You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Benjamin Oppermann <be...@eml.cc> on 2014/09/29 13:31:07 UTC
[users@httpd] "corrupted content" error, httpd can't access SSL key file
Hi,
I can't reach my website, I get a "corrupted content" error message in
the browser.
Looking into apache (version 2.4.7 on Ubuntu 14.04), I get
~$ apachectl -S
AH00526: Syntax error on line 22 of
/etc/apache2/sites-enabled/000-default.conf:
SSLCertificateKeyFile: file '/etc/ssl/private/owncloud.key' does not
exist or is empty
Action '-S' failed.
However, I double checked that the file is in the appropriate location
and does contain the key, so maybe apache has no permission. afaik, it
doesn't run as root all the time - or only for a short time?
permissions for the key file are as follows:
~$ sudo ls -l /etc/ssl/private/owncloud.key
-rw------- 1 root ben 1704 Sep 28 04:01
/etc/ssl/private/owncloud.key
, where ben is my normal user.
It was suggested to me on the httpd IRC channel that maybe apparmor was
doing something wrong, but I don't know how to investigate that.
I did have a working configuration and made no changes to it before this
happened. The only change I made was to put a router between the second
gateway and the server and resolved the domain name to its local IP
inside the network (the page isn't reachable from inside either).
Just so you know, this is the first time I am setting up a server, and I
am all self-taught.
Reading suggestions for a good start are appreciated, but of course a
how-to or specific section of a manual would be more helpful than a
generic exhortation to rtfm :-)
Any hints?
Thanks, Ben
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] "corrupted content" error,
httpd can't access SSL key file [wd-vc]
Posted by Benjamin Oppermann <be...@eml.cc>.
I am sorry, I had it switched off for a few hours (it's a home
pc), but will keep it on now. Would you mind trying again?
Thanks!
Am Di, 30. Sep 2014, um 03:49, schrieb Edgar Pettijohn:
I tried to go to your site, but apparently the server is down.
On 09/29/2014 07:16 PM, Benjamin Oppermann wrote:
Actually, this one is a self-signed certificate, but I tried
with a new one using your command, just to be safe.
My Vhost is configured in
/etc/apache2/sites-enabled/000-default.conf, so that's where I
adjusted the path to test.pem
The page is still not available.
I was probably wrong though giving the apachectl -S error as
cause of the problem (or was I?). I should have run it with
sudo, in which case it would have looked like this:
~$ sudo apachectl -SAH00558: apache2: Could not reliably
determine the server's fully qualified domain name, using
127.0.1.1. Set the 'ServerName' directive globally to suppress
this message
VirtualHost configuration:
*:80 127.0.1.1
(/etc/apache2/sites-enabled/000-default-mythbuntu.conf:1)
*:443 127.0.1.1
(/etc/apache2/sites-enabled/000-default.conf:11)
ServerRoot: "/etc/apache2"
Main DocumentRoot: "/var/www"
Main ErrorLog: "/var/log/apache2/error.log"
Mutex ssl-stapling: using_defaults
Mutex ssl-cache: using_defaults
Mutex default: dir="/var/lock/apache2" mechanism=fcntl
Mutex mpm-accept: using_defaults
Mutex watchdog-callback: using_defaults
Mutex rewrite-map: using_defaults
PidFile: "/var/run/apache2/apache2.pid"
Define: DUMP_VHOSTS
Define: DUMP_RUN_CFG
User: name="www-data" id=33
Group: name="www-data" id=33
Could it be that Apache does not run as root when trying to
access the key file?
If that is not the problem, then I am at a loss.
I forgot to say that not all browsers show the problem as
"corrupted content" error. In others, There is a warning that
the site is not to be trusted (which is normal because of the
certificate being self-signed), but the option to ignore the
warning and create an exception is disabled / not working.
I you want to try what your browser says, the URL is
[1]https://oc.benopp.org/owncloud
Am Di, 30. Sep 2014, um 01:35, schrieb Edgar Pettijohn:
Have you tried with a self signed certificate just to see what
happens?
