Christos Hayward's questions

I have a mostly adequate result for availability of resources for RoundCube, but the check for requisite resources lists:

Net_LDAP3: NOT AVAILABLE(Recommended to install Net_LDAP3 from git.kolab.org; See https://git.kolab.org/diffusion/PNL)

I've cloned the Git repository, but what do I do to take a clone of the repository and install it so that RoundCube will see it?

This seems to be a basic question about administering PHP, but various searches have not turned up how to go from "cloned Git repository" to "have put it somewhere that RoundCube's resource check will see it."

The server is Debian 10, and an aptitude search for php-net-ldap3 comes up dry.

I am having trouble getting PHP to be executed instead of treated like plain text.

I'm on a new Debian 10 development server, and have installed e.g. apache2 and libapache2-mod-php, which installed libapache2-mod-php7.3, but a2enmod is not finding a PHP module to execute. /etc/apache2/mods-available has:

access_compat.load    dir.conf          proxy_express.load
actions.conf          dir.load          proxy_fcgi.load
actions.load          dump_io.load      proxy_fdpass.load
alias.conf        echo.load         proxy_ftp.conf
alias.load        env.load          proxy_ftp.load
allowmethods.load     expires.load      proxy_hcheck.load
asis.load         ext_filter.load       proxy_html.conf
auth_basic.load       file_cache.load       proxy_html.load
auth_digest.load      filter.load       proxy_http2.load
auth_form.load        headers.load      proxy_http.load
authn_anon.load       heartbeat.load        proxy.load
authn_core.load       heartmonitor.load     proxy_scgi.load
authn_dbd.load        http2.conf        proxy_uwsgi.load
authn_dbm.load        http2.load        proxy_wstunnel.load
authn_file.load       ident.load        ratelimit.load
authn_socache.load    imagemap.load     reflector.load
authnz_fcgi.load      include.load      remoteip.load
authnz_ldap.load      info.conf         reqtimeout.conf
authz_core.load       info.load         reqtimeout.load
authz_dbd.load        lbmethod_bybusyness.load  request.load
authz_dbm.load        lbmethod_byrequests.load  rewrite.load
authz_groupfile.load  lbmethod_bytraffic.load   sed.load
authz_host.load       lbmethod_heartbeat.load   session_cookie.load
authz_owner.load      ldap.conf         session_crypto.load
authz_user.load       ldap.load         session_dbd.load
autoindex.conf        log_debug.load        session.load
autoindex.load        log_forensic.load     setenvif.conf
brotli.load       lua.load          setenvif.load
buffer.load       macro.load        slotmem_plain.load
cache_disk.conf       md.load           slotmem_shm.load
cache_disk.load       mime.conf         socache_dbm.load
cache.load        mime.load         socache_memcache.load
cache_socache.load    mime_magic.conf       socache_shmcb.load
cern_meta.load        mime_magic.load       speling.load
cgid.conf         mpm_event.conf        ssl.conf
cgid.load         mpm_event.load        ssl.load
cgi.load          mpm_prefork.conf      status.conf
charset_lite.load     mpm_prefork.load      status.load
data.load         mpm_worker.conf       substitute.load
dav_fs.conf       mpm_worker.load       suexec.load
dav_fs.load       negotiation.conf      unique_id.load
dav.load          negotiation.load      userdir.conf
dav_lock.load         proxy_ajp.load        userdir.load
dbd.load          proxy_balancer.conf   usertrack.load
deflate.conf          proxy_balancer.load   vhost_alias.load
deflate.load          proxy.conf        xml2enc.load
dialup.load       proxy_connect.load

PHP does not appear to me to be listed.

Are there other steps besides installing Apache, PHP, and the Apache PHP library to be able to a2enmod PHP?

Thanks,

A login session (under Jessie) running certbot -d example.com -d www.example.com froze, and when I tried to run Let's Encrypt's certbot from another session, it said, "Another instance of Certbot is already running." I did a kill -HUP on the still-running process, and tried to run certbot with a --config-dir argument among other things, and got the same error.

How can I ask for the first attempt to be forgotten?

Is there a lockfile I can delete?

Thanks,

I have a Jessie VPS and would like to serve up FTPS; I am trying to get VSFTP to work but I have not yet successfully opened a connection to 990. I don't know if there is a firewall issue; when I run curl ftps://flooring.ninja or telnet localhost 990, I get an immediate refusal from the server's command line, and an eventual timeout from my Mac's command line. I have tried this with /etc/vsftpd.conf having both listen=NO and LISTEN=YES and experienced the same results both ways.

In my research before this question I've found numerous tidbits on troubleshooting VSFTP; however I have not found, under either VSFTPD or Wordpress auspices, what a sample /etc/vsftpd.conf should look like to support Wordpress's ability to use FTPS in lieu of plain old FTP, or rather I found some instructions but they were old and didn't do anything useful when followed.

My present /etc/vsftpd.conf has, with comments stripped out besides genuine code that is commented out,

listen=NO
listen_ipv6=YES
anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
#anon_upload_enable=YES
#anon_mkdir_write_enable=YES
dirmessage_enable=YES
use_localtime=YES
xferlog_enable=YES
connect_from_port_20=YES
#chown_uploads=YES
#chown_username=whoever
#xferlog_file=/var/log/vsftpd.log
#xferlog_std_format=YES
#idle_session_timeout=600
#data_connection_timeout=120
#nopriv_user=ftpsecure
#async_abor_enable=YES
#ascii_upload_enable=YES
#ascii_download_enable=YES
#ftpd_banner=Welcome to blah FTP service.
#deny_email_enable=YES
#banned_email_file=/etc/vsftpd.banned_emails
#chroot_local_user=YES
#chroot_local_user=YES
#chroot_list_enable=YES
#chroot_list_file=/etc/vsftpd.chroot_list
#ls_recurse_enable=YES
secure_chroot_dir=/var/run/vsftpd/empty
pam_service_name=vsftpd
rsa_cert_file=/etc/letsencrypt/live/cjshayward.com-0002/cert.pem
rsa_private_key_file=/etc/letsencrypt/live/cjshayward.com-0002/privkey.key
ssl_enable=YES
allow_anon_ssl=NO
force_local_data_ssl=YES
force_local_logins_ssl=YES
ssl_tlsv1=YES
ssl_sslv2=YES
ssl_sslv3=YES

This may not be the best starting point for a template; the rsa_cert_file line and below are from one high-ranked HOWTO.

