Lutz Hohle created COUCHDB-3012:
-----------------------------------
Summary: HTTPS / SSL certificate from letsencrypt do not work with couchDB but with apache webserver
Key: COUCHDB-3012
URL: https://issues.apache.org/jira/browse/COUCHDB-3012
Project: CouchDB
Issue Type: Bug
Components: HTTP Interface
Reporter: Lutz Hohle
I have installed couchdb on my vserver, which says:
{"couchdb":"Welcome","uuid":"6f37da04e99f90f8f2ba3b8165202922","version":"1.6.1","vendor":{"name":"Ubuntu","version":"12.04"}}
I wanted to add SSL. So i have used https://letsencrypt.org/ got get to get free & automated HTTPS certificates which are authority signed. These certificates work well -tested with chrome- with apache webserver.
I'v spend the hole night, but unfortunately I have not got couchDB to work with. Chrome says: ERR_CONNECTION_RESET when I try wo connect using https://mydomain.de:6984
The problem is still described here with details by an other user:
http://serverfault.com/questions/743452/configure-couchdb-with-lets-encrypt-ssl-certificate
When i doing a https request I get this log:
[Mon, 09 May 2016 10:54:04 GMT] [error] [<0.178.0>] {error_report,<0.62.0>,
{<0.178.0>,std_error,
[83,83,76,58,32,"1095",58,32,"error",58,
[123,
["try_clause",44,
[123,["error",44,"eacces"],125]],
125],
32,
"/etc/letsencrypt/live/www.digiscales.de/cert.pem",
"\n",32,32,
[91,
[[123,
["ssl_manager",44,"cache_pem_file",44,
"2"],
125],
44,10," ",
[123,
["ssl_certificate",44,
"file_to_certificats",44,"2"],
125],
44,10," ",
[123,
["ssl_connection",44,
"init_certificates",44,"6"],
125],
44,10," ",
[123,
["ssl_connection",44,"ssl_init",44,"2"],
125],
44,10," ",
[123,
["ssl_connection",44,"init",44,"1"],
125],
44,10," ",
[123,
["gen_fsm",44,"init_it",44,"6"],
125],
44,10," ",
[123,
["proc_lib",44,"init_p_do_apply",44,
"3"],
125]],
93],
"\n"]}}
[Mon, 09 May 2016 10:54:04 GMT] [error] [<0.178.0>] {error_report,<0.62.0>,
{<0.178.0>,crash_report,
[[{initial_call,
{ssl_connection,init,['Argument__1']}},
{pid,<0.178.0>},
{registered_name,[]},
{error_info,
{exit,ecertfile,
[{gen_fsm,init_it,6},
{proc_lib,init_p_do_apply,3}]}},
{ancestors,[ssl_connection_sup,ssl_sup,<0.63.0>]},
{messages,[]},
{links,[<0.67.0>]},
{dictionary,[]},
{trap_exit,false},
{status,running},
{heap_size,987},
{stack_size,24},
{reductions,1488}],
[]]}}
[Mon, 09 May 2016 10:54:04 GMT] [error] [<0.153.0>] {error_report,<0.31.0>,
{<0.153.0>,std_error,
[{application,mochiweb},
"Accept failed error",
"{error,ecertfile}"]}}
[Mon, 09 May 2016 10:54:04 GMT] [error] [<0.153.0>] {error_report,<0.31.0>,
{<0.153.0>,crash_report,
[[{initial_call,
{mochiweb_acceptor,init,
['Argument__1','Argument__2',
'Argument__3']}},
{pid,<0.153.0>},
{registered_name,[]},
{error_info,
{exit,
{error,accept_failed},
[{mochiweb_acceptor,init,3},
