i have wrong procedure doing to enable my SSL/HTTPS services in my vps.
First i noticed the HTTPS in my services is not running, now i'm looking to google, i found openssl website, then download the latest version and install it into my server and following the instructions, after that, i try to recompile the apache becuase i have a new updates, i found an error ssl and cannot continue to compile because of my last installation i suspect.
- Apache version : 2.2.21
- operating system : MAC OS Lion Server
- mod_ssl : 2.2.21
I have a certain area on a homepage which is protected by an .htaccess file. The code of the .htaccess file is the following:
Code:
AuthType Digest
AuthName "Password Required"
Options +Indexes
# code for HTTPS
RewriteEngine On
RewriteCond
%{SERVER_PORT} !^443$
RewriteRule (.*) https://%{SERVER_NAME}%{REQUEST_URI}
Require valid-user
Usually everything has been working fine with this .htaccess-file until today. There hasn't been any change on the system.
If you click on the hyperlink to the restricted area the login window appears where you need to type in your username and a password. After typing in these data the following message appears in the browser:
500 Internal Server Error
The server encountered an internal error or
misconfigruation and was unable to complete your request. (…)
The apache error log file contains the following message:
Request exceeded the limit of 10 sub request nesting levels due to probable configuration error.
Use 'LimitInternalRecursion' to increase the limit if necessary.
Use 'LogLevel debug' to get a backtrace.
The increase of the LimitInternalRecursion does not solve the problem. So I switched the LogLevel in the httpd.conf file from warn to debug and looked again on the entries of the error log.
The following appeared (I have replaced ip addresses, usernames and URL by xyz or <URL>) :
Code:
[error] [client xyz]
mod_digest_apple: Client is using a nonce not issued by this server for this context:/rb/Vorlesung/WS12/Downloads/, referer:
http:<URL>
[Code] ....
Now I'm looking at our last cpu_exceeded_logs file and there is long list point to "/ramdisk/bin/php5" which I don't know much about it or don't know how to deal with that. would you please tell what exactly it means and what should I do to avoid it?
Example of my last cpu_exceeded_logs file:
Quote:
Mon Jul 6 00:34:50 2009: used 0.77 seconds of cpu time for /ramdisk/bin/php5
Mon Jul 6 00:34:50 2009: used 0.50 seconds of cpu time for /ramdisk/bin/php5
Mon Jul 6 00:34:50 2009: used 0.80 seconds of cpu time for /ramdisk/bin/php5
Mon Jul 6 00:34:50 2009: used 0.55 seconds of cpu time for /ramdisk/bin/php5
I can't find the cause of problem when look at /ramdisk/bin/php5.
I hosted one aardvark topsite @ PluginSpace.com which consist of high traffics (3500+ unique visitors/day). I'm facing max_users_connection for quite number of times and I also have complain to my hosting but I still get no luck, they fix my problem for a short period and the problem appear again after some time.
I rent myself a dedicated server with 320GB Space and 3400GB Bandwith and 2GB RAM. Everytime I manage to get a lot of traffics to my topsite, maybe 100+ online users at a time, tracked by freeonlineusers[dot]com. I'll got these errors. Can anyone tell me what can I do? Can anyone tell me more about how much visitors can a normal dedicated server handle? Is it my script problem or my server problem?
(ERROR WILL POST IN NEXT POST)
can the dedicated server stand many visitors or suppose a normal dedicated server can handle so many visitors or my hosting maintenance is poor?
I have a custom software that runs it's own webserver. I then found instructions on how to use apache2 as a proxy that will enable ssl for that site. (long story short, my custom software doesn't support ssl and it's not an option)
View 2 Replies View RelatedI just installed a fresh new server with CSF
Soon I find out that my ping keeps dropping. The server was smoothly running, SSH is smooth, Website are loading fine, except I cannot ping my server. I disable SELINUX completely and it still doesn't help.
When I disable CSF, my server ping are responding back!
So I remove CSF installation and reinstall CSF, the same problem appear
How can I solve this issue?
