Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have an Apache, a ldaprc file fol TLS certificates and a PHP script for connection to an Active Directory server.

All settings from ldaprc are properly read by Apache when I start it. If I change something in ldaprc and restart Apache, settings are re-read as expected.

However, if I comment or delete a line in ldaprc, a line previously specifying a certificate, and restart Apache, my script continues to work and it should not. This is not a problem with the php script, because if I delete ldaprc and restart Apache, or modify the line with the certificate to point to an invalid certificate the script does not work.

My question is, does Apache have any SSL/TLS/Certificates caching mechanism or options?

My ldaprc:

TLS_REQCERT never
TLS_CACERT /x509/certs/ad.pem
TLS_CACERTDIR /x509/certs

Don't be confused by the paths, this is a custom based Linux distribution.

Apache is:

[root@localhost]# /www/bin/httpd -v       
Server version: Apache/2.2.11 (Unix)
Server built:   Apr  5 2011 06:09:43
share|improve this question
    
How do you restart apache? With apachectl -k restart or with apachectl stop && apachectl start? –  Mircea Vutcovici May 24 '11 at 15:33
    
/etc/init.d httpd stop; sleep(2); /etc/init.d/httpd start; And yes, I checked that it has different PIDs. –  Patkos Csaba May 25 '11 at 7:48
add comment

1 Answer

If you are not sure for a problem, you can use big guns - strace, tcpdump... For your case: you expect that apache has a cache that is preserved after restarts. This should be a file based cache. So look for all files opened by apache:

strace -f -e open apache
share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.