The Apache Httpd interface to OpenSSL

learn more… | top users | synonyms

-1
votes
0answers
11 views

Install SSL on VM of Google Click to Deploy - Google Cloud Platform - WordPress

I already created the file .key, .csr and I have already the file .crt form COMODO.com but when I try to "Create an SslCertificate resource" I receive ERROR of permissions even with Root or Sudo ...
1
vote
1answer
28 views

bypass apache SSL and use tomcat instead

I don't want my clients to negotiate an SSL connection with Apache web server, I want them to do so with the tomcat server behind it instead. How can I do so? My current httpd.conf configuration is: ...
2
votes
0answers
39 views

Apache2:Unable to read server certificate from file

Cannot start apache2 server. error info is below. Looking into similar questions (SSL Error - unable to read server certificate from file, Apache cannot read certificate file, and so on), still ...
0
votes
1answer
42 views

SSL mod_proxy issues in <location> bracket

I am having trouble with getting proxypass to work in apache. My configuration file is as follows: <VirtualHost 1.2.3.4:443> ServerName example.com ServerAlias www.example.org ...
0
votes
1answer
41 views

extending <VirtualHost _default_:443> defined in conf.d/ssl.conf

I have some global directories, aliases and rewrite rules in my httpd.conf. They aplly to both 80 and 443. Now I want to add an http proxy on port 3128. I don't want it to be affected by existing ...
0
votes
0answers
66 views

SSL with Virtual Hosts Using SNI (multiple name based configs) - Need to get working with client certificate

I have the following configuration along with other name based virtual hosts. All others work fine but this one fails when enabling certificate authentication with the following error: Non-default ...
0
votes
0answers
15 views

Do any versions of Apache allow for a different declaration of SSLProtocol for different Virtual Hosts? [duplicate]

We are currently using Apache 2.4.10. For various reasons we need to drop support for TLS 1.0 and 1.1 on some domains, but leave 1.1 support on others. I've been reading but can't find a definitive ...
0
votes
0answers
74 views

Windows Server 2012 client having problems with secure renegotation on my apache server

Apache Version: Server version: Apache/2.4.10 (Unix) <Location /directoryPath> SSLVerifyClient require SSLVerifyDepth 5 </Location> <VirtualHost _default_:443> DocumentRoot ...
2
votes
0answers
61 views

How to verify that SSL cipher order is being enforced?

I'm running Apache 2.2.31 and I'm trying to get Perfect Forward Secrecy working. Using Qualys SSL Labs shows that pretty much everything except IE is using ciphers that can use forward secrecy. I've ...
3
votes
2answers
777 views

Can I upgrade OpenSSL version used by apache without recompiling the server but just mod_ssl?

I have an Apache server on a Unix machine: Apache/2.2.29 (Unix) OpenSSL/0.9.8zg I would like to upgrade the OpenSSL version to 1.0.2, which is the version currently installed on my system: ...
0
votes
1answer
170 views

ProxyPass HTTPS to other server

I have a server frontend.example.com with public IP. It's Apache (2.4) should proxy the traffic coming for service1.example.com (DNS alias to frontend.example.com). service1.example.com is a VM on a ...
2
votes
1answer
138 views

missing mod_ssl.so for lighttpd

I am trying to set up ssl (i.e. https) for my lighttpd web server running Debian 8 (Jessie). The relevant lines in lighttpd.conf are: server.modules = ( "mod_access", "mod_alias", ...
0
votes
0answers
37 views

Mutual Authentication - Allow from IP range without client certificate

Is it possible to set SSLVerifyClient: Require but, also allow IP range for users who do not have the client cert? Possibly to use: Order deny,allow Deny from all Allow from xxx.xxx.xxx.xxx ...
0
votes
1answer
180 views

Integrating Apache with PKCS#11 device via engine_pkcs11 and OpenSSL

I have problem with mod_ssl exactly with SSLCryptoDevice directive. When I run command "openssl engine" returns all available engines including pkcs11 (libengine-pkcs11-openssl), but When I set ...
2
votes
1answer
156 views

Unable to turn off SSLv3 on Apache 2.4.9 without losing TLS 1.1 and 1.2

I have an interesting problem with two Linux servers with Apache 2.4.9: i'm trying to disable SSL v3 and RC4 in order to block POODLE and keep SSL Labs happy. However, whenever i turn off SSL v3, i ...
1
vote
1answer
84 views

SSL Fault, Apache won't start [closed]

