> Apache won't start after upgrading from 2006 to 2007
 

After putting in the mandriva 2007 DVD and upgrading my Mandriva 2006 install I now get an error when starting apache. I've also upgraded all the relevant packages through urpmi. Here's the error:

> /etc/init.d/httpd start
Starting httpd: Syntax error on line 46 of /etc/httpd/modules.d/41_mod_ssl.default-vhost.conf:
SSLCertificateFile: file '/etc/pki/tls/certs/localhost.crt' does not exist or is empty
[FAILED]

Everything else is running smoothly after the upgrade (mysql, proftp server, etc).......

well, if I comment out the line that's giving the error I get this when starting httpd:

Starting httpd: Syntax error on line 53 of /etc/httpd/modules.d/41_mod_ssl.default-vhost.conf:
SSLCertificateKeyFile: file '/etc/pki/tls/private/localhost.key' does not exist or is empty

Comment out that line and I get no errors, but it doesn't start:

> /etc/init.d/httpd start
Starting httpd: [FAILED]

So this must have something to do with a SSL keys.......anyone with more knowledge here that can help me??

I think I just need to replace these certificates (why they got removed with the upgrade is odd).

Can someone here help me with how I can go about re-creating these SSL certificates???

How about trying to uninstall and reinstall the apache package..wouldn't take but 5 mins
There seems to be continual problems with upgrades as opposed to new installs.

I would suggest perhaps a full install formatting hda1 and hda5 but not hda6 where the user files are (if thats how you set it up)

I do not use Apache here, but I think the error is telling you that you do not have an SSL Certificate key set up.

You can read a definition of SSL on Webopedia.com

On most Linux systems Gpg is the usual encryption tool. If you use KDE as your Desktop Environment, Kgpg is available as a key manager. There are other such tools available as well. With Kgpg you can create both a public and private encryption key then export the public key to one of several key servers on the WEB.

The final step will be to tell Apache to use the key you set up. This is the part I can not help with, perhaps someone else can.

Thanks for your help, someone pointed me to this guide here http://httpd.apache.org/docs/2.2/ssl...tml#aboutcerts and I was able to recreate the certificate and key and get the webserver back up and running.