# openssl req -new -x509 -days 3650 -nodes -newkey
rsa:4096 -out /etc/ssl/certs/test.pem -keyout
/etc/ssl/private/test.pem
# chmod go= /etc/ssl/private/test.pem
httpd.conf
SSLCertificateFile /etc/ssl/certs/test.pem
SSLCertificateKeyFile /etc/ssl/private/test.pem
References
1. https://oc.benopp.org/owncloud
Re: [users@httpd] "corrupted content" error, httpd can't access SSL
key file [wd-vc]
Posted by Edgar Pettijohn <ed...@pettijohn.no-ip.biz>.
I tried to go to your site, but apparently the server is down.
On 09/29/2014 07:16 PM, Benjamin Oppermann wrote:
> Actually, this one is a self-signed certificate, but I tried with a
> new one using your command, just to be safe.
> My Vhost is configured in /etc/apache2/sites-enabled/000-default.conf,
> so that's where I adjusted the path to test.pem
> The page is still not available.
> I was probably wrong though giving the apachectl -S error as cause of
> the problem (or was I?). I should have run it with sudo, in which case
> it would have looked like this:
>
> ~$ sudo apachectl -SAH00558: apache2: Could not reliably determine the
> server's fully qualified domain name, using 127.0.1.1. Set the
> 'ServerName' directive globally to suppress this message
> VirtualHost configuration:
> *:80 127.0.1.1
> (/etc/apache2/sites-enabled/000-default-mythbuntu.conf:1)
> *:443 127.0.1.1
> (/etc/apache2/sites-enabled/000-default.conf:11)
> ServerRoot: "/etc/apache2"
> Main DocumentRoot: "/var/www"
> Main ErrorLog: "/var/log/apache2/error.log"
> Mutex ssl-stapling: using_defaults
> Mutex ssl-cache: using_defaults
> Mutex default: dir="/var/lock/apache2" mechanism=fcntl
> Mutex mpm-accept: using_defaults
> Mutex watchdog-callback: using_defaults
> Mutex rewrite-map: using_defaults
> PidFile: "/var/run/apache2/apache2.pid"
> Define: DUMP_VHOSTS
> Define: DUMP_RUN_CFG
> User: name="www-data" id=33
> Group: name="www-data" id=33
>
> Could it be that Apache does not run as root when trying to access the
> key file?
> If that is not the problem, then I am at a loss.
> I forgot to say that not all browsers show the problem as "corrupted
> content" error. In others, There is a warning that the site is not to
> be trusted (which is normal because of the certificate being
> self-signed), but the option to ignore the warning and create an
> exception is disabled / not working.
> I you want to try what your browser says, the URL is
> https://oc.benopp.org/owncloud
>
> Am Di, 30. Sep 2014, um 01:35, schrieb Edgar Pettijohn:
>> Have you tried with a self signed certificate just to see what happens?
>>
>> # openssl req -new -x509 -days 3650 -nodes -newkey rsa:4096 -out
>> /etc/ssl/certs/test.pem -keyout /etc/ssl/private/test.pem
>>
>> # chmod go= /etc/ssl/private/test.pem
>>
>> httpd.conf
>>
>> SSLCertificateFile /etc/ssl/certs/test.pem
>> SSLCertificateKeyFile //etc/ssl/private/test.pem /
>>
>
Re: [users@httpd] "corrupted content" error,
httpd can't access SSL key file [wd-vc]
Posted by Benjamin Oppermann <be...@eml.cc>.
Actually, this one is a self-signed certificate, but I tried
with a new one using your command, just to be safe.
My Vhost is configured in
/etc/apache2/sites-enabled/000-default.conf, so that's where I
adjusted the path to test.pem
The page is still not available.
I was probably wrong though giving the apachectl -S error as
cause of the problem (or was I?). I should have run it with
sudo, in which case it would have looked like this:
~$ sudo apachectl -SAH00558: apache2: Could not reliably
determine the server's fully qualified domain name, using
127.0.1.1. Set the 'ServerName' directive globally to suppress
this message
VirtualHost configuration:
*:80 127.0.1.1
(/etc/apache2/sites-enabled/000-default-mythbuntu.conf:1)
*:443 127.0.1.1
(/etc/apache2/sites-enabled/000-default.conf:11)
ServerRoot: "/etc/apache2"
Main DocumentRoot: "/var/www"
Main ErrorLog: "/var/log/apache2/error.log"
Mutex ssl-stapling: using_defaults
Mutex ssl-cache: using_defaults
Mutex default: dir="/var/lock/apache2" mechanism=fcntl
Mutex mpm-accept: using_defaults
Mutex watchdog-callback: using_defaults
Mutex rewrite-map: using_defaults
PidFile: "/var/run/apache2/apache2.pid"
Define: DUMP_VHOSTS
Define: DUMP_RUN_CFG
User: name="www-data" id=33
Group: name="www-data" id=33
Could it be that Apache does not run as root when trying to
access the key file?
