DocumentRoot [/usr/share/zabbix] does not exist

[Jarne St]

Hello, I try to configure https for my zabbix server.

But I dont know wich DocumentRoot I have to use for my apache2 server.
The DocumentRoot as shown in the documentation (/usr/share/zabbix) dont exists on my machine.

I also try to use /Zabbix, but that also dont exist.

The only locations that exists in om my zabbix server is /home/jarne/zabbix-4.0.12 and the front-end in /home/jarne/zabbix-4.0.12/frontends/php.
But if I use this I have a 403 Forebidden error:


In my Apache2 error log I get this:

[Fri Oct 11 15:55:38.434671 2019] [ssl:error] [pid 7003:tid 140116910451648] AH02604: Unable to configure certificate localhost:443:0 for stapling
[Fri Oct 11 15:55:38.444499 2019] [ssl:warn] [pid 7005:tid 140116910451648] AH01906: localhost:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Oct 11 15:55:38.444686 2019] [ssl:error] [pid 7005:tid 140116910451648] AH02217: ssl_stapling_init_cert: can't retrieve issuer certificate! [subject: [email protected],CN=localhost,OU=Monitoring,O=Myriade,L=Drongen,ST=Oost-Vlaanderen,C=BE / issuer: [email protected],CN=localhost,OU=Monitoring,O=Myriade,L=Drongen,ST=Oost-Vlaanderen,C=BE / serial: 60C1D77D4B7FDAB18FCEEE392857360C11D050A3 / notbefore: Oct 11 12:20:01 2019 GMT / notafter: Oct 10 12:20:01 2020 GMT]
[Fri Oct 11 15:55:38.444700 2019] [ssl:error] [pid 7005:tid 140116910451648] AH02604: Unable to configure certificate localhost:443:0 for stapling
[Fri Oct 11 15:55:38.445801 2019] [mpm_event:notice] [pid 7005:tid 140116910451648] AH00489: Apache/2.4.29 (Ubuntu) OpenSSL/1.1.1 configured -- resuming normal operations
[Fri Oct 11 15:55:38.445866 2019] [core:notice] [pid 7005:tid 140116910451648] AH00094: Command line: '/usr/sbin/apache2'
[Fri Oct 11 15:56:43.386151 2019] [authz_core:error] [pid 7007:tid 140116689397504] [client 127.0.0.1:59282] AH01630: client denied by server configuration: /zabbix
[Fri Oct 11 15:57:05.530910 2019] [authz_core:error] [pid 7007:tid 140116672612096] [client 127.0.0.1:59490] AH01630: client denied by server configuration: /zabbix
[Fri Oct 11 15:57:19.391876 2019] [authz_core:error] [pid 7006:tid 140116681004800] [client 127.0.0.1:59640] AH01630: client denied by server configuration: /zabbix

Does anyone have an idea was is going wrong? And how to solve this?

I use Apache version 2.4.29 and zabbix server 4.0.13.

Thank you for your help!

[Jarne St]

My OS is Ubuntu 18.04.3 and my zabbix_server version 4.0.13

In my installation I have this location for Zabbix: /home/jarne/zabbix-4.0.12
(this contains all the files of Zabbix but I have no idea if this is the DocumertRoot)

My zabbix_server service is running properly. (So far, I don't see anything in the log file that could be incorrectly installed).

[Jarne St]

Do I need to use localhost or 127.0.0.1 when I generate my certificate with openssl?
This is my command:

sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/localhostForZabbix.key -out /etc/ssl/certs/localhostForZabbix.crt

And this field in my certificate:

Common Name (e.g. server FQDN or YOUR name) []:

(Correct my if I am wrong, normally a localhost ip adress is 127.0.0.1?)

[dimir]

There are bunch of tutorials on the net on how to enable ssl with apache. This one looks decent for Ubuntu: https://www.digitalocean.com/communi...n-ubuntu-18-04

But my advise is, since you are not so experienced in the subject, just install our official deb packages using https://zabbix.com/download and then add SSL support to apache using the above link.

[Jarne St]

Yes, I have seen that tutorial.
But that tutorial don't explains if I have to use localhost or the ip adress off my ServerName.

Now I get this warning:

AH01906: 127.0.0.1:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)