[ClusterLabs] Setup Apache virtual IP SSL certificate config

[Timo Schöler]

On 10/27/20 11:33 AM, John Karippery wrote:

> I have problem on my pacemaker setup while config SSL certificate on my 
> server.

Can you access https://localhost/server-status (which you use to check 
your web server's health) using wget from the same host?

Will it throw an error because of the certificate (chain)? If so, this 
will also be the problem regarding the health check.

wget will ignore certificate woes using the ``--no-check-certificate'' 
option, which you could use to verify it actually is the problem.

Timo

> Before using SSL everything was working fine but as soon as I added the 
> (self-signed) SSL certificate, the cluster won't start the web server again.
> 
> error message is like this.
> 
> |/Failed Resource Actions: * mb-web_start_0 on node01 'unknown error' 
> (1): call=128, status=complete, exitreason='Failed to access httpd 
> status page.', last-rc-change='Mon May 18 12:32:05 2020', queued=0ms, 
> exec=3402ms * mb-web_start_0 on node02 'unknown error' (1): call=130, 
> status=complete, exitreason='Failed to access httpd status page.', 
> last-rc-change='Mon May 18 12:31:35 2020', queued=0ms, exec=3425ms /and 
> I tried to create apache resource in:
> 
> |
> 
> |pcs resource create Website1 ocf:heartbeat:apache 
> configfile=/etc/apache2/apache2.conf 
> statusurl="http://localhost/server-status" op monitor interval=1min|
> 
> |pcs resource create Website1 ocf:heartbeat:apache 
> configfile=/etc/apache2/apache2.conf 
> statusurl="https://localhost/server-status" op monitor interval=1min|
> 
> my Apache server status file
> 
> |cat <<-END >/etc/apache2/status.conf <Location /server-status> 
> SetHandler server-status Order Deny,Allow Deny from all Require local 
> </Location> END|
> 
> Please help me|
> 
> |
> 
> 
> _______________________________________________
> Manage your subscription:
> https://lists.clusterlabs.org/mailman/listinfo/users
> 
> ClusterLabs home: https://www.clusterlabs.org/
>