If that is not the problem, then I am at a loss.
I forgot to say that not all browsers show the problem as
"corrupted content" error. In others, There is a warning that
the site is not to be trusted (which is normal because of the
certificate being self-signed), but the option to ignore the
warning and create an exception is disabled / not working.
I you want to try what your browser says, the URL is
https://oc.benopp.org/owncloud
Am Di, 30. Sep 2014, um 01:35, schrieb Edgar Pettijohn:
Have you tried with a self signed certificate just to see what
happens?
# openssl req -new -x509 -days 3650 -nodes -newkey
rsa:4096 -out /etc/ssl/certs/test.pem -keyout
/etc/ssl/private/test.pem
# chmod go= /etc/ssl/private/test.pem
httpd.conf
SSLCertificateFile /etc/ssl/certs/test.pem
SSLCertificateKeyFile /etc/ssl/private/test.pem
Re: [users@httpd] "corrupted content" error, httpd can't access SSL
key file [wd-vc]
Posted by Edgar Pettijohn <ed...@pettijohn.no-ip.biz>.
Have you tried with a self signed certificate just to see what happens?
# openssl req -new -x509 -days 3650 -nodes -newkey rsa:4096 -out
/etc/ssl/certs/test.pem -keyout /etc/ssl/private/test.pem
# chmod go= /etc/ssl/private/test.pem
httpd.conf
SSLCertificateFile /etc/ssl/certs/test.pem
SSLCertificateKeyFile /etc/ssl/private/test.pem
On 09/29/2014 05:02 PM, Benjamin Oppermann wrote:
> Ooops, my bad.
>
> ~$ sudo openssl rsa -in /etc/ssl/private/owncloud.key -check
> RSA key ok
>
> So the key file itself is not the problem...
>
> Am Mo, 29. Sep 2014, um 22:15, schrieb Benjamin Oppermann:
>> So should I revoke the changes to permissions I made, or remove
>> permissions for my user, leaving only root?
>>
>>
>> ~$ openssl rsa -in /etc/ssl/private/owncloud.key -check
>> Error opening Private Key /etc/ssl/private/owncloud.key
>> 139748944725664:error:0200100D:system library:fopen:Permission
>> denied:bss_file.c:398:fopen('/etc/ssl/private/owncloud.key','r')
>> 139748944725664:error:20074002:BIO routines:FILE_CTRL:system
>> lib:bss_file.c:400:
>> unable to load Private Key
>>
>>
>> I take it this means the key file is broken?
>>
>>
>> Am Mo, 29. Sep 2014, um 21:57, schrieb Daniel:
>>> a private key should never be accesible to groups or others, just
>>> root as read only.
>>>
>>> Having said this... have you checked the key file is correct?
>>>
>>> try this:
>>> openssl rsa -in /etc/ssl/private/owncloud.key -check
>>>
>>> 2014-09-29 21:22 GMT+02:00 Benjamin Oppermann <ben.opp@eml.cc
>>> <ma...@eml.cc>>:
>>>
>>> Ok, I tried this. The permissions are now:
>>>
>>> ~$ sudo ls -l /etc/ssl/private/owncloud.key
>>> -rw-r--r-- 1 root ben 1704 Sep 28 04:01
>>> /etc/ssl/private/owncloud.key
>>>
>>> I still get the same error.
>>> Regards Ben
>>>
>>>
>>> Am Mo, 29. Sep 2014, um 14:12, schrieb Bremser, Kurt (AMOS Austria
>>> GmbH):
>>> > The first thing that I'd try is
>>> > sudo chmod go+r /etc/ssl/private/owncloud.key
>>> >
>>> > Kurt Bremser
>>> > AMOS Austria
>>> >
>>> > Newton was wrong. There is no gravity. The Earth sucks.
