The Apache Httpd interface to OpenSSL
0
votes
1answer
13 views
Minimum Key Length for Apache SSL
I'm trying to figure out the minimum key/cipher bit length that my Apache mod_ssl configuration will accept for client connections.
I ran openssl ciphers -v and saw ciphers of all lengths (40, 56, ...
1
vote
2answers
51 views
SSL Certificate Performance
Is it possible that a cheap security certificate could inhibit the performance of a website when serving pages over https?
Background: I have built an e-commerce website using Drupal 7 and Drupal ...
0
votes
1answer
44 views
installing SSL certs on apache … what certs to use?
Im an intermediate Linux user and got assigned the task to make Apache run https connections. Currently running centOS 6 and my problem is following:
installed mod_ssl and tried to set up paths ...
1
vote
1answer
125 views
SSL Error 107 - Apache2 SSL config
I'm trying to configure a new web server to host a website/php application. All web traffic to this server is supposed to be through https. I've read numerous tutorials as well as the Apache docs and ...
0
votes
1answer
37 views
Verify client certificate CN in Tomcat(APR)
I'm running a tomcat installation with the APR libraries installed (with the OpenSSL HTTPS stack that comes with it).
What I'm trying to do is to lock a specific HTTPS connector down to users of a ...
0
votes
1answer
21 views
Is it possible to allow only some client certificates in Apache to login?
In my virtual host I have something like that:
SSLEngine on
SSLCertificateKeyFile /etc/apache2/ssl/svn.XXXXX.me.key
SSLCertificateFile /etc/apache2/ssl/svn.XXXXX.me.crt
SSLProtocol ...
0
votes
0answers
20 views
Using mod_qos on Apache with SSL
I know that mod_qos is only for HTTP, and today I became painfully aware of that. I've tried searching but I haven't found any way to disable mod_qos for SSL vhost...
So, is it possible at all, or ...
2
votes
1answer
316 views
Apache SSL reverse proxy to a Embed Tomcat
I'm trying to put in place a reverse proxy for an application that is running a tomcat embed server over SSL. The application needs to run over SSL on the port 9002 so I have no way of "disabling SSL" ...
0
votes
1answer
108 views
Can't get self-signed CA cert to request corresponding client cert; Apache
I'm running Apache 2.2 on Windows, and have mod_ssl working fine for delivering a commercially signed server cert. (A wildcard cert, though I don't think it matters.)
I'm trying to get the server, ...
0
votes
1answer
115 views
Apache 2 reverse proxy to ssl local networked lamp app server - 95% working, except first page login redirection
Dived into the joys of using apache as a proxy. Awesome. There is a learning curve to deal with but the payoff is well worth it!
I took the virtual host approach to benefit from having the same urls ...
0
votes
1answer
72 views
Could not resolve host — no address associated with name
I'm setting up a web server on an old OpenBSD machine, and am getting an error each time I try to start Apache.
The server refused to start after I added my virtual host with HTTPS.
Error
could not ...
0
votes
1answer
77 views
How to install godaddy's ssl on apache
I'm setting up a mail server for a company, I've done everything, generated csr, everything is working, I just need to add godaddy's ssl, the instructions given by godaddy aren't clear, i need some ...
0
votes
1answer
57 views
Apache 500 error, I dont fully understand the error log
I'm trying to connect a backend server(gitorious running in https) to my frontend apache2 server running on ubuntu server. I believe that I have the vhost file and proxy config setup right but it ...
0
votes
0answers
66 views
apache modssl: browser error: ssl_error_handshake_failure_alert
Just setted up secure apache and getting this error when visit https_://localhost
Firefox:
Secure Connection Failed
An error occurred during a connection to localhost.
SSL peer was ...
0
votes
0answers
427 views
Install & configure mod_ssl on Amazon EC2 instance
I am trying to support HTTPS traffic with the mod_ssl module on my website. I am running an Amazon EC2 instance for my server. I have installed and configured the basic LAMP packages. However, when I ...
0
votes
0answers
49 views
mod_ssl and apache cipher suite client connections
Just starting out with managing an Apache server. Running into some issues while trying to integrate with a vendor API. I've verified all of the basic infrastructure issues (DNS, TCP ports, etc.) and ...
1
vote
2answers
107 views
Can an SSL certificate be on a single line in a file (no line breaks)?
SSL certificates by default have line breaks after 67 characters. I'm trying to create SSL certificate files using Chef. Essentially I want to create the entire certificate file from a string variable ...