{proc_lib,init_p_do_apply,3}]}},
{ancestors,
[https,couch_secondary_services,
couch_server_sup,<0.32.0>]},
{messages,[]},
{links,[<0.146.0>,#Port<0.2906>]},
{dictionary,[]},
{trap_exit,false},
{status,running},
{heap_size,1597},
{stack_size,24},
{reductions,1828}],
[]]}}
[Mon, 09 May 2016 10:54:04 GMT] [error] [<0.146.0>] {error_report,<0.31.0>,
{<0.146.0>,std_error,
{mochiweb_socket_server,297,
{acceptor_error,{error,accept_failed}}}}}
[Mon, 09 May 2016 10:54:04 GMT] [error] [<0.179.0>] {error_report,<0.62.0>,
{<0.179.0>,std_error,
[83,83,76,58,32,"1095",58,32,"error",58,
[123,
["try_clause",44,
[123,["error",44,"eacces"],125]],
125],
32,
"/etc/letsencrypt/live/www.digiscales.de/cert.pem",
"\n",32,32,
[91,
[[123,
["ssl_manager",44,"cache_pem_file",44,
"2"],
125],
44,10," ",
[123,
["ssl_certificate",44,
"file_to_certificats",44,"2"],
125],
44,10," ",
[123,
["ssl_connection",44,
"init_certificates",44,"6"],
125],
44,10," ",
[123,
["ssl_connection",44,"ssl_init",44,"2"],
125],
44,10," ",
[123,
["ssl_connection",44,"init",44,"1"],
125],
44,10," ",
[123,
["gen_fsm",44,"init_it",44,"6"],
125],
44,10," ",
[123,
["proc_lib",44,"init_p_do_apply",44,
"3"],
125]],
93],
"\n"]}}
[Mon, 09 May 2016 10:54:04 GMT] [error] [<0.179.0>] {error_report,<0.62.0>,
{<0.179.0>,crash_report,
[[{initial_call,
{ssl_connection,init,['Argument__1']}},
{pid,<0.179.0>},
{registered_name,[]},
{error_info,
{exit,ecertfile,
[{gen_fsm,init_it,6},
{proc_lib,init_p_do_apply,3}]}},
{ancestors,[ssl_connection_sup,ssl_sup,<0.63.0>]},
{messages,[]},
{links,[<0.67.0>]},
{dictionary,[]},
{trap_exit,false},
{status,running},
{heap_size,987},
{stack_size,24},
{reductions,1498}],
[]]}}
[Mon, 09 May 2016 10:54:04 GMT] [error] [<0.67.0>] {error_report,<0.62.0>,
{<0.67.0>,supervisor_report,
[{supervisor,{local,ssl_connection_sup}},
{errorContext,child_terminated},
{reason,ecertfile},
{offender,
[{pid,<0.178.0>},
{name,undefined},
{mfargs,{ssl_connection,start_link,undefined}},
{restart_type,temporary},
{shutdown,4000},
{child_type,worker}]}]}}
[Mon, 09 May 2016 10:54:04 GMT] [error] [<0.67.0>] {error_report,<0.62.0>,
{<0.67.0>,supervisor_report,
[{supervisor,{local,ssl_connection_sup}},
{errorContext,child_terminated},
{reason,ecertfile},
{offender,
[{pid,<0.179.0>},
{name,undefined},
{mfargs,{ssl_connection,start_link,undefined}},
{restart_type,temporary},
{shutdown,4000},
{child_type,worker}]}]}}
[Mon, 09 May 2016 10:54:04 GMT] [error] [<0.154.0>] {error_report,<0.31.0>,
{<0.154.0>,std_error,
[{application,mochiweb},
"Accept failed error",
"{error,ecertfile}"]}}
[Mon, 09 May 2016 10:54:04 GMT] [error] [<0.154.0>] {error_report,<0.31.0>,
{<0.154.0>,crash_report,
[[{initial_call,
{mochiweb_acceptor,init,
['Argument__1','Argument__2',
'Argument__3']}},
{pid,<0.154.0>},
{registered_name,[]},
