Questions tagged [mod-ssl]

The Apache Httpd interface to OpenSSL

Filter by
Sorted by
Tagged with
0 votes
0 answers
12 views

How to rewrite URL to reflect name of NLB not backends?

I have a network load balancer in front of my httpd backends servers, but if I try to use write the name of NLB in the URL of my browser it'll redirect me to one backend, which is the goal, however, ...
N. J's user avatar
  • 125
1 vote
1 answer
80 views

httpd crash with ssl_io_filter_cleanup () from /usr/lib64/httpd/modules/mod_ssl.so

version: httpd-2.4.54-1.el8.x86_64 Core generated when i do httpd condrestart for a task and also i can see some ssl_error_logs which is related to the core file pid. gdb logs: Core was generated by `/...
Bhanuchander Udhayakumar's user avatar
0 votes
1 answer
49 views

Virtual Host SSL and nonSSL with Proxy

I have 1 nonSSL server and many SSL with Proxy in Apache. Configuration SSL server: <VirtualHost *:443> ServerName test.com ServerAdmin [email protected] ErrorLog ${...
Jo K's user avatar
  • 111
0 votes
0 answers
100 views

Apache: Cannot make exception for SSLVerifyClient whith server-level restriction

I cannot make an exception for SSLVerifyCLient when it is at server level: SSLVerifyClient require SSLVerifyDepth 2 RequestHeader set SSL_CLIENT_VERIFY "" <Location /> <If "-R '...
sebelk's user avatar
  • 702
0 votes
1 answer
399 views

Is there a way to restart apache ignoring ssl certificate errors?

My server has lots of virtualhosts, many client's domains come and go pretty frequently, and sometimes it's difficult to act quickly, finding the culprit (usually a dismissed domain) and restart ...
user1967184's user avatar
0 votes
1 answer
667 views

Red Hat 8: Is 'mod_ssl' missing in official repositories?

I currently configure a Webserver with SSL certificate on a Red Hat 8 machine. I could not run properly apachectl configtest returning Invalid command 'SSLCertificateFile', perhaps misspelled or ...
Yann's user avatar
  • 25
0 votes
0 answers
310 views

Apache SSL not working - server took too long to respond

I am trying to get Apache (2.4.41, Ubuntu) to work with SSL and am not having luck. Whenever I visit the site in my browser, I get the error "This site can't be reached: my-domain took too long ...
Jeff's user avatar
  • 135
0 votes
0 answers
199 views

RPMBUILD Apache with mod_ssl - Not seeing/using new version of openssl

I am having issues attempting to get Apache with mod_ssl to see/use the new version of openssl which is 3.1.0. In my httpd.spec file I have specified --with-ssl=/opt/openssl/openssl3.1.0. rpmbuild -ba ...
Hosting wiz's user avatar
0 votes
1 answer
1k views

Apache reverse proxy mTLS only between client and proxy, regular TLS between proxy and backends

am trying to create an apache reverse proxy (for webservices) where i need Imutual authentication (mTLS) between clients and the proxy itself, but i don't need mTLS between the proxy & the ...
olivierg's user avatar
  • 524
1 vote
1 answer
118 views

Memcached error for apache httpd 2.4

I created an EC2 instance with Apache HTTPD 2.4 with mod_ssl version 2.4.34. I've created a Memcached cluster on AWS ElastiCache version 1.6.17 with encryption in transit. The goal is to have HTTPD ...
Byob 's user avatar
  • 111
1 vote
0 answers
472 views

How to enable SSL Proxy only on certain Locations in Apache

I am trying to use Apache as reverse proxy. For some locations I want to convert the client's HTTPS request to HTTP requests on the server. For another location I want to keep the client's HTTPS ...
Hendrik Jan's user avatar
0 votes
1 answer
91 views