2
votes
1answer
1k views
Disable SSL / TLS compression in Apache 2.2.x
Is there a way to disable SSL/TLS Compression in Apache 2.2.x when using mod_ssl?
If not, what are people doing to mitigate the effects of CRIME/BEAST in older browsers?
Related Links:
...
2
votes
2answers
41 views
Disabling Apache Directives That Don't Have an “Off” Value
I want certain Apache directives, like SSLCACertificateFile, to be enabled in some Locations, but disabled in others. For example,
# Require client certificates for http://example.com/secure
...
7
votes
1answer
2k views
How to disable SSLCompression on Apache httpd 2.2.15? (Defense against CRIME/BEAST)
I read about the CRIME attack against TLS Compression (CVE-2012-4929, CRIME is a successor to the BEAST attack against ssl & tls), and I want to protect my webservers against this attack by ...
0
votes
0answers
79 views
Reverse SSL_CLIENT_S_DN order in Apache?
For some odd reason, mod_nss makes the client DN look like this:
SSL_CLIENT_S_DN=C=SE,DC=FOO,serialNumber=123456789012,CN=BAR BAZ
Mod_ssl however makes it look like this:
SSL_CLIENT_S_DN=/CN=BAR ...
0
votes
0answers
164 views
SSLVerifyClient optional with location-based exceptions
I have a site that requires authentication in order to access certain directories, but not others. (The "directories" are really just rewrite rules that all pass through /index.php)
In order to ...
2
votes
0answers
45 views
is it possible to use KeyChain / ssh-agent with apache?
There are a lots a question (and duplicates) on serverfault asking how restart Apache without the passphrase prompt.
Two solutions are proposed :
removing the password from the key
the apache ...
-1
votes
2answers
261 views
Apache multiple virtual hosts with ssl certificates [duplicate]
Possible Duplicate:
Multiple SSL domains on the same IP address and same port?
I have an problem with Apache and multiple SSL certificates. In case if i config it only for one domain, ...
0
votes
2answers
89 views
Apache not responding after SSL handshake
Sometimes on my CentOS servers with Apache 2 + mod_ssl, Apache stops responding to requests made through HTTPS.
The SSL connection and handshake is successfull (I tested it with openssl s_client), but ...
0
votes
0answers
371 views
How to turn SSLCompression off in Apache 2.4.3?
I have installed Apache 2.4.3(OpenSSL 1.0.0j) on a machine and trying to do SSLCompression off in the ssl.conf file throws an error:
Syntax error on line 219 of /etc/httpd/conf.d/ssl.conf:
Invalid ...
0
votes
1answer
259 views
Is it possible to do client certificate authentication without running HTTPS on a webserver?
(Please note: this question is one of many "why don't you just try it?" questions. I certainly will, but since I haven't found an obvious answer by googling, I thought I might as well make it easier ...
0
votes
1answer
248 views
Installing mod_ssl on Centos, dependency issue
I'm installing a SSL certificate for a currently productive CentOS 5.8 (final)
So I runned this:
yum install mod_ssl
and got this:
Error: Missing Dependency: httpd = 2.2.3-65.el5.centos is needed ...
2
votes
1answer
281 views
Apache certificates for some urls not working
We are having a rather strange problem with a Apache-installation. Here is a short summary:
Currently I'm setting up Apache with https, and server-certificates. This is fairly easy and works straight ...
0
votes
1answer
146 views
RHEL6 - Fips140-2 - Apache fails when trying to start with SSLFIPS on directive
Hello server warriors!
I have a situation where I need to make my RHEL6 system FIPS140-2 compliant...which includes apache and mod_ssl. However, after I make the server run in "fips 140 mode" Apache ...
0
votes
1answer
40 views
Configure apache mod_ssl to use different certificates for incoming and outgoing messages
How could I configure mod_ssl to use different certificates for incoming and outgoing messages? I have managed to configure apache2 only to handle incoming messages with single certificate. Is it ...
0
votes
2answers
250 views
How to run a virtualhost 443 without an SSL cert?
I have a virtualhost directive that serves up a custom 404 error if invalid subdomain is entered:
<VirtualHost *:80> # the first virtual host
ServerName site_not_found
RedirectMatch 404 ...
1
vote
0answers
80 views
WebDAV over SSL - Cannot access folders - no errors in logs
I am running a CentOS server on Amazon EC2 and have WebDAV, Apache, and mod-ssl installed. I tested my current configuration first through port 80 and was able to connect to the dav without a hitch. ...
1
vote
1answer
99 views
HTTPS via a floating IP
I ran in what seems to see a case with little to no documentation.