Is there anything glaringly wrong with my config file settings?

TIA,

--UPDATE--

I've modified some of the settings in light of the comments given so far, but I am still not noticing any change in behavior. I have listen=YES and listen_port=990, and I still have yet to successfully open a connection. My /etc/vsftpd.conf, with comments (other than commented code) stripped out, is now:

listen=YES
listen_port=990
implicit_ssl=YES
listen_ipv6=NO
anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
dirmessage_enable=YES
use_localtime=YES
xferlog_enable=YES
connect_from_port_20=YES
#ascii_upload_enable=YES
#ascii_download_enable=YES
#ftpd_banner=Welcome to blah FTP service.
#deny_email_enable=YES
#banned_email_file=/etc/vsftpd.banned_emails
#chroot_local_user=YES
#chroot_local_user=YES
#chroot_list_enable=YES
#chroot_list_file=/etc/vsftpd.chroot_list
secure_chroot_dir=/var/run/vsftpd/empty
pam_service_name=vsftpd
rsa_cert_file=/etc/letsencrypt/live/cjshayward.com-0002/cert.pem
rsa_private_key_file=/etc/letsencrypt/live/cjshayward.com-0002/privkey.key
ssl_enable=YES
allow_anon_ssl=NO
force_local_data_ssl=YES
force_local_logins_ssl=YES
ssl_tlsv1=YES
ssl_sslv2=NO
ssl_sslv3=NO

I was trying to get Apache 2.4.10 to do basic authentication (under HTTPS) as specified in a .htaccess file. I changed one directory's settings to AllowOverride all, and it started serving up nothing but plain vanilla 500 pages. Reverting that directory to AllowOverride none does not seem to have fixed things.

The errors I have found in the logs all seem to be interpreting the requested relative URL as an authorization username, and croaking:

[Wed Jun 22 20:34:00.565683 2016] [core:crit] [pid 24994] [client ____:51295] AH00025: configuration error: couldn't check user: /writing/icons/rublev_trinity_icon.gif, referer: ____

What does AH00025 mean? I've found a few pages like https://httpd.apache.org/docs/trunk/upgrading.html, but not a clear definition of the error code.

And what /etc/apache2/mods-enabled/auth* files do I want?

On my webserver, I have a default host of domain_A.tld set to redirect to domain_B.tld. (This is meant to catch HTTPS connections not matching a defined host and refer them to domain_B.tld.) I recently added subdomain_C.domain_B.tld, or tried to, with the following VirtualHost.

The VirtualHost for subdomain_C.domain_B.tld is:

    <VirtualHost *:443>
        ServerName ____
        ServerAlias ____
        DirectoryIndex index.cgi index.shtml index.html index.html.var
        DocumentRoot /____
        ErrorLog /var/log/apache2/_____error.log
        CustomLog /var/log/apache2/_____access.log combined
        SSLEngine On
        SSLCertificateFile /etc/letsencrypt/live/____/fullchain.pem
        SSLCertificateKeyFile /etc/letsencrypt/live/____/privkey.pem
        SSLCACertificateFile /etc/letsencrypt/live/____/cert.pem
        ServerAdmin ____
        <Directory />
            Options FollowSymLinks
            AllowOverride None
        </Directory>
        <Directory ____>
            Options ExecCGI Indexes FollowSymLinks MultiViews
            AllowOverride All
            Order allow,deny
            allow from all
        </Directory>
        ErrorLog ${APACHE_LOG_DIR}/____.error.log
        # Possible values include: debug, info, notice, warn, error, crit,
        # alert, emerg.
        LogLevel warn
        CustomLog ${APACHE_LOG_DIR}/____.log combined
    </VirtualHost>

The VirtualHost for domain_B.tld is:

    <VirtualHost *:443>
        ServerName ____
        ServerAlias ____
        DirectoryIndex index.php index.cgi index.shtml index.html index.html.var
        DocumentRoot /____
        ErrorLog /var/log/apache2/_____error.log
        CustomLog /var/log/apache2/_____access.log combined
         SSLEngine On
         SSLCertificateFile /____/fullchain.pem
         SSLCertificateKeyFile /____/privkey.pem
         SSLCACertificateFile /____/cert.pem
        ServerAdmin ____
        <Directory />
            Options FollowSymLinks
            AllowOverride None
        </Directory>
        <Directory /____/>
            Options ExecCGI Indexes FollowSymLinks MultiViews
            AllowOverride All
            Order allow,deny
            allow from all
        </Directory>
        ErrorLog ${APACHE_LOG_DIR}/____.log
        # Possible values include: debug, info, notice, warn, error, crit,
        # alert, emerg.
        LogLevel warn
        CustomLog ${APACHE_LOG_DIR}/____.log combined
    RewriteEngine on
    RewriteRule ^____$ ____ [R=301,L]
    RewriteRule ^____$ /____/$1 [R=301,L]
    </VirtualHost>

However, what is happening is that my attempts to connect to https://subdomain_C.domain_B.tld are being directed to https://domain_B.tld.

I'm having some difficulties pinning this down. Apache (Server version: Apache/2.4.10 (Debian); Server built: Nov 28 2015 14:05:48) starts without reported error, and the directory /etc/letsencrypt/live/subdomain_C.domain_B.tld is populated. The behavior appears consistently when I try to load the page with another browser which has not previously been asked to load https://subdomain_C.domain_B.tld. Also, the root directory I tried to specify contains a static index.html as its only index.*, and the index.html file is simple with no meta refresh or JavaScript at all.

