open-contracting / deploy

Deployment configuration and scripts
https://ocdsdeploy.readthedocs.io/en/latest/
Apache License 2.0
2 stars 3 forks source link

mod_md errors #485

Closed jpmckinney closed 3 months ago

jpmckinney commented 3 months ago

A certificate wasn't getting renewed. I saw these messages in the log:

[Tue Mar 19 06:24:21.084058 2024] [md:error] [pid 3957087:tid 140019570038336] (20014)Internal error (specific information not available): ocp22.open-contracting.org: asked to retrieve chain, but no order in context
[Tue Mar 19 06:24:21.086464 2024] [md:error] [pid 3957087:tid 140019570038336] (20014)Internal error (specific information not available): AH10056: processing ocp22.open-contracting.org: Unable to retrieve rsa certificate chain.

It turns out the permissions where incorrect on /etc/apache2/md/accounts (750 instead of 755). Correcting the permissions and restarting Apache a few times resolved the error.