sudo certbot certonly --apache -d site.ru -d www.site.runetstat -plutn выдает для 443 только0.0.0.0:443 openssl s_client -connect вашадрес:443 пишет: socket: Bad file descriptor
connect:errno=9$ systemctl status httpd.servicehttpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vendor preset: disabled)
Active: active (running) since Пн 2021-02-15 11:46:18 MSK; 45s ago
Docs: man:httpd(8)
man:apachectl(8)
Process: 17192 ExecStop=/bin/kill -WINCH ${MAINPID} (code=exited, status=0/SUCCESS)
Process: 11147 ExecReload=/usr/sbin/httpd $OPTIONS -k graceful (code=exited, status=0/SUCCESS)
Main PID: 17196 (httpd)
Status: "Total requests: 4; Current requests/sec: 0.1; Current traffic: 512 B/sec"
CGroup: /system.slice/httpd.service
├─17196 /usr/sbin/httpd -DFOREGROUND
├─17197 /usr/sbin/httpd -DFOREGROUND
├─17198 /usr/sbin/httpd -DFOREGROUND
├─17199 /usr/sbin/httpd -DFOREGROUND
├─17200 /usr/sbin/httpd -DFOREGROUND
├─17201 /usr/sbin/httpd -DFOREGROUND
└─17203 /usr/sbin/httpd -DFOREGROUND
фев 15 11:46:18 centos02 systemd[1]: Stopped The Apache HTTP Server.
фев 15 11:46:18 centos02 systemd[1]: Starting The Apache HTTP Server...
фев 15 11:46:18 centos02 systemd[1]: Started The Apache HTTP Server.VirtualHost configuration:
*:443 site.ru (/etc/httpd/conf/httpd.conf:384)
*:80 is a NameVirtualHost
default server shop.local (/etc/httpd/conf/httpd.conf:368)
port 80 namevhost shop.local (/etc/httpd/conf/httpd.conf:368)
alias shop.site.ru
port 80 namevhost stolica5.local (/etc/httpd/conf/httpd.conf:376)
alias www.site.ru
alias site.ru
port 80 namevhost stolica3.local (/etc/httpd/conf/httpd.conf:403)
port 80 namevhost mirstartup.ru (/etc/httpd/conf/httpd.conf:411)
alias www.mirstartup.ru
alias mirstartup.local
ServerRoot: "/etc/httpd"
Main DocumentRoot: "/var/www/html"
Main ErrorLog: "/etc/httpd/logs/error_log"
Mutex default: dir="/run/httpd/" mechanism=default
Mutex mpm-accept: using_defaults
Mutex authdigest-opaque: using_defaults
Mutex proxy-balancer-shm: using_defaults
Mutex rewrite-map: using_defaults
Mutex authdigest-client: using_defaults
Mutex ssl-stapling: using_defaults
Mutex proxy: using_defaults
Mutex authn-socache: using_defaults
Mutex ssl-cache: using_defaults
PidFile: "/run/httpd/httpd.pid"
Define: _RH_HAS_HTTPPROTOCOLOPTIONS
Define: DUMP_VHOSTS
Define: DUMP_RUN_CFG
User: name="apache" id=48 not_used
Group: name="apache" id=48 not_usedнужно удалить или ssl.conf или конфигурацию HTTPS из основного конфига
<VirtualHost *:443>
ServerName site.ru
ServerAlias www.site.ru site.ru
DocumentRoot /var/www/newstolica
ErrorLog /var/log/httpd/newstolica-error.log
CustomLog /var/log/httpd/newstolica-access.log combined
SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/stolica.ooo/cert.pem
SSLCertificateChainFile /etc/letsencrypt/live/stolica.ooo/chain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/stolica.ooo/privkey.pem
</VirtualHost>ServerRoot "/etc/httpd"
#Listen 12.34.56.78:80
Listen 80
Include conf.modules.d/*.conf
User apache
Group apache
ServerAdmin root@localhost
ServerName site.ru:80
<Directory />
AllowOverride none
Require all denied
</Directory>
DocumentRoot "/var/www/html"
<Directory "/var/www">
# AllowOverride All
# Allow open access:
# Require all granted
AllowOverride None
# Allow open access:
Require all granted
</Directory>
# Further relax access to the default document root:
<Directory "/var/www">
Options Indexes FollowSymLinks
AllowOverride All
Require all granted
</Directory>
<IfModule dir_module>
DirectoryIndex index.html
</IfModule>
<Files ".ht*">
Require all denied
</Files>
ErrorLog "logs/error_log"
