${WFS_SERVER_ADDR} is not defined

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:
defguild.org

I ran this command:
sudo certbot --apache

It produced this output:
$: sudo certbot --apache
Password:
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Error while running apachectl configtest.

[Fri Nov 15 09:23:40.206585 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_ADDR} is not defined [Fri Nov 15 09:23:40.207270 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_PORT} is not defined
[Fri Nov 15 09:23:40.207293 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_ADDR} is not defined [Fri Nov 15 09:23:40.207300 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_PORT} is not defined
[Fri Nov 15 09:23:40.213464 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_NAME} is not defined [Fri Nov 15 09:23:40.213477 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_PORT} is not defined
[Fri Nov 15 09:23:40.214043 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_ACCESS_GROUP} is not defined [Fri Nov 15 09:23:40.214065 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_NAME} is not defined
AH00526: Syntax error on line 23 of /private/etc/apache2/other/httpd_webdavsharing.conf:
Port must be specified

The apache plugin is not working; there may be problems with your existing configuration.
The error was: MisconfigurationError(ā€˜Error while running apachectl configtest.\n\n[Fri Nov 15 09:23:40.206585 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_ADDR} is not defined\n[Fri Nov 15 09:23:40.207270 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_PORT} is not defined\n[Fri Nov 15 09:23:40.207293 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_ADDR} is not defined\n[Fri Nov 15 09:23:40.207300 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_PORT} is not defined\n[Fri Nov 15 09:23:40.213464 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_NAME} is not defined\n[Fri Nov 15 09:23:40.213477 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_PORT} is not defined\n[Fri Nov 15 09:23:40.214043 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_ACCESS_GROUP} is not defined\n[Fri Nov 15 09:23:40.214065 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_NAME} is not defined\nAH00526: Syntax error on line 23 of /private/etc/apache2/other/httpd_webdavsharing.conf:\nPort must be specified\nā€™)

My web server is (include version):
Apache/2.4.33

The operating system my web server runs on is (include version):
High Sierra 10.13.6

My hosting provider, if applicable, is:
I own and control the host computer.

I can login to a root shell on my machine (yes or no, or I donā€™t know):
yes

Iā€™m using a control panel to manage my site (no, or provide the name and version of the control panel):
Appleā€™s Server v5.6.1

The version of my client is (e.g. output of certbot --version or certbot-auto --version if youā€™re using Certbot):
certbot 0.39.0

= full message below

Greetings,

I am a hobbyist-level web amateur. My goal is to use certbot 0.39.0 to install a LetsEncript single-domain certificate on a Mac mini running High Sierra 10.13.6 (17G8037); over which I have complete control. The mini is using Appleā€™s Server v5.6.1 and Apache/2.4.33 (Unix).

I am not making much progress. :slight_smile:

I believe I have freshly and correctly installed Homebrew and certbot [https://certbot.eff.org/lets-encrypt/osx-apache], but I am unable to then obtain and install a certificate:

When I invoke:

: sudo certbot --apache or : sudo certbot certonly --apache

I quickly receive this error message:

==========
$: sudo certbot --apache
Password:
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Error while running apachectl configtest.

[Fri Nov 15 09:23:40.206585 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_ADDR} is not defined [Fri Nov 15 09:23:40.207270 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_PORT} is not defined
[Fri Nov 15 09:23:40.207293 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_ADDR} is not defined [Fri Nov 15 09:23:40.207300 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_PORT} is not defined
[Fri Nov 15 09:23:40.213464 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_NAME} is not defined [Fri Nov 15 09:23:40.213477 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_PORT} is not defined
[Fri Nov 15 09:23:40.214043 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_ACCESS_GROUP} is not defined [Fri Nov 15 09:23:40.214065 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_NAME} is not defined
AH00526: Syntax error on line 23 of /private/etc/apache2/other/httpd_webdavsharing.conf:
Port must be specified

