The Apache Httpd interface to OpenSSL

learn more… | top users | synonyms

0
votes
0answers
848 views

Apache 2.4 reload succeeds but restart fails when using SSL

On Apache 2.4, reload succeeds but restart fails when using SSL. Or to say it another way, the SSL configuration directives appear to work perfectly when doing a service reload but not a service ...
0
votes
2answers
51 views

Apache: Assign SSL server / client certs to directories

I have multiple directories on my system, e.g., /var/www/dir1 /var/www/dir2 /var/www/dir3 And what I'd like to do is to generate a server/client SSL certificate for each directory, and then set up ...
0
votes
0answers
131 views

google site map generator can't login admin console

I installed Google Sitemap Generator for linux x86_64 CentOS 6 But when I try to login to the admin console using this link myserverip:8181 and my password nothing happened. After refreshing I ...
0
votes
1answer
134 views

mod_ssl RPM conflict

I build Apache httpd into an RPM using these sites: http://erikwebb.net/blog/compile-and-install-apache-24-red-hat-enterprise-linux-rhel-6-or-centos-6 ...
3
votes
1answer
254 views

Certificates when using cas+apache (mod_auth_cas)

I'm running CAS authentication on one server, and a website that is to be secured on a seperate server on my local network. When I ran both CAS and Apache on the same server, they worked fine. When I ...
0
votes
1answer
23 views

What refer/mean “Remote Server Authentication” at Apache mod_ssl doc?

The part of the doc in that such term is used is this. Can anybody give some context or explain me what mean Remote Server Authentication there? I know that Apache server can authenticate clients but ...
4
votes
1answer
3k views

How to tell if SSL session caching is in fact working correctly with Apache 2.2?

We have Apache 2.2.22 running on Ubuntu 12.04. SSL is configured and enabled, with these directives in /etc/apache2/mods-enabled/ssl.conf: SSLSessionCache ...
0
votes
1answer
391 views

No SSL certificate error when configuring redirection in virtual host

My server is working fine with a self-signed SSL certificate until I added the following lines to redirect request containing wwww to non-www site: <VirtualHost *:443> ServerName ...
0
votes
1answer
266 views

SSL/TLS Client certificate Authentication using RewriteCond and Rewrite Rules to perceptively redirect traffic not authorized

I finally end up to write here because I´m badly struggling against apache, SSL/TLS and a client certificate authentication that should use the certificate´s Serial Number to restrict access to a ...
2
votes
1answer
634 views

List of SSL Cipher Support by Browser

Not really sure if this is the appropriate SE to post this to, but here it is: Is there some online reference for what SSL ciphers are supported by the various browsers? Basically, I'm interested in ...
1
vote
1answer
712 views

Trouble configuring apache server to proxy an SSL connection

I'm running an application on Tomcat7 with Apache Portable Runtime, I bought an SSL certificate and configured it correctly - when I try to connect through the ip:port combination, it connects fine ...
0
votes
1answer
1k views

Thawte ssl 123 certificate installation on ubuntu 12, apache

I have recently purchased the ssl123 certificate from thwate. They have provided me following files 1:x.509 certificate 2:Apache Bundle 3:intermediate CA1 I am trying to install on my server but no ...
4
votes
3answers
1k views

How do I create a custom header from an existing SSL environment variable?

OK I have spent all day on this-- I'm using apache with mod_ssl I'm trying to take an existing environment header, "%{SSL_CLIENT_S_DN_CN}s" which looks like "Lastname Firstname Mi username" and set a ...
1
vote
1answer
180 views

OpenSSL response 404 issue on centOS 6

I followed this tutorial (though it's for 5.2, I figured I'd be alright). The changes I had to make that seemed to have worked: Rename ca.csr to ca.cslr (that's the one the command generated) List ...
8
votes
2answers
698 views

Why store Apache SSL certificate and private key in separate files?

The Apache mod_ssl documentation for the SSLCertificateFile and SSLCertificateKeyFile directives states that it is 'strongly discouraged' to store a private key and an SSL certificate in the same ...
8
votes
2answers
6k views

How to disable TLS 1.1 & 1.2 in Apache?

I have an Ubuntu 12.04.2 LTS server running Apache 2.2.22 with mod_ssl and OpenSSL v1.0.1. In my vhosts config (everything else within which behaves as I would expect), I have the SSLProtocol line ...
1
vote
0answers
210 views

Web Server with PKCS11 support for server certificates?

