apache - 比特纳米 AH02042 : rejecting client initiated renegotiation

Question

在 AWS Bitnami 上有一个站点，昨晚在日志中收到以下错误:

 [Tue Feb 21 11:44:24.550083 2017] [ssl:error] [pid 20151:tid 140224130492160] [client 208.93.152.93:41010] AH02042: rejecting client initiated renegotiation

然后在尝试访问该站点时出现以下错误。

 [Wed Feb 22 14:00:00.739407 2017] [mpm_event:notice] [pid 19875:tid 140224892598080] AH00491: caught SIGTERM, shutting down
 [Wed Feb 22 14:00:04.737461 2017] [ssl:warn] [pid 31984:tid 140233098594112] AH01909: localhost:443:0 server certificate does NOT include an ID which matches the server name
 [Wed Feb 22 14:00:04.894490 2017] [ssl:warn] [pid 31985:tid 140233098594112] AH01909: localhost:443:0 server certificate does NOT include an ID which matches the server name
 [Wed Feb 22 14:00:05.036172 2017] [mpm_event:notice] [pid 31985:tid 140233098594112] AH00489: Apache/2.4.23 (Unix) OpenSSL/1.0.2h configured -- resuming normal operations
 [Wed Feb 22 14:00:05.036313 2017] [core:notice] [pid 31985:tid 140233098594112] AH00094: Command line: '/opt/bitnami/apache2/bin/httpd.bin -f /opt/bitnami/apache2/conf/httpd.conf'

访问该站点时只会收到此消息“您的应用程序当前不可用”

自 2017 年 1 月 5 日以来未对站点进行任何编辑，站点日志中没有以前的错误。尝试重新启动，检查 SSL 日志的路径。

Answer 1

您正在获取的警告消息:

[Wed Feb 22 14:00:04.737461 2017] [ssl:warn] [pid 31984:tid 140233098594112] AH01909: localhost:443:0 server certificate does NOT include an ID which matches the server name
[Wed Feb 22 14:00:04.894490 2017] [ssl:warn] [pid 31985:tid 140233098594112] AH01909: localhost:443:0 server certificate does NOT include an ID which matches the server name

您不必担心它们。它与 Bitnami 在其云镜像中包含的虚拟证书有关。您可以在 https://docs.bitnami.com/aws/components/apache/#how-to-enable-https-support-with-ssl-certificates 找到全部信息。

我建议您对 Apache 日志文件进行更深入的记录。您可以与我们分享日志文件:

• /opt/bitnami/apache2/logs/error_log
• /opt/bitnami/apache2/logs/access_log

应该有我们遗漏的东西。