Erreur apres changement du port d'ecoute 445 !

[Geo39]

Bonjour,

J'ai voulu changé le port d'ecoute 445. Donc renseignement pris sur ce forum, j'ai fait les manip suivantes :

Modifier la valeur "445" par celle de votre choix (exemple 4445) :
- à 2 endroits dans le fichier /etc/httpd/conf/httpd.conf --> ligne 23 Code:
"Listen 4445"
et ligne 113 Code:
"VirtualHost_default_:4445"

- et à 1 seul endroit dans le fichier /var/ipcop/header.pl --> ligne 48 Code:
"print "Location: https://$ENV{'SERVER_ADDR'}:4445/$ENV{'PATH_INFO'}\r\n\r\n";"
Penser à rebooter ipcop pour prendre en compte les changements

Oui mais voilà depuis, impossible d'ouvrir la console d'administration. J'ai une erreur "500 internal server Error"

Est ce quelqu'un peu me dire comment corriger l'erreur?

Merci beaucoup

[Franck78]

Salut,

Le serveur apache enregistre dans ses log l'erreur '500'. Fouilles /var/httpd/....

Il y a déjà eu un cas comme le tien mais je ne sais pas si cela a donné une correction. Donc rapporte bien l'erreur ici, que l'on fixe ça définitvement.

bye

[Geo39]

Voila une copie des fichiers de log.

Il semblerait que j'ai une erreur de synthaxe dans le fichier header.pl !!!
Je n'ais pourtant touché que la valeur du port.

Est il possible de le remplacer? le fichier header.pl.tmp semble être un fichier modèle

--------------------------------------------------------------------------------------------------------
Fichier “error_log”

