Sentora Support Forums

Sentora Support Forums > Sentora Forum Archives > Sentora Public Support Forums v1.0.x > General Support Forum v1.0.x > SSL (Error code: ssl_error_rx_record_too_long)
Full Version: SSL (Error code: ssl_error_rx_record_too_long)
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Pages: 1 2

HeatherFeuer

03-10-2016, 12:46 AM
I think I royally messed up trying to set up letsencrypt and ssl on my server. I was able to enable mod_ssl and install letsencrypt. However, I didn't follow the Sentora instructions for obtaining a certificate -- I followed the instructions provided by letsencrypt using --apache instead of --standalone. Of course it didn't work. So THEN I went back to the Sentora documentation and tried to follow those instructions. I revoked the existing certificate and then reissued using cert-only --standalone. However it asked if I wanted to use the existing cert or revoke/renew or something like that so I chose the renew. Then I carefully followed all the instructions provided in the documentation.

Now NONE of my sites on the server work and neither will the Sentora panel. If I try http://larlee.uniquelyyourshosting.biz I get the following message:
Code:
Bad Request Your browser sent a request that this server could not understand. Reason: You're speaking plain HTTP to an SSL-enabled server port. Instead use the HTTPS scheme to access this URL, please. Apache Server at larlee.uniquelyyourshosting.biz Port 443

But if I try https://larlee.uniquelyyourshosting.biz, I get the following:



Code:
Secure Connection Failed An error occurred during a connection to larlee.uniquelyyourshosting.biz. SSL received a record that exceeded the maximum permissible length. (Error code: ssl_error_rx_record_too_long)    The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.    Please contact the website owners to inform them of this problem.



I am going to have a VERY upset client if I can't fix this! Port 443 is open. What have I done wrong and how can I fix this?  I need to secure the server only and allow domains to work with http. Later, I may add SSL for specific domains, but not now.

Thank you!!

TGates

03-10-2016, 01:01 AM
If you check (using SSH) /etc/sentora/configs/apache/httpd-vhosts.conf is there a LISTEN 443 near the top?
Or, just post up you httpd-vhosts.conf file so we can review it.

HeatherFeuer

03-10-2016, 01:54 AM
Here is the contents of the httpd-vhosts.conf file:

