The Apache Httpd interface to OpenSSL

learn more… | top users | synonyms

0
votes
2answers
22 views

configuring https on EC2

I know similar questions have been asked here and I read them all, but I could not get a clear answer. So I am asking here. I have an EC2 instance.It is a dedicated instance running LAMP. Everything ...
0
votes
1answer
39 views

How apache reverse proxy can be configured without breaking the https tunnel between client & server?

I have configured apache reverse proxy. In that configuration https connection is possible between client to reverse proxy and again reverse proxy to server. But I want https connection between client ...
3
votes
1answer
47 views

YouTrack on Tomcat 7 using SSL

I have a running YouTrack instance deployed using Tomcat 7 and it works fine on http://example.com:8080/youtrack Apache is already configured to support SSL for the main domain (I have .pem file). ...
0
votes
0answers
183 views

Apache mod_ssl [2.2.26] and Openssl [0.9.8za] compatibility

Our product running over RHEL has Apache 2.2.26 & OpenSSL 0.9.7 [ofcourse, pretty old]. We are currently upgrading Openssl to 0.9.8za. I have installed the latest OpenSSL RPMs. However Apache is ...
-1
votes
0answers
31 views

Segmentation fault after installing mod_ssl in Centos 6 [duplicate]

I installed mod_ssl (# yum install mod_ssl) on my CentOS 6.4 server and when I executed the below command to check apache configuration, found Segmentation Fault error message as Output. # apachectl ...
0
votes
1answer
168 views

Yum Update Failing mod_ssl and glibc_devel

Any ideas on how to get this to not fail? # yum update Freeing read locks for locker 0x82: 4189/140342084876032 Freeing read locks for locker 0x84: 4189/140342084876032 Freeing read locks for locker ...
0
votes
4answers
372 views

Can't start httpd 2.4.9 with self-signed SSL certificate

I cannot start the httpd 2.4.9 (tried 2.4.x too) on CentOS 6.5 with the simplest SSL config possible. The openssl version installed on the machine is OpenSSL 1.0.1e-fips 11 Feb 2013 (I've upgraded it ...
-2
votes
1answer
44 views

Virtual host, port 443 and ssl issue [closed]

I have a centos server, but I am having some issue regarding port 443 and ssl. my problem is that all domain on my server are accessible from HTTPS port. like when I visit a domain on my server from ...
0
votes
1answer
49 views

“Can't Connect to Server” from 2nd virtual host on VPS

I'm using Debian 7 Wheezy and Apache 2.2.22, and I'm setting up Virtual Hosts for a number of websites on my VPS. I've successfully configured the VirtualHost directives for one of the sites, but the ...
0
votes
1answer
53 views

Server suddenly stops responding and then resumes an hour later

My FreeBSD server had been perfectly working for over 2 years without any major changes to the system. Recently I installed SSL certificate using Apache's mod_ssl, and after 10 days of running fine ...
1
vote
1answer
201 views

How can I troubleshoot an Apache Server reverse proxy dropped connection?

We are suddenly seeing an intermittent, but very frequent, error while POSTing files to a Tomcat servlet over https via an Apache Server reverse proxy. The error only seems to occur while POSTing ...
0
votes
0answers
24 views

Apache2 + Mod_SSL user management

I'm currently playing around with PKI auth on my Apache2 server and I was just wondering if there is a quick/easy way to add/remove users from the SSLRequire line? Right now I have something like ...
0
votes
2answers
665 views

SSLCertificateChainFile Deprecation Warning on Apache 2.4.8+

We have an SSL Certificate for our website from Network Solutions. After upgrading Apache/OpenSSL to version 2.4.9, I now get the following warning when starting HTTPD: AH02559: The ...
0
votes
0answers
56 views

Multiplexing SPDY with Apache

I have a custom SPDY-based service running locally on my Apache web server. It serves a REST-style API that will be consumed by a custom SPDY client. My server also serves a standard HTTPS website. ...
0
votes
0answers
132 views

Understanding relationship between openssl & mod_ssl

I am bit confused between openssl & mod_ssl, so after hours of googling & readding documentation i have to post my query here .. I am on apache 2 which has ssl inbuilt, so where can i check ...
0
votes
0answers
174 views

Can't seem to get Apache SSL client certificate authentication working with an intermediate CA

I'm restructuring my personal CA system and trying to add an intermediate CA into the mix. I have a self-signed root CA whose certificate is imported into all appropriate browsers/OSes. I seem to be ...
-1
votes
1answer
63 views

