# Fail to start httpd due to SSLCertificateFile error

**URL:** <https://discourse.openondemand.org/t/fail-to-start-httpd-due-to-sslcertificatefile-error/2750>\
**Category:** Get Help\
**Tags:** question\
**Created:** [June 14, 2023, 1:32am UTC](https://discourse.openondemand.org/t/fail-to-start-httpd-due-to-sslcertificatefile-error/2750 "2023-06-14T01:32:55Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![link89](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/link89/32/1621_2.png) [@link89](https://discourse.openondemand.org/u/link89)\
**Post date:** [June 14, 2023, 1:32am UTC](https://discourse.openondemand.org/t/fail-to-start-httpd-due-to-sslcertificatefile-error/2750/1 "2023-06-14T01:32:55Z")

</div>

I am deploying another OOD instance for another clusters on CentOS 7.5. After the installation I run the command `sudo systemctl start httpd24-httpd`, the follow error occured:

```auto
-- Unit httpd24-httpd.service has begun starting up.
Jun 14 09:23:11 cu390 update_ood_portal[29970]: No change in Apache config.
Jun 14 09:23:11 cu390 httpd-scl-wrapper[29993]: AH00526: Syntax error on line 100 of /opt/rh/httpd24/root/etc/httpd/conf.d/ssl.conf:
Jun 14 09:23:11 cu390 httpd-scl-wrapper[29993]: SSLCertificateFile: file '/etc/pki/tls/certs/localhost.crt' does not exist or is empty
Jun 14 09:23:11 cu390 systemd[1]: httpd24-httpd.service: main process exited, code=exited, status=1/FAILURE
Jun 14 09:23:11 cu390 httpd-scl-wrapper[29996]: AH00526: Syntax error on line 100 of /opt/rh/httpd24/root/etc/httpd/conf.d/ssl.conf:
Jun 14 09:23:11 cu390 httpd-scl-wrapper[29996]: SSLCertificateFile: file '/etc/pki/tls/certs/localhost.crt' does not exist or is empty
Jun 14 09:23:11 cu390 systemd[1]: httpd24-httpd.service: control process exited, code=exited status=1
Jun 14 09:23:11 cu390 systemd[1]: Failed to start The Apache HTTP Server.

```

As our users are supposed to access the instance via ssh-tunnel, I don’t think it is necessary to setup HTTPS (at least for now). Is there any way that I can workaround this problem?

My OOD is v3.0.1, I don’t see this error when I setup another instance that uses v3.0.0

---

<div class="post-metadata">

**Author:** ![jeff.ohrstrom](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/jeff.ohrstrom/32/136_2.png) [@jeff.ohrstrom](https://discourse.openondemand.org/u/jeff.ohrstrom)\
**Post date:** [June 15, 2023, 4:44pm UTC](https://discourse.openondemand.org/t/fail-to-start-httpd-due-to-sslcertificatefile-error/2750/2 "2023-06-15T16:44:38Z")

</div>

You have a couple options:

- create and use real certificates
- if use plain text (no ssl), you’ll run into this issue below, so you’ll have to reconfigure your instance to allow for plain text http.

