Site can't be reached error

[Ablanco1892]

Hello All,

Our Cacti was working fine and we used it primarily for the Graph function to check Bandwidth utilization.
But now I can no longer access it via URL.

[cigamit]

Seems like a server problem. You might ensure that the webserver services are running.

[Ablanco1892]

I'm a nube and haven't worked with Unix for a long time.
What is the command to check that the webserver services are running?

[camerabob]

"ps -ef | grep apache"

Try that

[netniV]

You can also use

Code: Select all

netstat -an | grep 80

or

Code: Select all

netstat -an | grep 443

[Ablanco1892]

My apologies but I haven't had time to work on this for a while.

Here are the results with the suggested commands.

[removed ~]# ps -ef | grep apache
root 16042 15104 0 19:12 pts/0 00:00:00 grep --color=auto apache

netstat -an | grep 80
tcp 0 0 10.205.246.197:56576 10.50.170.75:80 TIME_WAIT
tcp 0 0 10.205.246.197:54532 10.50.170.119:80 TIME_WAIT
tcp 0 0 10.205.246.197:60854 10.50.170.79:80 TIME_WAIT
tcp 0 0 10.205.246.197:48402 10.50.170.113:80 TIME_WAIT
tcp 0 0 10.205.246.197:42936 10.50.170.125:80 TIME_WAIT
tcp 0 0 10.205.246.197:41886 10.50.170.88:80 TIME_WAIT
tcp 0 0 10.205.246.197:46394 10.50.170.114:80 TIME_WAIT
tcp 0 0 10.205.246.197:34464 10.50.170.117:80 TIME_WAIT
tcp 0 0 10.205.246.197:48838 10.50.170.118:80 TIME_WAIT
tcp 0 0 10.205.246.197:58726 10.50.170.89:80 TIME_WAIT
unix 2 [ ACC ] STREAM LISTENING 21680 private/lmtp
unix 3 [ ] STREAM CONNECTED 18033 /run/dbus/system_bus_socket
unix 3 [ ] STREAM CONNECTED 18032
unix 3 [ ] STREAM CONNECTED 1187108091
unix 3 [ ] STREAM

[Rno]

your apache (httpd) server is not working.

try to restart it, and it depend of your OS.

some are:
systemctl restart apache

[Ablanco1892]

Hi All,

Tried a few commands but still not able to get apache running. See below

[root@nmon01 ~]# systemctl status httpd.service -l
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Mon 2022-09-05 09:18:21 EDT; 2min 17s ago
Docs: man:httpd(8)
man:apachectl(8)
Process: 31021 ExecStart=/usr/sbin/httpd $OPTIONS -DFOREGROUND (code=exited, status=1/FAILURE)
Main PID: 31021 (code=exited, status=1/FAILURE)

Sep 05 09:18:21 removed systemd[1]: Starting The Apache HTTP Server...
Sep 05 09:18:21 removed systemd[1]: httpd.service: main process exited, code=exited, status=1/FAILURE
Sep 05 09:18:21 removed systemd[1]: Failed to start The Apache HTTP Server.
Sep 05 09:18:21 removed systemd[1]: Unit httpd.service entered failed state.
Sep 05 09:18:21 removed systemd[1]: httpd.service failed.
[root@nmon01 ~]#

[root@nmon01 ~]# systemctl start httpd.service
Job for httpd.service failed because the control process exited with error code. See "systemctl status httpd.service" and "journalctl -xe" for details.
[root@nmon01 ~]#

[Rno]

So do what acked to have for info of the problem:

systemctl status httpd.service -l

and

journalctl -xe

[Ablanco1892]

[root@unmon01 ~]# systemctl status httpd.service -l
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Mon 2022-09-05 09:53:06 EDT; 21h ago
Docs: man:httpd(8)
man:apachectl(8)
Process: 1074 ExecStart=/usr/sbin/httpd $OPTIONS -DFOREGROUND (code=exited, status=1/FAILURE)
Main PID: 1074 (code=exited, status=1/FAILURE)