Howto join ssl_access_log and access_log? [closed]

Recently I discovered in my /var/log/httpd files called ssl_access_log and ssl_error_log. Now I always looked and scanned the regular access_log and error_log. Questions are? Do ssl_error_log and ...
0
votes
0answers
66 views

Apache SSL Certificate and Basic Auth combination - password if no certificate

Is it possible, to force apache to ask for password only if user don't have client-certificate installed? I'm almost sure, that this is possible, but I'm not able to find any confirmation anywhere. ...
1
vote
0answers
964 views

Using Https between Apache Loadbalancer and backends

I am using an apache (2.4) server configured as loadbalancer in front of 2 apache servers. It works fine when I use http connections between loadbalancer and backends, however using https does not ...
1
vote
0answers
156 views

Apache passphrase working sometimes

On one of my servers I observe the following problem with SSL passphrase: some certs are passing it without asking for a password, while some others keep asking for it. I have set it up globally: ...
1
vote
0answers
341 views

Apache SSL handshake interrupted by system

I have an up-to-date Ubuntu 12.04 server running Apache 2.2.22-1ubuntu1.4. For every HTTPS request my Apache logs record what appear to be error messages related to encrypted connections. Self-signed ...
0
votes
2answers
114 views

Wrong application loads on port 443

I have a server with two web application that configured as follow: app1: www.domain1.com has https version app2: www.domain1.com has not https version This is my VirtualHost config for ...
3
votes
0answers
197 views

Apache 2.2 fails with “unable to write 'random state'” with 2048-bit RSA key (1024-bit works fine)

I'm usually pretty good with Apache and OpenSSL, but this one has me completely baffled. I'm running Apache 2.2.22 and OpenSSL 1.0.1 on a Ubuntu 12.04 LTS Server. I have an IP-based virtual host ...
1
vote
2answers
165 views

Allow connection from localhost to the HTTPS/Port 443 Protocol

We've recently set up a new development server and have been experiencing problems when trying to connect to an API via an instance of SoapClient. I think I've narrowed down the issue to being the ...
1
vote
1answer
36 views

How to log both HTTP and HTTPS requests to the same file

Using recent Apache on Linux. It's inconvenient to have the two different kinds of requests sent to two different log files since I like to watch the log file scroll by live via the shell. I also ...
2
votes
2answers
578 views

Discrepancy in SSL Ciphers between Apache 2.2 and OpenSSL 1.0.1

I'm running up-to-date Ubuntu 12.04 LTS with Apache 2.2.22-1ubuntu1.4 and OpenSSL 1.0.1-4ubuntu5.11. I have configured Apache to use ciphersuites list from ...
0
votes
0answers
161 views

Apache 2.4 configuration for ssl not working

Apache Server 2.4 with mod_jk 1.3.7 not working for ssl (https) Error 1: The Apache service named reported the following error: SSLSessionCache: 'shmcb' session cache not ...
0
votes
0answers
349 views

Apache 2.4 reload succeeds but restart fails when using SSL

On Apache 2.4, reload succeeds but restart fails when using SSL. Or to say it another way, the SSL configuration directives appear to work perfectly when doing a service reload but not a service ...
0
votes
2answers
46 views

Apache: Assign SSL server / client certs to directories

I have multiple directories on my system, e.g., /var/www/dir1 /var/www/dir2 /var/www/dir3 And what I'd like to do is to generate a server/client SSL certificate for each directory, and then set up ...
0
votes
0answers
85 views

google site map generator can't login admin console

I installed Google Sitemap Generator for linux x86_64 CentOS 6 But when I try to login to the admin console using this link myserverip:8181 and my password nothing happened. After refreshing I ...
0
votes
1answer
100 views

mod_ssl RPM conflict

I build Apache httpd into an RPM using these sites: http://erikwebb.net/blog/compile-and-install-apache-24-red-hat-enterprise-linux-rhel-6-or-centos-6 ...
3
votes
1answer
110 views

Certificates when using cas+apache (mod_auth_cas)

I'm running CAS authentication on one server, and a website that is to be secured on a seperate server on my local network. When I ran both CAS and Apache on the same server, they worked fine. When I ...
0
votes
1answer
13 views

What refer/mean “Remote Server Authentication” at Apache mod_ssl doc?

The part of the doc in that such term is used is this. Can anybody give some context or explain me what mean Remote Server Authentication there? I know that Apache server can authenticate clients but ...
2
votes
1answer
828 views

How to tell if SSL session caching is in fact working correctly with Apache 2.2?