Where else should I look to get https://subdomain_C.domain_B.tld to display the index.html file without redirecting to https://domain_B.tld or other different locations?

Thanks,

I have used Let's Encrypt successfully for two of my domains; but when I tried the same steps as https://antipaucity.com/2016/01/06/lets-encrypt-centos-6-truly-free-ssl/, it hangs and eventually throws the exception below. All domains in question are hosted on the same server, with administrative details like DNS being the same AFAIR.

When letsencrypt-auto --debug certonly crashed, here was the output:

Traceback (most recent call last):
  File "/home/cjsh/.local/share/letsencrypt/bin/letsencrypt", line 11, in 
    sys.exit(main())
  File "/home/cjsh/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/main.py", line 692, in main
    return config.func(config, plugins)
  File "/home/cjsh/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/main.py", line 509, in obtain_cert
    _, action = _auth_from_domains(le_client, config, domains, lineage)
  File "/home/cjsh/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/main.py", line 93, in _auth_from_domains
    lineage = le_client.obtain_and_enroll_certificate(domains)
  File "/home/cjsh/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/client.py", line 274, in obtain_and_enroll_certificate
    certr, chain, key, _ = self.obtain_certificate(domains)
  File "/home/cjsh/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/client.py", line 246, in obtain_certificate
    self.config.allow_subset_of_names)
  File "/home/cjsh/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/auth_handler.py", line 74, in get_authorizations
    self._respond(resp, best_effort)
  File "/home/cjsh/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/auth_handler.py", line 131, in _respond
    self._poll_challenges(chall_update, best_effort)
  File "/home/cjsh/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/auth_handler.py", line 195, in _poll_challenges
    raise errors.FailedChallenges(all_failed_achalls)
FailedChallenges: Failed authorization procedure. pragmatometer.com (tls-sni-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: DNS problem: query timed out looking up A for pragmatometer.com


IMPORTANT NOTES:
 - The following errors were reported by the server:

   Domain: pragmatometer.com
   Type:   connection
   Detail: DNS problem: query timed out looking up A for
   pragmatometer.com

   To fix these errors, please make sure that your domain name was
   entered correctly and the DNS A record(s) for that domain
   contain(s) the right IP address. Additionally, please check that
   your computer has a publicly routable IP address and that no
   firewalls are preventing the server from communicating with the
   client. If you're using the webroot plugin, you should also verify
   that you are serving files from the webroot path you provided.

I have a few sites running with a StartSSL free certificate (CJSHayward.com, JobhuntTracker.com), and Firefox rejects StartSSL and displays an error page saying that my server is not properly configured (IIRC) because of the certificate chain. I asked for help and confirmed that my VirtualHost (available on request) was for the certificate chain and I had the intermediate certificate installed correctly. The sites are displayed without errors that I am aware of in Chrome, Safari, Edge, or Opera.

After some searching, Let's Encrypt! looked like an attractive offering, and before too long I had (AFAICT) a private key and a certificate for each domain under /etc/apache2/sites-enabled, minus of course any domains that are no longer mine. I thought I'd do a trial run and make an HTTPS connection to a site now available only under HTTP: JSH.name. I moved the "Let's Encrypt!" certificate and private key to my SSL directory and added:

<VirtualHost *:443>
        ServerAdmin [email protected]
        DocumentRoot /home/jonathan/stornge
        SSLEngine On
        SSLCertificateFile /etc/apache2/ssl/0000_csr-letsencrypt.pem
        SSLCertificateKeyFile /etc/apache2/ssl/0000_key-letsencrypt.pem
        ServerName jsh.name
        ServerAlias www.jsh.name
        LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\"" combined
        CustomLog /home/jonathan/logs/stornge.com combined
        <Directory /home/jonathan/stornge/>
            Options ExecCGI Indexes FollowSymLinks MultiViews
            AllowOverride None
            Order allow,deny
            allow from all
        </Directory>
</VirtualHost>

Then I rebooted to see my work, and every HTTP or HTTPS request I made simply hung. This included two domains on HTTPS with my StartSSL certificate, and the domain that should have been newly available on HTTPS accessed via both HTTP and HTTPS. I commented out the VirtualHost and bounced Apache, and all of the old functionality was back again in working order.

Have I used Let's "Encrypt!" correctly? I'm slightly suspicious as existing SSL configuration has private keys with an extension of .key, a certificate extension of .crt, and a certificate chain file with extension .pem.

I tried again after checking the SSL directory and finding that 0000_csr.letsencrypt.pem was mode 644; I changed all files in that directory to mode 600. When I tried a moment ago, I got a repeat of the old behavior: the website hangs on all requests and, in addition, an apachectl restart gets a statement (I forget the exact wording) that httpd is not running and the computer is trying to start it.

How can I get working free certitificates for "Let's Encrypt" or some other tool that hasn't alienated Firefox?

An apachectl -v gives:

Server version: Apache/2.4.10 (Debian)
Server built:   Nov 28 2015 14:05:48

A uname -a gives:

Linux www 4.4.0-x86_64-linode63 #2 SMP Tue Jan 19 12:43:53 EST 2016 x86_64 GNU/Linux

--UPDATE--

Contents deleted, 0000_key-letsencrypt.pem is bounded by:

-----BEGIN PRIVATE KEY----- -----END PRIVATE KEY-----

A find on the directory heirarchy yields:

root@www:/etc/letsencrypt# find `pwd` -print
/etc/letsencrypt
/etc/letsencrypt/keys
/etc/letsencrypt/keys/0000_key-letsencrypt.pem
/etc/letsencrypt/accounts
/etc/letsencrypt/accounts/acme-v01.api.letsencrypt.org
/etc/letsencrypt/accounts/acme-v01.api.letsencrypt.org/directory
/etc/letsencrypt/accounts/acme-v01.api.letsencrypt.org/directory/1ef8dc9b994b9b68a4e9c7cedd003be3
/etc/letsencrypt/accounts/acme-v01.api.letsencrypt.org/directory/1ef8dc9b994b9b68a4e9c7cedd003be3/private_key.json
/etc/letsencrypt/accounts/acme-v01.api.letsencrypt.org/directory/1ef8dc9b994b9b68a4e9c7cedd003be3/meta.json
/etc/letsencrypt/accounts/acme-v01.api.letsencrypt.org/directory/1ef8dc9b994b9b68a4e9c7cedd003be3/regr.json
/etc/letsencrypt/renewal
/etc/letsencrypt/options-ssl-apache.conf
/etc/letsencrypt/csr
/etc/letsencrypt/csr/0000_csr-letsencrypt.pem

The directory /home/jonathan/stornge and its contents are world readable and world executable where that would make a difference.