Code:
################################################################ # Apache VHOST configuration file # Automatically generated by Sentora 1.0.3 # Generated on: 09:00 9th Mar 2016 EST #==== YOU MUST NOT EDIT THIS FILE : IT WILL BE OVERWRITTEN ==== # Use Sentora Menu -> Admin -> Module Admin -> Apache config ################################################################ Listen 80 Listen 443 # Configuration for Sentora control panel. <VirtualHost *:443> ServerAdmin zadmin@localhost DocumentRoot "/etc/sentora/panel/" ServerName larlee.uniquelyyourshosting.biz ErrorLog "/var/sentora/logs/sentora-error.log" CustomLog "/var/sentora/logs/sentora-access.log" combined CustomLog "/var/sentora/logs/sentora-bandwidth.log" common AddType application/x-httpd-php .php <Directory "/etc/sentora/panel/"> Options +FollowSymLinks -Indexes    AllowOverride All    Require all granted </Directory> # Custom settings are loaded below this line (if any exist) SSLEngine on SSLProtocol ALL -SSLv2 -SSLv3 SSLHonorCipherOrder On SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS SSLCertificateFile /etc/letsencrypt/live/larlee.uniquelyyourshosting.biz/cert.pem SSLCertificateKeyFile /etc/letsencrypt/live/larlee.uniquelyyourshosting.biz/privkey.pem SSLCertificateChainFile /etc/letsencrypt/live/larlee.uniquelyyourshosting.biz/chain.pem # Keeping bellow for future upgrades. # Requires Apache >= 2.4 SSLCompression off </VirtualHost> ################################################################ # Sentora generated VHOST configurations below..... ################################################################ # DOMAIN: heatherf.selfip.com <virtualhost *:443> ServerName heatherf.selfip.com ServerAlias  www.heatherf.selfip.com ServerAdmin zadmin@localhost DocumentRoot "/var/sentora/hostdata/zadmin/public_html/heatherf_selfip_com" php_admin_value open_basedir "/var/sentora/hostdata/zadmin/public_html/heatherf_selfip_com:/var/sentora/temp/" php_admin_value suhosin.executor.func.blacklist "passthru, show_source, shell_exec, system, pcntl_exec, popen, pclose, proc_open, proc_nice, proc_terminate, proc_get_status, proc_close, leak, apache_child_terminate, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, escapeshellcmd, escapeshellarg, exec" ErrorLog "/var/sentora/logs/domains/zadmin/heatherf.selfip.com-error.log" CustomLog "/var/sentora/logs/domains/zadmin/heatherf.selfip.com-access.log" combined CustomLog "/var/sentora/logs/domains/zadmin/heatherf.selfip.com-bandwidth.log" common <Directory "/var/sentora/hostdata/zadmin/public_html/heatherf_selfip_com">  Options +FollowSymLinks -Indexes  AllowOverride All  Require all granted </Directory> AddType application/x-httpd-php .php3 .php ErrorDocument 510 /_errorpages/510.html ErrorDocument 403 /_errorpages/403.html ErrorDocument 500 /_errorpages/500.html ErrorDocument 404 /_errorpages/404.html DirectoryIndex index.html index.htm index.php index.asp index.aspx index.jsp index.jspa index.shtml index.shtm # Custom Global Settings (if any exist) # Custom VH settings (if any exist) </virtualhost> # END DOMAIN: heatherf.selfip.com ################################################################ # DOMAIN: looninfrance.com <virtualhost *:443> ServerName looninfrance.com ServerAlias  www.looninfrance.com ServerAdmin martin_mosley@me.com DocumentRoot "/var/sentora/hostdata/sylvester/public_html/looninfrance_com" php_admin_value open_basedir "/var/sentora/hostdata/sylvester/public_html/looninfrance_com:/var/sentora/temp/" php_admin_value suhosin.executor.func.blacklist "passthru, show_source, shell_exec, system, pcntl_exec, popen, pclose, proc_open, proc_nice, proc_terminate, proc_get_status, proc_close, leak, apache_child_terminate, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, escapeshellcmd, escapeshellarg, exec" ErrorLog "/var/sentora/logs/domains/sylvester/looninfrance.com-error.log" CustomLog "/var/sentora/logs/domains/sylvester/looninfrance.com-access.log" combined CustomLog "/var/sentora/logs/domains/sylvester/looninfrance.com-bandwidth.log" common <Directory "/var/sentora/hostdata/sylvester/public_html/looninfrance_com">  Options +FollowSymLinks -Indexes  AllowOverride All  Require all granted </Directory> AddType application/x-httpd-php .php3 .php ErrorDocument 510 /_errorpages/510.html ErrorDocument 403 /_errorpages/403.html ErrorDocument 500 /_errorpages/500.html ErrorDocument 404 /_errorpages/404.html DirectoryIndex index.html index.htm index.php index.asp index.aspx index.jsp index.jspa index.shtml index.shtm # Custom Global Settings (if any exist) # Custom VH settings (if any exist) </virtualhost> # END DOMAIN: looninfrance.com ################################################################ # DOMAIN: uniquelyyourshosting.biz <virtualhost *:443> ServerName uniquelyyourshosting.biz ServerAlias  www.uniquelyyourshosting.biz ServerAdmin zadmin@localhost DocumentRoot "/var/sentora/hostdata/zadmin/public_html/uniquelyyourshosting_biz" php_admin_value