The Apache Httpd interface to OpenSSL

learn more… | top users | synonyms

0
votes
0answers
12 views

Mutual Authentication - Allow from IP range without client certificate

Is it possible to set SSLVerifyClient: Require but, also allow IP range for users who do not have the client cert? Possibly to use: Order deny,allow Deny from all Allow from xxx.xxx.xxx.xxx ...
0
votes
1answer
15 views

Integrating Apache with PKCS#11 device via engine_pkcs11 and OpenSSL

I have problem with mod_ssl exactly with SSLCryptoDevice directive. When I run command "openssl engine" returns all available engines including pkcs11 (libengine-pkcs11-openssl), but When I set ...
2
votes
1answer
42 views

Unable to turn off SSLv3 on Apache 2.4.9 without losing TLS 1.1 and 1.2

I have an interesting problem with two Linux servers with Apache 2.4.9: i'm trying to disable SSL v3 and RC4 in order to block POODLE and keep SSL Labs happy. However, whenever i turn off SSL v3, i ...
1
vote
1answer
33 views

SSL Fault, Apache won't start [closed]

After installing an SSL certificate from Comodo following these instructions, I've found that apache will no longer start. This is my config: <VirtualHost *:80> ServerName latimer.io ...
0
votes
0answers
21 views

Configure Apache to act as client and accept certificate from another server

I have a django server which accepts only HTTPS and is configured with cert/key on port X. I have to configure Apache to act as a proxy to this Server. So all requests to Port X will go to Apache ...
2
votes
1answer
40 views

Do not use Client Cert Auth when on local network apache2

I'm hoping someone could help me with this question... I am running an Apache 2.4.7 server on my Ubuntu 14.04 box with some public facing sites. For some of those sites I've implemented a Client Cert ...
0
votes
1answer
13 views

Apache + mod_ssl configuration settings not being used

The configuration settings i set in httpd.conf don't seem to be actually working. After restarting Apache I used some online SSL check type websites and it appears that Apache isn't using the ...
1
vote
0answers
17 views

SSLProxyMachineCertificatePath certificate selection

How does SSLProxyMachineCertificatePath cert selection works? Or does it sends all of them in the request ?
0
votes
1answer
47 views

Disable cipher suite or change priority in apache based on IP address

I have run into an issue where I need to disable DH cipher suites or change the cipher suite priority only to certain IP addresses in Apache 2.4.7. Reason being is that a system running on JDK7 needs ...
0
votes
0answers
91 views

OCS Inventory Agent Peer certificate cannot be authenticated with known CA certificates

I have configured OCS Inventory server for our helpdesk department. Few days ago they asked me to help them with OCSAgent configuration. They agents don't want to connect to server via ssl when ...
1
vote
0answers
109 views

SSL Configuration failed in Apache after moving keys/certs to another machine

I'm in the process of moving my website to another server, and after moving the SSL key and certs and recreating the same Apache config, I encounter the following in the error logs at the time of ...
0
votes
3answers
484 views

After upgrade Wheezy to Jessie apache 2 SSL stops working

I upgraded server from Wheezy to Jessie, and Apache 2.4 stops working... Especially on port 443 there's no ssl .... telnet myhost 443 GET https://myhost <html><meta ...
1
vote
2answers
220 views

“Server should be SSL-aware but has no certificate configured”

Ubuntu 14.04 Apache 2.4.7 w/mod_ssl I'm trying to install a (single) domain certificate. For some reason, apache does not accept it and refuses to start if the related website is enabled. Despite ...
0
votes
1answer
69 views

How to correctly setup an Apache VirtualHost as HTTP and HTTPS?

I am trying to setup a locally (for development/testing purposes) SSL site using Apache and mod_ssl and this is what I have in my VirtualHost files: /etc/httpd/conf.d/local.conf <VirtualHost ...
0
votes
1answer
2k views

Job for httpd.service failed

after following this tutorial :https://www.digitalocean.com/community/tutorials/how-to-create-an-ssl-certificate-on-apache-for-centos-7 I have tried everything I possibly can to fix the error I have ...
1
vote
1answer
83 views

SSLRequire - file function

I'm having trouble with Apache 2.2 and the small documentation that I can find for the file function of SSLRequire. I'm trying to check the email property of the client certificate in a request using ...
0
votes
2answers
368 views

Apache:mod_ssl:Error: Private key not found

I'm installing a SSL certificate to serve HTTPS. I'm using Apache 2.4 in Amazon Linux and got the certificate in Startssl. My Vhost config is the following: <IfModule mod_ssl.c> ...
1
vote
0answers
300 views