--UPDATE--

Adding something substantive here:

The http://OrthodoxChurchFathers.com Apache conf file has two VirtualHosts, one to serve up http://OrthodoxChurchFathers.com and one to redirect http://www.OrthodoxChurchFathers.com requests to http://OrthodoxChurchFathers.com. The .conf file housing both VirtualHosts is:

<VirtualHost *:80>
    ServerAdmin webmaster@localhost
    ServerName orthodoxchurchfathers.com
    #ServerAlias www.orthodoxchurchfathers.com fathers.jonathanscorner.com


DocumentRoot /home/cjsh/fathers/document_root
&lt;Directory />
    Options FollowSymLinks
    AllowOverride None
&lt;/Directory>
&lt;Directory /home/cjsh/fathers>
    Options ExecCGI FollowSymLinks Indexes MultiViews
    AllowOverride None
    Order allow,deny
    allow from all
&lt;/Directory>

DirectoryIndex index.cgi index.html

ErrorLog ${APACHE_LOG_DIR}/error.log

# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
LogLevel warn

CustomLog ${APACHE_LOG_DIR}/access.log combined

Alias /doc/ "/usr/share/doc/"
&lt;Directory "/usr/share/doc/">
    Options Indexes MultiViews FollowSymLinks
    AllowOverride None
    Order deny,allow
    Deny from all
    Allow from 127.0.0.0/255.0.0.0 ::1/128
&lt;/Directory>


</VirtualHost>

&lt;VirtualHost *:80>
ServerAdmin [email protected]
ServerName www.orthodoxchurchfathers.com
ServerAlias fathers.jonathanscorner.com
DocumentRoot /home/cjsh/oldmirror
RewriteEngine On
RewriteRule ^(.*)$ http://orthodoxchurchfathers.com$1 [R=301,L]
&lt;/VirtualHost></pre></code>


When I try to run it and request orthodoxchurchfathers.com alone, I get:


   ┌──────────────────────────────────────────────────────────────────────┐
   │ We were unable to find a vhost with a ServerName or Address of       │  
   │ orthodoxchurchfathers.com.                                           │  
   │ Which virtual host would you like to choose?                         │  
   │ (note: conf files with multiple vhosts are not yet supported)        │  
   │ ┌──────────────────────────────────────────────────────────────────┐ │  
   │ │1   008-stornge.conf               | Multiple Names        |      │ │  
   │ │2   014-paraskeva.conf             | paraskeva.jonathansco |      │ │  
   │ │3   036-unixytalk.conf             | unixtalk.jsh.name     |      │ │  
   │ │4   038-proxy.conf                 | Multiple Names        |      │ │  
   │ │5   027-anna.conf                  | Multiple Names        |      │ │  
   │ │6   044-jobhunt-tracker.creation.c | Multiple Names        |      │ │  
   │ │7   049-jsh.conf                   | Multiple Names        |      │ │  
   │ │8   001-steampunk.conf             |                       |      │ │  
   │ │9   006-blajeny.conf               | Multiple Names        |      │ │  
   │ │10  032-videos.conf                | Multiple Names        |     d│ │  
   │ └────↓(+)──────────────────────────────────────────────────30%─────┘ │  
   ├──────────────────────────────────────────────────────────────────────┤  
   │                                     │  
   └──────────────────────────────────────────────────────────────────────┘  

The command I used was with ./letsencrypt-auto --debug certonly.

I tried to take a step back in https://serverfault.com/questions/763747/why-is-apache-not-showing-a-new-page , from an original question that was loosely as follows:

A client has a website and makes periodic requests to add a page. The website isn't even LAMP; these are static HTML files under a Linux, Apache DocumentRoot.

After his most recent submission, I went to review the update and got a 404 page. I tried various other things; I checked file ownership and permissions to ensure they were the same as other files, and the new post, or more exactly new posts in new files, are all getting a 404 page. Other VirtualHosts appear to be displaying static content more straightforwardly; updating software didn't help, or bouncing Apache, or a reboot. Furthermore, a ServerAlias subdomain is serving up the new content perfectly; it's just the main domain.

apachectl -v gives:

Server version: Apache/2.4.10 (Debian)
Server built:   Nov 28 2015 14:05:48

uname -a gives:

Linux localhost 4.4.0-x86_64-linode63 #2 SMP Tue Jan 19 12:43:53 EST 2016 x86_64 GNU/Linux

Any ideas how to address? This is the oddest behavior from dead-simple Apache that I've seen in a while.

Thanks,

I am working on publishing a Wordpress blog. I say "working on publishing," because when I came to a point of saying, "This is great; I want it to showcase my website", Wordpress seemed to stop working.