Decrypting a Header in Apache

I am working on an application which accepts API Token. To be more secure, i want to ask the client (User or Another Application) to encrypt the API Token using their private key so that i can decrypt ...
Phoenix's user avatar
  • 11
4 votes
0 answers
5k views

ngnix php curl old SSL session ID is stale, removing

I am making a php curl request from nginx server to apache server It shows old SSL session ID is stale, removing As per the link I have changed the SSLSessionCacheTimeout in bitnami apache server but ...
DroidDev's user avatar
  • 141
0 votes
0 answers
613 views

502 on redirects from http to https on GCP

I'd like to start by saying that I know there are quite literally hundreds of topics about this, which I've followed before to get things working. Yet, this configuration, which I had working for ...
Jetto Martínez's user avatar
1 vote
1 answer
906 views

Apache 2.4: Require client certificate only for non-GET methods

We have an internal service running on HTTP with an Apache 2.4 instance (Debian Bullseye) put in front of it as a proxy for HTTPS. Apache and HTTPS are up and running, but an additional requirement is ...
T2PS's user avatar
  • 113
0 votes
1 answer
3k views

How to add a custom OpenSSL engine with OpenSSL and use from apache server?

I have a custom-built OpenSSL engine. I'm trying to make changes to openssl.cnf to load this engine automatically. My ultimate goal is to use this engine for Apache mod-ssl. Apache mod_ssl to use ...
user45698746's user avatar
0 votes
1 answer
235 views

How to fix TLS v1.2 issues? (SSL Lab)

I need to fix this problem. Tried a lot of methods to beat this problem, but all failed.
Mightdragon's user avatar
0 votes
1 answer
1k views

Apache HTTPS redirect to Tomcat web folder

I have configured my server to use httpd as proxy and Tomcat for deploying and running application. I use Apache httpd as proxy to redirect all request to port 80 and to the directory of tomcat where ...
ubey's user avatar
  • 1
0 votes
1 answer
340 views

PHP SERVER SSL_CLIENT_CERT disappears for when navigating pages

I am containerizing a legacy webservice that use SSL Client certificate validation. I have an apache 2.4 container and a PHP 7.4 FPM container. My apache virtual host conf looks like ... <...
Wanderer's user avatar
  • 133
0 votes
1 answer
467 views

When SSL directives takes effect

I'm trying to learn the basics of Apache server configuration, and wondering about SSL directives validity among different scopes on Apache. Those directives; SSLEngine on SSLCertificateFile "/...
Gal Shahar's user avatar
0 votes
2 answers
246 views

Best method for setting few SSL domains with redirects

I wonder what is "best" and recommended method of setting up SSL domains on single IP, where there are redirects from :80 to :443. This was not entirely covered here, because I need those ...
piotao's user avatar
  • 121
2 votes
1 answer
1k views

Apache dynamic paths with SSLRequire and dynamic aliases

I have Apache/2.4.6 (Red Hat Enterprise Linux) serving some content to different customers based on their SSL certificate that we issue out. If the SSL_CLIENT_S_DN_OU matches the OU in client's cert, ...
JaneD's user avatar
  • 65
1 vote
1 answer
2k views

Apache reverse proxy with SSL for DNS changeover

I'm currently migrating to a new host. There are around 20 domains all set up as name-based VHosts in apache. I read about Apache's reverse proxy ability as an idea to overcome DNS downtime, as not ...
ThrowAway92389134's user avatar
0 votes
1 answer
671 views

Mod SSL compiled against server

I have an issue with www+https redirection and I saw this error in logs: [ssl:warn] [pid 204:tid 412] AH01916: Init: (localhost:443) You configured HTTP(80) on the standard HTTPS(443) port! So I ...
Petri's user avatar
  • 49
0 votes
0 answers
956 views

Apache 2.4.37 on CentOS 8 doesn't start with SSL enabled

So, I got a brand new CentOS 8 server and I migrated from openSUSE Leap 15.1. The configuration of Apache is pretty much the standard one and I simply added my own sites as includes under the /etc/...
ptselios's user avatar
0 votes
3 answers
4k views

