[Info-vax] Compaq Secure Web Server (Apache) problem
Jairo Alves
jairo.ptbr at gmail.com
Fri Oct 16 07:36:54 EDT 2020
> The HPE mod_ssl wasn't tied to the installed SSL kit, per what I was
> told by then-HP an aeon or two ago.
Yes, that seems to be spot on. Here's verbatim what the VSI engineer told me:
CSWS V2.2 UPDATE 2 kit did not utilize SSL1. It was linked against SSL V1.4-467 / OpenSSL V0.9.8w.
The module that shipped with CSWS V2.2 UPDATE 2, is the MOD_SSL.EXE V2.2.
>
> It's possible that some of the SSL logical names are getting tangled.
>
Most probably spot on again, see below.
.
Now, the problem was solved. Here's all the things I'd like to leave
here to assist anyone having this issue in the future (mostly compiled VSI support suggestions):
1) Check APACHE$WWW user, premissions, privileges, etc.
2) Check APACHE$COMMON:[MODULES] for ownership and file protection anomalies.
3) In case any module is being rejected, check its .EXE checksum, for example, in my case it was the MOD_SSL.EXE
$ checksum/algo=md5 mod_ssl.exe
$ show sym checksum$checksum
CHECKSUM$CHECKSUM = "C5ABD27B597AE9C5A0DF5E884467D6FB"
Also (optionally) check the link date and other characteristics of the file:
$ show image APACHE$COMMON:[MODULES]mod_ssl.exe
4) Check that no duplicated modules exist on APACHE$SPECIFIC:[modules] that also exist on APACHE:COMMON:[modules]
5) If you changed anything, like copying a new module image, as I did copy a fresh MOD_SSL.EXE
adjust the protection of on APACHE$COMMON:[MODULES] with /prot=(S:RWED,O:RWED,G:RE,W:RE).
Also change ownership to APACHE$WWW if needed.
6) In my case, it was recommended to run
$ @SYS$MANAGER:APACHE$LOGICALS "" "" UNINSTALL
and then
$ @SYS$MANAGER:APACHE$LOGICALS "" "" INSTALL
7) If all went well, by now Apache may be ok again.
$ @SYS$STARTUP:APACHE$STARTUP.COM
In my case, I suppose some Apache logicals got confused,
also, disk quotas were over, but as the server do not need to create a log file except at startup
maybe it just stopped writing log, may some other behaviour, it's not clear.
Thanks everyone that helped over here too.
More information about the Info-vax
mailing list