Windows 8 IE 10 TLS Handshake Errors to Apache 2.2 on Centos 6.6

We are really stumped on this. During an upgrade to a newer Apache environment running on CentOS 6.6 we encountered weird problems with TLS connections from Windows 8 machines. The first hint at the ...
0
votes
1answer
74 views

Apache Reverse Proxy with SSL handling

I am trying to use apache as a reverse proxy, and to off load SSL processing from the underlying Node Js application. I have the configuration defined but it doesn't look as though the system is ...
-1
votes
2answers
64 views

HTTPS only on subdomain

I have a Jenkins install at ci.example.com, and a static site at example.com. The Jenkins install is configured to use HTTPS exclusively. I'm a cheapskate, so I only have a certificate for the ...
0
votes
0answers
65 views

Apache basic auth or SSL client certificate based on the originating IP

In Apache 2.4 is it possible to present a basic auth to the client if it comes from the predefined IP range and check a SSL client certificate otherwise. I know about FakeBasicAuth but this is not ...
0
votes
0answers
109 views

Apache mod_ssl StdEnvVars appear not to be set?

I have a CentOS 6.5 server running Apache 2.2.15 with mod_ssl and PHP 5.3.3. My problem is that PHP does not seem to recognize the HTTPS connection. I have the following in my ...
0
votes
1answer
222 views

Authenticate with Client SSL Certificate OR basic auth

For security reasons, the authentication for a web application should be migrated to SSL client certificates. It should be possible to log in with either username/password or SSL. In addition, users ...
0
votes
0answers
312 views

apache 2.4 don't find the SSL Certificate File

I try to configure SSL on my apache 2.4.12 Webserver. But apache2 can't find the Certificate and Key File in the corespondening ssl directory. I already checked file permissions but without success. ...
3
votes
1answer
517 views

Has SHA256 but why is it not used?

After performing an upgrade on Apache and modssl, I get a security warning in the security logo of the URL bar in Chrome when visiting my website on Apache server: The site is using outdated ...
-2
votes
1answer
53 views

how many SSL certificate can be listed in SSLServercert?

I wanted to list more than one certificate in SSLServercert, so that websites can use either one of these certificates. i will use "SSLServercert label1 label2" in httpd.conf file. label1 has IP based ...
0
votes
0answers
100 views

Force Apache to reload CRL without reloading everything

Is there a way to force the Apache server to reload an updated CRL without reloading everything? In particular, I noticed that it takes between 10 and 20 seconds for the application servers in ...
0
votes
0answers
223 views

Apache, mod_ssl, unsafe renegotiation and segmentation fault

I have a newly installed CentOS 7 server, running Apache httpd 2.4.6 and I just noticed that its audit logs grow too fast, with lots of entries like this one: type=ANOM_ABEND msg=audit(06/02/15 ...
2
votes
1answer
135 views

Can I use both RSA and ECC certificates in apache?

If I simply use "SSLCertificateFile" and "SSLCertificateKeyFile" twice, the certificate chain is broken for the first one. Can I use both RSA and ECC certificate which is issued from different ...
0
votes
1answer
49 views

Redirect non https domains to http [duplicate]

I have around 6-7 DOMAINS hosted on linode server where apache is a webserver. One domain is ssl configured and other runs on http only. Suppose https://www.example.com is ssl configured . others ...
0
votes
1answer
101 views

Force httpd 2.0 mod_ssl to use TLSv1 for proxied handshakes

I have an instance of httpd (version 2.0) that uses mod_proxy to transform incoming http requests to https. My problem is that I need my proxy to connect to a server that only supports SSLv3/TLSv1 ...
2
votes
0answers
102 views

mod_ssl client certificates on a reverse proxy

I am trying to add client certificate authentication on a reverse proxy that proxies an oracle application. Before adding, and if i remove the subsequent code, the oracle application is able to start ...
0
votes
0answers
226 views

Apache SSL page times out with server taking too long

I have an SSL site I'm trying to deliver with apache that is timing out when you load it in a web browser. I am seeing this message in the browser: The connection has timed out The server at ...
5
votes
2answers
1k views

Why did git stop working after server disabled SSLv3?

