Search Engine: Elastic

Article ID: 132768, created on Jun 11, 2018, last review on Jun 11, 2018

  • Applies to:
  • Operations Automation 6.0

Symptoms

On clicking SSL proxy URL at CCP > Websites > example.com > SSL the following error is displayed after a while:

Service Unavailable
The corresponding service is not available at the moment. Try again in 2-3 minutes.
For more information please contact your service provider.

In error_log of the webspace of the brand, which is used for SSL proxying, the below error is registered:

[Tue Jun 12 03:58:11 2018] [error] [client 203.0.113.2] proxy: DNS lookup failure for: ssl.isp.com returned by /ssl/16/example.com/

where ssl.isp.com is the hostname of the SSL proxy server.

Cause

Apache on the webserver, which is running the branding webspace, redirects SSL proxy requests to the SSL proxy server by means of the following rewrite rule:

RewriteRule ^ssl/16/(.*)$ https://ssl.isp.com/$1 [P]

but the hostname resolution is disabled:

# grep HostnameLookups  /usr/local/pem/etc/apache/httpd.conf_pem
HOSTNAMELOOKUPS Off

therefore, Apache is unable to resolve the hostname ssl.isp.com.

Resolution

Enable hostname resolution in Apache by setting HOSTNAMELOOKUPS to On in the file /usr/local/pem/etc/apache/httpd.conf_pem and restart the web server:

# service pemhttpd restart

or re-register the SSL proxy server by its IP address instead of the hostname.

5356b422f65bdad1c3e9edca5d74a1ae caea8340e2d186a540518d08602aa065 e12cea1d47a3125d335d68e6d4e15e07 956c448bddc7e1f3585373687602379f 6f1456866eed87488c0f02b298a741c0

Email subscription for changes to this article
Save as PDF