Httpd.service (Apache HTTP Server) failed to start on Virtual Appliance

Products

• CA Identity Suite

Issue/Introduction

Facing the following error running "sudo service httpd start" command in vApp

Job for httpd.service failed because the control process exited with error code.
See "systemctl status httpd.service" and "journalctl -xe" for details.

Running "systemctl status httpd.service" shows the following

● httpd.service - The Apache HTTP Server
   Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vendor preset: disabled)
  Drop-In: /etc/systemd/system/httpd.service.d
           └─vapp_env.conf
   Active: failed (Result: exit-code) since Mon 2023-07-31 11:02:33 +07; 1min 29s ago
     Docs: man:httpd.service(8)
  Process: 3706066 ExecStart=/usr/sbin/httpd $OPTIONS -DFOREGROUND (code=exited, status=1/FAILURE)
  Process: 3705879 ExecStartPre=/opt/CA/.VAPP_install/apache/apache_start_pre.sh (code=exited, status=0/SUCCESS)
 Main PID: 3706066 (code=exited, status=1/FAILURE)
   Status: "Reading configuration..."

Jul 31 11:02:32 XXXXXXXXXXXXX systemd[1]: Starting The Apache HTTP Server...
Jul 31 11:02:33 XXXXXXXXXXXXX apache_start_pre.sh[3705879]: [INFO] Configuring the following IP address in Apache configuration: nnn.nnn.nnn.nnn
Jul 31 11:02:33 XXXXXXXXXXXXX systemd[1]: httpd.service: Main process exited, code=exited, status=1/FAILURE
Jul 31 11:02:33 XXXXXXXXXXXXX systemd[1]: httpd.service: Failed with result 'exit-code'.
Jul 31 11:02:33 XXXXXXXXXXXXX systemd[1]: Failed to start The Apache HTTP Server.

Environment

Release : Identity Suite Virtual Appliance 14.4.x

Cause

 There is issue with custom key/cert files under /opt/CA/VirtualAppliance/custom/apache-ssl-certificates directory the customer has put.

Resolution

Restore the original localhost.key and localhost.crt files under /opt/CA/VirtualAppliance/custom/apache-ssl-certificates directory. Or correct the custom  localhost.key and localhost.crt files.

To test we can also copy over both localhost.key and localhost.crt files from a working node.

Additional Information

Replacing Virtual Appliance Web Console SSL Certificate