Apache does not work after server 5.0.3 upgrade

I am having trouble getting basic services to work after the upgrade to Server 5.0.3 (what's new after a Server upgrade...).


This time it is Apache that does not want to work. The SSL server for the local server (the one that does the login for the users, the profilemanager etc) does not show up.


Reason seems to be that the proxy server that connects to the 'real' server has somehow lost its certifcates, as we can see in the settings in

/Library/Server/Web/Config/Proxy/apache_serviceproxy.conf.


Under


<VirtualHost *:443> and <VirtualHost *:8443>


I find:


SSLCertificateFile "PATH_PLACEHOLDER.cert.pem"

SSLCertificateKeyFile "PATH_PLACEHOLDER.key.pem"

SSLCertificateChainFile "PATH_PLACEHOLDER.chain.pem"


Does anyone know how to replace these things with sensible values?


Kind regards,

Johan Henselmans

Server-OTHER, OS X Server

Posted on Sep 17, 2015 2:11 AM

Reply
35 replies

Sep 18, 2015 11:04 AM in response to J Henselmans

I saw this on another thread and it might fix the problems that we are all having too. After doing the initial fix in the first post (editing the .conf file and replacing the placeholders with the path to the certs), which did fix my Websites issue, I still couldn't launch Profile Manager. I noticed after upgrading, I don't remember seeing the "Upgrading your Services" dialog we usually get when the Server app is updated. The suggestion on a different thread said to drag the Server app to the trash and wait for the dialog box that says it detected the Server app being removed. After that dialog, drag the Server app back to the Applications folder and then launch it. It will re-run the setup it normally does and upgrade the services. I did this and lo and behold, my profile manager is working again! This might also fix the Website issue too. I couldn't test it as I already did the other fix. Someone else who is having this issue want to test it? Hope this helps this issue!

Sep 18, 2015 2:30 PM in response to Lopezzi

My understanding so far, based on the Readme.txt in the apache config folder is that from now on:

- Ports 80 and 443 are "reserved" in the configuration for Apple services (including DeviceManager, Wiki,...)

- Any Virtual host is served from 34580/34543, and there are automatic proxy directives for each host from 80->127.0.0.1:34580 / 443->34543


There is a potential impact on the configuration/code of the virtual hosts (use x-forwarded-for insted of REMOTE_ADDR to get client IP, + any custom port forwarding/proxy you may use).


I think Apple did that to ensure that access to the Apple provided services is working whatever the configuration of your additional custom sites / vhosts.

Sep 21, 2015 4:30 AM in response to Bi-noix

Thanks for the explanation of the other prots. I found that after installing Server 5.0.3, my websites were also not available upon relaunch of Server app. I puzzled through these comments and finally just rebooted the server. That was all it took; my sites are restored. No messing around in Terminal required. Hope that helps someone out there. Apple might have mentioned that. - Joe

Sep 22, 2015 5:00 PM in response to Lopezzi

Hi,


Your lsof output indicates that the apache processes using the httpd_server_app.conf config were running, but the apache processes associated with apache_serviceproxy.conf were not working (these configs are in /Library/Server/Web/Config/apache2 and /Library/Server/Web/Config/Proxy respectively). Fixing the SSL cert problem in the apache_serviceproxy.conf file is probably what allowed those apache daemons to start working again.


By looking in either of those config files (or by looking at a process listing, e.g. pgrep -fla httpd) you can find the path to the error log file used by that apache instance. The error log is the best place to look when apache isn't doing what you expect. In the case of the broken service proxy (due for example to SSL cert issues) you would probably see repeating startup failures in that error.log, as apache starts, encounters the fatal error, logs it, and then immediately exits.


It is normal to have a bunch of IPv6 listeners 🙂


Cheers,

-dre

Sep 23, 2015 12:54 AM in response to J Henselmans

Hi, I have fast the same issue. I cannot reach my sites, they are all redirected to SLL versions which I doesn't have and then the system choose any one site which use SSL. I have 3 sites which use SSL, but they are separate with they own web address.

Please can anybody help me how to repair it or go back to the old version?

Im not so familiar with commands, so please when is possible to tell me exactly what I should do.


Thanks.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Apache does not work after server 5.0.3 upgrade

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.