The Wordpress version is 4.4.0; Apache is 2.4.10 compiled for Debian, and uname -a gives "Linux localhost 4.1.5-x86_64-linode61 #7 SMP Mon Aug 24 13:46:31 EDT 2015 x86_64 GNU/Linux"

There are a couple of issues that have been involved. One suggestion in online forums is to rename or delete the installation's .htaccess and plugins directory; I did that but nothing got better. There have been three basic behaviors:

1. Display the intended content without applying any non-default styling. Part of this may be an HTTPS vs. HTTP delivery problem, which is chicken and egg: unless I manually tamper with the database (I did eventually and it didn't help), I need to access stuff under wp-content, but I'm cut off from that functionality right now because the wp-content that should address my needs is closed off completely. (Or to put this catch-22 in other words, the functionality needed to address the problem of an HTTPS page asking to load assets via HTTP depends on having solved whatever problem is ultimately responsible for HTTPS pages requesting HTTP assets.)
2. Keep on redirecting to the original page 100+ times until the browser gives up.
3. Not let Apache to start, and continue this behavior when I comment out the new.

The site-related Apache logging, in wordpress.error.log, is:

[Thu Feb 04 16:40:30.525930 2016] [ssl:emerg] [pid 7029] AH01895: Unable to configure verify locations for client authentication
[Thu Feb 04 16:41:51.249704 2016] [ssl:emerg] [pid 25328] AH01895: Unable to configure verify locations for client authentication
[Thu Feb 04 16:43:30.627877 2016] [ssl:emerg] [pid 25382] AH01895: Unable to configure verify locations for client authentication
[Thu Feb 04 16:49:10.735585 2016] [ssl:emerg] [pid 25531] AH01895: Unable to configure verify locations for client authentication
[Thu Feb 04 16:52:44.813763 2016] [ssl:emerg] [pid 28528] AH01895: Unable to configure verify locations for client authentication
[Thu Feb 04 16:52:57.388624 2016] [ssl:emerg] [pid 28533] AH01895: Unable to configure verify locations for client authentication
[Thu Feb 04 16:55:42.620868 2016] [ssl:emerg] [pid 28613] AH01895: Unable to configure verify locations for client authentication
[Thu Feb 04 16:57:12.032443 2016] [ssl:emerg] [pid 28651] AH01895: Unable to configure verify locations for client authentication
[Thu Feb 04 16:58:08.533882 2016] [ssl:emerg] [pid 28673] AH01895: Unable to configure verify locations for client authentication
[Thu Feb 04 17:03:55.002202 2016] [ssl:emerg] [pid 28803] AH01895: Unable to configure verify locations for client authentication

The sitewide logging has:

[Thu Feb 04 16:52:57.388709 2016] [ssl:emerg] [pid 28533] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/apache2/wordpress.error.log for more information
AH00016: Configuration Failed
[Thu Feb 04 16:55:42.620960 2016] [ssl:emerg] [pid 28613] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/apache2/wordpress.error.log for more information
AH00016: Configuration Failed
[Thu Feb 04 16:57:12.032531 2016] [ssl:emerg] [pid 28651] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/apache2/wordpress.error.log for more information
AH00016: Configuration Failed
[Thu Feb 04 16:58:08.533951 2016] [ssl:emerg] [pid 28673] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/apache2/wordpress.error.log for more information
AH00016: Configuration Failed
[Thu Feb 04 17:03:55.002286 2016] [ssl:emerg] [pid 28803] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/apache2/wordpress.error.log for more information
AH00016: Configuration Failed

And I don't know if this any help at all, but the VirtualHost SSL declaration is below, and commenting it out seems not to change behavior as far as I can tell:

    <VirtualHost *:443>
        ServerName cjshayward.com
        ServerAlias wordpress.cjshayward.com
    DirectoryIndex index.cgi index.html
        DocumentRoot /home/cjsh/wordpress
        ErrorLog /var/log/apache2/cjshayward_error.log
        CustomLog /var/log/apache2/cjshayward_access.log combined
         SSLEngine On
         SSLCertificateFile /etc/apache2/ssl/cjshayward2.crt
         SSLCertificateKeyFile /etc/apache2/ssl/cjshayward2.key
     SSLCertificateChainFile /etc/apache2/ssl/sub.class1.server.ca.pem
     SSLCaCertificateFile /etc/apache2/ssl/ca.crt
        ServerAdmin [email protected]
    ErrorDocument 404 /missing.html
    ErrorDocument 500 /servererror.html
        <Directory />
            Options FollowSymLinks
            AllowOverride None
        </Directory>
        <Directory /home/cjsh/mirror/>
            Options ExecCGI Indexes FollowSymLinks MultiViews
            AllowOverride None
            Order allow,deny
            allow from all
        </Directory>
    <Directory "/home/cjsh/wordpress">
        AllowOverride All
        Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
        Order allow,deny
        Allow from all
    </Directory>
    <Directory "/home/jonathan/mirror">
        AllowOverride All
        Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
        Order allow,deny
        Allow from all
    </Directory>
        ErrorLog ${APACHE_LOG_DIR}/author.cjshayward.error.log
        # Possible values include: debug, info, notice, warn, error, crit,
        # alert, emerg.
        LogLevel warn
        CustomLog ${APACHE_LOG_DIR}/access.log combined
        Alias /doc/ "/usr/share/doc/"
        <Directory "/usr/share/doc/">
            Options Indexes MultiViews FollowSymLinks
            AllowOverride None
            Order deny,allow
            Deny from all
            Allow from 127.0.0.0/255.0.0.0 ::1/128
        </Directory>
        #Alias /media/ /home/cjsh/unixytalk/media/ 
        #ProxyPass /media/ !
        #ProxyPass / http://wordpress.cjshayward.com/
        #ProxyPassReverse / http://wordpress.cjshayward.com/
    RewriteEngine On
    RewriteRule ^(/classicorthodoxbiblehardcover/?)$ http://www.amazon.com/gp/ product/0692525548 [R=301,L]
    RewriteRule ^(/two-watches/?)$ /christmas-gift-guide-2015 [R=301,L]
    </VirtualHost>

What kind of diagnostics can I give?

Thanks,

A Wordpress installation I am working on, for some images, is giving an error, "GD Library Error: imagecreatetruecolor does not exist - please contact your webhost and ask them to install the GD library".

How can I install and/or connect the GD Library, on an Ubuntu server, so that Wordpress sees what it needs to display these images?