Difficulty compiling Apache with --enable-ssl

While trying to configure Apache to serve https with a newly installed certificate from certbot, I learned that mod_ssl isn't enabled. It's not even in the modules directory. I tried recompiling ...
Eddie Rowe's user avatar
0 votes
0 answers
23 views

SSL versions of sites not working on 2 sites same machine and ip virtual hosts

I have CentOS 8 I installed LAMP, Varnish, etc. I setup hosts /etc/hosts ip site1.com www.site1.com ip site2.com www.site2.com I setup Apache like this: /etc/httpd.conf to include sites-enabled/ ...
Wed's user avatar
  • 15
0 votes
0 answers
202 views

Apache 2.4 SSLClientVerify on top of Vhost, but exclude one URL

I have the following configuration: <VirtualHost *:443> SSLVerifyClient require SSLVerifyDepth 4 <Location /> ####SSLVerifyClient require ####SSLVerifyDepth 4 ...
Fozix's user avatar
  • 1
0 votes
1 answer
697 views

apache2 webdav givng a 405 error after enabling ssl certificate

Apache 2.4.29 \ Ubuntu 18.04 LTE The webdav was working fine before I was using an SSL connection, that is, when I was using a "http://" URL to access the folders in my server (which is pc with ...
Lord Amateur's user avatar
0 votes
1 answer
1k views

Apache not finding the HSM-protected private key over PKCS#11

I have installed Apache on my Centos7 virtual machine together with mod_ssl. I'm trying to make TLS working with the private key protected by an HSM over PKCS#11, but when I try to start Apache it ...
quinz's user avatar
  • 119
2 votes
1 answer
4k views

OpenSSL error when compiling Apache HTTPD - undefined reference to `SSL_in_init'

We run Apache HTTPD as a production load balancer using mod_ssl with OpenSSL. I'm trying to recompile Apache HTTPD on the latest version (2.4.41) and am encountering the following error when running ...
DGoodman's user avatar
0 votes
1 answer
3k views

Apache 2.4 compatibility with OpenSSL

We run Apache HTTPD as a load balancer in production, using mod_ssl with OpenSSL. Whilst trying to compile the latest Apache version (2.4.41) we've hit problems with OpenSSL whilst building. My ...
DGoodman's user avatar
0 votes
1 answer
1k views

Unable to get Client Certificate Chain from apache

I'm trying to get the client certificate chain and root from apache to my Java backend. This is the relevant part of my apache config: SSLOptions +StdEnvVars +ExportCertData RequestHeader set "...
Surya Midatala's user avatar
1 vote
1 answer
179 views

Apache 2.4 vhosts get redircted (missrouting)

I have a problem with apache config, like this issue (Apache 2.2.22 - Random Vhost misrouting) I have multi domains servered by same apache (using vhosts). sometimes I got response from other domain ...
Med.ZAIRI's user avatar
1 vote
1 answer
4k views

Disabling Apache client certificate validation on a specific page

I've setup client certificate validation in apache and it's working just fine. However I'd like to disable the client certificate validation on specific page. Here's the config I use so far : # ...
NaviR's user avatar
  • 50
1 vote
0 answers
2k views

Server saying no TLS/SSL protocols available even though mod_ssl/openssl installed and enabled

I am trying to add SSL certs to my server but when I connect via a browser it throws an error (ERR_SSL_PROTOCOL_ERROR in Chrome). This is confirmed using testssh (https://testssl.sh/) Testing ...
williamsdb's user avatar
1 vote
2 answers
2k views

Redirect port 8080 to 80

I've a tomcat running along with the apache2 on Amazon AMI. Till now all of my users were accessing my webapp by putting port number 8080 in url and then tomcat does auto-redirection to 8443. But now ...
Vishal Pawale's user avatar
0 votes
3 answers
2k views

EC2 - httpd service not running with 443 vhosts after installing mod_ssl

I'm experiencing issues with the configuration of mod_ssl on an AWS EC2 instance It appears I'm at some point where I cannot run httpd service via sudo service httpd restart since I installed the ...
Bastien Serprix's user avatar
0 votes
2 answers
3k views

How to connect through SSL to server requiring certificate exchange via an apache proxy?

