${WFS_SERVER_ADDR} is not defined

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:
defguild.org

I ran this command:
sudo certbot --apache

It produced this output:
$: sudo certbot --apache
Password:
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Error while running apachectl configtest.

[Fri Nov 15 09:23:40.206585 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_ADDR} is not defined [Fri Nov 15 09:23:40.207270 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_PORT} is not defined
[Fri Nov 15 09:23:40.207293 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_ADDR} is not defined [Fri Nov 15 09:23:40.207300 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_PORT} is not defined
[Fri Nov 15 09:23:40.213464 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_NAME} is not defined [Fri Nov 15 09:23:40.213477 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_PORT} is not defined
[Fri Nov 15 09:23:40.214043 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_ACCESS_GROUP} is not defined [Fri Nov 15 09:23:40.214065 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_NAME} is not defined
AH00526: Syntax error on line 23 of /private/etc/apache2/other/httpd_webdavsharing.conf:
Port must be specified

The apache plugin is not working; there may be problems with your existing configuration.
The error was: MisconfigurationError(‘Error while running apachectl configtest.\n\n[Fri Nov 15 09:23:40.206585 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_ADDR} is not defined\n[Fri Nov 15 09:23:40.207270 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_PORT} is not defined\n[Fri Nov 15 09:23:40.207293 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_ADDR} is not defined\n[Fri Nov 15 09:23:40.207300 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_PORT} is not defined\n[Fri Nov 15 09:23:40.213464 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_NAME} is not defined\n[Fri Nov 15 09:23:40.213477 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_PORT} is not defined\n[Fri Nov 15 09:23:40.214043 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_ACCESS_GROUP} is not defined\n[Fri Nov 15 09:23:40.214065 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_NAME} is not defined\nAH00526: Syntax error on line 23 of /private/etc/apache2/other/httpd_webdavsharing.conf:\nPort must be specified\n’)

My web server is (include version):
Apache/2.4.33

The operating system my web server runs on is (include version):
High Sierra 10.13.6

My hosting provider, if applicable, is:
I own and control the host computer.

I can login to a root shell on my machine (yes or no, or I don’t know):
yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
Apple’s Server v5.6.1

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):
certbot 0.39.0

= full message below

Greetings,

I am a hobbyist-level web amateur. My goal is to use certbot 0.39.0 to install a LetsEncript single-domain certificate on a Mac mini running High Sierra 10.13.6 (17G8037); over which I have complete control. The mini is using Apple’s Server v5.6.1 and Apache/2.4.33 (Unix).

I am not making much progress. :slight_smile:

I believe I have freshly and correctly installed Homebrew and certbot [https://certbot.eff.org/lets-encrypt/osx-apache], but I am unable to then obtain and install a certificate:

When I invoke:

: sudo certbot --apache or : sudo certbot certonly --apache

I quickly receive this error message:

==========
$: sudo certbot --apache
Password:
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Error while running apachectl configtest.

[Fri Nov 15 09:23:40.206585 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_ADDR} is not defined [Fri Nov 15 09:23:40.207270 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_PORT} is not defined
[Fri Nov 15 09:23:40.207293 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_ADDR} is not defined [Fri Nov 15 09:23:40.207300 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_PORT} is not defined
[Fri Nov 15 09:23:40.213464 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_NAME} is not defined [Fri Nov 15 09:23:40.213477 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_PORT} is not defined
[Fri Nov 15 09:23:40.214043 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_ACCESS_GROUP} is not defined [Fri Nov 15 09:23:40.214065 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_NAME} is not defined
AH00526: Syntax error on line 23 of /private/etc/apache2/other/httpd_webdavsharing.conf:
Port must be specified

The apache plugin is not working; there may be problems with your existing configuration.
The error was: MisconfigurationError(‘Error while running apachectl configtest.\n\n[Fri Nov 15 09:23:40.206585 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_ADDR} is not defined\n[Fri Nov 15 09:23:40.207270 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_PORT} is not defined\n[Fri Nov 15 09:23:40.207293 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_ADDR} is not defined\n[Fri Nov 15 09:23:40.207300 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_PORT} is not defined\n[Fri Nov 15 09:23:40.213464 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_NAME} is not defined\n[Fri Nov 15 09:23:40.213477 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_PORT} is not defined\n[Fri Nov 15 09:23:40.214043 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_ACCESS_GROUP} is not defined\n[Fri Nov 15 09:23:40.214065 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_NAME} is not defined\nAH00526: Syntax error on line 23 of /private/etc/apache2/other/httpd_webdavsharing.conf:\nPort must be specified\n’)

$: sudo apachectl configtest

returns the same error message.  I am flummoxed because these errors seem to relate to webdav environmental settings, but when I invoke:

$: sudo wsfctl diagnose

I get the following apparently [to me at least] clean bill of health for the WFS_ variables.  