Sep 05 09:53:05 nmon01.removed systemd[1]: Starting The Apache HTTP Server...
Sep 05 09:53:06 nmon01. systemd[1]: httpd.service: main process exited, code=exited, status=1/FAILURE
Sep 05 09:53:06 nmon01. systemd[1]: Failed to start The Apache HTTP Server.
Sep 05 09:53:06 nmon01. systemd[1]: Unit httpd.service entered failed state.
Sep 05 09:53:06 nmon01. systemd[1]: httpd.service failed.
Sep 06 03:46:06 nmon01. systemd[1]: Unit httpd.service cannot be reloaded because it is inactive.
[root@nmon01 ~]#

[root@nmon01 ~]# journalctl -xe
-- Subject: Unit user-48.slice has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/li ... temd-devel
--
-- Unit user-48.slice has finished shutting down.
Sep 06 07:42:30 nmon01.removed.com sshd[24096]: Accepted password for root from 10.44.124.33 port 56550 ssh2
Sep 06 07:42:31 nmon01.removed.com systemd-logind[816]: New session 483 of user root.
-- Subject: A new session 483 has been created for user root
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/li ... temd-devel
-- Documentation: http://www.freedesktop.org/wiki/Softwar ... /multiseat
--
-- A new session with the ID 483 has been created for the user root.
--
-- The leading process of the session is 24096.
Sep 06 07:42:31 nmon01.removed.com systemd[1]: Started Session 483 of user root.
-- Subject: Unit session-483.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/li ... temd-devel
--
-- Unit session-483.scope has finished starting up.
--
-- The start-up result is done.
Sep 06 07:42:31 nmon01.removed.com sshd[24096]: pam_unix(sshd:session): session opened for user root by (uid=0)
Sep 06 07:45:01 nmon01.removed.com systemd[1]: Started Session 484 of user root.
-- Subject: Unit session-484.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/li ... temd-devel
--
-- Unit session-484.scope has finished starting up.
--
-- The start-up result is done.
Sep 06 07:45:01 nmon01.removed.com systemd[1]: Created slice User Slice of apache.
-- Subject: Unit user-48.slice has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/li ... temd-devel
--
-- Unit user-48.slice has finished starting up.
--
-- The start-up result is done.
Sep 06 07:45:01 nmon01.removed.com systemd[1]: Started Session 487 of user apache.
-- Subject: Unit session-487.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/li ... temd-devel
--
-- Unit session-487.scope has finished starting up.
--
-- The start-up result is done.
Sep 06 07:45:01 nmon01.removed.com systemd[1]: Started Session 485 of user root.
-- Subject: Unit session-485.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/li ... temd-devel
--
-- Unit session-485.scope has finished starting up.
--
-- The start-up result is done.
Sep 06 07:45:01 nmon01.removed.com systemd[1]: Started Session 486 of user nedi.
-- Subject: Unit session-486.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/li ... temd-devel
--
-- Unit session-486.scope has finished starting up.
--
-- The start-up result is done.
Sep 06 07:45:01 nmon01.removed.com CROND[24366]: (apache) CMD (/usr/bin/php /usr/share/cacti/poller.php > /dev/null 2>&1)
Sep 06 07:45:01 nmon01.removed.com CROND[24369]: (root) CMD ( /usr/bin/php /usr/share/collate/addons/discovery.php > /var/log/collate/discovery.log 2>&1)
Sep 06 07:45:01 nmon01.removed.com CROND[24368]: (nedi) CMD (/var/nedi/nedi.pl -Aall > /tmp/nedi-`date +%H`.run 2>&1)
Sep 06 07:45:01 nmon01.removed.com CROND[24367]: (root) CMD (/root/scripts/bgpcheck.sh /var/rancid/cutdev.list > /var/www/html/cutsheet.html)
lines 3506-3573/3573 (END)

[Rno]

And what about the httpd error_log
can be under /var/log/httpd

[Ablanco1892]

Hi All,

Looks like a Certificate issue. How can I resolve this?
Thank you for you help.