After installing an SSL certificate from Comodo following these instructions, I've found that apache will no longer start. This is my config: <VirtualHost *:80> ServerName latimer.io ...
0
votes
0answers
39 views

Configure Apache to act as client and accept certificate from another server

I have a django server which accepts only HTTPS and is configured with cert/key on port X. I have to configure Apache to act as a proxy to this Server. So all requests to Port X will go to Apache ...
2
votes
1answer
62 views

Do not use Client Cert Auth when on local network apache2

I'm hoping someone could help me with this question... I am running an Apache 2.4.7 server on my Ubuntu 14.04 box with some public facing sites. For some of those sites I've implemented a Client Cert ...
0
votes
1answer
17 views

Apache + mod_ssl configuration settings not being used

The configuration settings i set in httpd.conf don't seem to be actually working. After restarting Apache I used some online SSL check type websites and it appears that Apache isn't using the ...
1
vote
0answers
36 views

SSLProxyMachineCertificatePath certificate selection

How does SSLProxyMachineCertificatePath cert selection works? Or does it sends all of them in the request ?
0
votes
1answer
129 views

Disable cipher suite or change priority in apache based on IP address

I have run into an issue where I need to disable DH cipher suites or change the cipher suite priority only to certain IP addresses in Apache 2.4.7. Reason being is that a system running on JDK7 needs ...
0
votes
0answers
228 views

OCS Inventory Agent Peer certificate cannot be authenticated with known CA certificates

I have configured OCS Inventory server for our helpdesk department. Few days ago they asked me to help them with OCSAgent configuration. They agents don't want to connect to server via ssl when ...
1
vote
0answers
283 views

SSL Configuration failed in Apache after moving keys/certs to another machine

I'm in the process of moving my website to another server, and after moving the SSL key and certs and recreating the same Apache config, I encounter the following in the error logs at the time of ...
0
votes
3answers
1k views

After upgrade Wheezy to Jessie apache 2 SSL stops working

I upgraded server from Wheezy to Jessie, and Apache 2.4 stops working... Especially on port 443 there's no ssl .... telnet myhost 443 GET https://myhost <html><meta ...
1
vote
3answers
2k views

“Server should be SSL-aware but has no certificate configured”

Ubuntu 14.04 Apache 2.4.7 w/mod_ssl I'm trying to install a (single) domain certificate. For some reason, apache does not accept it and refuses to start if the related website is enabled. Despite ...
0
votes
1answer
84 views

How to correctly setup an Apache VirtualHost as HTTP and HTTPS?

I am trying to setup a locally (for development/testing purposes) SSL site using Apache and mod_ssl and this is what I have in my VirtualHost files: /etc/httpd/conf.d/local.conf <VirtualHost ...
0
votes
1answer
8k views

Job for httpd.service failed

after following this tutorial :https://www.digitalocean.com/community/tutorials/how-to-create-an-ssl-certificate-on-apache-for-centos-7 I have tried everything I possibly can to fix the error I have ...
1
vote
1answer
140 views

SSLRequire - file function

I'm having trouble with Apache 2.2 and the small documentation that I can find for the file function of SSLRequire. I'm trying to check the email property of the client certificate in a request using ...
0
votes
2answers
1k views

Apache:mod_ssl:Error: Private key not found

I'm installing a SSL certificate to serve HTTPS. I'm using Apache 2.4 in Amazon Linux and got the certificate in Startssl. My Vhost config is the following: <IfModule mod_ssl.c> ...
1
vote
0answers
541 views

Windows 8 IE 10 TLS Handshake Errors to Apache 2.2 on Centos 6.6

We are really stumped on this. During an upgrade to a newer Apache environment running on CentOS 6.6 we encountered weird problems with TLS connections from Windows 8 machines. The first hint at the ...
0
votes
1answer
113 views

Apache Reverse Proxy with SSL handling

I am trying to use apache as a reverse proxy, and to off load SSL processing from the underlying Node Js application. I have the configuration defined but it doesn't look as though the system is ...
-1
votes
2answers
132 views

HTTPS only on subdomain

I have a Jenkins install at ci.example.com, and a static site at example.com. The Jenkins install is configured to use HTTPS exclusively. I'm a cheapskate, so I only have a certificate for the ...
0
votes
0answers
92 views

Apache basic auth or SSL client certificate based on the originating IP

In Apache 2.4 is it possible to present a basic auth to the client if it comes from the predefined IP range and check a SSL client certificate otherwise. I know about FakeBasicAuth but this is not ...
0
votes
0answers
312 views

Apache mod_ssl StdEnvVars appear not to be set?

