No ssl certs work on domains

[Secret Agent]

No SSL certs work on any domains suddenly again. This happened last week and I paid some to fix it who obviously did a temp job

root@server2 [~]# nmap -sT -O localhost

Starting nmap 3.70 ( http://www.insecure.org/nmap/ ) at 2006-02-08 07:55 CST
Insufficient responses for TCP sequencing (2), OS detection may be less accurate
Interesting ports on localhost (127.0.0.1):
(The 1643 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
1/tcp open tcpmux
21/tcp open ftp
25/tcp open smtp
53/tcp open domain
80/tcp open http
110/tcp open pop3
111/tcp open rpcbind
143/tcp open imap
443/tcp open https
465/tcp open smtps
783/tcp open hp-alarm-mgr
953/tcp open rndc
993/tcp open imaps
995/tcp open pop3s
3306/tcp open mysql
8009/tcp open ajp13
8080/tcp open http-proxy
Device type: general purpose
Running: Linux 2.4.X
OS details: Linux 2.4.23-grsec w/o timestamps, Linux 2.4.7 (x86)

Nmap run completed -- 1 IP address (1 host up) scanned in 2.606 seconds

root@server2 [~]# /usr/local/cpanel/startstunnel

root@server2 [~]# /scripts/restartsrv httpd
Waiting for httpd to restart..............finished.

root 5877 13.4 0.4 60388 18980 ? Ss 07:56 0:01 /usr/local/apache/bin/httpd -DSSL

httpd started ok


root@server2 [/usr/local/apache/logs]# tail -f ssl_engine_log
[08/Feb/2006 07:56:28 05860] [info] Init: Initializing OpenSSL library
[08/Feb/2006 07:56:28 05860] [info] Init: Seeding PRNG with 136 bytes of entropy
[08/Feb/2006 07:56:28 05860] [info] Init: Generating temporary RSA private keys (512/1024 bits)
[08/Feb/2006 07:56:28 05860] [info] Init: Configuring temporary DH parameters (512/1024 bits)
[08/Feb/2006 07:56:33 05877] [info] Init: 2nd startup round (already detached)
[08/Feb/2006 07:56:33 05877] [info] Init: Reinitializing OpenSSL library
[08/Feb/2006 07:56:33 05877] [info] Init: Seeding PRNG with 136 bytes of entropy
[08/Feb/2006 07:56:33 05877] [info] Init: Configuring temporary RSA private keys (512/1024 bits)
[08/Feb/2006 07:56:33 05877] [info] Init: Configuring temporary DH parameters (512/1024 bits)
[08/Feb/2006 07:56:33 05877] [info] Init: Initializing (virtual) servers for SSL

[xerophyte]

kill all the process of httpd and restart with ssl support

killall httpd
/etc/init.d/httpd startssl
# netstat -nap | grep http
tcp        0      0 0.0.0.0:80                  0.0.0.0:*                   LISTEN      6413/httpd
tcp        0      0 0.0.0.0:443                 0.0.0.0:*                   LISTEN      6413/httpd

hope that helps .. if not take look at the logs when you access the ssl

[Secret Agent]

I tried that already but that didn't work

root@server2 [~]# tail -f /usr/local/apache/logs/ssl_engine_log
[08/Feb/2006 08:32:51 00443] [info] Init: Initializing OpenSSL library
[08/Feb/2006 08:32:51 00443] [info] Init: Seeding PRNG with 136 bytes of entropy
[08/Feb/2006 08:32:51 00443] [info] Init: Generating temporary RSA private keys (512/1024 bits)
[08/Feb/2006 08:32:51 00443] [info] Init: Configuring temporary DH parameters (512/1024 bits)
[08/Feb/2006 08:32:55 00449] [info] Init: 2nd startup round (already detached)
[08/Feb/2006 08:32:55 00449] [info] Init: Reinitializing OpenSSL library
[08/Feb/2006 08:32:55 00449] [info] Init: Seeding PRNG with 136 bytes of entropy
[08/Feb/2006 08:32:55 00449] [info] Init: Configuring temporary RSA private keys (512/1024 bits)
[08/Feb/2006 08:32:55 00449] [info] Init: Configuring temporary DH parameters (512/1024 bits)
[08/Feb/2006 08:32:55 00449] [info] Init: Initializing (virtual) servers for SSL