Can't access QPKQ Apps Web Page.

[smerlinj]

I can't access QPKG Apps Web Page for Optware and Tappin.
I click the links generated by the NAS's QPKG configuration pages - which in this case is:

Optware:
http://192.168.0.145:70/Optware/
https://192.168.0.145:7070/Optware/

TappIn
http://192.168.0.145:70/tappin/remoteAccessAdmin.cgi
https://192.168.0.145:7070/tappin/remoteAccessAdmin.cgi (When i enter the site through SSL port 443 Receives a QNAP message: Access Denied.)

but the browser can't connect to the IP address (ERR_CONNECTION_REFUSED).

LogitechMediaServer Web Page: http://192.168.0.145:9001/ is working correctly.


My Web Server is ON (to this page also don't have access):
http://192.168.0.145:70/
https://192.168.0.145:7070/
Access to the Web Serve I've only after pressing Maintenance: RESTORE. Unfortunately, when I turn on SSL both links no longer work.

Sorry for my english!

[schumaku]

Restore the default Apache Web server default configuration on the NAS.

Login on the NAS by SSH from your computer (Windows: puTTY, OS X Terminal app: ä ssh admin@[NAS-IP-address]) using the admin credentials.

Then you can enter the commands (the [~] shows just the currecnt directory, the # is the prompt:

[~] # cp /etc/default_config/apache.conf /etc/config/apache/apache.conf
[~] # cp /etc/default_config/php.ini /etc/config/php.ini
[~] # /etc/init.d/Qthttpd.sh restart
Shutting down Qthttpd services: Qthttpd.
apache: Could not reliably determine the server's fully qualified domain name, using 10.10.1.116 for ServerName
Apache httpd is stopped.
Starting Qthttpd services:Apache logs have been cleaned.
[~] #

Now retry.

[smerlinj]

I did as you said. Still not working
Every 30 seconds I get an error in System Logs:
"Re-launch process [apache]"


I do not have any more ideas
Maybe I should re-install apache. When i install the QNAP software 3.7.3 again will apache restore to the default values?

[schumaku]

Unfortunately, when I turn on SSL both links no longer work.

Missed this part of your original post.

Go to Home >> System Administration >> Security -> [SSL Secure Certificate & Private Key] -->> [Restore Default Certificate and Pricate Key]

This should cure - sorry, my mistake.

If this does not help - ew need to manually review some of the Apache config folders and files. No, these are not restored or reset when (re-)installing the firmware - as these areas can be used to customize the Apache configuration to some extent.

[smerlinj]

Unfortunately, when I turn on SSL both links no longer work.

Missed this part of your original post.

Go to Home >> System Administration >> Security -> [SSL Secure Certificate & Private Key] -->> [Restore Default Certificate and Pricate Key]

I found this solution in another topic. A problem still isn't solved.

[schumaku]

Check these:

[~] # tail /etc/config/apache/apache.conf
<IfModule ssl_module>
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
</IfModule>
Include /etc/config/apache/extra/apache-ssl.conf
Include /etc/config/apache/extra/apache-dav.conf

Include /etc/config/apache/extra/apache-msv2.conf
Include /etc/config/apache/extra/apache-musicstation.conf
Include /etc/config/apache/extra/apache-photo.conf

[~] # ls /etc/config/apache/extra/
apache-dav.conf httpd-autoindex.conf httpd-manual.conf httpd-userdir.conf
apache-msv2.conf httpd-dav.conf httpd-mpm.conf httpd-vhosts-user.conf
apache-musicstation.conf httpd-default.conf httpd-multilang-errordoc.conf httpd-vhosts.conf
apache-photo.conf httpd-info.conf httpd-ssl-vhosts-user.conf
apache-ssl.conf httpd-languages.conf httpd-ssl.conf

[~] # ls /share/Web
...

Re-applied the firmware?

[smerlinj]

I installed the older software.
Unfortunately for the proper functioning of the TappIn had to enable SSL (Enable secure connection (SSL)).
Now Apache problem apperas again (Re-launch process [apache]) every 30sek.

When I try to restart apache i have this errors:

[~] # /etc/init.d/Qthttpd.sh restart
Shutting down Qthttpd services: Qthttpd.
apache: Syntax error on line 189 of /etc/config/apache/apache.conf: Syntax error on line 85 of /etc/config/apache/extra/apache-ssl.conf: /etc/config/apache/extra/apache-ssl.conf:85: <VirtualHost> was not closed.
Apache httpd is stopped.
Starting Qthttpd services:Apache logs have been cleaned.


Line 82 to 87 in my apache-ssl.conf:

82
83 [WebFS]
84 Enable = TRUListen 8081
85 <VirtualHost _default_:8081>
86 Listen 8081
87

What should change in line 85?

[schumaku]

Ah - that's it: /etc/config/apache/extra/apache-ssl.conf is corrupt:

Code: Select all

LoadModule ssl_module modules/mod_ssl.so
SSLRandomSeed startup file:/dev/urandom 512
Listen 8081
AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl    .crl
SSLPassPhraseDialog  builtin
SSLSessionCache        "shmcb:/usr/local/apache/logs/ssl_scache(512000)"
SSLSessionCacheTimeout  300
SSLMutex  "file:/usr/local/apache/logs/ssl_mutex"
<Directory />
        Options FollowSymLinks
        AllowOverride None
        Order deny,allow
        Deny from all
        SSLRequire %{SSL_CIPHER} !~ m/^(EXP|NULL)/
</Directory>
<VirtualHost _default_:8081>
DocumentRoot "/share/Web"
ErrorLog "/usr/local/apache/logs/error_log"
TransferLog "/usr/local/apache/logs/access_log"
SSLEngine on
SSLCipherSuite ALL:!SSLv2:!LOW:!EXPORT40:@STRENGTH
SSLCertificateFile "/etc/stunnel/stunnel.pem"
#SSLCertificateKeyFile "/etc/config/apache/server.key"
#SSLCertificateChainFile "/etc/config/apache/server-ca.crt"
#SSLCACertificatePath "/etc/config/apache/ssl.crt"
#SSLCACertificateFile "/etc/config/apache/ssl.crt/ca-bundle.crt"
#SSLCARevocationPath "/etc/config/apache/ssl.crl"
#SSLCARevocationFile "/etc/config/apache/ssl.crl/ca-bundle.crl"
#SSLVerifyClient require
#SSLVerifyDepth  10

<FilesMatch "\.(cgi|shtml|phtml|php)$">
    SSLOptions +StdEnvVars
</FilesMatch>
<Directory "/usr/local/apache/cgi-bin">
    SSLOptions +StdEnvVars
</Directory>

BrowserMatch ".*MSIE.*" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0

CustomLog "/usr/local/apache/logs/ssl_request_log" \
          "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"

</VirtualHost>

You can copy it from /etc/default_config/apache-ssl.conf:

[~] # cp /etc/default_config/apache-ssl.conf /etc/config/apache/extra/apache-ssl.conf
[~] # /etc/init.d/Qthttpd.sh restart

I would suggest to update to the latest firmware image.

Login on the NAS by SSH from your computer (Windows: puTTY, OS X Terminal app: ä ssh admin@[NAS-IP-address]) using the admin credentials.

Then you can enter the commands (the [~] shows just the currecnt directory, the # is the prompt.

http://wiki.qnap.com/wiki/Manually_Updating_Firmware - the 1-2-3 should be enough.

[smerlinj]

It works!.
Thank you very much!