Thanks,

I want stats for two sites to be displayed separately in their AWstats page on a Debian squeeze VPS.

Right now the two sites have their own *.conf files with separate VirtualHosts, and their VirtualHosts have their own log files (in "combined" format for AWstats). They also have their own config files in /etc/awstats, which reference the two respective log files. However, when I view the pages, they both seem to report the same stats. And I don't expect them to be the same: I believe one site has an order of magnitude more traffic than the other.

Is there anything else I could be requesting so that A sees its own data only and B sees its own data only? Any gotchas with AWstats? The upper-left-hand corner of the AWstats window displays the correct domain name; in other words, they don't both claim to be the site with the heavier traffic. Do I need to move the AWstats alias from the main configuration file to inside respective VirtualHosts?

Thanks,

I have a fresh Debian installation (if that's not an oxymoron), with Apache 2.2.x which I am migrating to after using Ubuntu Saucy and Apache 2.4.x, and I'm pulling my hair out about why http://JonathansCorner.com/index.cgi (used to serve the homepage) is giving a 403. An old, static http://JonathansCorner.com/index.html is working just fine, as well as other static pages within the site.

What I had remembered to do was add mod_cgi:

root@ps306627:/etc/apache2/mods-enabled# ls *cgi*
cgi.load  cgid.conf  cgid.load  proxy_scgi.load

And after a bit of searching, I confirmed that I needed ExecCGI and AddHandler directives:

    <Directory /home/cjsh/>
            Options +ExecCGI Indexes FollowSymLinks MultiViews
            AddHandler cgi-script .cgi
            AllowOverride None
            Order allow,deny
            allow from all
    </Directory>

I thought it might be that I hadn't explicitly said an index.cgi could serve the DirectoryIndex, but I have:

    DirectoryIndex index.cgi index.html

And furthermore, another CGI script at http://JonathansCorner.com/sidebar_index.cgi is behaving exactly like the homepage and gives a 403.

I've also restarted the server every time I made a chance I wanted to test. I checked directory permissions; the static content wouldn't be served if the Apache processes couldn't access the static content, and I double-checked and have confirmed that when I run the index.cgi from a shell as nobody it gives the output I want without a Linux permissions error.

What else can I give to let someone explain why I'm not plugging in all the things I need to plug in to get index.cgi to work the way it does executed from a shell as nobody? Here is a concatenation of my apache2.conf and 000-default.conf (I deleted 000-default; the configuration files are imported from an Apache 2). Still a little puzzled at what's going wrong:

#   
# Based upon the NCSA server configuration files originally by Rob McCool.
#   
# This is the main Apache server configuration file.  It contains the
# configuration directives that give the server its instructions.
# See http://httpd.apache.org/docs/2.2/ for detailed information about
# the directives.
#   
# Do NOT simply read the instructions in here without understanding
# what they do.  They're here only as hints or reminders.  If you are unsure
# consult the online docs. You have been warned.
#   
# The configuration directives are grouped into three basic sections:
#  1. Directives that control the operation of the Apache server process as a
#     whole (the 'global environment').
#  2. Directives that define the parameters of the 'main' or 'default' server,
#     which responds to requests that aren't handled by a virtual host.
#     These directives also provide default values for the settings
#     of all virtual hosts.
#  3. Settings for virtual hosts, which allow Web requests to be sent to
#     different IP addresses or hostnames and have them handled by the
#     same Apache server process.
#   
# Configuration and logfile names: If the filenames you specify for many
# of the server's control files begin with "/" (or "drive:/" for Win32), the
# server will use that explicit path.  If the filenames do *not* begin
# with "/", the value of ServerRoot is prepended -- so "foo.log"
# with ServerRoot set to "/etc/apache2" will be interpreted by the
# server as "/etc/apache2/foo.log".
#   

### Section 1: Global Environment
#   
# The directives in this section affect the overall operation of Apache,
# such as the number of concurrent requests it can handle or where it
# can find its configuration files.
#   

#   
# ServerRoot: The top of the directory tree under which the server's
# configuration, error, and log files are kept.
#   
# NOTE!  If you intend to place this on an NFS (or otherwise network)
# mounted filesystem then please read the LockFile documentation (available
# at <URL:http://httpd.apache.org/docs/2.2/mod/mpm_common.html#lockfile>);
# you will save yourself a lot of trouble.
#   
# Do NOT add a slash at the end of the directory path.
#   
#ServerRoot "/etc/apache2"

#   
# The accept serialization lock file MUST BE STORED ON A LOCAL DISK.
#
LockFile ${APACHE_LOCK_DIR}/accept.lock

#
# PidFile: The file in which the server should record its process
# identification number when it starts.
# This needs to be set in /etc/apache2/envvars
#
PidFile ${APACHE_PID_FILE}

#
# Timeout: The number of seconds before receives and sends time out.
#
Timeout 300

#
# KeepAlive: Whether or not to allow persistent connections (more than
# one request per connection). Set to "Off" to deactivate.
#
KeepAlive On

#
# MaxKeepAliveRequests: The maximum number of requests to allow
# during a persistent connection. Set to 0 to allow an unlimited amount.
# We recommend you leave this number high, for maximum performance.
#
MaxKeepAliveRequests 100

#
# KeepAliveTimeout: Number of seconds to wait for the next request from the
# same client on the same connection.
#
KeepAliveTimeout 15

##
## Server-Pool Size Regulation (MPM specific)
##

# prefork MPM
# StartServers: number of server processes to start
# MinSpareServers: minimum number of server processes which are kept spare
# MaxSpareServers: maximum number of server processes which are kept spare
# MaxClients: maximum number of server processes allowed to start
# MaxRequestsPerChild: maximum number of requests a server process serves
<IfModule mpm_prefork_module>
    StartServers          5
    MinSpareServers       5
    MaxSpareServers      10
    MaxClients          150
    MaxRequestsPerChild   0
</IfModule>

