if you get following error in the apache/httpd log:
1 2 3 |
[Tue Dec 09 16:29:21 2014] [notice] SELinux policy enabled; httpd running as context unconfined_u:system_r:httpd_t:s0 [Tue Dec 09 16:29:21 2014] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec) [Tue Dec 09 16:29:21 2014] [error] (13)Permission denied: Init: Can't open server certificate file /etc/ssl/crt/YOURDOMAIN.crt |
you can fix this issue with the next command:
1 |
chcon unconfined_u:object_r:httpd_config_t:s0 /etc/ssl/crt/YOURDOMAIN.crt |
This is known as an selinux issue. The certificat file can have a wrong context and will be unreadable by the httpd daemon even if the regular permissions is correct.