The apache plugin is not working; there may be problems with your existing configuration.
The error was: MisconfigurationError(ā€˜Error while running apachectl configtest.\n\n[Fri Nov 15 09:23:40.206585 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_ADDR} is not defined\n[Fri Nov 15 09:23:40.207270 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_PORT} is not defined\n[Fri Nov 15 09:23:40.207293 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_ADDR} is not defined\n[Fri Nov 15 09:23:40.207300 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_PORT} is not defined\n[Fri Nov 15 09:23:40.213464 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_NAME} is not defined\n[Fri Nov 15 09:23:40.213477 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_PORT} is not defined\n[Fri Nov 15 09:23:40.214043 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_ACCESS_GROUP} is not defined\n[Fri Nov 15 09:23:40.214065 2019] [core:warn] [pid 4289] AH00111: Config variable {WFS_SERVER_NAME} is not defined\nAH00526: Syntax error on line 23 of /private/etc/apache2/other/httpd_webdavsharing.conf:\nPort must be specified\nā€™)

$: sudo apachectl configtest

returns the same error message.  I am flummoxed because these errors seem to relate to webdav environmental settings, but when I invoke:

$: sudo wsfctl diagnose

I get the following apparently [to me at least] clean bill of health for the WFS_ variables.

==========
ā€¦
Settings configured at /etc/apache2/env.plist:
{
ā€œ-D SERVER_APP_HAS_DEFAULT_PORTSā€ = ā€œā€;
ā€œWFS_ACCESS_GROUPā€ = everyone;
ā€œWFS_MST_IDā€ = ā€œSHA-1:f8bfeeb4f0760ee06283f3f00cb9a2bb155dc241:\ā€œdefguild.org.org\ā€ā€;
ā€œWFS_SERVER_ADDRā€ = ā€œ127.0.0.1ā€;
ā€œWFS_SERVER_NAMEā€ = ā€œdefguild.org.orgā€;
ā€œWFS_SERVER_PORTā€ = 81;
}
ā€¦
WFS is enabled.
Found non-self-signed but non-trusted identity in keychain; commonName = defguild.org.org
Found self-signed identity in keychain; commonName = defguild.org.org
Found self-signed identity in keychain; commonName = defguild.org.org
Using identity with non-trusted but non-self-signed cert
ā€¦
Main httpd status:
Config syntax check:Syntax OK
Launch job is loaded.
Returns 200 on port 80.
Returns 200 port 443.
Config file specifies 127.0.0.1:81, non-SSL, which is correct behind-the-macOS-Server-proxy configuration, and is responding.
Checking available server namesā€¦
Configured ServerName defguild.org.org is among those available on machine.

Config is valid

I followed the link to Let's Debug, and seem to have passed:

==========
All OK!
OK
No issues were found with defguild.org. If you are having problems with creating an SSL certificate, please visit the Letā€™s Encrypt Community forums and post a question there.

FWIW, I have also manually edited

/private/etc/apache2/env.plist

and restarted, but the changes I make in /etc/apache2/env.plist don't change the values returned by: wfsctl diagnose

Hopefully someone can point me in the right direction.

Gracias,

John Echols

2

Reposting with hard line breaks. And, sorry for the bold type. JDE

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:
defguild.org

I ran this command:
sudo certbot --apache

It produced this output:

$: sudo certbot --apache
Password:
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Error while running apachectl configtest.

[Fri Nov 15 09:23:40.206585 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_ADDR} is not defined
[Fri Nov 15 09:23:40.207270 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_PORT} is not defined
[Fri Nov 15 09:23:40.207293 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_ADDR} is not defined
[Fri Nov 15 09:23:40.207300 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_PORT} is not defined
[Fri Nov 15 09:23:40.213464 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_NAME} is not defined
[Fri Nov 15 09:23:40.213477 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_PORT} is not defined
[Fri Nov 15 09:23:40.214043 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_ACCESS_GROUP} is not defined
[Fri Nov 15 09:23:40.214065 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_NAME} is not defined
AH00526: Syntax error on line 23 of /private/etc/apache2/other/httpd_webdavsharing.conf:
Port must be specified