My kernel is 2.6.18-92.1.6.el5PAE running on latest version of cPanel on CentOS 5.1
I'm having a very intermittent PHP error on my dual processor CPanel/CentOS 4x box. And it happens randomly across several domains, so I know it's not a single domain problem.
I can never figure out what causes it. 95% of the time the sites work fine (no error), but ever so often my php includes give me something like this:
PHP randomly fails to find the directory/file. And it requires an Apache restart to make it work smoothly again. It will be fine for a few days, but then it happens again. So I suppose it may not be directly related to PHP, but more of a server/apache issue? Any ideas at all?
I´ve read that a whole https website might be better for SEO than just a mixed version. So I want to change the whole website to https.
We are using Plesk 12 on Win 2008 R2.
One Website is using DotNetNuke 7.3.2.
How can I automatically set the whole website to https?
What happens to the users that just type domainname.com without http or https.?
What is the right search engine friendly technique to permanently redirect to the https version even when the user is not using the application protocol prefix http/https?
Where can I do the setup in Plesk 12 fro Windows?
Are their any other drawbacks that I have to think over before I do the changes?
Ever since Monday morning, my site has had problems because the server at my host is under attack.
Most of Monday my site was down. Then Monday late afternoon, it came back...I thought. The forum is up and running, but the rest of the site, built on WordPress, is screwy.
Most of the plugins aren't working because of inability to connect with the database.
I can't log in to my cPanel at all and haven't been able to since Sunday.
This is the first time I've experienced anything like this, lasting this long.
It has me wondering if I should start considering a new host. I have loved their service, especially their speedy support (native English speaking to boot) so I hate to leave but I'm not sure if their service is going a little downhill or not.
Which command do we type to see what is causing a high server load?
I've restarted the VPS numerous of times, and I wish to found out the problem
For the past few days, one of the server is causing a bandwidth utilization surge for the entire rack on almost daily basis. It happen for a few minutes and it went off then it will be the same thing again the next day. When the surge is happening, most of the servers on the same segment will be inaccessible for the few minutes.
The bandwidth utilization graph for my rack is recording an abnormal surge from (6mbps --> 90mbps) for the few minutes. My MRTG is showing 2 of the Plesk servers giving the problem but the NOC guys said it the Cpanel that causing the problem.
I tried logging in to both servers but could not find what's the cause for this.
It's been a while since I've posted in this area of the forum, but was just wondering if by now someone or some company has developed a script/software that you can install on your server that will tell you the exact area where the high CPU load is coming from, such as from someone sending email, a certain users account, and etc?
Most times, you have to be mointoring your server at the time of the high load to be exactly sure of what is causing the high load, so, I'm talking about something that will email you right on the spot of the high load in case you are away and will know what caused it.
Most I've seen only tell you that you have a high load, but don't tell you what exactly caused it.
I have set up an Apache web server that has ssl enabled. If I go to https://myserver.com I get the 'it works!' page and the certificate is valid and trusted. If I go to https://myserver.com/myapp that also works (it's an Oracle weblogic deployed java app that I'm fronting with Apache).
I would like to configure Apache so that when a user goes to simply https://myserver.com it automatically directs them to https://myserver.com/myapp rather than showing the 'It works!' page. I have read some documentation and experimented with setting a redirect via the https.conf file and even the ssl.conf file but nothing seems to work. I either get a 404 or simply the 'It works! page.
My host has suspended saying my server was overloaded and sent me a log to my mail and i don't have access to cpanel also. I just have a wordpress blog and when i had contacted host through chat they told some ip might be causing this issue so ban that ip when ur account is unsuspended.
But i am really unaware of how to find which ip is causing this issue as i have little knowledge on analysing logs. Any help regarding this is highly appreciated and please leave your suggestions for me.