LogLevel warn
<IfModule log_config_module>
#
# The following directives define some format nicknames for use with
# a CustomLog directive (see below).
#
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
<IfModule logio_module>
# You need to enable mod_logio.c to use %I and %O
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
</IfModule>
CustomLog "logs/access_log" combined
</IfModule>
<IfModule alias_module>
ScriptAlias /cgi-bin/ "/var/www/cgi-bin/"
</IfModule>
<Directory "/var/www/cgi-bin">
AllowOverride None
Options None
Require all granted
</Directory>
<IfModule mime_module>
TypesConfig /etc/mime.types
AddType application/x-compress .Z
AddType application/x-gzip .gz .tgz
AddType text/html .shtml
AddOutputFilter INCLUDES .shtml
</IfModule>
AddDefaultCharset UTF-8
<IfModule mime_magic_module>
MIMEMagicFile conf/magic
</IfModule>
EnableSendfile on
IncludeOptional conf.d/*.conf
<VirtualHost *:80>
ServerName site.ru
ServerAlias www.site.ru site.ru
DocumentRoot /var/www/newstolica
ErrorLog /var/log/httpd/newstolica-error.log
CustomLog /var/log/httpd/newstolica-access.log combined
</VirtualHost>
<VirtualHost *:443>
ServerName site.ru
ServerAlias www.site.ru site.ru
DocumentRoot /var/www/newstolica
ErrorLog /var/log/httpd/newstolica-error.log
CustomLog /var/log/httpd/newstolica-access.log combined
SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/site.ru/cert.pem
SSLCertificateChainFile /etc/letsencrypt/live/site.ru/chain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/site.ru/privkey.pem
</VirtualHost>Listen 443 https
SSLPassPhraseDialog exec:/usr/libexec/httpd-ssl-pass-dialog
SSLSessionCache shmcb:/run/httpd/sslcache(512000)
SSLSessionCacheTimeout 300
SSLRandomSeed startup file:/dev/urandom 256
SSLRandomSeed connect builtin
SSLCryptoDevice builtin
<VirtualHost *:443>
ServerName site.ru
ServerAlias www.site.ru site.ru
DocumentRoot /var/www/newstolica
ErrorLog /var/log/httpd/newstolica-error.log
CustomLog /var/log/httpd/newstolica-access.log combined
SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/stolica.ooo/cert.pem
SSLCertificateChainFile /etc/letsencrypt/live/stolica.ooo/chain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/stolica.ooo/privkey.pem
</VirtualHost>
<VirtualHost _default_:443>
ErrorLog logs/ssl_error_log
TransferLog logs/ssl_access_log
LogLevel warn
SSLEngine on
SSLProtocol all -SSLv2 -SSLv3
SSLCipherSuite HIGH:3DES:!aNULL:!MD5:!SEED:!IDEA
SSLCertificateFile /etc/pki/tls/certs/localhost.crt
SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
<Files ~ "\.(cgi|shtml|phtml|php3?)$">
SSLOptions +StdEnvVars
</Files>
<Directory "/var/www/cgi-bin">
SSLOptions +StdEnvVars
</Directory>
BrowserMatch "MSIE [2-5]" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
CustomLog logs/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>VirtualHost configuration:
*:443 is a NameVirtualHost
default server stolica.ooo (/etc/httpd/conf.d/ssl.conf:56)
port 443 namevhost stolica.ooo (/etc/httpd/conf.d/ssl.conf:56)
alias www.site.ru
alias site..ru
port 443 namevhost site.ru (/etc/httpd/conf.d/ssl.conf:68)
port 443 namevhost site.ru (/etc/httpd/conf/httpd.conf:385)
alias www.site.ru
alias site.ru
*:80 is a NameVirtualHost
default server shop.local (/etc/httpd/conf/httpd.conf:368)
port 80 namevhost shop.local (/etc/httpd/conf/httpd.conf:368)
alias shop.site.ru
port 80 namevhost site.local (/etc/httpd/conf/httpd.conf:376)
alias www.site.ru
alias site.ru
ServerRoot: "/etc/httpd"
Main DocumentRoot: "/var/www/html"
Main ErrorLog: "/etc/httpd/logs/error_log"
Mutex authdigest-client: using_defaults
Mutex ssl-stapling: using_defaults
Mutex proxy: using_defaults
Mutex authn-socache: using_defaults
Mutex ssl-cache: using_defaults
Mutex default: dir="/run/httpd/" mechanism=default
Mutex mpm-accept: using_defaults
Mutex authdigest-opaque: using_defaults
Mutex proxy-balancer-shm: using_defaults
Mutex rewrite-map: using_defaults
PidFile: "/run/httpd/httpd.pid"
Define: _RH_HAS_HTTPPROTOCOLOPTIONS
Define: DUMP_VHOSTS
Define: DUMP_RUN_CFG
User: name="apache" id=48 not_used
Group: name="apache" id=48 not_used
1. в
openssl x509 -in cert.pem -textнашел только следующие связанные с именем строки2. Да примерно так. Приведу полный код виртуалхост для 443
3. Процесс httpd
4. адрес я думал надо домен указать))) попробовал как вы сказали
openssl s_client -connect 127.0.0.1:443вот что получилось:Может какой нибудь проброс портов настроен на сервере? Не знаю как это посмотреть. Просто не я его настраивал, с ним может быть все что угодно. В начале забыл указать, что ос Centos 7. Может еще с файерволом что, но вроде 443 открыл порт.