The apache plugin is not working; there may be problems with your existing configuration.
The error was: MisconfigurationError('Error while running apachectl configtest.\n\n[Fri Nov 15 09:23:40.206585 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_ADDR} is not defined\n[Fri Nov 15 09:23:40.207270 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_PORT} is not defined\n[Fri Nov 15 09:23:40.207293 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_ADDR} is not defined\n[Fri Nov 15 09:23:40.207300 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_PORT} is not defined\n[Fri Nov 15 09:23:40.213464 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_NAME} is not defined\n[Fri Nov 15 09:23:40.213477 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_PORT} is not defined\n[Fri Nov 15 09:23:40.214043 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_ACCESS_GROUP} is not defined\n[Fri Nov 15 09:23:40.214065 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_NAME} is not defined\nAH00526: Syntax error on line 23 of /private/etc/apache2/other/httpd_webdavsharing.conf:\nPort must be specified\n')

My web server is (include version):
Apache/2.4.33

The operating system my web server runs on is (include version):
High Sierra 10.13.6

My hosting provider, if applicable, is:
I own and control the host computer.

I can login to a root shell on my machine (yes or no, or I donā€™t know):
yes

Iā€™m using a control panel to manage my site (no, or provide the name and version of the control panel):
Appleā€™s Server v5.6.1

The version of my client is (e.g. output of certbot --version or certbot-auto --version if youā€™re using Certbot):
certbot 0.39.0

= full message below

Greetings,

I am a hobbyist-level web amateur. My goal is to use certbot 0.39.0 to install a LetsEncript single-domain certificate on a Mac mini running High Sierra 10.13.6 (17G8037); over which I have complete control. The mini is using Appleā€™s Server v5.6.1 and Apache/2.4.33 (Unix).

I am not making much progress. :slight_smile:

I believe I have freshly and correctly installed Homebrew and certbot [https://certbot.eff.org/lets-encrypt/osx-apache], but I am unable to then obtain and install a certificate:

When I invoke:

$: sudo certbot --apache
	or
$: sudo certbot certonly --apache

I quickly receive this error message:

$: sudo certbot --apache
Password:
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Error while running apachectl configtest.

[Fri Nov 15 09:23:40.206585 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_ADDR} is not defined
[Fri Nov 15 09:23:40.207270 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_PORT} is not defined
[Fri Nov 15 09:23:40.207293 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_ADDR} is not defined
[Fri Nov 15 09:23:40.207300 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_PORT} is not defined
[Fri Nov 15 09:23:40.213464 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_NAME} is not defined
[Fri Nov 15 09:23:40.213477 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_PORT} is not defined
[Fri Nov 15 09:23:40.214043 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_ACCESS_GROUP} is not defined
[Fri Nov 15 09:23:40.214065 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_NAME} is not defined
AH00526: Syntax error on line 23 of /private/etc/apache2/other/httpd_webdavsharing.conf:
Port must be specified

The apache plugin is not working; there may be problems with your existing configuration.
The error was:

MisconfigurationError('Error while running apachectl configtest.\n\n[Fri Nov 15 09:23:40.206585 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_ADDR} is not defined\n[Fri Nov 15 09:23:40.207270 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_PORT} is not defined\n[Fri Nov 15 09:23:40.207293 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_ADDR} is not defined\n[Fri Nov 15 09:23:40.207300 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_PORT} is not defined\n[Fri Nov 15 09:23:40.213464 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_NAME} is not defined\n[Fri Nov 15 09:23:40.213477 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_PORT} is not defined\n[Fri Nov 15 09:23:40.214043 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_ACCESS_GROUP} is not defined\n[Fri Nov 15 09:23:40.214065 2019] [core:warn] [pid 4289] AH00111: Config variable ${WFS_SERVER_NAME} is not defined\nAH00526: Syntax error on line 23 of /private/etc/apache2/other/httpd_webdavsharing.conf:\nPort must be specified\n')

$: sudo apachectl configtest

returns the same error message.  I am flummoxed because these errors seem to relate to webdav environmental settings, but when I invoke:

$: sudo wsfctl diagnose

I get the following apparently [to me at least] clean bill of health for the WFS_ variables.  