>>> > ________________________________________
>>> > Von: Benjamin Oppermann [ben.opp@eml.cc]
>>> > Gesendet: Montag, 29. September 2014 13:31
>>> > An: users@httpd.apache.org <ma...@httpd.apache.org>
>>> > Betreff: **SPAM?** [users@httpd] "corrupted content" error,
>>> httpd can't
>>> > access SSL key file [wd-vc]
>>> >
>>> > Hi,
>>> > I can't reach my website, I get a "corrupted content" error
>>> message in
>>> > the browser.
>>> > Looking into apache (version 2.4.7 on Ubuntu 14.04), I get
>>> >
>>> > ~$ apachectl -S
>>> > AH00526: Syntax error on line 22 of
>>> > /etc/apache2/sites-enabled/000-default.conf:
>>> > SSLCertificateKeyFile: file
>>> '/etc/ssl/private/owncloud.key' does not
>>> > exist or is empty
>>> > Action '-S' failed.
>>> >
>>> > However, I double checked that the file is in the appropriate
>>> location
>>> > and does contain the key, so maybe apache has no permission.
>>> afaik, it
>>> > doesn't run as root all the time - or only for a short time?
>>> > permissions for the key file are as follows:
>>> >
>>> > ~$ sudo ls -l /etc/ssl/private/owncloud.key
>>> > -rw------- 1 root ben 1704 Sep 28 04:01
>>> > /etc/ssl/private/owncloud.key
>>> >
>>> > , where ben is my normal user.
>>> > It was suggested to me on the httpd IRC channel that maybe
>>> apparmor was
>>> > doing something wrong, but I don't know how to investigate that.
>>> > I did have a working configuration and made no changes to it
>>> before this
>>> > happened. The only change I made was to put a router between
>>> the second
>>> > gateway and the server and resolved the domain name to its
>>> local IP
>>> > inside the network (the page isn't reachable from inside either).
>>> > Just so you know, this is the first time I am setting up a
>>> server, and I
>>> > am all self-taught.
>>> > Reading suggestions for a good start are appreciated, but of
>>> course a
>>> > how-to or specific section of a manual would be more helpful
>>> than a
>>> > generic exhortation to rtfm :-)
>>> > Any hints?
>>> > Thanks, Ben
>>> >
>>> >
>>> ---------------------------------------------------------------------
>>> > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>>> <ma...@httpd.apache.org>
>>> > For additional commands, e-mail: users-help@httpd.apache.org
>>> <ma...@httpd.apache.org>
>>>
>>> >
>>> ---------------------------------------------------------------------
>>> > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>>> <ma...@httpd.apache.org>
>>> > For additional commands, e-mail: users-help@httpd.apache.org
>>> <ma...@httpd.apache.org>
>>> >
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>>> <ma...@httpd.apache.org>
>>> For additional commands, e-mail: users-help@httpd.apache.org
>>> <ma...@httpd.apache.org>
>>>
>>>
>>>
>>
>
Re: [users@httpd] "corrupted content" error,
httpd can't access SSL key file [wd-vc]
Posted by Benjamin Oppermann <be...@eml.cc>.
Ooops, my bad.
~$ sudo openssl rsa -in /etc/ssl/private/owncloud.key -check
RSA key ok
So the key file itself is not the problem...
Am Mo, 29. Sep 2014, um 22:15, schrieb Benjamin Oppermann:
So should I revoke the changes to permissions I made, or remove
permissions for my user, leaving only root?
~$ openssl rsa -in /etc/ssl/private/owncloud.key -check
Error opening Private Key /etc/ssl/private/owncloud.key
139748944725664:error:0200100D:system library:fopen:Permission
denied:bss_file.c:398:fopen('/etc/ssl/private/owncloud.key','r'
)
139748944725664:error:20074002:BIO routines:FILE_CTRL:system
lib:bss_file.c:400:
unable to load Private Key
I take it this means the key file is broken?
Am Mo, 29. Sep 2014, um 21:57, schrieb Daniel:
a private key should never be accesible to groups or others,
just root as read only.
