Tue Feb 28 04:09:49 2006] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Tue Feb 28 04:09:49 2006] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Tue Feb 28 04:09:49 2006] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Tue Feb 28 04:09:49 2006] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Tue Feb 28 04:09:49 2006] [notice] Digest: generating secret for digest authentication ...
[Tue Feb 28 04:09:49 2006] [notice] Digest: done
[Tue Feb 28 04:09:49 2006] [notice] LDAP: Built with OpenLDAP LDAP SDK
[Tue Feb 28 04:09:49 2006] [notice] LDAP: SSL support unavailable
Error, do this: mount -t proc none /proc
Error, do this: mount -t proc none /proc
[Tue Feb 28 04:09:50 2006] [error] (13)Permission denied: Could not create key file "/usr/local/frontpage/version5.0/apache-fp/suidkey.2516" in FrontPageInit(). Until this problem is fixed, the FrontPage security patch is disabled and the FrontPage extensions may not work correctly.
[Tue Feb 28 04:09:50 2006] [notice] mod_python: Creating 4 session mutexes based on 256 max processes and 0 max threads.
[Tue Feb 28 04:09:51 2006] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Tue Feb 28 04:09:51 2006] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Tue Feb 28 04:09:51 2006] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Tue Feb 28 04:09:51 2006] [notice] Apache/2.0.52 (Red Hat) configured -- resuming normal operations
###################################################

but i don't know how to solve it? do i need to update ssl.
thanks!
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.