> <https://github.com/OSC/ondemand/issues/1193>
>
> After a fresh installation of OOD-2.0.9 on CentOS-7.9, I'm unable to use batch c…onnect applications.
> The navigation through the dashboard (file explorer, shell, etc.) is working well though.
> But every time I try to submit a job in an interactive session, I'm getting a HTTP 422 Error.
> 
> In the /var/log/ondemand-nginx/\<user\>/error.log, I'm seeing this error message:
> 
> \`\`\`
> App 19736 output: \[2021-05-31 09:51:01 +0200 \] WARN "Can't verify CSRF token authenticity."
> App 19736 output: \[2021-05-31 09:51:01 +0200 \] INFO "method=POST path=/pun/sys/dashboard/batch\_connect/sys/bc\_desktop\_3d/session\_contexts format=html controller=BatchConnect::SessionContextsController action=create status=422 error='ActionController::InvalidAuthenticityToken: ActionController::InvalidAuthenticityToken' duration=0.73 view=0.00"
> App 19736 output: \[2021-05-31 09:51:01 +0200 \] FATAL ""
> App 19736 output: \[2021-05-31 09:51:01 +0200 \] FATAL "ActionController::InvalidAuthenticityToken (ActionController::InvalidAuthenticityToken):"
> App 19736 output: \[2021-05-31 09:51:01 +0200 \] FATAL ""
> App 19736 output: \[2021-05-31 09:51:01 +0200 \] FATAL "actionpack (5.2.6) lib/action\_controller/metal/request\_forgery\_protection.rb:215:in \`handle\_unverified\_request'\\nactionpack (5.2.6) lib/action\_controller/metal/request\_forgery\_protection.rb:247:in \`handle\_unverified\_request'\\nactionpack (5.2.6) lib/action\_controller/metal/request\_forgery\_protection.rb:242:in \`verify\_authenticity\_token'\\nactivesupport (5.2.6) lib/active\_support/callbacks.rb:426:in \`block in make\_lambda'\\nactivesupport (5.2.6) lib/active\_support/callbacks.rb:198:in \`block (2 levels) in halting'\\nactionpack (5.2.6) lib/abstract\_controller/callbacks.rb:34:in \`block (2 levels) in \<module:Callbacks\>'\\nactivesupport (5.2.6) lib/active\_support/callbacks.rb:199:in \`block in halting'\\nactivesupport (5.2.6) lib/active\_support/callbacks.rb:513:in \`block in invoke\_before'\\nactivesupport (5.2.6) lib/active\_support/callbacks.rb:513:in \`each'\\nactivesupport (5.2.6) lib/active\_support/callbacks.rb:513:in \`invoke\_before'\\nactivesupport (5.2.6) lib/active\_support/callbacks.rb:131:in \`run\_callbacks'\\nactionpack (5.2.6) lib/abstract\_controller/callbacks.rb:41:in \`process\_action'\\nactionpack (5.2.6) lib/action\_controller/metal/rescue.rb:22:in \`process\_action'\\nactionpack (5.2.6) lib/action\_controller/metal/instrumentation.rb:34:in \`block in process\_action'\\nactivesupport (5.2.6) lib/active\_support/notifications.rb:168:in \`block in instrument'\\nactivesupport (5.2.6) lib/active\_support/notifications/instrumenter.rb:23:in \`instrument'\\nactivesupport (5.2.6) lib/active\_support/notifications.rb:168:in \`instrument'\\nactionpack (5.2.6) lib/action\_controller/metal/instrumentation.rb:32:in \`process\_action'\\nactionpack (5.2.6) lib/action\_controller/metal/params\_wrapper.rb:256:in \`process\_action'\\nactionpack (5.2.6) lib/abstract\_controller/base.rb:134:in \`process'\\nactionview (5.2.6) lib/action\_view/rendering.rb:32:in \`process'\\nactionpack (5.2.6) lib/action\_controller/metal.rb:191:in \`dispatch'\\nactionpack (5.2.6) lib/action\_controller/metal.rb:252:in \`dispatch'\\nactionpack (5.2.6) lib/action\_dispatch/routing/route\_set.rb:52:in \`dispatch'\\nactionpack (5.2.6) lib/action\_dispatch/routing/route\_set.rb:34:in \`serve'\\nactionpack (5.2.6) lib/action\_dispatch/journey/router.rb:52:in \`block in serve'\\nactionpack (5.2.6) lib/action\_dispatch/journey/router.rb:35:in \`each'\\nactionpack (5.2.6) lib/action\_dispatch/journey/router.rb:35:in \`serve'\\nactionpack (5.2.6) lib/action\_dispatch/routing/route\_set.rb:840:in \`call'\\nrack (2.2.3) lib/rack/tempfile\_reaper.rb:15:in \`call'\\nrack (2.2.3) lib/rack/etag.rb:27:in \`call'\\nrack (2.2.3) lib/rack/conditional\_get.rb:40:in \`call'\\nrack (2.2.3) lib/rack/head.rb:12:in \`call'\\nactionpack (5.2.6) lib/action\_dispatch/http/content\_security\_policy.rb:18:in \`call'\\nrack (2.2.3) lib/rack/session/abstract/id.rb:266:in \`context'\\nrack (2.2.3) lib/rack/session/abstract/id.rb:260:in \`call'\\nactionpack (5.2.6) lib/action\_dispatch/middleware/cookies.rb:670:in \`call'\\nactionpack (5.2.6) lib/action\_dispatch/middleware/callbacks.rb:28:in \`block in call'\\nactivesupport (5.2.6) lib/active\_support/callbacks.rb:98:in \`run\_callbacks'\\nactionpack (5.2.6) lib/action\_dispatch/middleware/callbacks.rb:26:in \`call'\\nactionpack (5.2.6) lib/action\_dispatch/middleware/debug\_exceptions.rb:61:in \`call'\\nactionpack (5.2.6) lib/action\_dispatch/middleware/show\_exceptions.rb:33:in \`call'\\nlograge (0.11.2) lib/lograge/rails\_ext/rack/logger.rb:15:in \`call\_app'\\nrailties (5.2.6) lib/rails/rack/logger.rb:26:in \`block in call'\\nactivesupport (5.2.6) lib/active\_support/tagged\_logging.rb:71:in \`block in tagged'\\nactivesupport (5.2.6) lib/active\_support/tagged\_logging.rb:28:in \`tagged'\\nactivesupport (5.2.6) lib/active\_support/tagged\_logging.rb:71:in \`tagged'\\nrailties (5.2.6) lib/rails/rack/logger.rb:26:in \`call'\\nactionpack (5.2.6) lib/action\_dispatch/middleware/remote\_ip.rb:81:in \`call'\\nrequest\_store (1.5.0) lib/request\_store/middleware.rb:19:in \`call'\\nactionpack (5.2.6) lib/action\_dispatch/middleware/request\_id.rb:27:in \`call'\\nrack (2.2.3) lib/rack/method\_override.rb:24:in \`call'\\nrack (2.2.3) lib/rack/runtime.rb:22:in \`call'\\nactivesupport (5.2.6) lib/active\_support/cache/strategy/local\_cache\_middleware.rb:29:in \`call'\\nactionpack (5.2.6) lib/action\_dispatch/middleware/executor.rb:14:in \`call'\\nrack (2.2.3) lib/rack/sendfile.rb:110:in \`call'\\nrailties (5.2.6) lib/rails/engine.rb:524:in \`call'\\n/opt/rh/ondemand/root/usr/share/ruby/vendor\_ruby/phusion\_passenger/rack/thread\_handler\_extension.rb:107:in \`process\_request'\\n/opt/rh/ondemand/root/usr/share/ruby/vendor\_ruby/phusion\_passenger/request\_handler/thread\_handler.rb:157:in \`accept\_and\_process\_next\_request'\\n/opt/rh/ondemand/root/usr/share/ruby/vendor\_ruby/phusion\_passenger/request\_handler/thread\_handler.rb:110:in \`main\_loop'\\n/opt/rh/ondemand/root/usr/share/ruby/vendor\_ruby/phusion\_passenger/request\_handler.rb:416:in \`block (3 levels) in start\_threads'\\n/opt/rh/ondemand/root/usr/share/ruby/vendor\_ruby/phusion\_passenger/utils.rb:113:in \`block in create\_thread\_and\_abort\_on\_exception'"
> \`\`\`
> 
> Any idea what's causing this ?
> I have this exact same installation with ondemand-1.8.20 and it's working fine.

---

<div class="post-metadata">

**Author:** ![link89](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/link89/32/1621_2.png) [@link89](https://discourse.openondemand.org/u/link89)\
**Post date:** [June 20, 2023, 6:26am UTC](https://discourse.openondemand.org/t/fail-to-start-httpd-due-to-sslcertificatefile-error/2750/3 "2023-06-20T06:26:59Z")

</div>

Work around the issue by running the following command: `sudo openssl req -newkey rsa:2048 -nodes -keyout /etc/pki/tls/private/localhost.key -x509 -days 365 -out /etc/pki/tls/certs/localhost.crt`

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex015/uploads/osc/original/2X/b/bae70bd0ed39a3ae769c2108155f4cb3e9da8385.png) [@system](https://discourse.openondemand.org/u/system)\
**Post date:** [December 17, 2023, 6:27am UTC](https://discourse.openondemand.org/t/fail-to-start-httpd-due-to-sslcertificatefile-error/2750/4 "2023-12-17T06:27:21Z")

</div>

This topic was automatically closed 180 days after the last reply. New replies are no longer allowed.