...
Settings configured at /etc/apache2/env.plist:
{
    "-D SERVER_APP_HAS_DEFAULT_PORTS" = "";
    "WFS_ACCESS_GROUP" = everyone;
    "WFS_MST_ID" = "SHA-1:f8bfeeb4f0760ee06283f3f00cb9a2bb155dc241:\\\"defguild.org.org\\\"";
    "WFS_SERVER_ADDR" = "127.0.0.1";
    "WFS_SERVER_NAME" = "defguild.org.org";
    "WFS_SERVER_PORT" = 81;
}
...
WFS is enabled.
Found non-self-signed but non-trusted identity in keychain; commonName = defguild.org.org
Found self-signed identity in keychain; commonName = defguild.org.org
Found self-signed identity in keychain; commonName = defguild.org.org
Using identity with non-trusted but non-self-signed cert
...
Main httpd status:
	Config syntax check:Syntax OK
	Launch job is loaded.
	Returns 200 on port 80.
	Returns 200 port 443.
	Config file specifies 127.0.0.1:81, non-SSL, which is correct behind-the-macOS-Server-proxy configuration, and is responding.
Checking available server names...
Configured ServerName defguild.org.org is among those available on machine.

Config is valid

I followed the link to Letā€™s Debug, and seem to have passed:

All OK!
OK
No issues were found with defguild.org.org. If you are having problems with creating an SSL certificate, please visit the Let's Encrypt Community forums and post a question there.

FWIW, I have also manually edited /private/etc/apache2/env.plist
and restarted, but the changes I make in /etc/apache2/env.plist donā€™t change the values returned by: wfsctl diagnose

Hopefully someone can point me in the right direction.

Gracias,

John Echols

3

Hi @jdechols,

I am a hobbyist-level web amateur.

Welcome to the community forum and the club!

I edited your second post to clean up the code blocks which will help make more sense of the problem you're encountering.

I see that your WFS_SERVER_NAME is configured as defguild.org.org instead of just defguild.org. I could be wrong, but that looks like a misconfiguration to me.

Have you set the main apache configuration to include the env.plist file with something like

Include "/private/etc/apache2/env.plist"

You can verify what files are being including by running the following. I suspect once your apache config includes it, the sudo apachectl configtest will return successfully.

sudo apachectl -t -D DUMP_INCLUDES

Failing that test, you could try using the apache setenv functionality to use that instead of a plist.
https://httpd.apache.org/docs/2.4/mod/mod_env.html

SetEnv WFS_ACCESS_GROUP "everyone"
SetEnv WFS_SERVER_ADDR "127.0.0.1"
...

Let me know how that goes!

2 Likes
4

Thanks for the response.

Iā€™ve been trying different things I learned from

sudo apachectl -t -D DUMP_INCLUDES

Iā€™ve also confirmed that mod_env is loading and Iā€™ve manually set the WFS_ variables in both httpd.conf and httpd_webdavsharing.conf:

SetEnv WFS_ACCESS_GROUP "everyone"
SetEnv WFS_SERVER_ADDR "127.0.0.1"
SetEnv WFS_SERVER_PORT "81"
SetEnv WFS_SERVER_NAME "defguild.org"
```
Stopped and restarted apache with apachectl.

Same error msg about undefined WFS_ values, even though SetEnv had set the value a few lines earlier.  

For now I've restored the various files to their prior values.

It's taking sometime to follow these trails, and I just wanted to let you know I appreciate the help and I just might learn something.

Gracias,

John
1 Like
5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.