[Cc-webedit] website down

[Jon Leighton]

Hi Jim,

The SSL conflict errors are due to running SSL on VHosts. Unless we want
to get separate IP addresses I think we need to live with this.

The one about a CA certificate I don't know, please investigate if you
wish.

The passenger problem has happened on a number of occasions. I
previously reported it in this ticket:

http://code.google.com/p/phusion-passenger/issues/detail?id=569

(#52 onwards)

One of the devs said it was a system problem, and recommended reducing
swappiness. I don't really understand how this would help (there's
plenty of free memory, and reducing swappiness would cause more memory
to be used anyway).

See also:

http://groups.google.com/group/phusion-passenger/browse_thread/thread/93bb6d52e57b344d

In other words I came to a dead end with it and settled for reloading
apache when it occasionally happens, which I was going to write a
monitoring script for but never got around to doing.

If you have any ideas I'm all ears :)

Jon

On Wed, 2011-06-22 at 14:26 +0100, Jim Dog wrote:
> Hey
> 
> I just logged in to have a look at the apache error logs to see what the
> problem may be and spotted a few things:
> 
> There is a configuration conflict between mail.climatecamp.org.uk and
> 000-default-ssl leading to warnings like this one:
> 
> [Wed Jun 22 13:02:54 2011] [warn] Init: SSL server IP/port conflict:
> mirak.tachanka.org:443 (/etc/apache2/sites-enabled/000-default-ssl:2)
> vs. newmail.climatecamp.org.uk:443
> (/etc/apache2/sites-enabled/mail.climatecamp.org.uk:8)
> 
> My guess is that 000-default-ssl isn't actually needed? or if it is then
> it should be renamed to something more descriptive. Anyhow, this is
> possibly causing more work than is needed to apache and cocking up
> secure connections.
> 
> Also, it seems there is some misconfiguration with the ssl certificates
> (using name based virtual hosts) and some warnings about using a CA file
> as the RSA server certificate
> 
> Aaaanyhow, back to why the site cocked up in the first place, it seems
> mod_passenger itself was to blame and threw a massive wobbly, leaving it
> unable to create new sockets to serve requests.
> 
> I've never seen passenger do this before and I'd like to send a bug
> report to the developers, including the relevant error messages from the
> apache error log leading up to it, that is if other people are ok with
> me doing that. It would be information like the following:
> 
> [ pid=5363 thr=139865799632720 file=ext/apache2/Hooks.cpp:863
> time=2011-06-22 12
> :36:16.933 ]: Unexpected error in mod_passenger: Cannot connect to Unix
> socket '
> /tmp/passenger.1.0.23475/generation-0/socket': Connection refused (111)
>   Backtrace:
>      in 'Passenger::ApplicationPool::Client*
> Passenger::ApplicationPool::Client:
> :connect(const std::string&, const std::string&, const
> Passenger::StaticString&)' (Client.h:446)
>      in 'Passenger::ApplicationPool::Client*
> Hooks::getApplicationPool()' (Hooks.cpp:271)
>      in 'Passenger::SessionPtr Hooks::getSession(const
> Passenger::PoolOptions&)' (Hooks.cpp:297)
>      in 'int Hooks::handleRequest(request_rec*)' (Hooks.cpp:566)
> 
> Would it be ok for me to send this to the developers to see if we can
> figure out what happened with passenger?
> 
> Solidarity
> 
> JimDog
> 
> On 22/06/11 14:04, Jon Leighton wrote:
> > Ok, I restarted it so it's back up. Thought I had previously set up
> > something to monitor this problem but it doesn't look like I did...
> > 
> > On Wed, 2011-06-22 at 11:14 +0100, Jonathan Stevenson wrote:
> >> Hello - the website has an internal server error. I've texted Jon, but 
> >> if anyone else knows what to do can you do it? Thanks!
> >>
> >> J
> >>
> >> _______________________________________________
> >> Cc-webedit mailing list
> >> Cc-webedit at lists.aktivix.org
> >> https://lists.aktivix.org/mailman/listinfo/cc-webedit
> > 
> > 
> > 
> > _______________________________________________
> > Cc-webedit mailing list
> > Cc-webedit at lists.aktivix.org
> > https://lists.aktivix.org/mailman/listinfo/cc-webedit
> 
> 
> _______________________________________________
> Cc-webedit mailing list
> Cc-webedit at lists.aktivix.org
> https://lists.aktivix.org/mailman/listinfo/cc-webedit

-- 
http://jonathanleighton.com/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 490 bytes
Desc: This is a digitally signed message part
URL: <https://lists.aktivix.org/pipermail/cc-webedit/attachments/20110622/5b005547/attachment.pgp>