Session Cache is not configured

Comments

4 comments

  • Avatar
    Ashraf Sharif

    Hi,

    What Apache version you are running on? Please try add the following line:

    SSLSessionCache shmcb:/etc/httpd/ssl_scache(512000)

    Inside /etc/httpd/conf.d/ssl.conf after the following line:

    </VirtualHost>

    And before the following line:

    </IfModule>

    Restart httpd to load the change. Let me know how it goes.

     

    Regards,
    Ashraf

    0
    Comment actions Permalink
  • Avatar
    Bastiaan Scheffer

    Hi Ashraf, 

    Thank you for your quick reply. I'm running on; Server version: Apache/2.4.6 (CentOS)
    Server built: Oct 19 2017 20:39:16. I've got a new VPS with CentOS to run it on and did an automatic install of ClusterControl. Now the warning of SSLSessionCache is gone, but the problem still remains that I cannot connect to ClusterControl over SSL (https). 

    These are the apache errors I get after restarting apache; 

    [Fri Apr 13 07:53:48.441715 2018] [mpm_prefork:notice] [pid 27776] AH00170: caught SIGWINCH, shutting down gracefully
    [Fri Apr 13 07:53:49.578092 2018] [core:notice] [pid 27853] SELinux policy enabled; httpd running as context system_u:system_r:httpd_t:s0
    [Fri Apr 13 07:53:49.581328 2018] [suexec:notice] [pid 27853] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
    [Fri Apr 13 07:53:49.686625 2018] [auth_digest:notice] [pid 27853] AH01757: generating secret for digest authentication ...
    [Fri Apr 13 07:53:49.688877 2018] [lbmethod_heartbeat:notice] [pid 27853] AH02282: No slotmem from mod_heartmonitor
    [Fri Apr 13 07:53:49.773529 2018] [mpm_prefork:notice] [pid 27853] AH00163: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16 configured -- resuming normal operations
    [Fri Apr 13 07:53:49.773579 2018] [core:notice] [pid 27853] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'

    0
    Comment actions Permalink
  • Avatar
    Ashraf Sharif

    Hi,

    I don't see any error on the Apache log you've sent. However, I do find a problem with the configuration file where it doesn't have any "Listen" definition line. Inside /etc/httpd/conf.d/ssl.conf, add the following line:

    Listen 443

    After the following line:

    <IfModule mod_ssl.c>

    And before the following line:

            <VirtualHost _default_:443>

    Restart httpd and try to access it again via HTTPS. You will probably see a warning in the browser due to self-signed certificate that the installer script used to configure ClusterControl. 

    Let me know how it goes. If it works, we will fix the ssl.conf for RHEL/CentOS based OS.

    Regards,
    Ashraf

    0
    Comment actions Permalink
  • Avatar
    Bastiaan Scheffer

    Working as a charm now! 

    0
    Comment actions Permalink

Please sign in to leave a comment.

Powered by Zendesk