I am pasting the logs that were sent by host to me in mail:
Srv PID Acc M CPU SS Req Conn Child Slot Host VHost Request
0-5 22363 32/49/49 K 5.76 2 1695 583.9 0.82 0.82 76.227.169.69
GET /index.php/181/ HTTP/1.1
1-5 22365 81/81/81 W 42.69 3 0 3060.8 2.99 2.99 76.183.97.67
GET /index.php/181/ HTTP/1.1
2-5 22367 87/87/87 K 45.81 2 991 3287.3 3.21 3.21 76.183.97.67
GET /index.php/181/ HTTP/1.1
3-5 22369 2/41/41 K 2.07 8 0 15.3 0.12 0.12 67.87.117.129
GET /wp-content/plugins/postratings/images/stars/rating_half.gi
6-5 22387 0/13/13 W 2.21 57 0 0.0 0.12 0.12 81.22.20.143
GET /index.php/181/ HTTP/1.1
7-5 22388 76/76/76 W 39.94 0 0 2871.9 2.80 2.80 141.153.137.168
GET /index.php/181/ HTTP/1.1
8-5 22396 0/26/26 W 2.46 38 0 0.0 0.34 0.34 127.0.0.1
care.com GET /whm-server-status HTTP/1.0
13-5 22413 0/18/18 W 1.46 44 0 0.0 0.33 0.33 81.22.20.143
GET /index.php/181/ HTTP/1.1
14-5 22414 0/25/25 _ 0.76 55 672 0.0 0.28 0.28 71.77.3.233
GET /wp-content/uploads/2007/12/cup.jpg HTTP/1.1
20-5 22464 2/14/14 K 0.66 8 0 52.5 0.14 0.14 67.87.117.129
GET /wp-content/plugins/postratings/images/loading.gif HTTP/1.1
21-5 22484 0/6/6 _ 1.31 40 329 0.0 0.03 0.03 74.77.10.155
-care.com GET /~realrina/nun.jpg HTTP/1.1
22-5 22510 27/37/37 K 18.07 0 1832 982.5 1.25 1.25 80.195.137.10
GET /index.php/181/ HTTP/1.1
23-5 22523 8/34/34 K 1.76 8 0 94.6 0.30 0.30 67.87.117.129
GET /wp-content/plugins/postratings/images/stars/rating_on.gif
27-5 22540 0/10/10 _ 3.36 39 167 0.0 0.19 0.19 90.192.174.63
GET /wp-content/uploads/2007/10/anand.jpg HTTP/1.1
28-5 22542 1/14/14 K 1.76 8 823 151.9 0.23 0.23 67.87.117.129
GET /wp-content/themes/ProSense%20Redux/images/picture.jpg
HTTP
29-5 23481 0/6/14 _ 0.37 11 2803 0.0 0.11 0.12 82.37.128.175
radio.audio-perfection.co.uk GET /img/player.png HTTP/1.1
30-5 22584 32/44/44 K 15.47 0 1284 989.6 1.06 1.06 80.195.137.10
GET /index.php/181/ HTTP/1.1
31-5 22588 22/25/25 K 5.77 0 751 468.0 0.46 0.46 76.227.169.69
GET /index.php/181/ HTTP/1.1
32-5 23520 0/5/8 _ 0.20 19 414 0.0 0.05 0.09 72.95.237.89 pown.us
GET /images/files/36.jpg HTTP/1.1
33-5 23627 1/6/22 K 0.06 3 967 28.0 0.06 0.35 66.249.65.196
GET /index.php/category/telugu-online-movies/page/4/
HTTP/1.1
36-5 23637 2/3/6 K 0.00 3 37 0.0 0.000 0.03 83.181.190.92 akirad.net
GET /files/color/garland-9bf1a50e/menu-expanded.gif HTTP/1.1
37-5 23673 8/9/16 K 0.49 8 0 126.9 0.20 0.21 67.87.117.129
GET /wp-content/uploads/2007/12/movie_dus_kahaniyaan.jpg HTTP/1
38-5 23674 1/3/10 K 0.00 11 1536 23.0 0.06 0.15 84.57.59.109
teeth-whitening-kit.com GET /affiliate/scripts/sb.php?a_aid=17&a_bid=7
HTTP/1.1
39-5 23690 10/10/22 K 0.99 3 0 35.6 0.03 0.29 83.181.190.92
akirad.net GET /files/color/garland-9bf1a50e/bg-tab.png HTTP/1.1
40-5 23693 0/5/10 _ 0.00 44 1106 0.0 0.04 0.07 67.11.157.83
teeth-whitening-kit.com GET /affiliate/scripts/sb
44-5 23721 1/3/6 K 0.00 8 0 0.4 0.000 0.00 67.87.117.129
GET /wp-content/plugins/share-this/share-icon-16x16.gif HTTP/1.