open_basedir "/var/sentora/hostdata/zadmin/public_html/uniquelyyourshosting_biz:/var/sentora/temp/" php_admin_value suhosin.executor.func.blacklist "passthru, show_source, shell_exec, system, pcntl_exec, popen, pclose, proc_open, proc_nice, proc_terminate, proc_get_status, proc_close, leak, apache_child_terminate, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, escapeshellcmd, escapeshellarg, exec" ErrorLog "/var/sentora/logs/domains/zadmin/uniquelyyourshosting.biz-error.log" CustomLog "/var/sentora/logs/domains/zadmin/uniquelyyourshosting.biz-access.log" combined CustomLog "/var/sentora/logs/domains/zadmin/uniquelyyourshosting.biz-bandwidth.log" common <Directory "/var/sentora/hostdata/zadmin/public_html/uniquelyyourshosting_biz">  Options +FollowSymLinks -Indexes  AllowOverride All  Require all granted </Directory> AddType application/x-httpd-php .php3 .php ErrorDocument 510 /_errorpages/510.html ErrorDocument 403 /_errorpages/403.html ErrorDocument 500 /_errorpages/500.html ErrorDocument 404 /_errorpages/404.html DirectoryIndex index.html index.htm index.php index.asp index.aspx index.jsp index.jspa index.shtml index.shtm # Custom Global Settings (if any exist) # Custom VH settings (if any exist) </virtualhost> # END DOMAIN: uniquelyyourshosting.biz ################################################################ # DOMAIN: uniquelyyourshosting.net <virtualhost *:443> ServerName uniquelyyourshosting.net ServerAlias  www.uniquelyyourshosting.net ServerAdmin zadmin@localhost DocumentRoot "/var/sentora/hostdata/zadmin/public_html/uniquelyyourshosting_net" php_admin_value open_basedir "/var/sentora/hostdata/zadmin/public_html/uniquelyyourshosting_net:/var/sentora/temp/" php_admin_value suhosin.executor.func.blacklist "passthru, show_source, shell_exec, system, pcntl_exec, popen, pclose, proc_open, proc_nice, proc_terminate, proc_get_status, proc_close, leak, apache_child_terminate, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, escapeshellcmd, escapeshellarg, exec" ErrorLog "/var/sentora/logs/domains/zadmin/uniquelyyourshosting.net-error.log" CustomLog "/var/sentora/logs/domains/zadmin/uniquelyyourshosting.net-access.log" combined CustomLog "/var/sentora/logs/domains/zadmin/uniquelyyourshosting.net-bandwidth.log" common <Directory "/var/sentora/hostdata/zadmin/public_html/uniquelyyourshosting_net">  Options +FollowSymLinks -Indexes  AllowOverride All  Require all granted </Directory> AddType application/x-httpd-php .php3 .php ErrorDocument 510 /_errorpages/510.html ErrorDocument 403 /_errorpages/403.html ErrorDocument 500 /_errorpages/500.html ErrorDocument 404 /_errorpages/404.html DirectoryIndex index.html index.htm index.php index.asp index.aspx index.jsp index.jspa index.shtml index.shtm # Custom Global Settings (if any exist) # Custom VH settings (if any exist) </virtualhost> # END DOMAIN: uniquelyyourshosting.net ################################################################ # DOMAIN: mosleyfamilies.net <virtualhost *:443> ServerName mosleyfamilies.net ServerAlias  www.mosleyfamilies.net ServerAdmin martin_mosley@me.com DocumentRoot "/var/sentora/hostdata/sylvester/public_html/mosleyfamilies_net" php_admin_value open_basedir "/var/sentora/hostdata/sylvester/public_html/mosleyfamilies_net:/var/sentora/temp/" php_admin_value suhosin.executor.func.blacklist "passthru, show_source, shell_exec, system, pcntl_exec, popen, pclose, proc_open, proc_nice, proc_terminate, proc_get_status, proc_close, leak, apache_child_terminate, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, escapeshellcmd, escapeshellarg, exec" ErrorLog "/var/sentora/logs/domains/sylvester/mosleyfamilies.net-error.log" CustomLog "/var/sentora/logs/domains/sylvester/mosleyfamilies.net-access.log" combined CustomLog "/var/sentora/logs/domains/sylvester/mosleyfamilies.net-bandwidth.log" common <Directory "/var/sentora/hostdata/sylvester/public_html/mosleyfamilies_net">  Options +FollowSymLinks -Indexes  AllowOverride All  Require all granted </Directory> AddType application/x-httpd-php .php3 .php ErrorDocument 510 /_errorpages/510.html ErrorDocument 403 /_errorpages/403.html ErrorDocument 500 /_errorpages/500.html ErrorDocument 404 /_errorpages/404.html DirectoryIndex index.html index.htm index.php index.asp index.aspx index.jsp index.jspa index.shtml index.shtm # Custom Global Settings (if any exist) # Custom VH settings (if any exist) </virtualhost> # END DOMAIN: mosleyfamilies.net ################################################################ # DOMAIN: mosleyfamilies.com <virtualhost *:443> ServerName mosleyfamilies.com ServerAlias www.mosleyfamilies.com ServerAdmin martin_mosley@me.com DocumentRoot "/etc/sentora/panel/etc/static/parking/" <Directory "/etc/sentora/panel/etc/static/parking/">  Options +FollowSymLinks -Indexes  AllowOverride All  Require all granted </Directory> AddType application/x-httpd-php .php3 .php DirectoryIndex index.html index.htm index.php index.asp