Internal Errigal Collaboration Wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

=====ApacheSSLError=====

**Level:**   __Critical__     FIXME


**Purpose:** To check the Apache httpd error log for SSL errors using string "Unable to configure RSA server private key" in file **/var/log/httpd/ssl_error_log**

**Scenario:** The Apache httpd service is in error due to SSL key loading issue.

**Resolution:** Check the private key to see if it has changed recently

**Manual Action Steps:** Check if the key found at **/etc/httpd/conf/ssl/certificateKey.key** has changed recently.
<code>ls -l /etc/httpd/conf/ssl/ </code>
If it has changed, you can revert it using the one stored in the [[https://bitbucket.org/errigal/deployment-playbooks/src/master/roles/ssl-configuration/files/ | deployment playbooks]] in the environments folder. Back up the current server key before making any changes, then copy the contents of the stored one into it, and restart the httpd service.

<code>sudo service httpd restart</code>

**Auto Clear:** Will not clear until the httpd logs are rotated, which is usually every week. This alert uses mtail and if the mtail service is restarted, it will clear the alert. Warning that restarting mtail will reset all active alerts for that server.

<code>sudo service mtail restart</code>

Sidebar

Internal Errigal Collaboration Wiki

User Tools

Site Tools

Page Tools