45-5 - 0/0/3 . 0.00 39 1 0.0 0.00 0.00 83.181.190.92 akirad.net GET
/files/color/garland-9bf1a50e/menu-expanded.gif HTTP/1.1
46-5 - 0/0/5 . 0.22 22 1332 0.0 0.00 0.04 81.22.20.143
GET /index.php/181/ HTTP/1.1
47-5 22780 51/52/52 K 26.66 0 940 1927.2 1.88 1.88 76.183.97.67
GET /index.php/181/ HTTP/1.1
48-5 - 0/0/3 . 0.00 37 6786 0.0 0.00 0.02 81.22.20.143
GET /index.php/181/ HTTP/1.1
51-5 - 0/0/13 . 0.26 35 34109 0.0 0.00 0.06 71.77.3.233
GET /favicon.ico HTTP/1.1
54-5 23746 2/3/3 K 0.51 3 0 0.0 0.02 0.02 83.181.190.92 akirad.net
GET /files/color/garland-9bf1a50e/menu-leaf.gif HTTP/1.1
55-5 23747 0/0/0 W 0.00 20 706795599 0.0 0.00 0.00 81.22.20.143
GET /index.php/181/ HTTP/1.1
56-5 - 0/0/3 . 0.00 16 4868 0.0 0.00 0.00 66.7.206.192
care.com GET /serverstats_inc.php HTTP/1.0
57-5 - 0/0/5 . 0.09 44 0 0.0 0.00 0.01 195.13.38.198 (unavailable)
POST /users_adm/start1.php HTTP/1.1
58-5 - 0/0/1 . 0.00 24 1640 0.0 0.00 0.02 81.22.20.143
GET /index.php/181/ HTTP/1.1
61-5 - 0/0/2 . 0.07 12 10194 0.0 0.00 0.01 172.188.47.93
radio.audio-perfection.co.uk GET /play_wmp.php HTTP/1.1
I have a reseller account on a Deasoft server (called NS2). Some of my clients can't open a secure connection for cPanel. After I'd made many suggestions (none of which helped) I took my PC to a user's home and tried and sure enough there was no response to the initial packet sent by the PC. This PC works fine at my home.
I then tried accessing another Deasoft server (called NS1) using both my PC and the user's PC and had no problems with either. So it looks like the problem is due to a difference with the setup of these servers rather than a user PC issue.
A trace (using EtherSnoop) showed no response to any attempted https access on NS2. But we had no problems with http or ftp to either server so I doubt it's a firewall block based on the user's address. One possibly significant difference between my connection at home and the users' connections is that I have a fixed IP address and they don't.
The forum software here prohibits me from including URLs here so I've had to record them below in a slightly obscure fashion.
I asked on the local forum and submitted a support ticket but both have been fruitless so far.
The URLs are :
[url]
[url]
Access to NS1 is fine but not NS2.
I have done this with .htaccess on apche but I am looking to do HTTP to HTTPS redirect for all requests on Zeus server using rewite.script
what I want basically is that all request to [url]goes to [url]
I've tried to enable https on a domain /server: vpn, debian 6.0.10, plesk 12.0.18/ but all I receive is a 403 forbidden error. I can't find any other related option, what could be the problem?