I have a PKCS#11-compatible smart card with either a private key, or a combination of a certificate and a private key on it (I can have both). I want to present the certificate from the smart card to ...
0
votes
1answer
189 views

Minimum Key Length for Apache SSL

I'm trying to figure out the minimum key/cipher bit length that my Apache mod_ssl configuration will accept for client connections. I ran openssl ciphers -v and saw ciphers of all lengths (40, 56, ...
1
vote
2answers
91 views

SSL Certificate Performance

Is it possible that a cheap security certificate could inhibit the performance of a website when serving pages over https? Background: I have built an e-commerce website using Drupal 7 and Drupal ...
0
votes
1answer
293 views

installing SSL certs on apache … what certs to use?

Im an intermediate Linux user and got assigned the task to make Apache run https connections. Currently running centOS 6 and my problem is following: installed mod_ssl and tried to set up paths ...
1
vote
1answer
2k views

SSL Error 107 - Apache2 SSL config

I'm trying to configure a new web server to host a website/php application. All web traffic to this server is supposed to be through https. I've read numerous tutorials as well as the Apache docs and ...
0
votes
1answer
816 views

Verify client certificate CN in Tomcat(APR)

I'm running a tomcat installation with the APR libraries installed (with the OpenSSL HTTPS stack that comes with it). What I'm trying to do is to lock a specific HTTPS connector down to users of a ...
0
votes
1answer
389 views

Is it possible to allow only some client certificates in Apache to login?

In my virtual host I have something like that: SSLEngine on SSLCertificateKeyFile /etc/apache2/ssl/svn.XXXXX.me.key SSLCertificateFile /etc/apache2/ssl/svn.XXXXX.me.crt SSLProtocol ...
4
votes
1answer
3k views

Apache SSL reverse proxy to a Embed Tomcat

I'm trying to put in place a reverse proxy for an application that is running a tomcat embed server over SSL. The application needs to run over SSL on the port 9002 so I have no way of "disabling SSL" ...
0
votes
1answer
289 views

Can't get self-signed CA cert to request corresponding client cert; Apache

I'm running Apache 2.2 on Windows, and have mod_ssl working fine for delivering a commercially signed server cert. (A wildcard cert, though I don't think it matters.) I'm trying to get the server, ...
0
votes
1answer
331 views

Apache 2 reverse proxy to ssl local networked lamp app server - 95% working, except first page login redirection

Dived into the joys of using apache as a proxy. Awesome. There is a learning curve to deal with but the payoff is well worth it! I took the virtual host approach to benefit from having the same urls ...
0
votes
1answer
385 views

Could not resolve host — no address associated with name

I'm setting up a web server on an old OpenBSD machine, and am getting an error each time I try to start Apache. The server refused to start after I added my virtual host with HTTPS. Error could not ...
0
votes
1answer
593 views

How to install godaddy's ssl on apache

I'm setting up a mail server for a company, I've done everything, generated csr, everything is working, I just need to add godaddy's ssl, the instructions given by godaddy aren't clear, i need some ...
0
votes
1answer
123 views

Apache 500 error, I dont fully understand the error log

I'm trying to connect a backend server(gitorious running in https) to my frontend apache2 server running on ubuntu server. I believe that I have the vhost file and proxy config setup right but it ...
0
votes
0answers
197 views

apache modssl: browser error: ssl_error_handshake_failure_alert

Just setted up secure apache and getting this error when visit https_://localhost Firefox: Secure Connection Failed An error occurred during a connection to localhost. SSL peer was ...
6
votes
1answer
5k views

Install & configure mod_ssl on Amazon EC2 instance

I am trying to support HTTPS traffic with the mod_ssl module on my website. I am running an Amazon EC2 instance for my server. I have installed and configured the basic LAMP packages. However, when I ...
0
votes
0answers
132 views

mod_ssl and apache cipher suite client connections

Just starting out with managing an Apache server. Running into some issues while trying to integrate with a vendor API. I've verified all of the basic infrastructure issues (DNS, TCP ports, etc.) and ...
2
votes
2answers
662 views

Can an SSL certificate be on a single line in a file (no line breaks)?