[root@nmon01 httpd]# cat error_log-20220906
[Mon Sep 05 08:40:16.599965 2022] [core:notice] [pid 29423] SELinux policy enabl ed; httpd running as context system_u:system_r:httpd_t:s0
[Mon Sep 05 08:40:16.609360 2022] [suexec:notice] [pid 29423] AH01232: suEXEC me chanism enabled (wrapper: /usr/sbin/suexec)
[Mon Sep 05 08:40:16.820209 2022] [:error] [pid 29423] SSL Library Error: -8181 Certificate has expired
[Mon Sep 05 08:40:16.820225 2022] [:error] [pid 29423] Unable to verify certific ate 'Server-Cert'. Add "NSSEnforceValidCerts off" to nss.conf so the server can start until the problem can be resolved.
[Mon Sep 05 08:42:08.303700 2022] [core:notice] [pid 30923] SELinux policy enabl ed; httpd running as context system_u:system_r:httpd_t:s0
[Mon Sep 05 08:42:08.304805 2022] [suexec:notice] [pid 30923] AH01232: suEXEC me chanism enabled (wrapper: /usr/sbin/suexec)
[Mon Sep 05 08:42:08.430886 2022] [:error] [pid 30923] SSL Library Error: -8181 Certificate has expired
[Mon Sep 05 08:42:08.430905 2022] [:error] [pid 30923] Unable to verify certific ate 'Server-Cert'. Add "NSSEnforceValidCerts off" to nss.conf so the server can start until the problem can be resolved.
[Mon Sep 05 08:42:12.339453 2022] [core:notice] [pid 31049] SELinux policy enabl ed; httpd running as context system_u:system_r:httpd_t:s0
[Mon Sep 05 08:42:12.340395 2022] [suexec:notice] [pid 31049] AH01232: suEXEC me chanism enabled (wrapper: /usr/sbin/suexec)
[Mon Sep 05 08:42:12.473704 2022] [:error] [pid 31049] SSL Library Error: -8181 Certificate has expired
[Mon Sep 05 08:42:12.473721 2022] [:error] [pid 31049] Unable to verify certific ate 'Server-Cert'. Add "NSSEnforceValidCerts off" to nss.conf so the server can start until the problem can be resolved.
[Mon Sep 05 08:46:00.897283 2022] [core:notice] [pid 468] SELinux policy enabled ; httpd running as context unconfined_u:system_r:httpd_t:s0
[Mon Sep 05 08:46:00.898510 2022] [suexec:notice] [pid 468] AH01232: suEXEC mech anism enabled (wrapper: /usr/sbin/suexec)
[Mon Sep 05 08:46:01.053711 2022] [:error] [pid 468] SSL Library Error: -8181 Ce rtificate has expired
[Mon Sep 05 08:46:01.053732 2022] [:error] [pid 468] Unable to verify certificat e 'Server-Cert'. Add "NSSEnforceValidCerts off" to nss.conf so the server can st art until the problem can be resolved.
[Mon Sep 05 08:46:26.849968 2022] [core:notice] [pid 1372] SELinux policy enable d; httpd running as context unconfined_u:system_r:httpd_t:s0
[Mon Sep 05 08:46:26.850813 2022] [suexec:notice] [pid 1372] AH01232: suEXEC mec hanism enabled (wrapper: /usr/sbin/suexec)
[Mon Sep 05 08:46:26.980907 2022] [:error] [pid 1372] SSL Library Error: -8181 C ertificate has expired
[Mon Sep 05 08:46:26.980928 2022] [:error] [pid 1372] Unable to verify certifica te 'Server-Cert'. Add "NSSEnforceValidCerts off" to nss.conf so the server can s tart until the problem can be resolved.
[Mon Sep 05 08:46:57.496517 2022] [core:notice] [pid 2026] SELinux policy enable d; httpd running as context system_u:system_r:httpd_t:s0
[Mon Sep 05 08:46:57.498855 2022] [suexec:notice] [pid 2026] AH01232: suEXEC mec hanism enabled (wrapper: /usr/sbin/suexec)
[Mon Sep 05 08:46:57.626308 2022] [:error] [pid 2026] SSL Library Error: -8181 C ertificate has expired