# worker MPM
# StartServers: initial number of server processes to start
# MaxClients: maximum number of simultaneous client connections
# MinSpareThreads: minimum number of worker threads which are kept spare
# MaxSpareThreads: maximum number of worker threads which are kept spare
# ThreadLimit: ThreadsPerChild can be changed to this maximum value during a
#              graceful restart. ThreadLimit can only be changed by stopping
#              and starting Apache.
# ThreadsPerChild: constant number of worker threads in each server process
# MaxRequestsPerChild: maximum number of requests a server process serves
<IfModule mpm_worker_module>
    StartServers          2
    MinSpareThreads      25
    MaxSpareThreads      75
    ThreadLimit          64
    ThreadsPerChild      25
    MaxClients          150
    MaxRequestsPerChild   0
</IfModule>

# event MPM
# StartServers: initial number of server processes to start
# MaxClients: maximum number of simultaneous client connections
# MinSpareThreads: minimum number of worker threads which are kept spare
# MaxSpareThreads: maximum number of worker threads which are kept spare
# ThreadsPerChild: constant number of worker threads in each server process
# MaxRequestsPerChild: maximum number of requests a server process serves
<IfModule mpm_event_module>
    StartServers          2
    MaxClients          150
    MinSpareThreads      25
    MaxSpareThreads      75
    ThreadLimit          64
    ThreadsPerChild      25
    MaxRequestsPerChild   0
</IfModule>

# These need to be set in /etc/apache2/envvars
User ${APACHE_RUN_USER}
Group ${APACHE_RUN_GROUP}

#
# AccessFileName: The name of the file to look for in each directory
# for additional configuration directives.  See also the AllowOverride
# directive.
#

AccessFileName .htaccess

#
# The following lines prevent .htaccess and .htpasswd files from being
# viewed by Web clients.
#
<Files ~ "^\.ht">
    Order allow,deny
    Deny from all
    Satisfy all
</Files>

#
# DefaultType is the default MIME type the server will use for a document
# if it cannot otherwise determine one, such as from filename extensions.
# If your server contains mostly text or HTML documents, "text/plain" is
# a good value.  If most of your content is binary, such as applications
# or images, you may want to use "application/octet-stream" instead to
# keep browsers from trying to display binary files as though they are
# text.
#
DefaultType text/plain


#
# HostnameLookups: Log the names of clients or just their IP addresses
# e.g., www.apache.org (on) or 204.62.129.132 (off).
# The default is off because it'd be overall better for the net if people
# had to knowingly turn this feature on, since enabling it means that
# each client request will result in AT LEAST one lookup request to the
# nameserver.
#
HostnameLookups Off

# ErrorLog: The location of the error log file.
# If you do not specify an ErrorLog directive within a <VirtualHost>
# container, error messages relating to that virtual host will be
# logged here.  If you *do* define an error logfile for a <VirtualHost>
# container, that host's errors will be logged there and not here.
#
ErrorLog ${APACHE_LOG_DIR}/error.log

#
# LogLevel: Control the number of messages logged to the error_log.
# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
#
LogLevel warn

# Include module configuration:
Include mods-enabled/*.load
Include mods-enabled/*.conf

# Include all the user configurations:
Include httpd.conf

# Include ports listing
Include ports.conf
# Include ports listing
Include ports.conf

#
# The following directives define some format nicknames for use with
# a CustomLog directive (see below).
# If you are behind a reverse proxy, you might want to change %h into %{X-Forwarded-For}i
#
LogFormat "%v:%p %h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" vhost_combined
LogFormat "%h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %O" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent

# Include of directories ignores editors' and dpkg's backup files,
# see README.Debian for details.

# Include generic snippets of statements
Include conf.d/

# Include the virtual host configurations:
Include sites-enabled/

AddHandler cgi-script .cgi

# End apache2.conf; begin sites-enabled/000-default.conf:

        #<VirtualHost *:80>
        #ServerName media.pragmatometer.com
        #ServerAlias media.ccachicago.pragmatometer.com
        #DocumentRoot /home/cjsh/ccachicago/media
        #<Directory "/home/cjsh/ccachicago/media/">
            #Options Indexes MultiViews FollowSymLinks
            #AllowOverride None
            ##Order deny,allow
            ##Deny from all
            ##Allow from 127.0.0.0/255.0.0.0 ::1/128
        #</Directory>
        #ServerAdmin [email protected]
    #</VirtualHost>
<VirtualHost *:80>
    ServerAdmin [email protected]
    ServerName default.jonathanscorner.com
    DocumentRoot /home/cjsh/mirror
    RewriteEngine On
    RewriteRule ^(.*)$ http://jonathanscorner.com$1 [R=301,L]
</VirtualHost>
<VirtualHost *:80>
        ServerAdmin [email protected]

    ServerName jonathanscorner.com
    #ServerAlias dev.jonathanscorner.com
        DocumentRoot /home/cjsh/mirror
    RewriteEngine On
    RewriteRule ^[SANATIZED]$ / [R=301,L]
    RewriteRule ^[SANAtIZED]$ / [R=301,L]
        <Directory />
                Options FollowSymLinks
                AllowOverride None
        </Directory>
        <Directory /home/cjsh/>
                Options +ExecCGI Indexes FollowSymLinks MultiViews
                AddHandler cgi-script .cgi
                AllowOverride None
                Order allow,deny
                allow from all
        </Directory>

    DirectoryIndex index.cgi index.html
        ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
        <Directory "/usr/lib/cgi-bin">
                AllowOverride None
                Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
                Order allow,deny
                Allow from all
        </Directory>

    ErrorDocument 404 /missing.html
    ErrorDocument 500 /servererror.html
        ErrorLog ${APACHE_LOG_DIR}/error.log

