topic Re: Apache SSL hangs in Operating System - HP-UX

Apache SSL hangs

Garnett Yeatts — Wed, 22 Jan 2003 19:17:14 GMT

I have installed HP Apache 2.0.43 on a D380 server. It hangs if I try to start it in SSL mode (using apachectl startssl) but works OK non-SSL (using apachectl start). No messages to the log files, no errors, the command just hangs.

Any ideas or help would be appreciated.

Re: Apache SSL hangs

Steven E. Protter — Wed, 22 Jan 2003 19:30:40 GMT

Check /etc/services

make sure nothing is on the ssl port

check netstat -an

make sure nothing is on the ssl port

I'd think you'd get an error under those circumstances.

There is a guide on apache ssl issues at http://www.apache.org

There is also documentation in the httpd.conf file. Its worth reading, becuase its verbose and helps me with problem diagnosis.

P

Re: Apache SSL hangs

Garnett Yeatts — Wed, 22 Jan 2003 20:00:40 GMT

Thanks for the quick reply.

I'm sure there isn't anything on 443. I get the same problem when I try to run Jakarta Tomcat ssl on port 8443. Both Apache and Tomcat run fine on port 80 and 8080, but neither run in secure mode (on 443 and 8443).

I wondered if some kind of reverse lookup or domain lookup is going on when running in SSL mode - this server is not configured for DNS and does not have a domain set, but I have tested both of those items on another server by turning off NIS Client and unsetting the domainname and rebooting, and the web servers run OK in SSL mode.

Re: Apache SSL hangs

U.SivaKumar_2 — Thu, 23 Jan 2003 05:58:03 GMT

Hi,

Can you attach your httpd.conf here ?

Have you checked the sanity of SSL certificates used ?

Are you trying Virtual hosting ?

Also check by running this command
apachectl configtest

regards,

U.SivaKumar

Re: Apache SSL hangs

Steven E. Protter — Fri, 24 Jan 2003 01:58:39 GMT

A few more points.

I think Apache 2.x is a little cutting edge. I'm still using 1.3.X myself.

You can run some telnet tests on the local server and see what you get

telnet hostname 445
telnet hostname 80
telnet hostname 8445

You should get some hard to read web content. If you get a connection refused message, something else owns the socket.

If you get some dialog with something that's not your apache server, same issue.

I might have led you to believe that if there is a listing in /etc/services there must be something using the port and if not, the ports not in use.

Thats not true. ORacle doesn't bother to update /etc/servcies when you install their ias product even though it uses 7777 and 9001 in a base configuration.

P

Re: Apache SSL hangs

Garnett Yeatts — Fri, 24 Jan 2003 16:56:26 GMT

Thanks.

I was out of the office yesterday, so I was not able to reply to the responses until today.

Apachectl config check returns Syntax OK.

We verified no other processes are using port 443. We are able to run Apache on 443 without loading SSL module, but when we start Apache using SSL it hangs when loading the SSL module.

I have attached both the hpptd.conf file. I will also attach the ssl.conf file in a separate reply.

Re: Apache SSL hangs

Garnett Yeatts — Fri, 24 Jan 2003 21:27:44 GMT

SSL Conf File attached.

Re: Apache SSL hangs

Steven E. Protter — Fri, 24 Jan 2003 21:52:53 GMT

I can't look at this until Sat. night. sorry. If your issue isn't sovled I'll try and help then. I'll also try startssl on my sever just to see what happens.

No pts required, just don't want you to think I forgot you.

P

Re: Apache SSL hangs

Steven E. Protter — Tue, 28 Jan 2003 20:49:31 GMT

Have not forgotten about you. itrc was down. Still working on your solution.

Re: Apache SSL hangs

Garnett Yeatts — Wed, 29 Jan 2003 15:18:15 GMT

Thanks for continuing to look at this. No new developments from our end.

Re: Apache SSL hangs

Ryan Green — Sun, 02 Mar 2003 07:08:14 GMT

If you're running 11i, you might try patch PHSS_26560. Apache in SSL wouldn't start for me until patch PHSS_26263 or PHSS_26560 were installed.

ryan

Re: Apache SSL hangs

Kellogg Unix Team — Mon, 03 Mar 2003 04:23:00 GMT

Since you have tested your configuration on another server which is working fine in SSL mode, you can safely eliminate your configuration files being suspect.

Have you looked for required patches, perl version, and other pre-requisite for Apache v2.0.43 for this server?

HTH
...Manjeet

Re: Apache SSL hangs

Garnett Yeatts — Mon, 03 Mar 2003 14:19:31 GMT

Thanks. We will check the patches on the server. I will reply once we've had a chance to do that. We are not currently onsite, so it may be a short time before I reply.

Re: Apache SSL hangs

Garnett Yeatts — Tue, 03 Jun 2003 12:37:16 GMT

The patches worked.

Thanks for all the help.