[Mon Sep 05 08:46:57.626328 2022] [:error] [pid 2026] Unable to verify certifica te 'Server-Cert'. Add "NSSEnforceValidCerts off" to nss.conf so the server can s tart until the problem can be resolved.
[Mon Sep 05 08:49:57.533250 2022] [core:notice] [pid 5699] SELinux policy enable d; httpd running as context unconfined_u:system_r:httpd_t:s0
[Mon Sep 05 08:49:57.534427 2022] [suexec:notice] [pid 5699] AH01232: suEXEC mec hanism enabled (wrapper: /usr/sbin/suexec)
[Mon Sep 05 08:49:57.680207 2022] [:error] [pid 5699] SSL Library Error: -8181 C ertificate has expired
[Mon Sep 05 08:49:57.680227 2022] [:error] [pid 5699] Unable to verify certifica te 'Server-Cert'. Add "NSSEnforceValidCerts off" to nss.conf so the server can s tart until the problem can be resolved.
[Mon Sep 05 08:50:37.183284 2022] [core:notice] [pid 6389] SELinux policy enable d; httpd running as context unconfined_u:system_r:httpd_t:s0
[Mon Sep 05 08:50:37.185517 2022] [suexec:notice] [pid 6389] AH01232: suEXEC mec hanism enabled (wrapper: /usr/sbin/suexec)
[Mon Sep 05 08:50:37.335146 2022] [:error] [pid 6389] SSL Library Error: -8181 C ertificate has expired
[Mon Sep 05 08:50:37.335167 2022] [:error] [pid 6389] Unable to verify certifica te 'Server-Cert'. Add "NSSEnforceValidCerts off" to nss.conf so the server can s tart until the problem can be resolved.
[Mon Sep 05 08:52:29.534290 2022] [core:notice] [pid 7865] SELinux policy enable d; httpd running as context unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c102 3
[Mon Sep 05 08:52:29.535898 2022] [suexec:notice] [pid 7865] AH01232: suEXEC mec hanism enabled (wrapper: /usr/sbin/suexec)
[Mon Sep 05 08:52:29.677070 2022] [:error] [pid 7865] SSL Library Error: -8181 C ertificate has expired
[Mon Sep 05 08:52:29.677095 2022] [:error] [pid 7865] Unable to verify certifica te 'Server-Cert'. Add "NSSEnforceValidCerts off" to nss.conf so the server can s tart until the problem can be resolved.
[Mon Sep 05 08:54:53.892342 2022] [core:notice] [pid 8514] SELinux policy enable d; httpd running as context unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c102 3
[Mon Sep 05 08:54:53.894325 2022] [suexec:notice] [pid 8514] AH01232: suEXEC mec hanism enabled (wrapper: /usr/sbin/suexec)
[Mon Sep 05 08:54:54.039672 2022] [:error] [pid 8514] SSL Library Error: -8181 C ertificate has expired
[Mon Sep 05 08:54:54.039703 2022] [:error] [pid 8514] Unable to verify certifica te 'Server-Cert'. Add "NSSEnforceValidCerts off" to nss.conf so the server can s tart until the problem can be resolved.
[Mon Sep 05 09:12:27.310639 2022] [core:notice] [pid 24754] SELinux policy enabl ed; httpd running as context system_u:system_r:httpd_t:s0
[Mon Sep 05 09:12:27.311842 2022] [suexec:notice] [pid 24754] AH01232: suEXEC me chanism enabled (wrapper: /usr/sbin/suexec)
[Mon Sep 05 09:12:27.440347 2022] [:error] [pid 24754] SSL Library Error: -8181 Certificate has expired
[Mon Sep 05 09:12:27.440367 2022] [:error] [pid 24754] Unable to verify certific ate 'Server-Cert'. Add "NSSEnforceValidCerts off" to nss.conf so the server can start until the problem can be resolved.
[Mon Sep 05 09:15:38.963803 2022] [core:notice] [pid 27065] SELinux policy enabl ed; httpd running as context system_u:system_r:httpd_t:s0
[Mon Sep 05 09:15:38.964846 2022] [suexec:notice] [pid 27065] AH01232: suEXEC me chanism enabled (wrapper: /usr/sbin/suexec)