Having said this... have you checked the key file is correct?
try this:
openssl rsa -in /etc/ssl/private/owncloud.key -check
2014-09-29 21:22 GMT+02:00 Benjamin Oppermann
<[1...@eml.cc>:
Ok, I tried this. The permissions are now:
~$ sudo ls -l /etc/ssl/private/owncloud.key
-rw-r--r-- 1 root ben 1704 Sep 28 04:01
/etc/ssl/private/owncloud.key
I still get the same error.
Regards Ben
Am Mo, 29. Sep 2014, um 14:12, schrieb Bremser, Kurt (AMOS
Austria
GmbH):
> The first thing that I'd try is
> sudo chmod go+r /etc/ssl/private/owncloud.key
>
> Kurt Bremser
> AMOS Austria
>
> Newton was wrong. There is no gravity. The Earth sucks.
> ________________________________________
> Von: Benjamin Oppermann [ben.opp@eml.cc]
> Gesendet: Montag, 29. September 2014 13:31
> An: [2]users@httpd.apache.org
> Betreff: **SPAM?** [users@httpd] "corrupted content" error,
httpd can't
> access SSL key file [wd-vc]
>
> Hi,
> I can't reach my website, I get a "corrupted content" error
message in
> the browser.
> Looking into apache (version 2.4.7 on Ubuntu 14.04), I get
>
> ~$ apachectl -S
> AH00526: Syntax error on line 22 of
> /etc/apache2/sites-enabled/000-default.conf:
> SSLCertificateKeyFile: file
'/etc/ssl/private/owncloud.key' does not
> exist or is empty
> Action '-S' failed.
>
> However, I double checked that the file is in the appropriate
location
> and does contain the key, so maybe apache has no permission.
afaik, it
> doesn't run as root all the time - or only for a short time?
> permissions for the key file are as follows:
>
> ~$ sudo ls -l /etc/ssl/private/owncloud.key
> -rw------- 1 root ben 1704 Sep 28 04:01
> /etc/ssl/private/owncloud.key
>
> , where ben is my normal user.
> It was suggested to me on the httpd IRC channel that maybe
apparmor was
> doing something wrong, but I don't know how to investigate
that.
> I did have a working configuration and made no changes to it
before this
> happened. The only change I made was to put a router between
the second
> gateway and the server and resolved the domain name to its
local IP
> inside the network (the page isn't reachable from inside
either).
> Just so you know, this is the first time I am setting up a
server, and I
> am all self-taught.
> Reading suggestions for a good start are appreciated, but of
course a
> how-to or specific section of a manual would be more helpful
than a
> generic exhortation to rtfm :-)
> Any hints?
> Thanks, Ben
>
>
---------------------------------------------------------------
------
> To unsubscribe, e-mail: [3]users-unsubscribe@httpd.apache.org
> For additional commands, e-mail:
[4]users-help@httpd.apache.org
>
---------------------------------------------------------------
------
> To unsubscribe, e-mail: [5]users-unsubscribe@httpd.apache.org
> For additional commands, e-mail:
[6]users-help@httpd.apache.org
>
---------------------------------------------------------------
------
To unsubscribe, e-mail: [7]users-unsubscribe@httpd.apache.org
For additional commands, e-mail: [8]users-help@httpd.apache.org
References
1. mailto:ben.opp@eml.cc
2. mailto:users@httpd.apache.org
3. mailto:users-unsubscribe@httpd.apache.org
4. mailto:users-help@httpd.apache.org
5. mailto:users-unsubscribe@httpd.apache.org
6. mailto:users-help@httpd.apache.org
7. mailto:users-unsubscribe@httpd.apache.org
8. mailto:users-help@httpd.apache.org
Re: [users@httpd] "corrupted content" error,
httpd can't access SSL key file [wd-vc]
Posted by Benjamin Oppermann <be...@eml.cc>.
So should I revoke the changes to permissions I made, or remove
permissions for my user, leaving only root?
~$ openssl rsa -in /etc/ssl/private/owncloud.key -check
Error opening Private Key /etc/ssl/private/owncloud.key
139748944725664:error:0200100D:system library:fopen:Permission
denied:bss_file.c:398:fopen('/etc/ssl/private/owncloud.key','r'
)
139748944725664:error:20074002:BIO routines:FILE_CTRL:system
lib:bss_file.c:400:
unable to load Private Key
I take it this means the key file is broken?
