https doesn't work on a site.

[dkz]

Hello,

I have a website up that I recently installed a new SSL certificate and is on it's own IP but every few hours the https address becomes unreachable and the only way to get the site back up is to restart apache in WHM. I can still connect to WHM securely via IP address so I don't think it is anything with openSSL. What could it possibly be?

Any help is greatly appreciated...

[mesalehi]

i have the same problem !!.
i do any thing but i can not start a https.
help me too.

i know it is depend on server setting but i dont know which settings?

[DWHS.net]

Ths happened to me but was caused by APF firewall, when I disabled it the server working o.k. again.

[dkz]

Well if APF is causing it, there has to be a workaround. Disabling the firewall is not an option... Why would APF disable only the https pages assuming port 443 is open?

[DWHS.net]

Good question, It just happened yesterday. Half the work was blocked from my ssl connection but some where fine. I disabled APF and it seemed fine from the user that had the problem. The problem was a timed out issue which is strange since APF just blocks the connection not delays it. Yesterday on another server I had people all over the world not connecting to any pages on a server, yet when I disabled APF the server worked fine again.

I am going to back to our old firewall for now.

[AndyReed]

Just in case:

To completely remove APF

1) SSH to your server and run these commands:

service apf stop
/sbin/chkconfig --del apf
iptables -F
iptables --flush

2) Remove cron jobs and entries:
vi /etc/crontab
rm -f /etc/cron.daily/fw
rm -rf /etc/apf
rm -f /etc/init.d/apf /var/log/apf*

3) Check your config
/sbin/chkconfig --list
grep apf /var/log/cron
grep bfd /var/log/cron

4) Remove BFD be deleting its directory and conf files

/path/to/ipaliases restart

Hope this helps!

[DWHS.net]

Shoot, I have to do this on about 25 servers today. Weren't you the one that said there is no free lunches.

Complaints have been coming in all day!

Thanks for the remove help.

[dkz]

I figured out my problem is with SIM (System Integrity Monitor) restarting apache without SSL support. I'm going to post a message on rfxnetworks to see how to get around this. Until then I'm going to remove the cron job for SIM.

[SherKhan]

Are you sure that port 443 is listed into your conf.apf file under the IG_TCP_CPORTS list?
Be sure also to restart APF after modify the file.

Hope this help.