{error_info,
{exit,
{error,accept_failed},
[{mochiweb_acceptor,init,3},
{proc_lib,init_p_do_apply,3}]}},
{ancestors,
[https,couch_secondary_services,
couch_server_sup,<0.32.0>]},
{messages,[]},
{links,[<0.146.0>,#Port<0.2933>]},
{dictionary,[]},
{trap_exit,false},
{status,running},
{heap_size,1597},
{stack_size,24},
{reductions,1860}],
[]]}}
[Mon, 09 May 2016 10:54:04 GMT] [error] [<0.146.0>] {error_report,<0.31.0>,
{<0.146.0>,std_error,
{mochiweb_socket_server,297,
{acceptor_error,{error,accept_failed}}}}}
[Mon, 09 May 2016 10:54:04 GMT] [error] [<0.181.0>] {error_report,<0.62.0>,
{<0.181.0>,std_error,
[83,83,76,58,32,"1095",58,32,"error",58,
[123,
["try_clause",44,
[123,["error",44,"eacces"],125]],
125],
32,
"/etc/letsencrypt/live/www.digiscales.de/cert.pem",
"\n",32,32,
[91,
[[123,
["ssl_manager",44,"cache_pem_file",44,
"2"],
125],
44,10," ",
[123,
["ssl_certificate",44,
"file_to_certificats",44,"2"],
125],
44,10," ",
[123,
["ssl_connection",44,
"init_certificates",44,"6"],
125],
44,10," ",
[123,
["ssl_connection",44,"ssl_init",44,"2"],
125],
44,10," ",
[123,
["ssl_connection",44,"init",44,"1"],
125],
44,10," ",
[123,
["gen_fsm",44,"init_it",44,"6"],
125],
44,10," ",
[123,
["proc_lib",44,"init_p_do_apply",44,
"3"],
125]],
93],
"\n"]}}
[Mon, 09 May 2016 10:54:04 GMT] [error] [<0.181.0>] {error_report,<0.62.0>,
{<0.181.0>,crash_report,
[[{initial_call,
{ssl_connection,init,['Argument__1']}},
{pid,<0.181.0>},
{registered_name,[]},
{error_info,
{exit,ecertfile,
[{gen_fsm,init_it,6},
{proc_lib,init_p_do_apply,3}]}},
{ancestors,[ssl_connection_sup,ssl_sup,<0.63.0>]},
{messages,[]},
{links,[<0.67.0>]},
{dictionary,[]},
{trap_exit,false},
{status,running},
{heap_size,987},
{stack_size,24},
{reductions,1474}],
[]]}}
[Mon, 09 May 2016 10:54:04 GMT] [error] [<0.67.0>] {error_report,<0.62.0>,
{<0.67.0>,supervisor_report,
[{supervisor,{local,ssl_connection_sup}},
{errorContext,child_terminated},
{reason,ecertfile},
{offender,
[{pid,<0.181.0>},
{name,undefined},
{mfargs,{ssl_connection,start_link,undefined}},
{restart_type,temporary},
{shutdown,4000},
{child_type,worker}]}]}}
[Mon, 09 May 2016 10:54:04 GMT] [error] [<0.155.0>] {error_report,<0.31.0>,
{<0.155.0>,std_error,
[{application,mochiweb},
"Accept failed error",
"{error,ecertfile}"]}}
[Mon, 09 May 2016 10:54:04 GMT] [error] [<0.155.0>] {error_report,<0.31.0>,
{<0.155.0>,crash_report,
[[{initial_call,
{mochiweb_acceptor,init,
['Argument__1','Argument__2',
'Argument__3']}},
{pid,<0.155.0>},
{registered_name,[]},
{error_info,
{exit,
{error,accept_failed},
[{mochiweb_acceptor,init,3},
{proc_lib,init_p_do_apply,3}]}},
{ancestors,
[https,couch_secondary_services,
couch_server_sup,<0.32.0>]},
{messages,[]},
{links,[<0.146.0>,#Port<0.2995>]},
{dictionary,[]},
{trap_exit,false},
{status,running},
