I am attempting to renew the certificate on our source interface with the process outlined in: https://docs.securedrop.org/en/latest/https_source_interface.html .
I have verified that the correct .crt, private key, and CA files are uploaded in the install_files/ansible-base/ directory. However, when I run the ./securedrop-admin install script, the apache2 service fails to start. I am unable to start the service using this method or directly from the app server. When attempting the latter, I receive the following error:
apache2.service - The Apache HTTP Server
Loaded: loaded (/lib/systemd/system/apache2.service; enabled; vendor preset: enabled)
Active: failed (Result: exit-code) since Mon 2022-03-28 12:54:32 UTC; 28s ago
Docs: Apache HTTP Server Version 2.4 Documentation - Apache HTTP Server Version 2.4
Process: 132554 ExecStart=/usr/sbin/apachectl start (code=exited, status=1/FAILURE)
I initially thought this could be because of an issue with the new certificate files, but that does not appear to be the case. The new files seem to have all the same properties as the previous files which were used without any problems. Has anyone encountered this problem before and is there anything else I can focus my troubleshooting efforts on?
Thanks in advance for any info,
-Tucker