index.aspx index.jsp index.jspa index.shtml index.shtm # Custom Global Settings (if any exist) # Custom VH settings (if any exist) </virtualhost> # END DOMAIN: mosleyfamilies.com ################################################################ # DOMAIN: bramptonoldandnew.com <virtualhost *:443> ServerName bramptonoldandnew.com ServerAlias  www.bramptonoldandnew.com ServerAdmin martin_mosley@me.com DocumentRoot "/var/sentora/hostdata/sylvester/public_html/bramptonoldandnew_com" php_admin_value open_basedir "/var/sentora/hostdata/sylvester/public_html/bramptonoldandnew_com:/var/sentora/temp/" php_admin_value suhosin.executor.func.blacklist "passthru, show_source, shell_exec, system, pcntl_exec, popen, pclose, proc_open, proc_nice, proc_terminate, proc_get_status, proc_close, leak, apache_child_terminate, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, escapeshellcmd, escapeshellarg, exec" ErrorLog "/var/sentora/logs/domains/sylvester/bramptonoldandnew.com-error.log" CustomLog "/var/sentora/logs/domains/sylvester/bramptonoldandnew.com-access.log" combined CustomLog "/var/sentora/logs/domains/sylvester/bramptonoldandnew.com-bandwidth.log" common <Directory "/var/sentora/hostdata/sylvester/public_html/bramptonoldandnew_com">  Options +FollowSymLinks -Indexes  AllowOverride All  Require all granted </Directory> AddType application/x-httpd-php .php3 .php ErrorDocument 510 /_errorpages/510.html ErrorDocument 403 /_errorpages/403.html ErrorDocument 500 /_errorpages/500.html ErrorDocument 404 /_errorpages/404.html DirectoryIndex index.html index.htm index.php index.asp index.aspx index.jsp index.jspa index.shtml index.shtm # Custom Global Settings (if any exist) # Custom VH settings (if any exist) </virtualhost> # END DOMAIN: bramptonoldandnew.com ################################################################ # DOMAIN: derbyshirehills.com <virtualhost *:443> ServerName derbyshirehills.com ServerAlias  www.derbyshirehills.com ServerAdmin martin_mosley@me.com DocumentRoot "/var/sentora/hostdata/sylvester/public_html/derbyshirehills_com" php_admin_value open_basedir "/var/sentora/hostdata/sylvester/public_html/derbyshirehills_com:/var/sentora/temp/" php_admin_value suhosin.executor.func.blacklist "passthru, show_source, shell_exec, system, pcntl_exec, popen, pclose, proc_open, proc_nice, proc_terminate, proc_get_status, proc_close, leak, apache_child_terminate, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, escapeshellcmd, escapeshellarg, exec" ErrorLog "/var/sentora/logs/domains/sylvester/derbyshirehills.com-error.log" CustomLog "/var/sentora/logs/domains/sylvester/derbyshirehills.com-access.log" combined CustomLog "/var/sentora/logs/domains/sylvester/derbyshirehills.com-bandwidth.log" common <Directory "/var/sentora/hostdata/sylvester/public_html/derbyshirehills_com">  Options +FollowSymLinks -Indexes  AllowOverride All  Require all granted </Directory> AddType application/x-httpd-php .php3 .php ErrorDocument 510 /_errorpages/510.html ErrorDocument 403 /_errorpages/403.html ErrorDocument 500 /_errorpages/500.html ErrorDocument 404 /_errorpages/404.html DirectoryIndex index.html index.htm index.php index.asp index.aspx index.jsp index.jspa index.shtml index.shtm # Custom Global Settings (if any exist) # Custom VH settings (if any exist) </virtualhost> # END DOMAIN: derbyshirehills.com ################################################################ # DOMAIN: larleegenealogy.org <virtualhost *:443> ServerName larleegenealogy.org ServerAlias  www.larleegenealogy.org ServerAdmin zadmin@localhost DocumentRoot "/var/sentora/hostdata/zadmin/public_html/larleegenealogy_org" php_admin_value open_basedir "/var/sentora/hostdata/zadmin/public_html/larleegenealogy_org:/var/sentora/temp/" php_admin_value suhosin.executor.func.blacklist "passthru, show_source, shell_exec, system, pcntl_exec, popen, pclose, proc_open, proc_nice, proc_terminate, proc_get_status, proc_close, leak, apache_child_terminate, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, escapeshellcmd, escapeshellarg, exec" ErrorLog "/var/sentora/logs/domains/zadmin/larleegenealogy.org-error.log" CustomLog "/var/sentora/logs/domains/zadmin/larleegenealogy.org-access.log" combined CustomLog "/var/sentora/logs/domains/zadmin/larleegenealogy.org-bandwidth.log" common <Directory "/var/sentora/hostdata/zadmin/public_html/larleegenealogy_org">  Options +FollowSymLinks -Indexes  AllowOverride All  Require all granted </Directory> AddType application/x-httpd-php .php3 .php ErrorDocument 510 /_errorpages/510.html ErrorDocument 403 /_errorpages/403.html ErrorDocument 500 /_errorpages/500.html ErrorDocument 404 /_errorpages/404.html DirectoryIndex index.html index.htm index.php index.asp index.aspx index.jsp index.jspa index.shtml index.shtm # Custom Global Settings (if any exist) # Custom VH settings (if any exist) </virtualhost> # END DOMAIN: larleegenealogy.org ################################################################