Compilation failed in require at /home/httpd/cgi-bin/index.cgi line 20.
[Thu Mar 22 21:29:21 2007] [error] [client 172.xx.x.x] Premature end of script headers: /home/httpd/cgi-bin/index.cgi
[Thu Mar 22 21:38:02 2007] [notice] caught SIGTERM, shutting down
[Thu Mar 22 21:39:17 2007] [notice] Apache configured -- resuming normal operations
[Thu Mar 22 21:39:17 2007] [notice] Accept mutex: sysvsem (Default: sysvsem)
syntax error at /var/ipcop/header.pl line 449, near "sub openbox"
Can't use global @_ in "my" at /var/ipcop/header.pl line 450, near "= $_"
Missing right curly or square bracket at /var/ipcop/header.pl line 861, at end of line
Compilation failed in require at /home/httpd/cgi-bin/index.cgi line 20.
[Thu Mar 22 21:40:25 2007] [error] [client 172.xx.x.x] Premature end of script headers: /home/httpd/cgi-bin/index.cgi
[Thu Mar 22 21:48:47 2007] [notice] caught SIGTERM, shutting down
[Thu Mar 22 21:50:18 2007] [notice] Apache configured -- resuming normal operations
[Thu Mar 22 21:50:18 2007] [notice] Accept mutex: sysvsem (Default: sysvsem)
[Thu Mar 22 22:01:58 2007] [notice] caught SIGTERM, shutting down
[Thu Mar 22 22:03:13 2007] [notice] Apache configured -- resuming normal operations
[Thu Mar 22 22:03:13 2007] [notice] Accept mutex: sysvsem (Default: sysvsem)
syntax error at /var/ipcop/header.pl line 449, near "sub openbox"
Can't use global @_ in "my" at /var/ipcop/header.pl line 450, near "= $_"
Missing right curly or square bracket at /var/ipcop/header.pl line 861, at end of line
Compilation failed in require at /home/httpd/cgi-bin/index.cgi line 20.
[Thu Mar 22 22:03:44 2007] [error] [client 172.xx.x.x] Premature end of script headers: /home/httpd/cgi-bin/index.cgi
syntax error at /var/ipcop/header.pl line 449, near "sub openbox"
Can't use global @_ in "my" at /var/ipcop/header.pl line 450, near "= $_"
Missing right curly or square bracket at /var/ipcop/header.pl line 861, at end of line
Compilation failed in require at /home/httpd/cgi-bin/index.cgi line 20.
[Thu Mar 22 22:09:12 2007] [error] [client 172.xx.x.x] Premature end of script headers: /home/httpd/cgi-bin/index.cgi
syntax error at /var/ipcop/header.pl line 449, near "sub openbox"
Can't use global @_ in "my" at /var/ipcop/header.pl line 450, near "= $_"
Missing right curly or square bracket at /var/ipcop/header.pl line 861, at end of line
Compilation failed in require at /home/httpd/cgi-bin/index.cgi line 20.
[Thu Mar 22 22:20:29 2007] [error] [client 172.xx.x.x] Premature end of script headers: /home/httpd/cgi-bin/index.cgi
[Thu Mar 22 23:01:07 2007] [crit] (98)Address already in use: make_sock: could not bind to port 6621
[Thu Mar 22 23:06:09 2007] [error] mod_ssl: Cannot open SSLSessionCache DBM file `/var/log/httpd/ssl_scache' for scanning (System error follows)
[Thu Mar 22 23:06:09 2007] [error] System: No such file or directory (errno: 2)
[Thu Mar 22 23:06:09 2007] [error] mod_ssl: Cannot open SSLSessionCache DBM file `/var/log/httpd/ssl_scache' for reading (fetch) (System error follows)
[Thu Mar 22 23:06:09 2007] [error] System: No such file or directory (errno: 2)
[Thu Mar 22 23:06:09 2007] [error] mod_ssl: Cannot open SSLSessionCache DBM file `/var/log/httpd/ssl_scache' for writing (store) (System error follows)
[Thu Mar 22 23:06:09 2007] [error] System: No such file or directory (errno: 2)
syntax error at /var/ipcop/header.pl line 449, near "sub openbox"
Can't use global @_ in "my" at /var/ipcop/header.pl line 450, near "= $_"
Missing right curly or square bracket at /var/ipcop/header.pl line 861, at end of line
Compilation failed in require at /home/httpd/cgi-bin/index.cgi line 20.
[Thu Mar 22 23:06:10 2007] [error] [client 172.xx.x.x] Premature end of script headers: /home/httpd/cgi-bin/index.cgi

------------------------------------------------------------------------------
Fichier “access_log”

[22/Mar/2007:21:39:35 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:39:51 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:40:01 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:40:02 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:40:03 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:40:03 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:40:04 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:40:07 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:40:07 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:40:08 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:40:09 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:40:09 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:40:10 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:40:10 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:40:11 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:40:24 +0100] "GET / HTTP/1.1" 302 5
[22/Mar/2007:21:40:25 +0100] "GET /cgi-bin/index.cgi HTTP/1.1" 500 534
[22/Mar/2007:21:40:25 +0100] "GET /favicon.ico HTTP/1.1" 200 1406
[22/Mar/2007:21:40:34 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:40:46 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:40:47 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:40:47 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:40:48 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:40:49 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:40:49 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:40:50 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:40:51 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:42:12 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:42:27 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:48:00 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:48:09 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:50:36 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:50:44 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:21:51:24 +0100] "\x80L\x01\x03" 302 0
[22/Mar/2007:21:51:24 +0100] "\x80+\x01" 302 0
[22/Mar/2007:21:51:28 +0100] "\x80L\x01\x03" 302 0
[22/Mar/2007:21:51:36 +0100] "\x80+\x01" 302 0
[22/Mar/2007:21:51:39 +0100] "\x80g\x01\x03" 302 0
[22/Mar/2007:22:03:44 +0100] "GET / HTTP/1.1" 302 5
[22/Mar/2007:22:03:44 +0100] "GET /cgi-bin/index.cgi HTTP/1.1" 500 534
[22/Mar/2007:22:03:44 +0100] "GET /favicon.ico HTTP/1.1" 200 1406
[22/Mar/2007:22:09:12 +0100] "GET /cgi-bin/index.cgi HTTP/1.1" 500 534
[22/Mar/2007:22:20:29 +0100] "GET /cgi-bin/index.cgi HTTP/1.1" 500 534
[22/Mar/2007:23:06:10 +0100] "GET /cgi-bin/index.cgi HTTP/1.1" 500 534