I'm trying to serve content sitting behind Apache 2.2 via HTTPS. This Apache server is listening on two IP addresses, one static ...
0
votes
1answer
54 views
trouble in install mod_ssl
I make some trouble in install mod_ssl on my centos5.5.
when I type: yum install mod_ssl
Some wrong happened for:
Loaded plugins: fastestmirror
Determining fastest mirrors
addons ...
0
votes
0answers
56 views
How to pass subject.serialNumber of client certificate in Apache
We are doing client authenticatie using certificates in Apache. We want to pass the value in the subject.serialNumber of the certificate to the application server. It seems every field of the suject ...
0
votes
1answer
78 views
Host couldn't be reached by domain name, only by IP: Apache's fault?
I have this Windows Server 2003 R2 32 bit machine running Apache 2.4.2 with OpenSSL 1.0.1c and PHP 5.4.5 via mod_fcgid 2.3.7. This config worked just fine for some hours, but then the site couldn't be ...
1
vote
2answers
1k views
Apache: SSLCertificateKeyFile: file does not exist or is empty
I am configuring SSL for Apache 2. My system is Ubuntu Server 10.04 LTS. I have the following settings related to SSL in my vhost configuration:
SSLEngine On
SSLCertificateKeyFile ...
1
vote
2answers
7k views
Session Cache is not configured… why?
I'm running (trying to run, actually) Apache 2.4.2 on Windows Server 2003 R2 32 bit (plus PHP 5.4.5 and OpenSSL 1.0.1c, but I don't think that matters), and I'm getting the following line in the error ...
2
votes
2answers
699 views
How to Disable SSLv2 for Apache httpd
I just tested my site on https://www.ssllabs.com/ and it said SSLv2 is insecure and I should disable that along with weak Cipher Suites.
How can I disable that? I tried the following but it isn’t ...
3
votes
1answer
343 views
SSL_CLIENT_CERT_CHAIN not being passed to backend server
I have client certificate configured and working in Apache. I want to pass the PEM-encoded X.509 certificates of the client to the backend server.
I tried with the SSLOptions +ExportCertData. This ...
-1
votes
2answers
132 views
Troubles installing mod_ssl on RHEL 5 [closed]
[root@localhost ~]# yum install mod_ssl
Loaded plugins: security
Setting up Install Process
No package mod_ssl available.
Nothing to do
This my yum repo list:
Loaded plugins: security
repo id ...
0
votes
1answer
105 views
EC2 Apache server giving some old browsers a self signed certificate?
I bought a wildcard SSL from RapidSSL. It has been working great on my AWS load balancer, but recently, I noticed that the same certificate was not working on our test server which is not on the load ...
2
votes
2answers
2k views
SSL over non-standard port?
I have two different sites in one server: a.com and b.com.
If I use named virtualhost on ssl port, IE won't work.
So, I decided to use port 444 for SSL for b.com. However, it seems all browsers ...
0
votes
1answer
166 views
Apache2 ssl with ecc
Is it possible to configure Apache2 to use elliptic curve crypto (ecc) with SSL? This bug https://issues.apache.org/bugzilla/show_bug.cgi?id=40132 appears (to me) to indicate that this is supported, ...
2
votes
1answer
98 views
Apache (mod_ssl) not delivering SSL Certificates when requested
Houston, I have a problem.
I have an instance of Apache (httpd) on one machine using mod_ssl with openssl and mod_jk pointing at several tomcat instances on other physical machines. Apache is really ...
1
vote
0answers
93 views
Apache SSL x509 authentication timeout
I have setup a location to enable client authentication based on x509 certificates:
<Location /authenticate>
SSLRequireSSL
SSLVerifyClient require
SSLVerifyDepth 10
</Location>
...
2
votes
1answer
461 views
mod_spdy problems and speculations
I'm trying out mod_spdy and I've run into a problem - it seems to be incompatible with AJAX requests and mod_php as in this: https://www.modspdy.com/blog/2012/04/15/using-mod_spdy-with-php/
The ...
2
votes
2answers
654 views
Building an SSL server farm
I'm interested in building the the architecture in the article referenced below.
I currently have a modestly-priced layer-4 load balancer and my application servers are the SSL endpoints.
I want to ...
0
votes
1answer
390 views
Apache mod_rewrite behaves differently on SSL and non-SSL configs
I have a system where I'm hosting a number of SSL sites on my server. I also need to setup OAuth for each domain, with Google and Yahoo in particular. They each require verification files be installed ...