I have a CentOS 6.5 server running Apache 2.2.15 with mod_ssl and PHP 5.3.3. My problem is that PHP does not seem to recognize the HTTPS connection. I have the following in my ...
0
votes
1answer
499 views

Authenticate with Client SSL Certificate OR basic auth

For security reasons, the authentication for a web application should be migrated to SSL client certificates. It should be possible to log in with either username/password or SSL. In addition, users ...
0
votes
0answers
486 views

apache 2.4 don't find the SSL Certificate File

I try to configure SSL on my apache 2.4.12 Webserver. But apache2 can't find the Certificate and Key File in the corespondening ssl directory. I already checked file permissions but without success. ...
3
votes
1answer
743 views

Has SHA256 but why is it not used?

After performing an upgrade on Apache and modssl, I get a security warning in the security logo of the URL bar in Chrome when visiting my website on Apache server: The site is using outdated ...
-2
votes
1answer
79 views

how many SSL certificate can be listed in SSLServercert?

I wanted to list more than one certificate in SSLServercert, so that websites can use either one of these certificates. i will use "SSLServercert label1 label2" in httpd.conf file. label1 has IP based ...
0
votes
0answers
167 views

Force Apache to reload CRL without reloading everything

Is there a way to force the Apache server to reload an updated CRL without reloading everything? In particular, I noticed that it takes between 10 and 20 seconds for the application servers in ...
1
vote
0answers
382 views

Apache, mod_ssl, unsafe renegotiation and segmentation fault

I have a newly installed CentOS 7 server, running Apache httpd 2.4.6 and I just noticed that its audit logs grow too fast, with lots of entries like this one: type=ANOM_ABEND msg=audit(06/02/15 ...
2
votes
1answer
253 views

Can I use both RSA and ECC certificates in apache?

If I simply use "SSLCertificateFile" and "SSLCertificateKeyFile" twice, the certificate chain is broken for the first one. Can I use both RSA and ECC certificate which is issued from different ...
0
votes
1answer
51 views

Redirect non https domains to http [duplicate]

I have around 6-7 DOMAINS hosted on linode server where apache is a webserver. One domain is ssl configured and other runs on http only. Suppose https://www.example.com is ssl configured . others ...
0
votes
1answer
181 views

Force httpd 2.0 mod_ssl to use TLSv1 for proxied handshakes

I have an instance of httpd (version 2.0) that uses mod_proxy to transform incoming http requests to https. My problem is that I need my proxy to connect to a server that only supports SSLv3/TLSv1 ...
3
votes
0answers
133 views

mod_ssl client certificates on a reverse proxy

I am trying to add client certificate authentication on a reverse proxy that proxies an oracle application. Before adding, and if i remove the subsequent code, the oracle application is able to start ...
0
votes
0answers
311 views

Apache SSL page times out with server taking too long

I have an SSL site I'm trying to deliver with apache that is timing out when you load it in a web browser. I am seeing this message in the browser: The connection has timed out The server at ...
5
votes
2answers
3k views

Why did git stop working after server disabled SSLv3?

Like most others, our repository server needs to disable SSLv3 (and v2) ASAP. However, doing so seems to break our git-clients -- at least, on RHEL5 (connections from my FreeBSD desktop work fine). ...
0
votes
1answer
262 views

AH01896: Unable to determine list of acceptable CA certificates for client authentication in Apache v2.4 SSLCACertificatePath directive

I am using Apache v2.4 In ssl.conf file I am using SSLCACertificatePath directive with parameter like /var/dat/certificates/ssl.intermediate where ssl.intermediate is an empty directory with ...
2
votes
2answers
1k views

Apache redirect user if they are using SSLv3

I'd like to redirect any users on our site if they try to use SSLv3 (if I just disable SSLv3 and a browser like IE6 comes along, I couldn't seem to properly redirect it to an http version of our site ...
0
votes
1answer
1k views

Missing NPN Extension

I'm trying to set up mod_spdy with Apache (mod_spdy-0.9.4.3-r420 and apache2-2.2.22-13+deb7u3 on Debian Wheezy). As far as I can tell, everything is the way it's supposed to be, but I'm getting the ...
3
votes
1answer
3k views

SHA-2 signed SSL certificate crashes apache on startup on CentOS 5.X

In preparation of the warnings that are going to start showing up in browsers when visiting SSL sites with SHA1 signed certificates, I wanted to get all of the certs that I have upgraded. Some of ...