--------------------------------------------------------------------------------------------------
Fichier "ssl_engine_log"

[22/Mar/2007 23:06:09 00393] [info] Connection to child 0 established (server fwxx.intranet:4445, client 172.xx.x.x)
[22/Mar/2007 23:06:09 00393] [info] Seeding PRNG with 1160 bytes of entropy
[22/Mar/2007 23:06:09 00393] [error] Cannot open SSLSessionCache DBM file `/var/log/httpd/ssl_scache' for scanning (System error follows)
[22/Mar/2007 23:06:09 00393] [error] System: No such file or directory (errno: 2)
[22/Mar/2007 23:06:09 00393] [error] Cannot open SSLSessionCache DBM file `/var/log/httpd/ssl_scache' for reading (fetch) (System error follows)
[22/Mar/2007 23:06:09 00393] [error] System: No such file or directory (errno: 2)
[22/Mar/2007 23:06:09 00393] [error] Cannot open SSLSessionCache DBM file `/var/log/httpd/ssl_scache' for writing (store) (System error follows)
[22/Mar/2007 23:06:09 00393] [error] System: No such file or directory (errno: 2)
[22/Mar/2007 23:06:09 00393] [info] Connection: Client IP: 172.xx.x.x, Protocol: TLSv1, Cipher: DHE-RSA-AES256-SHA (256/256 bits)
[22/Mar/2007 23:06:09 00393] [info] Initial (No.1) HTTPS request received for child 0 (server fwxx.intranet:4445)
[22/Mar/2007 23:06:10 00393] [info] Connection to child 0 closed with standard shutdown (server fwxx.intranet:4445, client 172.xx.x.x)

[Geo39]

J'ai trouvé l'erreur !
En comparant le fichier header.pl.tmp et le fichier header.pl, je me suis aperçu qu'il manqué le "}" a la fonction juste avant la fonction OpenBox que l'on voit apparaitre dans les logs.

C'est promis à partir d'aujourd'hui, je regarderai plus souvent les logs !!!

Encore merci !

[Franck78]

ce que je veux savoir c'est si l'erreur provient du script qui fait le changement ou d'une modification manuelle...

[eRen]

Bonjour,

@Geo39 : tu n'es pas obligé de redémarrer Ipcop : chez moi cette manipulation a trés bien fonctionnée

Code: Tout sélectionner

killall httpd
httpd -DSSL

@Franck78 : de quel "script qui fait le changement" parles-tu stp, j'aimerais y "jeter" un oeil

merci

Cordialement

[edouardj]

tu as aussi l'utilitaire setreservedports pour changer automatiquement le port d'écoute en https:

/usr/local/bin/setreservedports 4445 (par exemple... je sais pas si c'est toujours d'actualité mais wanadoo avait bloqué le port 445 en 2003 je crois à cause d'un ver qui se propagé dur dur sous windows. Depuis je change toujours ainsi.)

[eRen]

tu as aussi l'utilitaire setreservedports pour changer automatiquement le port d'écoute en https:

/usr/local/bin/setreservedports 4445 (par exemple... je sais pas si c'est toujours d'actualité mais wanadoo avait bloqué le port 445 en 2003 je crois à cause d'un ver qui se propagé dur dur sous windows. Depuis je change toujours ainsi.)

merci pour ce lien edouardi. Effectivement à l'époque le ver sasser utilisait ce port

[edouardj]

ah oui c'était lui le vieux sasser...