https (apache2 and mod_ssl) hangs

[Bliaso]

Problem description https server (apache and mod_ssl) doesn't work as expected. It hangs during loading. It shows "Your connection is not private, ERR_CERT_AUTHORITY_INVALID (as expected)" and then it doesn't just load anything. The browsers hangs as well as curl. The port 8080 is currently returning page with "It Works!" on standard browsers. Curl https://127.0.0.1:8443 returns warning. When I use # curl --insecure https://127.0.0.1:8433 it hangs. The error_log doesn't contain anything particular regarding the https connection. Access log shows the GET request as if it would be processed.

Version: apache/2.4.39 (Unix) Server built: Apr 5 2019 17:08:58

Steps to reproduce

pkg install apache2 openssl openssl-tool

... custom generation of ssl certificate (e.g. https://tecadmin.net/enable-tls-in-modssl-and-apache) edit of httpd.conf and enablement of mod_log_config, mod_setenvif, mod_ssl and socache_shmcb_module

apachectl start

Expected behavior The page loads in the browser when opened through https on correct (8443) port.

Additional information Updatable packages: ca-certificates/stable 20190515 all [upgradable from: 20190124] libbz2/stable 1.0.6-4 i686 [upgradable from: 1.0.6-3] Subscribed repositories: https://dl.bintray.com/grimler/science-packages-24 science/stable https://dl.bintray.com/grimler/game-packages-24 games/stable https://dl.bintray.com/termux/termux-packages-24 stable/main System information: Linux localhost 4.14.88+ #1 SMP PREEMPT Tue Feb 12 03:18:59 UTC 2019 i686 Android Termux-packages arch: i686 Android version: 10 Device manufacturer: Google Device model: Android SDK built for x86

[stale[bot]]

This issue/PR has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[xSrolr4l]

In tutorial need "cert.pem", in README from /etc/letsencrypt/live/example.com/ sayd: "cert.pem is always crash the server (not recommended)". How to fix: replace the "cert.pem" with "fullchain.pem" and It Works!