TGates

03-10-2016, 02:54 AM
It looks like you changed the default apache port, not the individual domain or Sentora Login port...
All of you vhosts have:
Code:
<virtualhost *:443>

HeatherFeuer

03-10-2016, 03:09 AM
So I went in and edited the file changing all the
Code:
<virtualhost *:443>

to
Code:
<virtualhost *:80>

Now I can't restart apache. I get a message
Code:
(98) Address already in use: AH00072: make_sock: could not bind to address [::]:443

TGates

03-10-2016, 03:30 AM
change them all except the first one for sentora login because that one is currently loading the SSL certificate OR also remove the SSL custom vhost entry for the panel login. this should get you back online so you can log into your panel and undo your changes to the apache port override.

HeatherFeuer

03-10-2016, 03:49 AM
THANK YOU! I am now able to log into the control panel! I don't understand what happened. As instructed in the documentation for setting up SSL using letsencrypt, I made the following change to the Global Sentora Entry:

Code:
SSLEngine on SSLProtocol ALL -SSLv2 -SSLv3 SSLHonorCipherOrder On SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS SSLCertificateFile /etc/letsencrypt/live/larlee.uniquelyyourshosting.biz/cert.pem SSLCertificateKeyFile /etc/letsencrypt/live/larlee.uniquelyyourshosting.biz/privkey.pem SSLCertificateChainFile /etc/letsencrypt/live/larlee.uniquelyyourshosting.biz/chain.pem # Keeping bellow for future upgrades. # Requires Apache >= 2.4 SSLCompression off
I made NO changes to Global VHost Entry, or to any of the individual vhosts. I have now deleted the above and changed the port back to 80 and saved changes.

Now, what do I need to do to get SSL to work? I really would like to have my server secured.

HeatherFeuer

03-10-2016, 04:06 AM
AACK! I've lost all the stuff in the control panel! When I log into the server, this is what I see -- see attached image.
[attachment=416]

bbspike

03-10-2016, 04:19 AM
(03-10-2016, 04:06 AM)HeatherFeuer Wrote: [ -> ]AACK! I've lost all the stuff in the control panel! When I log into the server, this is what I see -- see attached image.

Probaly this:

http://forums.sentora.org/showthread.php?tid=426

TGates

03-10-2016, 04:21 AM
http://forums.sentora.org/showthread.php?tid=426
As I mentioned, you changed the Apache port, not the Sentora port. (In phpMyAdmin sentora_core > x_settings line 121 sentora_port). Re-add the SSL stuff in the Sentora Global Entry and edit the above line to 443 and do a full daemon run.
Code:
php -q /etc/sentora/panel/bin/daemon.php
Pages: 1 2
Sentora Support Forums > Sentora Forum Archives > Sentora Public Support Forums v1.0.x > General Support Forum v1.0.x > SSL (Error code: ssl_error_rx_record_too_long)