DLm Console certificate install fails, unable to restart apache
Symptoms
Note: This KB has been reviewed and is now Obsolete.
Please Do NOT use this resolution on any of the Disk Library Products mentioned. The resolution removes needed Security checking for the DLm .
We are marking this copy OBSOLETE, because older hardcopies may be available, or CE's may remember this incorrect resolution.
During the upgrade of a DLm Console site certificate, How to update DLm site certificates the installation of the certificate fails attempting to restart the apache web server:
This condition renders the DLm Console inaccessible, even from the VTE desktop.
vte2:/tmp/csr # rcapache2 restart
httpd2-prefork: Could not reliably determine the server's fully qualified domain name, using 192.168.100.20 for ServerName
Syntax OK
Shutting down httpd2 (waiting for all children to terminate) done
Starting httpd2 (prefork) httpd2-prefork: Could not reliably determine the server's fully qualified domain name, using 192.168.100.20 for ServerName
startproc: exit status of parent of /usr/sbin/httpd2-prefork: 1
failed
From the /var/log/apache2/error_log
[Wed Sep 13 14:39:45 2017] [error] Unable to verify certificate 'DLmServerCert'. Add "NSSEnforceValidCerts off" to nss.conf so the server can start until the problem can be resolved.
[Wed Sep 13 14:39:45 2017] [error] Unable to verify certificate 'DLmServerCert'. Add "NSSEnforceValidCerts off" to nss.conf so the server can start until the problem can be resolved.
[Wed Sep 13 14:39:45 2017] [error] SSL Library Error: -8179 Certificate is signed by an unknown issuer
[Wed Sep 13 14:39:45 2017] [error] Unable to verify certificate 'DLmServerCert'. Add "NSSEnforceValidCerts off" to nss.conf so the server can start until the problem can be resolved.
[Wed Sep 13 14:39:45 2017] [error] SSL Library Error: -8179 Certificate is signed by an unknown issuer
[Wed Sep 13 14:39:45 2017] [error] Unable to verify certificate 'DLmServerCert'. Add "NSSEnforceValidCerts off" to nss.conf so the server can start until the problem can be resolved.
[Wed Sep 13 14:39:46 2017] [error] SSL Library Error: -8179 Certificate is signed by an unknown issuer
[Wed Sep 13 14:39:46 2017] [error] SSL Library Error: -8179 Certificate is signed by an unknown issuer
[Wed Sep 13 14:39:46 2017] [error] SSL Library Error: -8179 Certificate is signed by an unknown issuer
[Wed Sep 13 14:39:46 2017] [error] Unable to verify certificate 'DLmServerCert'. Add "NSSEnforceValidCerts off" to nss.conf so the server can start until the problem can be resolved.
[Wed Sep 13 14:39:46 2017] [error] Unable to verify certificate 'DLmServerCert'. Add "NSSEnforceValidCerts off" to nss.conf so the server can start until the problem can be resolved.
[Wed Sep 13 14:39:46 2017] [error] Unable to verify certificate 'DLmServerCert'. Add "NSSEnforceValidCerts off" to nss.conf so the server can start until the problem can be resolved.Cause
Resolution
Please Do NOT use this resolution on any of the Disk Library Products mentioned. The resolution removes needed Security checking for the DLm .
We are marking this copy OBSOLETE, because older hardcopies may be available, or CE's may remember this incorrect resolution.