Am Mo, 29. Sep 2014, um 21:57, schrieb Daniel:
a private key should never be accesible to groups or others,
just root as read only.
Having said this... have you checked the key file is correct?
try this:
openssl rsa -in /etc/ssl/private/owncloud.key -check
2014-09-29 21:22 GMT+02:00 Benjamin Oppermann
<[1...@eml.cc>:
Ok, I tried this. The permissions are now:
~$ sudo ls -l /etc/ssl/private/owncloud.key
-rw-r--r-- 1 root ben 1704 Sep 28 04:01
/etc/ssl/private/owncloud.key
I still get the same error.
Regards Ben
Am Mo, 29. Sep 2014, um 14:12, schrieb Bremser, Kurt (AMOS
Austria
GmbH):
> The first thing that I'd try is
> sudo chmod go+r /etc/ssl/private/owncloud.key
>
> Kurt Bremser
> AMOS Austria
>
> Newton was wrong. There is no gravity. The Earth sucks.
> ________________________________________
> Von: Benjamin Oppermann [ben.opp@eml.cc]
> Gesendet: Montag, 29. September 2014 13:31
> An: [2]users@httpd.apache.org
> Betreff: **SPAM?** [users@httpd] "corrupted content" error,
httpd can't
> access SSL key file [wd-vc]
>
> Hi,
> I can't reach my website, I get a "corrupted content" error
message in
> the browser.
> Looking into apache (version 2.4.7 on Ubuntu 14.04), I get
>
> ~$ apachectl -S
> AH00526: Syntax error on line 22 of
> /etc/apache2/sites-enabled/000-default.conf:
> SSLCertificateKeyFile: file
'/etc/ssl/private/owncloud.key' does not
> exist or is empty
> Action '-S' failed.
>
> However, I double checked that the file is in the appropriate
location
> and does contain the key, so maybe apache has no permission.
afaik, it
> doesn't run as root all the time - or only for a short time?
> permissions for the key file are as follows:
>
> ~$ sudo ls -l /etc/ssl/private/owncloud.key
> -rw------- 1 root ben 1704 Sep 28 04:01
> /etc/ssl/private/owncloud.key
>
> , where ben is my normal user.
> It was suggested to me on the httpd IRC channel that maybe
apparmor was
> doing something wrong, but I don't know how to investigate
that.
> I did have a working configuration and made no changes to it
before this
> happened. The only change I made was to put a router between
the second
> gateway and the server and resolved the domain name to its
local IP
> inside the network (the page isn't reachable from inside
either).
> Just so you know, this is the first time I am setting up a
server, and I
> am all self-taught.
> Reading suggestions for a good start are appreciated, but of
course a
> how-to or specific section of a manual would be more helpful
than a
> generic exhortation to rtfm :-)
> Any hints?
> Thanks, Ben
>
>
---------------------------------------------------------------
------
> To unsubscribe, e-mail: [3]users-unsubscribe@httpd.apache.org
> For additional commands, e-mail:
[4]users-help@httpd.apache.org
>
---------------------------------------------------------------
------
> To unsubscribe, e-mail: [5]users-unsubscribe@httpd.apache.org
> For additional commands, e-mail:
[6]users-help@httpd.apache.org
>
---------------------------------------------------------------
------
To unsubscribe, e-mail: [7]users-unsubscribe@httpd.apache.org
For additional commands, e-mail: [8]users-help@httpd.apache.org
References
1. mailto:ben.opp@eml.cc
2. mailto:users@httpd.apache.org
3. mailto:users-unsubscribe@httpd.apache.org
4. mailto:users-help@httpd.apache.org
5. mailto:users-unsubscribe@httpd.apache.org
6. mailto:users-help@httpd.apache.org
7. mailto:users-unsubscribe@httpd.apache.org
8. mailto:users-help@httpd.apache.org
Re: [users@httpd] "corrupted content" error, httpd can't access SSL
key file [wd-vc]
Posted by Daniel <df...@gmail.com>.
a private key should never be accesible to groups or others, just root as
read only.