We have Apache 2.2.22 running on Ubuntu 12.04. SSL is configured and enabled, with these directives in /etc/apache2/mods-enabled/ssl.conf: SSLSessionCache ...
0
votes
0answers
64 views

Can I use an Apache to forward an AES128-SHA:RC4-SHA connection to an SSL3?

we have a strange issue that I think, could be resolved with a proper Apache proxy (mod_ssl). Because of some SSL incompatibility with one web service (they are using Certicom), we need to downgrade ...
0
votes
1answer
159 views

No SSL certificate error when configuring redirection in virtual host

My server is working fine with a self-signed SSL certificate until I added the following lines to redirect request containing wwww to non-www site: <VirtualHost *:443> ServerName ...
0
votes
1answer
171 views

SSL/TLS Client certificate Authentication using RewriteCond and Rewrite Rules to perceptively redirect traffic not authorized

I finally end up to write here because IĀ“m badly struggling against apache, SSL/TLS and a client certificate authentication that should use the certificateĀ“s Serial Number to restrict access to a ...
1
vote
1answer
220 views

List of SSL Cipher Support by Browser

Not really sure if this is the appropriate SE to post this to, but here it is: Is there some online reference for what SSL ciphers are supported by the various browsers? Basically, I'm interested in ...
1
vote
1answer
278 views

Trouble configuring apache server to proxy an SSL connection

I'm running an application on Tomcat7 with Apache Portable Runtime, I bought an SSL certificate and configured it correctly - when I try to connect through the ip:port combination, it connects fine ...
0
votes
1answer
639 views

Thawte ssl 123 certificate installation on ubuntu 12, apache

I have recently purchased the ssl123 certificate from thwate. They have provided me following files 1:x.509 certificate 2:Apache Bundle 3:intermediate CA1 I am trying to install on my server but no ...
4
votes
3answers
509 views

How do I create a custom header from an existing SSL environment variable?

OK I have spent all day on this-- I'm using apache with mod_ssl I'm trying to take an existing environment header, "%{SSL_CLIENT_S_DN_CN}s" which looks like "Lastname Firstname Mi username" and set a ...
1
vote
1answer
108 views

OpenSSL response 404 issue on centOS 6

I followed this tutorial (though it's for 5.2, I figured I'd be alright). The changes I had to make that seemed to have worked: Rename ca.csr to ca.cslr (that's the one the command generated) List ...
8
votes
2answers
363 views

Why store Apache SSL certificate and private key in separate files?

The Apache mod_ssl documentation for the SSLCertificateFile and SSLCertificateKeyFile directives states that it is 'strongly discouraged' to store a private key and an SSL certificate in the same ...
6
votes
1answer
3k views

How to disable TLS 1.1 & 1.2 in Apache?

I have an Ubuntu 12.04.2 LTS server running Apache 2.2.22 with mod_ssl and OpenSSL v1.0.1. In my vhosts config (everything else within which behaves as I would expect), I have the SSLProtocol line ...
1
vote
0answers
101 views

Web Server with PKCS11 support for server certificates?

I have a PKCS#11-compatible smart card with either a private key, or a combination of a certificate and a private key on it (I can have both). I want to present the certificate from the smart card to ...
0
votes
1answer
107 views

Minimum Key Length for Apache SSL

I'm trying to figure out the minimum key/cipher bit length that my Apache mod_ssl configuration will accept for client connections. I ran openssl ciphers -v and saw ciphers of all lengths (40, 56, ...
1
vote
2answers
71 views

SSL Certificate Performance

Is it possible that a cheap security certificate could inhibit the performance of a website when serving pages over https? Background: I have built an e-commerce website using Drupal 7 and Drupal ...
0
votes
1answer
125 views

installing SSL certs on apache … what certs to use?

Im an intermediate Linux user and got assigned the task to make Apache run https connections. Currently running centOS 6 and my problem is following: installed mod_ssl and tried to set up paths ...
1
vote
1answer
824 views

SSL Error 107 - Apache2 SSL config

I'm trying to configure a new web server to host a website/php application. All web traffic to this server is supposed to be through https. I've read numerous tutorials as well as the Apache docs and ...
0
votes
1answer
431 views

Verify client certificate CN in Tomcat(APR)

I'm running a tomcat installation with the APR libraries installed (with the OpenSSL HTTPS stack that comes with it). What I'm trying to do is to lock a specific HTTPS connector down to users of a ...