2017-09-04 39 views
1

我已經按照以下鏈接啓用了centos-7 apache中的http/2。 https://www.tunetheweb.com/performance/http2/如何添加讓http/2在centos 7中加密證書?

Apache的版本:2.4.27

我OpenSSL的版本:

# openssl version 
OpenSSL 1.1.0f 25 May 2017 

我需要HTTPS證書添加到域檢查HTTP/2的過程在瀏覽器中。

雖然我嘗試添加使用證書加密允許它 報告爲:雖然繼允許加密證書,並添加過程

#sudo certbot --apache 
We were unable to find a vhost with a ServerName or Address of xxx.yyy.com. 
Which virtual host would you like to choose? 
(note: conf files with multiple vhosts are not yet supported) 
------------------------------------------------------------------------------- 
1: ssl.conf      |      | HTTPS | Enabled 
------------------------------------------------------------------------------- 
Press 1 [enter] to confirm the selection (press 'c' to cancel): 1 
Error while running apachectl graceful. 
Job for httpd.service invalid. 
Cleaning up challenges 
Error while running apachectl graceful. 
Job for httpd.service invalid. 
Encountered exception during recovery 
Error while running apachectl graceful. 
Job for httpd.service invalid. 
Traceback (most recent call last): 
    File "/usr/lib/python2.7/site-packages/certbot/error_handler.py", line 99, in _call_registered 
    self.funcs[-1]() 
    File "/usr/lib/python2.7/site-packages/certbot/auth_handler.py", line 284, in _cleanup_challenges 
    self.auth.cleanup(achalls) 
    File "/usr/lib/python2.7/site-packages/certbot_apache/configurator.py", line 1908, in cleanup 
    self.restart() 
    File "/usr/lib/python2.7/site-packages/certbot_apache/configurator.py", line 1797, in restart 
    self._reload() 
    File "/usr/lib/python2.7/site-packages/certbot_apache/configurator.py", line 1808, in _reload 
    raise errors.MisconfigurationError(str(err)) 
MisconfigurationError: Error while running apachectl graceful. 
Job for httpd.service invalid. 
Error while running apachectl graceful. 
Job for httpd.service invalid. 

#yum install certbot-apache 

Installing: 
python2-certbot-apache       noarch       0.14.1-1.el7          epel        144 k 
Installing for dependencies: 
httpd           x86_64       2.4.6-45.el7.centos.4        updates       2.7 M 
mod_ssl           x86_64       1:2.4.6-45.el7.centos.4        updates       105 k 

它添加這些軟件包。所以http-2.4.6和2.4.27都存在於服務器中。

回答

0

我想我可以讓你靠近一步。試試這個:

certbot --authenticator standalone --installer apache --pre-hook "systemctl stop httpd" --post-hook "systemctl start httpd" 

也嘗試上述... systemctl status httpd前檢查阿帕奇的狀態。如果它已關閉並且無法啓動,請找到殭屍線程(ps -ef|grep httpd)並殺死它們。 (或重新啓動)。