Having said this... have you checked the key file is correct?
try this:
openssl rsa -in /etc/ssl/private/owncloud.key -check
2014-09-29 21:22 GMT+02:00 Benjamin Oppermann <be...@eml.cc>:
> Ok, I tried this. The permissions are now:
>
> ~$ sudo ls -l /etc/ssl/private/owncloud.key
> -rw-r--r-- 1 root ben 1704 Sep 28 04:01 /etc/ssl/private/owncloud.key
>
> I still get the same error.
> Regards Ben
>
>
> Am Mo, 29. Sep 2014, um 14:12, schrieb Bremser, Kurt (AMOS Austria
> GmbH):
> > The first thing that I'd try is
> > sudo chmod go+r /etc/ssl/private/owncloud.key
> >
> > Kurt Bremser
> > AMOS Austria
> >
> > Newton was wrong. There is no gravity. The Earth sucks.
> > ________________________________________
> > Von: Benjamin Oppermann [ben.opp@eml.cc]
> > Gesendet: Montag, 29. September 2014 13:31
> > An: users@httpd.apache.org
> > Betreff: **SPAM?** [users@httpd] "corrupted content" error, httpd can't
> > access SSL key file [wd-vc]
> >
> > Hi,
> > I can't reach my website, I get a "corrupted content" error message in
> > the browser.
> > Looking into apache (version 2.4.7 on Ubuntu 14.04), I get
> >
> > ~$ apachectl -S
> > AH00526: Syntax error on line 22 of
> > /etc/apache2/sites-enabled/000-default.conf:
> > SSLCertificateKeyFile: file '/etc/ssl/private/owncloud.key' does not
> > exist or is empty
> > Action '-S' failed.
> >
> > However, I double checked that the file is in the appropriate location
> > and does contain the key, so maybe apache has no permission. afaik, it
> > doesn't run as root all the time - or only for a short time?
> > permissions for the key file are as follows:
> >
> > ~$ sudo ls -l /etc/ssl/private/owncloud.key
> > -rw------- 1 root ben 1704 Sep 28 04:01
> > /etc/ssl/private/owncloud.key
> >
> > , where ben is my normal user.
> > It was suggested to me on the httpd IRC channel that maybe apparmor was
> > doing something wrong, but I don't know how to investigate that.
> > I did have a working configuration and made no changes to it before this
> > happened. The only change I made was to put a router between the second
> > gateway and the server and resolved the domain name to its local IP
> > inside the network (the page isn't reachable from inside either).
> > Just so you know, this is the first time I am setting up a server, and I
> > am all self-taught.
> > Reading suggestions for a good start are appreciated, but of course a
> > how-to or specific section of a manual would be more helpful than a
> > generic exhortation to rtfm :-)
> > Any hints?
> > Thanks, Ben
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> > For additional commands, e-mail: users-help@httpd.apache.org
>
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> > For additional commands, e-mail: users-help@httpd.apache.org
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
Re: [users@httpd] "corrupted content" error,
httpd can't access SSL key file [wd-vc]
Posted by Benjamin Oppermann <be...@eml.cc>.
Ok, I tried this. The permissions are now:
~$ sudo ls -l /etc/ssl/private/owncloud.key
-rw-r--r-- 1 root ben 1704 Sep 28 04:01 /etc/ssl/private/owncloud.key
I still get the same error.
Regards Ben
Am Mo, 29. Sep 2014, um 14:12, schrieb Bremser, Kurt (AMOS Austria
GmbH):
> The first thing that I'd try is
> sudo chmod go+r /etc/ssl/private/owncloud.key
>
> Kurt Bremser
> AMOS Austria
>
> Newton was wrong. There is no gravity. The Earth sucks.
> ________________________________________
> Von: Benjamin Oppermann [ben.opp@eml.cc]
> Gesendet: Montag, 29. September 2014 13:31
> An: users@httpd.apache.org
> Betreff: **SPAM?** [users@httpd] "corrupted content" error, httpd can't
> access SSL key file [wd-vc]
>
> Hi,
> I can't reach my website, I get a "corrupted content" error message in
> the browser.
> Looking into apache (version 2.4.7 on Ubuntu 14.04), I get
>
> ~$ apachectl -S
> AH00526: Syntax error on line 22 of
> /etc/apache2/sites-enabled/000-default.conf:
> SSLCertificateKeyFile: file '/etc/ssl/private/owncloud.key' does not
> exist or is empty
> Action '-S' failed.