==========

Settings configured at /etc/apache2/env.plist:
{
“-D SERVER_APP_HAS_DEFAULT_PORTS” = “”;
“WFS_ACCESS_GROUP” = everyone;
“WFS_MST_ID” = “SHA-1:f8bfeeb4f0760ee06283f3f00cb9a2bb155dc241:\“defguild.org.org\””;
“WFS_SERVER_ADDR” = “127.0.0.1”;
“WFS_SERVER_NAME” = “defguild.org.org”;
“WFS_SERVER_PORT” = 81;
}

WFS is enabled.
Found non-self-signed but non-trusted identity in keychain; commonName = defguild.org.org
Found self-signed identity in keychain; commonName = defguild.org.org
Found self-signed identity in keychain; commonName = defguild.org.org
Using identity with non-trusted but non-self-signed cert

Main httpd status:
Config syntax check:Syntax OK
Launch job is loaded.
Returns 200 on port 80.
Returns 200 port 443.
Config file specifies 127.0.0.1:81, non-SSL, which is correct behind-the-macOS-Server-proxy configuration, and is responding.
Checking available server names…
Configured ServerName defguild.org.org is among those available on machine.

Config is valid

I followed the link to Let's Debug, and seem to have passed:

==========
All OK!
OK
No issues were found with defguild.org. If you are having problems with creating an SSL certificate, please visit the Let’s Encrypt Community forums and post a question there.

FWIW, I have also manually edited 

/private/etc/apache2/env.plist

and restarted, but the changes I make in /etc/apache2/env.plist don't change the values returned by: wfsctl diagnose

Hopefully someone can point me in the right direction.  

Gracias,

John Echols

Reposting with hard line breaks. And, sorry for the bold type. JDE

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:
defguild.org

I ran this command:
sudo certbot --apache

It produced this output:

$: sudo certbot --apache
Password:
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Error while running apachectl configtest.

[Fri Nov 15 09:23:40.206585 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_ADDR} is not defined
[Fri Nov 15 09:23:40.207270 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_PORT} is not defined
[Fri Nov 15 09:23:40.207293 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_ADDR} is not defined
[Fri Nov 15 09:23:40.207300 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_PORT} is not defined
[Fri Nov 15 09:23:40.213464 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_NAME} is not defined
[Fri Nov 15 09:23:40.213477 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_PORT} is not defined
[Fri Nov 15 09:23:40.214043 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_ACCESS_GROUP} is not defined
[Fri Nov 15 09:23:40.214065 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_NAME} is not defined
AH00526: Syntax error on line 23 of /private/etc/apache2/other/httpd_webdavsharing.conf:
Port must be specified

The apache plugin is not working; there may be problems with your existing configuration.
The error was: MisconfigurationError('Error while running apachectl configtest.\n\n[Fri Nov 15 09:23:40.206585 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_ADDR} is not defined\n[Fri Nov 15 09:23:40.207270 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_PORT} is not defined\n[Fri Nov 15 09:23:40.207293 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_ADDR} is not defined\n[Fri Nov 15 09:23:40.207300 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_PORT} is not defined\n[Fri Nov 15 09:23:40.213464 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_NAME} is not defined\n[Fri Nov 15 09:23:40.213477 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_PORT} is not defined\n[Fri Nov 15 09:23:40.214043 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_ACCESS_GROUP} is not defined\n[Fri Nov 15 09:23:40.214065 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_NAME} is not defined\nAH00526: Syntax error on line 23 of /private/etc/apache2/other/httpd_webdavsharing.conf:\nPort must be specified\n')

My web server is (include version):
Apache/2.4.33

The operating system my web server runs on is (include version):
High Sierra 10.13.6

My hosting provider, if applicable, is:
I own and control the host computer.

I can login to a root shell on my machine (yes or no, or I don’t know):
yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
Apple’s Server v5.6.1

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):
certbot 0.39.0

= full message below

Greetings,

I am a hobbyist-level web amateur. My goal is to use certbot 0.39.0 to install a LetsEncript single-domain certificate on a Mac mini running High Sierra 10.13.6 (17G8037); over which I have complete control. The mini is using Apple’s Server v5.6.1 and Apache/2.4.33 (Unix).

I am not making much progress. :slight_smile:

I believe I have freshly and correctly installed Homebrew and certbot [https://certbot.eff.org/lets-encrypt/osx-apache], but I am unable to then obtain and install a certificate:

When I invoke:
$: sudo certbot --apache
	or
$: sudo certbot certonly --apache
I quickly receive this error message:
$: sudo certbot --apache
Password:
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Error while running apachectl configtest.