View 4 Replies View RelatedWe're running Plesk 11.5 on a CentOS 6.5 VPS and we would like to resolve the following problem:
We've configured a physical subdomain, lets say sub1.mydomain.com, and set up a couple of aliases for that domain in Plesk under:
Web Server Settings for sub1.mydomain.com > Additional Apache directives > "Additional directives for HTTP"
Code:
ServerAlias mysub1.mydomain.com
ServerAlias mysub2.mydomain.com
And
Web Server Settings for sub1.mydomain.com > Additional Apache directives > "Additional directives for HTTPS"
Code:
ServerAlias mysub1.mydomain.com
ServerAlias mysub2.mydomain.com
This config is working fine until we try to load resources from the alias over ssl, I believe something is missing in the Nginx config. I'm not getting any info using the logs.
For example:
http://sub1.mydomain.com/img/myimage.jpg --> works!
https://sub1.mydomain.com/img/myimage.jpg --> works!
http://mysub1.mydomain.com/img/myimage.jpg --> works!
http://mysub1.mydomain.com/img/myimage.jpg --> not loading
http://mysub2.mydomain.com/img/myimage.jpg --> works!
http://mysub1.mydomain.com/img/myimage.jpg --> not loading
Do we need to specify alternative directives for Nginx?
Can someone figure out by the screenshot, if my CPU is really
97% iddle, and what can be causing these average load numbers?
In my server iowait is causing high load, how do we find out which are all users taking memory that could cause my server to use swap memory.
server : linux centos/Cpanel
I have tried the below commands, but how do we locate user specific,
ps aux --sort -vsz | head -25
vmstat 1
Server is Xeon 3060, 3GB Ram, 250GB SATA-II HDD. I followed the recommendations made by mysqlprimer tuner script.
top - 11:54:33 up 237 days, 15:01, 1 user, load average: 6.06, 2.80, 1.65
Tasks: 133 total, 2 running, 131 sleeping, 0 stopped, 0 zombie
Cpu(s): 13.0% us, 4.9% sy, 0.0% ni, 24.3% id, 57.8% wa, 0.0% hi, 0.0% si
Mem: 3114144k total, 3096468k used, 17676k free, 30220k buffers
Swap: 2096440k total, 32348k used, 2064092k free, 2515412k cached
PID USER PR NI %CPU TIME+ %MEM VIRT RES SHR S COMMAND
8610 nobody 16 0 28 1:37.73 0.7 78908 20m 16m S lsphp4
10520 nobody 16 0 3 0:01.97 0.4 78788 10m 6884 S lsphp4
26474 nobody 15 0 2 15:04.07 0.4 14196 11m 3216 S lshttpd
28275 mysql 22 6 1 131:28.83 7.4 733m 224m 2700 S /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pi
Code:
[mysqld]
max_connections=500
max_user_connections=300
skip-locking
skip-innodb
query_cache_limit=1M
query_cache_size=64M
query_cache_type=1
interactive_timeout=60
wait_timeout=60
connect_timeout=6
thread_cache_size=128
key_buffer_size=640M
max_allowed_packet=16M
table_cache=2048
join_buffer=1M
sort_buffer=2M
record_buffer=1M
sort_buffer_size=2M
read_buffer_size=2M
safe-show-database
max_connect_errors=10
thread_concurrency=2
myisam_sort_buffer_size=64M
datadir=/var/lib/mysql
socket=/var/lib/mysql/mysql.sock
#log_slow_queries=/var/log/mysql/mysql_slow-queries.log
long_query_time=3
tmp_table_size=32M
max_heap_table_size=32M
#log-queries-not-using-indexes=/var/log/mysql/mysql_queries_no-indexes.log
join_buffer_size=2M
low_priority_updates=1
read_rnd_buffer_size=2M
[mysql.server]
user=mysql
basedir=/var/lib
[safe_mysqld]
err-log=/var/log/mysqld.log
var/lib/mysql/mysql.pid
open_files_limit=8192
[mysqldump]
quick
max_allowed_packet=16M
[mysql]
no-auto-rehash
[isamchk]
key_buffer=32M
sort_buffer=32M
read_buffer=16M
write_buffer=16M
[myisamchk]
key_buffer=32M
sort_buffer=32M
read_buffer=16M
write_buffer=16M
[mysqlhotcopy]
interactive-timeout
Whenever there are a lot of members online on my forum, the iowait shoot up, >30% and often times hovering at 60%. It'll eventually drop down to normal levels. However, during the high iowait, there are over 2.5GB of free memory according to the command, free -m
is it due to mysql not optimized or other processes? I don't think the bottleneck is on the cpu or ram.
