View previous topic :: View next topic |
Author |
Message |
LIsLinuxIsSogood Veteran
Joined: 13 Feb 2016 Posts: 1186
|
Posted: Sat Jun 08, 2024 6:54 am Post subject: "SSL cert does not exist or is empty" |
|
|
Does anyone know the next steps to take after an install of Apache2 server to make sure that SSL is configured with a cert? My systemd service does not start and I believe because SSL option is turned on, but there is no cert.
Please help, I am setting up a web server for the first time and I could use the help. |
|
Back to top |
|
|
szatox Advocate
Joined: 27 Aug 2013 Posts: 3439
|
Posted: Sat Jun 08, 2024 7:13 am Post subject: |
|
|
Of course there is no certificate, you must first obtain one before you can link into apache configs.
Fortunately, letsencrypt exists and provides this service for free. I ended up using dehydrated as my interface to LE's API (it's very scriptable, which fits my setup nicely), but I think certbot is the easiest way to get started.
Both tools are in portage, and there are guides for quickstart with certbot online. So.. yeah, now you know what to look for _________________ Make Computing Fun Again |
|
Back to top |
|
|
LIsLinuxIsSogood Veteran
Joined: 13 Feb 2016 Posts: 1186
|
Posted: Sat Jun 08, 2024 7:22 am Post subject: |
|
|
Ok, thank you. I'm not really sure that I even need the https, I assume that for http I would just reinstall the package with USE flag for ssl turned off. Would that take care of that? |
|
Back to top |
|
|
szatox Advocate
Joined: 27 Aug 2013 Posts: 3439
|
Posted: Sat Jun 08, 2024 7:42 am Post subject: |
|
|
Probably.
Or you can just remove it from configs manually. I don't use gentoo configs for apache, I get where the idea of tying features to use flags came from, but I like debian style more. (And also I terminate ssl on haproxy in front of apache but that's a different matter) _________________ Make Computing Fun Again |
|
Back to top |
|
|
LIsLinuxIsSogood Veteran
Joined: 13 Feb 2016 Posts: 1186
|
Posted: Sat Jun 08, 2024 8:06 am Post subject: |
|
|
Got it, I removed it from the config file and now it works.
Thanks for the advice. |
|
Back to top |
|
|
|