Like most others, our repository server needs to disable SSLv3 (and v2) ASAP. However, doing so seems to break our git-clients -- at least, on RHEL5 (connections from my FreeBSD desktop work fine). ...
0
votes
0answers
68 views

Apache Webserver: Map ClientCertificate to Active Directory

Using Apache Webserver 2.4 and mod_ssl and mod_authzn_ldap I'm trying to Authenticate the user by a ClientCertificate (PKI smartcard) Authorize the user by membership of certain Active Directory ...
0
votes
1answer
169 views

AH01896: Unable to determine list of acceptable CA certificates for client authentication in Apache v2.4 SSLCACertificatePath directive

I am using Apache v2.4 In ssl.conf file I am using SSLCACertificatePath directive with parameter like /var/dat/certificates/ssl.intermediate where ssl.intermediate is an empty directory with ...
2
votes
2answers
982 views

Apache redirect user if they are using SSLv3

I'd like to redirect any users on our site if they try to use SSLv3 (if I just disable SSLv3 and a browser like IE6 comes along, I couldn't seem to properly redirect it to an http version of our site ...
0
votes
1answer
715 views

Missing NPN Extension

I'm trying to set up mod_spdy with Apache (mod_spdy-0.9.4.3-r420 and apache2-2.2.22-13+deb7u3 on Debian Wheezy). As far as I can tell, everything is the way it's supposed to be, but I'm getting the ...
3
votes
1answer
2k views

SHA-2 signed SSL certificate crashes apache on startup on CentOS 5.X

In preparation of the warnings that are going to start showing up in browsers when visiting SSL sites with SHA1 signed certificates, I wanted to get all of the certs that I have upgraded. Some of ...
0
votes
1answer
700 views

Avoid the need of CAfile on client

I am trying to configure my apache that it is delivering all certificates files to get always a positive validation. To be clear there is no issue with any browsers, I am talking about openssl ...
1
vote
1answer
258 views

Website does not advertise HTTP in its NPN Extension spdy

I have configure Apache with SPDY (and PHP-FPM). Everything works fine. However, spdycheck.org shows me following error: HTTP Over SSL Not Supported! This website only supports SPDY over SSL, ...
-1
votes
2answers
8k views

Apache SSL Port Redirection (8443 to 443)

I've got a Tomcat server (JIRA) working behind an Apache reverse proxy server (took a while but I got there). I'm upgrading my old server and adding Apache to give me some extra functionality and ...
0
votes
2answers
276 views

configuring https on EC2

I know similar questions have been asked here and I read them all, but I could not get a clear answer. So I am asking here. I have an EC2 instance.It is a dedicated instance running LAMP. Everything ...
0
votes
1answer
254 views

How apache reverse proxy can be configured without breaking the https tunnel between client & server?

I have configured apache reverse proxy. In that configuration https connection is possible between client to reverse proxy and again reverse proxy to server. But I want https connection between client ...
4
votes
2answers
602 views

YouTrack on Tomcat 7 using SSL

I have a running YouTrack instance deployed using Tomcat 7 and it works fine on http://example.com:8080/youtrack Apache is already configured to support SSL for the main domain (I have .pem file). ...
0
votes
0answers
693 views

Apache mod_ssl [2.2.26] and Openssl [0.9.8za] compatibility

Our product running over RHEL has Apache 2.2.26 & OpenSSL 0.9.7 [ofcourse, pretty old]. We are currently upgrading Openssl to 0.9.8za. I have installed the latest OpenSSL RPMs. However Apache is ...
1
vote
2answers
2k views

Yum Update Failing mod_ssl and glibc_devel

Any ideas on how to get this to not fail? # yum update Freeing read locks for locker 0x82: 4189/140342084876032 Freeing read locks for locker 0x84: 4189/140342084876032 Freeing read locks for locker ...
0
votes
4answers
6k views

Can't start httpd 2.4.9 with self-signed SSL certificate

I cannot start the httpd 2.4.9 (tried 2.4.x too) on CentOS 6.5 with the simplest SSL config possible. The openssl version installed on the machine is OpenSSL 1.0.1e-fips 11 Feb 2013 (I've upgraded it ...
-2
votes
1answer
95 views

Virtual host, port 443 and ssl issue [closed]

I have a centos server, but I am having some issue regarding port 443 and ssl. my problem is that all domain on my server are accessible from HTTPS port. like when I visit a domain on my server from ...
0
votes
1answer
235 views

“Can't Connect to Server” from 2nd virtual host on VPS

I'm using Debian 7 Wheezy and Apache 2.2.22, and I'm setting up Virtual Hosts for a number of websites on my VPS. I've successfully configured the VirtualHost directives for one of the sites, but the ...