SSL certificates by default have line breaks after 67 characters. I'm trying to create SSL certificate files using Chef. Essentially I want to create the entire certificate file from a string variable ...
5
votes
1answer
11k views

Disable SSL / TLS compression in Apache 2.2.x

Is there a way to disable SSL/TLS Compression in Apache 2.2.x when using mod_ssl? If not, what are people doing to mitigate the effects of CRIME/BEAST in older browsers? Related Links: ...
2
votes
2answers
101 views

Disabling Apache Directives That Don't Have an “Off” Value

I want certain Apache directives, like SSLCACertificateFile, to be enabled in some Locations, but disabled in others. For example, # Require client certificates for http://example.com/secure ...
8
votes
1answer
13k views

How to disable SSLCompression on Apache httpd 2.2.15? (Defense against CRIME/BEAST)

I read about the CRIME attack against TLS Compression (CVE-2012-4929, CRIME is a successor to the BEAST attack against ssl & tls), and I want to protect my webservers against this attack by ...
1
vote
0answers
253 views

Reverse SSL_CLIENT_S_DN order in Apache?

For some odd reason, mod_nss makes the client DN look like this: SSL_CLIENT_S_DN=C=SE,DC=FOO,serialNumber=123456789012,CN=BAR BAZ Mod_ssl however makes it look like this: SSL_CLIENT_S_DN=/CN=BAR ...
3
votes
1answer
122 views

is it possible to use KeyChain / ssh-agent with apache?

There are a lots a question (and duplicates) on serverfault asking how restart Apache without the passphrase prompt. Two solutions are proposed : removing the password from the key the apache ...
-1
votes
2answers
1k views

Apache multiple virtual hosts with ssl certificates [duplicate]

Possible Duplicate: Multiple SSL domains on the same IP address and same port? I have an problem with Apache and multiple SSL certificates. In case if i config it only for one domain, ...
0
votes
2answers
199 views

Apache not responding after SSL handshake

Sometimes on my CentOS servers with Apache 2 + mod_ssl, Apache stops responding to requests made through HTTPS. The SSL connection and handshake is successfull (I tested it with openssl s_client), but ...
0
votes
1answer
1k views

Is it possible to do client certificate authentication without running HTTPS on a webserver?

(Please note: this question is one of many "why don't you just try it?" questions. I certainly will, but since I haven't found an obvious answer by googling, I thought I might as well make it easier ...
0
votes
1answer
649 views

Installing mod_ssl on Centos, dependency issue

I'm installing a SSL certificate for a currently productive CentOS 5.8 (final) So I runned this: yum install mod_ssl and got this: Error: Missing Dependency: httpd = 2.2.3-65.el5.centos is needed ...
2
votes
1answer
1k views

Apache certificates for some urls not working

We are having a rather strange problem with a Apache-installation. Here is a short summary: Currently I'm setting up Apache with https, and server-certificates. This is fairly easy and works straight ...
0
votes
1answer
397 views

RHEL6 - Fips140-2 - Apache fails when trying to start with SSLFIPS on directive

Hello server warriors! I have a situation where I need to make my RHEL6 system FIPS140-2 compliant...which includes apache and mod_ssl. However, after I make the server run in "fips 140 mode" Apache ...
0
votes
1answer
102 views

Configure apache mod_ssl to use different certificates for incoming and outgoing messages

How could I configure mod_ssl to use different certificates for incoming and outgoing messages? I have managed to configure apache2 only to handle incoming messages with single certificate. Is it ...
0
votes
2answers
1k views

How to run a virtualhost 443 without an SSL cert?

I have a virtualhost directive that serves up a custom 404 error if invalid subdomain is entered: <VirtualHost *:80> # the first virtual host ServerName site_not_found RedirectMatch 404 ...
1
vote
0answers
143 views

WebDAV over SSL - Cannot access folders - no errors in logs

I am running a CentOS server on Amazon EC2 and have WebDAV, Apache, and mod-ssl installed. I tested my current configuration first through port 80 and was able to connect to the dav without a hitch. ...
1
vote
1answer
160 views

HTTPS via a floating IP

I ran in what seems to see a case with little to no documentation. I'm trying to serve content sitting behind Apache 2.2 via HTTPS. This Apache server is listening on two IP addresses, one static ...
0
votes
1answer
135 views

trouble in install mod_ssl

I make some trouble in install mod_ssl on my centos5.5. when I type: yum install mod_ssl Some wrong happened for: Loaded plugins: fastestmirror Determining fastest mirrors addons ...
0
votes
1answer
113 views

Host couldn't be reached by domain name, only by IP: Apache's fault?

I have this Windows Server 2003 R2 32 bit machine running Apache 2.4.2 with OpenSSL 1.0.1c and PHP 5.4.5 via mod_fcgid 2.3.7. This config worked just fine for some hours, but then the site couldn't be ...