{heap_size,1597},
{stack_size,24},
{reductions,1832}],
[]]}}
[Mon, 09 May 2016 10:54:04 GMT] [error] [<0.146.0>] {error_report,<0.31.0>,
{<0.146.0>,std_error,
{mochiweb_socket_server,297,
{acceptor_error,{error,accept_failed}}}}}
[Mon, 09 May 2016 10:54:04 GMT] [error] [<0.185.0>] {error_report,<0.62.0>,
{<0.185.0>,std_error,
[83,83,76,58,32,"1095",58,32,"error",58,
[123,
["try_clause",44,
[123,["error",44,"eacces"],125]],
125],
32,
"/etc/letsencrypt/live/www.digiscales.de/cert.pem",
"\n",32,32,
[91,
[[123,
["ssl_manager",44,"cache_pem_file",44,
"2"],
125],
44,10," ",
[123,
["ssl_certificate",44,
"file_to_certificats",44,"2"],
125],
44,10," ",
[123,
["ssl_connection",44,
"init_certificates",44,"6"],
125],
44,10," ",
[123,
["ssl_connection",44,"ssl_init",44,"2"],
125],
44,10," ",
[123,
["ssl_connection",44,"init",44,"1"],
125],
44,10," ",
[123,
["gen_fsm",44,"init_it",44,"6"],
125],
44,10," ",
[123,
["proc_lib",44,"init_p_do_apply",44,
"3"],
125]],
93],
"\n"]}}
[Mon, 09 May 2016 10:54:04 GMT] [error] [<0.185.0>] {error_report,<0.62.0>,
{<0.185.0>,crash_report,
[[{initial_call,
{ssl_connection,init,['Argument__1']}},
{pid,<0.185.0>},
{registered_name,[]},
{error_info,
{exit,ecertfile,
[{gen_fsm,init_it,6},
{proc_lib,init_p_do_apply,3}]}},
{ancestors,[ssl_connection_sup,ssl_sup,<0.63.0>]},
{messages,[]},
{links,[<0.67.0>]},
{dictionary,[]},
{trap_exit,false},
{status,running},
{heap_size,987},
{stack_size,24},
{reductions,1474}],
[]]}}
[Mon, 09 May 2016 10:54:04 GMT] [error] [<0.67.0>] {error_report,<0.62.0>,
{<0.67.0>,supervisor_report,
[{supervisor,{local,ssl_connection_sup}},
{errorContext,child_terminated},
{reason,ecertfile},
{offender,
[{pid,<0.185.0>},
{name,undefined},
{mfargs,{ssl_connection,start_link,undefined}},
{restart_type,temporary},
{shutdown,4000},
{child_type,worker}]}]}}
[Mon, 09 May 2016 10:54:04 GMT] [error] [<0.180.0>] {error_report,<0.31.0>,
{<0.180.0>,std_error,
[{application,mochiweb},
"Accept failed error",
"{error,ecertfile}"]}}
[Mon, 09 May 2016 10:54:04 GMT] [error] [<0.180.0>] {error_report,<0.31.0>,
{<0.180.0>,crash_report,
[[{initial_call,
{mochiweb_acceptor,init,
['Argument__1','Argument__2',
'Argument__3']}},
{pid,<0.180.0>},
{registered_name,[]},
{error_info,
{exit,
{error,accept_failed},
[{mochiweb_acceptor,init,3},
{proc_lib,init_p_do_apply,3}]}},
{ancestors,
[https,couch_secondary_services,
couch_server_sup,<0.32.0>]},
{messages,[]},
{links,[<0.146.0>,#Port<0.2996>]},
{dictionary,[]},
{trap_exit,false},
{status,running},
{heap_size,1597},
{stack_size,24},
{reductions,804}],
[]]}}
[Mon, 09 May 2016 10:54:04 GMT] [error] [<0.146.0>] {error_report,<0.31.0>,
{<0.146.0>,std_error,
{mochiweb_socket_server,297,
{acceptor_error,{error,accept_failed}}}}}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)