SSLCARevocationCheck httpd 2.2 issue

-
While installing puppet, I encountered following error with apache httpd server:

# /etc/init.d/httpd restart
Stopping httpd:                                            [  OK  ]
Syntax error on line 43 of /etc/httpd/conf.d/puppetmaster.conf:
Invalid command 'SSLCARevocationCheck', perhaps misspelled or defined by a module not included in the server configuration


SSLCARevocationCheck is a new directive for apache mod_ssl module that has been introduced in apache 2.4. It dose not exist in apache 2.2 but other SSLCARevocation related directive are supported in 2.2.


As I have httpd 2.2 installed,  so I just comment out SSLCARevocationCheck and restart apache successfully.





Comments

  1. B10 February 2016 at 13:22

    Thanks faced the same issue. Faced the below too

    root@puppet:~# /etc/init.d/apache2 reload
    [Wed Feb 10 17:36:09 2016] [warn] module passenger_module is already loaded, skipping
    Syntax error on line 76 of /etc/apache2/sites-enabled/puppetmaster:
    Invalid command '<IfVersion', perhaps misspelled or defined by a module not included in the server configuration
    Action 'configtest' failed.
    The Apache error log may have more information.
    ...fail!

    need to enable a module

    root@puppet:~# a2enmod version
    Enabling module version.



    ReplyDelete
    Replies
    1. Arvin Ebrahimpour10 February 2016 at 13:49

      Exactly, So basically what's happened here is that puppet master is checking for Apache httpd version in its config file via mod_version container , and it has to be loaded in order to pass the check.
      Thanks for pointing the related facing issue and solution.

      Delete

Post a comment

Popular posts from this blog

Running Docker Wildfly/JBoss Application Server in Debug mode via Eclipse

-
I have recently built the whole Development Environment of Java Enterprise Edition (J2EE) project on multiple Docker containers. It has saved the hassle of setting up a dev env for new developers. All it takes to setup the environment is to clone our github repositories and run the Docker images.

I will explain the setup in a future post.

Build Wildfly Docker Image with Debugging Enabled
So basically in order to run the Wildfly in debug mode, we need to add --debug flag to the Wildfly standalone.sh startup script.

Also we need to expose port 8787 in our image as it's the default port for Wildfly JVM debug mode.

1. Create or change your Wildfly Dockerfile as follows:
$ cat Dockerfile FROM jboss/wildfly:10.0.0.Final EXPOSE8787CMD["/opt/jboss/wildfly/bin/standalone.sh", "-b", "0.0.0.0", "-bmanagement", "0.0.0.0", "--debug"] 2. Build and tag the image:
$ docker build -t wildfly-debug . 3. Run the image either via  docker run:
$ …
Read more

Foreman fresh installation issue on Foreman proxy

-
After a fresh  installation of Foreman, I got another weird error while try to add a host to foreman:

# puppet agent --test
Error: Could not retrieve catalog from remote server: Error 400 on SERVER: Failed when searching for node node.example.com: Failed to find node.example.com via exec: Execution of '/etc/puppet/node.rb node.example.com' returned 1:
Warning: Not using cache on failed catalog
Error: Could not retrieve catalog; skipping run


It turns out that issue is because of foreman proxy that it has not been created during installation.
So need to create it manually. In foreman GUI:
Infrastructure > Smart proxies > add new proxy
or if there is any exist edit it and correct the entry of your proxy FQDN. It's something like https://node.example.com:8443

And again, after try to add new proxy, yet another bug:  Unable to communicate with the proxy: ERF12-2530 [ProxyAPI::ProxyException]: Unable to detect features ([RestClient::RequestTimeout]: Request Timeout for proxy Plea…
Read more

Building RPM OpenSSH 7.1p1 on RHEL/CentOS 6.5

-
After I've implemented the OpenVAS vulnerability assessment system, I've made a complete vulnerability testing on the environment for both Linux and Wintel servers.

The result for the all Linux servers were Red :) Severity 10.0(High). The reason was the OpenSSH version 5.

Test result:

High (CVSS: 8.5)
NVT: OpenSSH Multiple Vulnerabilities (OID: 1.3.6.1.4.1.25623.1.0.806052) Product detection result: cpe:/a:openbsd:openssh:5.3 by SSH Server type and version (OID: 1.3.6.1.4.1.25623.1.0.10267) SummaryThis host is running OpenSSH and is prone to multiple vulnerabilities. Vulnerability Detection Result
Installed version: 5.3 Fixed version: 7.0 ImpactSuccessful exploitation will allow an attacker to gain privileges, to conduct impersonation attacks, to conduct brute-force attacks or cause a denial of service.
Impact Level: Application SolutionUpgrade to OpenSSH 7.0 or later. For updates refer to http://www.openssh.com Affected Software/OSOpenSSH versions before 7.0 Vulnerability InsightMu…
Read more