I need to connect to an external server via SSL which only accepts certificates exchange following this architecture : Client (my Nodejs server) -----http-----> (Reverse?) Proxy ----https-----> ...
tristao's user avatar
0 votes
1 answer
969 views

RewriteEngine rules ignored by Apache on SSL

I have a working Apache setup on CentOS 7.6 using the standard Apache 2.4.6-88 package, using HTTP. I am trying to enable HTTPS on the server, and everything works, except for my RewriteEngine rules. ...
nafmo's user avatar
  • 480
1 vote
0 answers
112 views

How to allow a newly inserted user certificate with Apache 'SSLVerifyClient optional'?

My web users are able to optionally use a Smart Card Certificate to identify themself via Firefox to my web server running Apache httpd 2.4. For this I use SSLVerifyClient optional plus for speed ...
Petra Verheim's user avatar
1 vote
2 answers
7k views

Apache2 URL Rewrite with Reverse Proxy

I've been trying to accomplish a goal of using Apache as a reverse proxy to translate HTTP to HTTPS as well as using mod_rewrite to inject a query string. The reverse proxy works if tested without ...
Suterusu's user avatar
0 votes
0 answers
708 views

Apache 2.4 SSLSessionCache missed

Apache server is behind a physical loadbalancer et it uses an https connection between. The loadbalance break the https en create a new https connexion with apache. So it's always the same client ...
Mr_Thorynque's user avatar
0 votes
3 answers
21k views

Apache: SSLCertificateFile: file does not exist or is empty

I created a Private Key, CSR, and CRT using the below commands to run a Website using HTTPS on Apache 2.4.6. And the Operating System is Cent OS 7. // To generate a Private Key 1. openssl genrsa -...
Ankit Prajapati's user avatar
0 votes
1 answer
740 views

Apache on SLES only starts https with -D SSL arguments

I've been hacking up this server for a few days trying to convert a new installation of apache to HTTPS with the plan to convert it to NSS once I have SSL running properly. This server is not ...
Bill's user avatar
  • 136
0 votes
1 answer
664 views

"Server should be SSL-aware but has no certificate configured" Apache won't start

Never have set up a web server like this so I'm not sure what i'm doing wrong. I'm setting up my SSL certificate on my Ubuntu 14.04 server. The SSL is from NameCheap as is the domain. I'm getting this ...
Bob Stevenson's user avatar
0 votes
0 answers
563 views

apache2 segmentation fault on https requests

I am trying to configure an old OpenSuse server with https. The http virtualhost seems to work fine, however when I try to load the https url from my browser I get a: This site can’t be reached ...
Niko Zarzani's user avatar
0 votes
2 answers
307 views

Apache Canonical Host with one SSL certificate for with www. and without

Using SNI, there are multiple domains with their own SSL certificates (LetsEncrypt) on one IP address. For one of the primary domains, let's just say https://thedomain.tld, visiting https://www....
conspireagainst's user avatar
0 votes
1 answer
899 views

Apache SSLProxy

I am looking for a solution to provide a webapplication running on our local network under a subdomain via SSL. We dont want to use a DynDNS but a subdomain of our own domain. Our current setup Root ...
drohhyn's user avatar
1 vote
1 answer
4k views

How to bypass SSLVerifyClient for specific IP Address

I'm fairly new to HTTPD so I need some insight from the pro's. The previous admins set up HTTPD on a Linux box. It is configured to read Certs by the user accessing a specific DNS (ex: https://cxg-...
MCM's user avatar
  • 13

1
2 3 4 5 6