The main function of my dedicated server is the vBulletin forum that we run.
Ever since I had bastille firewall installed and configured on my server we have been getting regular vBulletin errors.
Everything runs pretty smoothly most of the time, we can carry lots of connections without any issues, server has plenty of free RAM and CPU is never overloaded even during peak hours. I have been told bastille firewall (iptables) is configured correctly, all ports that need to be open are open.
But about twice per day we have a MySQL "disconnect" that lasts about 30-60 seconds per incident. For example we will start getting the following message via e-mail, and it will amount to 20-30 e-mails like this during the 30-60 second incident. After that, the e-mails and problems will go away, until next time.
vBulletin Database Error!
mysql_connect(): Can't connect to MySQL server on 'sql.datacolony.com' (4)
/hsphere/local/home/site/site.com/forum/includes/class_core.php on line 274
MySQL Error :
Error Number :
Date : Saturday, January 26th 2008 @ 07:53:05 PM
Script : [url]
Referrer : [url]
IP Address : 92.3.190.54
Username :
Classname : vb_database
The server is running CentOS 4.6, PHP 4.4.7, MySQL 5.0.45. The vBulletin software has been patched to the latest version. The vBulletin people are not sure why this could be happening.
Well we never believed that the firewall was causing the issue BUT it only started happening on the day the new firewall was installed. So we tried stopping the firewall for a full week and the MySQL database errors stopped happening, completely. So I'm convinced the problem is the firewall blocking MySQL connections but I can't figure out why?
There are no entries in the MySQL .err logs pertaining to this. Can't figure this out, any help or ideas is appreciated since the people who installed the firewall are not sure either.
I have a large chunk of rewrites to help clean up my url's a bit on my site.. On my local machine I am running Apache and just use an .htaccess file and normal php as a module, so no problems there..
But on my server however, I am running Nginx and running PHP as a fastcgi process. In my site's config file I have my fastcgi_param set to /home/user/html/public$fastcgi_script_name...
Well I need a way to change the value of fastcgi_script_name when I have modified (search friendly..) url's that are being rewritten. Because instead of grabbing the script name, like public/text.php?x=z it will grab public/text/post-title.html and then throw me a "No input file given." error (because there is no file there..).
How should I go about sending the true PHP script name to my fastcgi_script_name variable? It just grabs the URI of the PHP script.. what other options are there?
How to find what Perl script is causing high CPU usage?
I logged into my CentOS box tonight and notice after viewing the output of the "top" command that there are the following lines of output that have me concerned. What command can I use to find the source of the Perl script that is causing the CPU spike?
It seems it's been running for some time too.
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
30120 apache 25 0 6908 4544 1216 R 99.8 0.2 13416:07 perl
30654 apache 25 0 8028 4508 1212 R 99.4 0.2 13417:22 perl
21273 apache 25 0 7584 4528 1200 R 98.1 0.2 2225:12 perl
20516 apache 25 0 6760 4540 1232 R 96.8 0.2 2221:30 perl
As the title says, 1 of the accounts on my server is getting the following error message - error number 0x800CCC79 server response 451 temporary local problem -
Yet other accounts on the server are sending and recieving fine?
what would cause this error? Its not tempory as its been 48 hours
My website is currently running on http and the plesk control pannel is running on https
However the certificate for https for the plesk panel is out of date and self signed therefore web browsers promit its not valid.
I want to get a valid SSL certificate for https for Plesk, Client/Billing area and the main website.
I want to do it as easy as possiable (as I'm not one for technical stuff but if it was resoniable I could give it a go)
I dont want a self signed and want to try to go for something free or very cheap.
Any got any suggestions? I've looked around and come up with companys wanting alot of money I did come across another which was free but it was self signed.