SSLCARevocationCheck httpd 2.2 issue

-
While installing puppet, I encountered following error with apache httpd server:

# /etc/init.d/httpd restart
Stopping httpd:                                            [  OK  ]
Syntax error on line 43 of /etc/httpd/conf.d/puppetmaster.conf:
Invalid command 'SSLCARevocationCheck', perhaps misspelled or defined by a module not included in the server configuration


SSLCARevocationCheck is a new directive for apache mod_ssl module that has been introduced in apache 2.4. It dose not exist in apache 2.2 but other SSLCARevocation related directive are supported in 2.2.


As I have httpd 2.2 installed,  so I just comment out SSLCARevocationCheck and restart apache successfully.





Comments

  1. B10 February 2016 at 13:22

    Thanks faced the same issue. Faced the below too

    root@puppet:~# /etc/init.d/apache2 reload
    [Wed Feb 10 17:36:09 2016] [warn] module passenger_module is already loaded, skipping
    Syntax error on line 76 of /etc/apache2/sites-enabled/puppetmaster:
    Invalid command '<IfVersion', perhaps misspelled or defined by a module not included in the server configuration
    Action 'configtest' failed.
    The Apache error log may have more information.
    ...fail!

    need to enable a module

    root@puppet:~# a2enmod version
    Enabling module version.



    ReplyDelete
    Replies
    1. Arvin Ebrahimpour10 February 2016 at 13:49

      Exactly, So basically what's happened here is that puppet master is checking for Apache httpd version in its config file via mod_version container , and it has to be loaded in order to pass the check.
      Thanks for pointing the related facing issue and solution.

      Delete

Post a comment

Popular posts from this blog

Running Docker Wildfly/JBoss Application Server in Debug mode via Eclipse

-
I have recently built the whole Development Environment of Java Enterprise Edition (J2EE) project on multiple Docker containers. It has saved the hassle of setting up a dev env for new developers. All it takes to setup the environment is to clone our github repositories and run the Docker images.

I will explain the setup in a future post.

Build Wildfly Docker Image with Debugging Enabled
So basically in order to run the Wildfly in debug mode, we need to add --debug flag to the Wildfly standalone.sh startup script.

Also we need to expose port 8787 in our image as it's the default port for Wildfly JVM debug mode.

1. Create or change your Wildfly Dockerfile as follows:
$ cat Dockerfile FROM jboss/wildfly:10.0.0.Final EXPOSE8787CMD["/opt/jboss/wildfly/bin/standalone.sh", "-b", "0.0.0.0", "-bmanagement", "0.0.0.0", "--debug"] 2. Build and tag the image:
$ docker build -t wildfly-debug . 3. Run the image either via  docker run:
$ …
Read more

Building RPM OpenSSH 7.1p1 on RHEL/CentOS 6.5

-
After I've implemented the OpenVAS vulnerability assessment system, I've made a complete vulnerability testing on the environment for both Linux and Wintel servers.

The result for the all Linux servers were Red :) Severity 10.0(High). The reason was the OpenSSH version 5.

Test result:

High (CVSS: 8.5)
NVT: OpenSSH Multiple Vulnerabilities (OID: 1.3.6.1.4.1.25623.1.0.806052) Product detection result: cpe:/a:openbsd:openssh:5.3 by SSH Server type and version (OID: 1.3.6.1.4.1.25623.1.0.10267) SummaryThis host is running OpenSSH and is prone to multiple vulnerabilities. Vulnerability Detection Result
Installed version: 5.3 Fixed version: 7.0 ImpactSuccessful exploitation will allow an attacker to gain privileges, to conduct impersonation attacks, to conduct brute-force attacks or cause a denial of service.
Impact Level: Application SolutionUpgrade to OpenSSH 7.0 or later. For updates refer to http://www.openssh.com Affected Software/OSOpenSSH versions before 7.0 Vulnerability InsightMu…
Read more