>
> However, I double checked that the file is in the appropriate location
> and does contain the key, so maybe apache has no permission. afaik, it
> doesn't run as root all the time - or only for a short time?
> permissions for the key file are as follows:
>
> ~$ sudo ls -l /etc/ssl/private/owncloud.key
> -rw------- 1 root ben 1704 Sep 28 04:01
> /etc/ssl/private/owncloud.key
>
> , where ben is my normal user.
> It was suggested to me on the httpd IRC channel that maybe apparmor was
> doing something wrong, but I don't know how to investigate that.
> I did have a working configuration and made no changes to it before this
> happened. The only change I made was to put a router between the second
> gateway and the server and resolved the domain name to its local IP
> inside the network (the page isn't reachable from inside either).
> Just so you know, this is the first time I am setting up a server, and I
> am all self-taught.
> Reading suggestions for a good start are appreciated, but of course a
> how-to or specific section of a manual would be more helpful than a
> generic exhortation to rtfm :-)
> Any hints?
> Thanks, Ben
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
[users@httpd] "corrupted content" error, httpd can't access SSL key
file [wd-vc]
Posted by "Bremser, Kurt (AMOS Austria GmbH)" <Ku...@allianz.at>.
The first thing that I'd try is
sudo chmod go+r /etc/ssl/private/owncloud.key
Kurt Bremser
AMOS Austria
Newton was wrong. There is no gravity. The Earth sucks.
________________________________________
Von: Benjamin Oppermann [ben.opp@eml.cc]
Gesendet: Montag, 29. September 2014 13:31
An: users@httpd.apache.org
Betreff: **SPAM?** [users@httpd] "corrupted content" error, httpd can't access SSL key file [wd-vc]
Hi,
I can't reach my website, I get a "corrupted content" error message in
the browser.
Looking into apache (version 2.4.7 on Ubuntu 14.04), I get
~$ apachectl -S
AH00526: Syntax error on line 22 of
/etc/apache2/sites-enabled/000-default.conf:
SSLCertificateKeyFile: file '/etc/ssl/private/owncloud.key' does not
exist or is empty
Action '-S' failed.
However, I double checked that the file is in the appropriate location
and does contain the key, so maybe apache has no permission. afaik, it
doesn't run as root all the time - or only for a short time?
permissions for the key file are as follows:
~$ sudo ls -l /etc/ssl/private/owncloud.key
-rw------- 1 root ben 1704 Sep 28 04:01
/etc/ssl/private/owncloud.key
, where ben is my normal user.
It was suggested to me on the httpd IRC channel that maybe apparmor was
doing something wrong, but I don't know how to investigate that.
I did have a working configuration and made no changes to it before this
happened. The only change I made was to put a router between the second
gateway and the server and resolved the domain name to its local IP
inside the network (the page isn't reachable from inside either).
Just so you know, this is the first time I am setting up a server, and I
am all self-taught.
Reading suggestions for a good start are appreciated, but of course a
how-to or specific section of a manual would be more helpful than a
generic exhortation to rtfm :-)
Any hints?
Thanks, Ben
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
AMOS Austria GmbH
1130 Wien, Hietzinger Kai 101-105
FN 365014k, Handelsgericht Wien
UID: ATU 66614737
http://www.allianz.at
********************************************************
Dieses E-Mail und allfaellig daran angeschlossene Anhaenge
enthalten Informationen, die vertraulich und
ausschliesslich fuer den (die) bezeichneten Adressaten
bestimmt sind.
Wenn Sie nicht der genannte Adressat sind, darf dieses
E-Mail samt allfaelliger Anhaenge von Ihnen weder anderen
Personen zugaenglich gemacht noch in anderer Weise
verwertet werden.
Wenn Sie nicht der beabsichtigte Empfaenger sind, bitten
wir Sie, dieses E-Mail und saemtliche angeschlossene
Anhaenge zu loeschen.
Please note: This email and any files transmitted with it is
intended only for the named recipients and may contain
confidential and/or privileged information. If you are not the
intended recipient, please do not read, copy, use or disclose
the contents of this communication to others and notify the
sender immediately. Then please delete the email and any
copies of it. Thank you.
********************************************************
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org