        # Possible values include: debug, info, notice, warn, error, crit,
        # alert, emerg.
        LogLevel warn

        CustomLog ${APACHE_LOG_DIR}/access.log combined

    Alias /doc/ "/usr/share/doc/"
    <Directory "/usr/share/doc/">
        Options Indexes MultiViews FollowSymLinks
        AllowOverride None
        Order deny,allow
        Deny from all
        Allow from 127.0.0.0/255.0.0.0 ::1/128
    </Directory>

</VirtualHost>

<VirtualHost *:80>
        ServerAdmin [email protected]
    ServerName www.jonathanscorner.com
    ServerAlias jonathonscorner.com www.jonathonscorner.com johnathanscorner.com www.johnathanscorner.com johnathonscorner.com www.johnathonscorner.com jonathanscorner.biz www.jonathanscorner.com jonathanscorner.org www.jonathanscorner.org jonathanscorner.info www.jonathanscorner.info jonathanscorner.net www.jonathanscorner.net
    DocumentRoot /home/cjsh/mirror

    RewriteEngine On
    RewriteRule ^(.*)$ http://jonathanscorner.com$1 [R=301,L]

</VirtualHost>

Thanks for any help.

I had an Ubuntu Amazon EC2 server, running a few websites, and I left it to have an unattended do-release-upgrade. The server said that a reboot was required. I (tried to reboot) it and it never came up. Since trying to reboot, I have not succeeded in getting it to serve a webpage or shell in to it.

What are my options or next steps to recover? Is there a way to download a disk image and recover from that?

Thanks,

I'm working on getting Apache to serve up static files for a Django project. My VirtualHost has:

Alias /static/ /home/jonathan/pragmatometer/static/

ProxyPass / http://localhost:8000/
ProxyPassReverse / http://localhost:8000/

But requests for /static/css/style.css are being served by the Django process, not a static pull to /home/jonathan/pragmatometer/static/css/style.css.

What can I do so that the Alias trumps the proxy? I can try to cobble together several ProxyPass / ProxyPassReverse definitions for /load/, /save/, /admin/, but that has got to be the wrong way.

So what's the right way?

I am getting pages loading with a 500 internal server error, due I believe to a directive that Apache has not been configured to allow.

I have AllowOverride set to all, and a .htaccess file, including:

<FilesMatch "\.(eot|ico|pdf|flv|jpg|jpeg|png|gif|svg|swf|ttf|woff)$">
Header set Cache-Control "max-age=31536000, public"
Header set Expires "Wed, 23 Apr 2014 17:00:01 UTC"
</FilesMatch>

/var/log/apache2/error.log has:

[Sat Jul 20 15:12:36 2013] [alert] [client 24.15.83.241] /home/jonathan/.htaccess: Invalid command 'Header', perhaps misspelled or defined by a module not included in the server configuration

What do I need to specify so that Apache2 will properly handle the 'Header' directive?

In a Drupal installation, it's displaying the root PHP file as plain text below. a2enmod says that php5 is enabled, aptitude says libapache2-mod-php5 is installed, mods-enabled/ has php5.conf and php5.load, the VirtualHost has DirectoryIndex and ScriptHandler specified. It's kind of like the government economist computer virus: every indicator you can find says that your system is fine, but it doesn't work. What else should I do to get this Drupal 7 site in motion?

The page displayed is:

<?php

/**
 * @file
 * The PHP page that serves all page requests on a Drupal installation.
 *
 * The routines here dispatch control to the appropriate handler, which then
 * prints the appropriate page.
 *
 * All Drupal code is released under the GNU General Public License.
 * See COPYRIGHT.txt and LICENSE.txt.
 */

/**
 * Root directory of Drupal installation.
 */
define('DRUPAL_ROOT', getcwd());

require_once DRUPAL_ROOT . '/includes/bootstrap.inc';
drupal_bootstrap(DRUPAL_BOOTSTRAP_FULL);
menu_execute_active_handler();

I'm working on a website, implemented as shtml, and when I try to load the home page (http://simplyclassicremodeling.com) from IE8, it says it can't open the file because it transferred as Content-Type "text.html". The page loads fine from Chrome, and loads (with some CSS issues that are not relevant here) in Firefox.

httpd.conf has:

Options Includes Indexes FollowSymLinks ExecCGI 
AddHandler cgi-script .cgi .pl
AddType text/html .shtml
AddHandler server-parsed .shtml

and further down:

AddType text/html .shtml 
AddOutputFilter INCLUDES .shtml
AddOutputFilterByType DEFLATE text/html text/plain text/xml text/javascript application/javascript

The HTTP headers, from a Telnet session, are:

GET http://simplyclassicremodeling.com/ HTTP/1.0

HTTP/1.1 200 OK
Date: Fri, 27 Jan 2012 21:57:54 GMT
Server: Apache/2.0.63 (Unix) mod_ssl/2.0.63 OpenSSL/0.9.9-dev DAV/2 PHP/5.2.6
Accept-Ranges: bytes
Cache-Control: max-age=2592000, public
Expires: Sun, 26 Feb 2012 21:57:54 GMT
X-UA-Compatible: IE=Edge,chrome=1
Connection: close
Content-Type: text.html

Are the "AddType" and "AddOutputFilter" transposed? Based on this information, would you know why IE8 would think .shtml files are being sent as Content-Type: text.html? Is there a way to globally ask Apache, "If you're going to transfer as 'text.html', use 'text/html' instead?

Thanks,

I'm working on a (Debian) Dreamhost VPS, and it seems to want password-based authentication only: adding my RSA and DSA public keys to ~/.ssh/authorized_keys did not change the behavior of requiring a password to log in.

How can set the server up so it can accept ~/.ssh/authorized_keys?

I'm on an OpenSolaris 5.11 server and when I asked about Django, technical support offered to use pkgin as a package manager.

[root@gpx8nnaa ~]# uname -a
SunOS gpx8nnaa.joyent.us 5.11 snv_89 i86pc i386 i86pc
[root@gpx8nnaa ~]# find / -name pkgin
[root@gpx8nnaa ~]#

This computer does not appear to have pkgin installed. How can I install a preferred package manager on this server?