[Mon Sep 05 09:15:39.096853 2022] [:error] [pid 27065] SSL Library Error: -8181 Certificate has expired
[Mon Sep 05 09:15:39.096877 2022] [:error] [pid 27065] Unable to verify certific ate 'Server-Cert'. Add "NSSEnforceValidCerts off" to nss.conf so the server can start until the problem can be resolved.
[Mon Sep 05 09:15:53.999670 2022] [core:notice] [pid 27331] SELinux policy enabl ed; httpd running as context system_u:system_r:httpd_t:s0
[Mon Sep 05 09:15:54.000497 2022] [suexec:notice] [pid 27331] AH01232: suEXEC me chanism enabled (wrapper: /usr/sbin/suexec)
[Mon Sep 05 09:15:54.130355 2022] [:error] [pid 27331] SSL Library Error: -8181 Certificate has expired
[Mon Sep 05 09:15:54.130373 2022] [:error] [pid 27331] Unable to verify certific ate 'Server-Cert'. Add "NSSEnforceValidCerts off" to nss.conf so the server can start until the problem can be resolved.
[Mon Sep 05 09:17:00.115214 2022] [core:notice] [pid 29133] SELinux policy enabl ed; httpd running as context system_u:system_r:httpd_t:s0
[Mon Sep 05 09:17:00.117449 2022] [suexec:notice] [pid 29133] AH01232: suEXEC me chanism enabled (wrapper: /usr/sbin/suexec)
[Mon Sep 05 09:17:00.259422 2022] [:error] [pid 29133] SSL Library Error: -8181 Certificate has expired
[Mon Sep 05 09:17:00.259443 2022] [:error] [pid 29133] Unable to verify certific ate 'Server-Cert'. Add "NSSEnforceValidCerts off" to nss.conf so the server can start until the problem can be resolved.
[Mon Sep 05 09:18:21.332232 2022] [core:notice] [pid 31021] SELinux policy enabl ed; httpd running as context system_u:system_r:httpd_t:s0
[Mon Sep 05 09:18:21.333443 2022] [suexec:notice] [pid 31021] AH01232: suEXEC me chanism enabled (wrapper: /usr/sbin/suexec)
[Mon Sep 05 09:18:21.476365 2022] [:error] [pid 31021] SSL Library Error: -8181 Certificate has expired
[Mon Sep 05 09:18:21.476384 2022] [:error] [pid 31021] Unable to verify certific ate 'Server-Cert'. Add "NSSEnforceValidCerts off" to nss.conf so the server can start until the problem can be resolved.
[Mon Sep 05 09:24:02.169543 2022] [core:notice] [pid 3136] SELinux policy enable d; httpd running as context system_u:system_r:httpd_t:s0
[Mon Sep 05 09:24:02.170549 2022] [suexec:notice] [pid 3136] AH01232: suEXEC mec hanism enabled (wrapper: /usr/sbin/suexec)
[Mon Sep 05 09:24:02.312373 2022] [:error] [pid 3136] SSL Library Error: -8181 C ertificate has expired
[Mon Sep 05 09:24:02.312393 2022] [:error] [pid 3136] Unable to verify certifica te 'Server-Cert'. Add "NSSEnforceValidCerts off" to nss.conf so the server can s tart until the problem can be resolved.
[Mon Sep 05 09:53:05.889204 2022] [core:notice] [pid 1074] SELinux policy enable d; httpd running as context system_u:system_r:httpd_t:s0
[Mon Sep 05 09:53:05.903860 2022] [suexec:notice] [pid 1074] AH01232: suEXEC mec hanism enabled (wrapper: /usr/sbin/suexec)
[Mon Sep 05 09:53:06.160843 2022] [:error] [pid 1074] SSL Library Error: -8181 C ertificate has expired
[Mon Sep 05 09:53:06.160868 2022] [:error] [pid 1074] Unable to verify certifica te 'Server-Cert'. Add "NSSEnforceValidCerts off" to nss.conf so the server can s tart until the problem can be resolved.
[root@nmon01 httpd]# ^C
[root@nmon01 httpd]#

[netniV]

You don’t have a valid trusted SSL certificate but have SSL enabled

[Ablanco1892]

Thanks. How do I configure or update the server to get a new cert?