[Fri Nov 15 09:23:40.206585 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_ADDR} is not defined
[Fri Nov 15 09:23:40.207270 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_PORT} is not defined
[Fri Nov 15 09:23:40.207293 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_ADDR} is not defined
[Fri Nov 15 09:23:40.207300 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_PORT} is not defined
[Fri Nov 15 09:23:40.213464 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_NAME} is not defined
[Fri Nov 15 09:23:40.213477 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_PORT} is not defined
[Fri Nov 15 09:23:40.214043 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_ACCESS_GROUP} is not defined
[Fri Nov 15 09:23:40.214065 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_NAME} is not defined
AH00526: Syntax error on line 23 of /private/etc/apache2/other/httpd_webdavsharing.conf:
Port must be specified

The apache plugin is not working; there may be problems with your existing configuration.
The error was:

MisconfigurationError('Error while running apachectl configtest.\n\n[Fri Nov 15 09:23:40.206585 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_ADDR} is not defined\n[Fri Nov 15 09:23:40.207270 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_PORT} is not defined\n[Fri Nov 15 09:23:40.207293 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_ADDR} is not defined\n[Fri Nov 15 09:23:40.207300 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_PORT} is not defined\n[Fri Nov 15 09:23:40.213464 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_NAME} is not defined\n[Fri Nov 15 09:23:40.213477 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_PORT} is not defined\n[Fri Nov 15 09:23:40.214043 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_ACCESS_GROUP} is not defined\n[Fri Nov 15 09:23:40.214065 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_NAME} is not defined\nAH00526: Syntax error on line 23 of /private/etc/apache2/other/httpd_webdavsharing.conf:\nPort must be specified\n')

$: sudo apachectl configtest

returns the same error message.  I am flummoxed because these errors seem to relate to webdav environmental settings, but when I invoke:

$: sudo wsfctl diagnose

I get the following apparently [to me at least] clean bill of health for the WFS_ variables.  
...
Settings configured at /etc/apache2/env.plist:
{
    "-D SERVER_APP_HAS_DEFAULT_PORTS" = "";
    "WFS_ACCESS_GROUP" = everyone;
    "WFS_MST_ID" = "SHA-1:f8bfeeb4f0760ee06283f3f00cb9a2bb155dc241:\\\"defguild.org.org\\\"";
    "WFS_SERVER_ADDR" = "127.0.0.1";
    "WFS_SERVER_NAME" = "defguild.org.org";
    "WFS_SERVER_PORT" = 81;
}
...
WFS is enabled.
Found non-self-signed but non-trusted identity in keychain; commonName = defguild.org.org
Found self-signed identity in keychain; commonName = defguild.org.org
Found self-signed identity in keychain; commonName = defguild.org.org
Using identity with non-trusted but non-self-signed cert
...
Main httpd status:
	Config syntax check:Syntax OK
	Launch job is loaded.
	Returns 200 on port 80.
	Returns 200 port 443.
	Config file specifies 127.0.0.1:81, non-SSL, which is correct behind-the-macOS-Server-proxy configuration, and is responding.
Checking available server names...
Configured ServerName defguild.org.org is among those available on machine.

Config is valid

I followed the link to Let’s Debug, and seem to have passed:

All OK!
OK
No issues were found with defguild.org.org. If you are having problems with creating an SSL certificate, please visit the Let's Encrypt Community forums and post a question there.

FWIW, I have also manually edited /private/etc/apache2/env.plist
and restarted, but the changes I make in /etc/apache2/env.plist don’t change the values returned by: wfsctl diagnose

Hopefully someone can point me in the right direction.

Gracias,

John Echols

Hi @jdechols,

I am a hobbyist-level web amateur.

Welcome to the community forum and the club!

I edited your second post to clean up the code blocks which will help make more sense of the problem you’re encountering.

I see that your WFS_SERVER_NAME is configured as defguild.org.org instead of just defguild.org. I could be wrong, but that looks like a misconfiguration to me.

Have you set the main apache configuration to include the env.plist file with something like

Include "/private/etc/apache2/env.plist"

You can verify what files are being including by running the following. I suspect once your apache config includes it, the sudo apachectl configtest will return successfully.

sudo apachectl -t -D DUMP_INCLUDES

Failing that test, you could try using the apache setenv functionality to use that instead of a plist.
https://httpd.apache.org/docs/2.4/mod/mod_env.html

SetEnv WFS_ACCESS_GROUP "everyone"
SetEnv WFS_SERVER_ADDR "127.0.0.1"
...

Let me know how that goes!

2 Likes

Thanks for the response.

I’ve been trying different things I learned from

sudo apachectl -t -D DUMP_INCLUDES

I’ve also confirmed that mod_env is loading and I’ve manually set the WFS_ variables in both httpd.conf and httpd_webdavsharing.conf:

SetEnv WFS_ACCESS_GROUP "everyone"
SetEnv WFS_SERVER_ADDR "127.0.0.1"
SetEnv WFS_SERVER_PORT "81"
SetEnv WFS_SERVER_NAME "defguild.org"
```
Stopped and restarted apache with apachectl.

Same error msg about undefined WFS_ values, even though SetEnv had set the value a few lines earlier.  

For now I've restored the various files to their prior values.

It's taking sometime to follow these trails, and I just wanted to let you know I appreciate the help and I just might learn something.

Gracias,

John
1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.