The Apache Httpd interface to OpenSSL

learn more… | top users | synonyms

1
vote
2answers
82 views

SSL Certificate Performance

Is it possible that a cheap security certificate could inhibit the performance of a website when serving pages over https? Background: I have built an e-commerce website using Drupal 7 and Drupal ...
0
votes
1answer
183 views

installing SSL certs on apache … what certs to use?

Im an intermediate Linux user and got assigned the task to make Apache run https connections. Currently running centOS 6 and my problem is following: installed mod_ssl and tried to set up paths ...
1
vote
1answer
1k views

SSL Error 107 - Apache2 SSL config

I'm trying to configure a new web server to host a website/php application. All web traffic to this server is supposed to be through https. I've read numerous tutorials as well as the Apache docs and ...
0
votes
1answer
563 views

Verify client certificate CN in Tomcat(APR)

I'm running a tomcat installation with the APR libraries installed (with the OpenSSL HTTPS stack that comes with it). What I'm trying to do is to lock a specific HTTPS connector down to users of a ...
0
votes
1answer
204 views

Is it possible to allow only some client certificates in Apache to login?

In my virtual host I have something like that: SSLEngine on SSLCertificateKeyFile /etc/apache2/ssl/svn.XXXXX.me.key SSLCertificateFile /etc/apache2/ssl/svn.XXXXX.me.crt SSLProtocol ...
2
votes
1answer
2k views

Apache SSL reverse proxy to a Embed Tomcat

I'm trying to put in place a reverse proxy for an application that is running a tomcat embed server over SSL. The application needs to run over SSL on the port 9002 so I have no way of "disabling SSL" ...
0
votes
1answer
233 views

Can't get self-signed CA cert to request corresponding client cert; Apache

I'm running Apache 2.2 on Windows, and have mod_ssl working fine for delivering a commercially signed server cert. (A wildcard cert, though I don't think it matters.) I'm trying to get the server, ...
0
votes
1answer
269 views

Apache 2 reverse proxy to ssl local networked lamp app server - 95% working, except first page login redirection

Dived into the joys of using apache as a proxy. Awesome. There is a learning curve to deal with but the payoff is well worth it! I took the virtual host approach to benefit from having the same urls ...
0
votes
1answer
301 views

Could not resolve host — no address associated with name

I'm setting up a web server on an old OpenBSD machine, and am getting an error each time I try to start Apache. The server refused to start after I added my virtual host with HTTPS. Error could not ...
0
votes
1answer
266 views

How to install godaddy's ssl on apache

I'm setting up a mail server for a company, I've done everything, generated csr, everything is working, I just need to add godaddy's ssl, the instructions given by godaddy aren't clear, i need some ...
0
votes
1answer
107 views

Apache 500 error, I dont fully understand the error log

I'm trying to connect a backend server(gitorious running in https) to my frontend apache2 server running on ubuntu server. I believe that I have the vhost file and proxy config setup right but it ...
0
votes
0answers
153 views

apache modssl: browser error: ssl_error_handshake_failure_alert

Just setted up secure apache and getting this error when visit https_://localhost Firefox: Secure Connection Failed An error occurred during a connection to localhost. SSL peer was ...
4
votes
1answer
3k views

Install & configure mod_ssl on Amazon EC2 instance

I am trying to support HTTPS traffic with the mod_ssl module on my website. I am running an Amazon EC2 instance for my server. I have installed and configured the basic LAMP packages. However, when I ...
0
votes
0answers
117 views

mod_ssl and apache cipher suite client connections

Just starting out with managing an Apache server. Running into some issues while trying to integrate with a vendor API. I've verified all of the basic infrastructure issues (DNS, TCP ports, etc.) and ...
2
votes
2answers
412 views

Can an SSL certificate be on a single line in a file (no line breaks)?

SSL certificates by default have line breaks after 67 characters. I'm trying to create SSL certificate files using Chef. Essentially I want to create the entire certificate file from a string variable ...
3
votes
1answer
8k views

Disable SSL / TLS compression in Apache 2.2.x

Is there a way to disable SSL/TLS Compression in Apache 2.2.x when using mod_ssl? If not, what are people doing to mitigate the effects of CRIME/BEAST in older browsers? Related Links: ...
2
votes
2answers
79 views

Disabling Apache Directives That Don't Have an “Off” Value

I want certain Apache directives, like SSLCACertificateFile, to be enabled in some Locations, but disabled in others. For example, # Require client certificates for http://example.com/secure ...
8
votes
1answer
9k views

How to disable SSLCompression on Apache httpd 2.2.15? (Defense against CRIME/BEAST)

I read about the CRIME attack against TLS Compression (CVE-2012-4929, CRIME is a successor to the BEAST attack against ssl & tls), and I want to protect my webservers against this attack by ...
1
vote
0answers
210 views

Reverse SSL_CLIENT_S_DN order in Apache?

For some odd reason, mod_nss makes the client DN look like this: SSL_CLIENT_S_DN=C=SE,DC=FOO,serialNumber=123456789012,CN=BAR BAZ Mod_ssl however makes it look like this: SSL_CLIENT_S_DN=/CN=BAR ...
0
votes
0answers
497 views

SSLVerifyClient optional with location-based exceptions

I have a site that requires authentication in order to access certain directories, but not others. (The "directories" are really just rewrite rules that all pass through /index.php) In order to ...
3
votes
1answer
98 views

is it possible to use KeyChain / ssh-agent with apache?

There are a lots a question (and duplicates) on serverfault asking how restart Apache without the passphrase prompt. Two solutions are proposed : removing the password from the key the apache ...
-1
votes
2answers
688 views

Apache multiple virtual hosts with ssl certificates [duplicate]

Possible Duplicate: Multiple SSL domains on the same IP address and same port? I have an problem with Apache and multiple SSL certificates. In case if i config it only for one domain, ...
0
votes
2answers
157 views

Apache not responding after SSL handshake

Sometimes on my CentOS servers with Apache 2 + mod_ssl, Apache stops responding to requests made through HTTPS. The SSL connection and handshake is successfull (I tested it with openssl s_client), but ...
0
votes
1answer
844 views

Is it possible to do client certificate authentication without running HTTPS on a webserver?

(Please note: this question is one of many "why don't you just try it?" questions. I certainly will, but since I haven't found an obvious answer by googling, I thought I might as well make it easier ...
0
votes
1answer
563 views

Installing mod_ssl on Centos, dependency issue

I'm installing a SSL certificate for a currently productive CentOS 5.8 (final) So I runned this: yum install mod_ssl and got this: Error: Missing Dependency: httpd = 2.2.3-65.el5.centos is needed ...
2
votes
1answer
854 views

Apache certificates for some urls not working

We are having a rather strange problem with a Apache-installation. Here is a short summary: Currently I'm setting up Apache with https, and server-certificates. This is fairly easy and works straight ...
0
votes
1answer
308 views

RHEL6 - Fips140-2 - Apache fails when trying to start with SSLFIPS on directive

Hello server warriors! I have a situation where I need to make my RHEL6 system FIPS140-2 compliant...which includes apache and mod_ssl. However, after I make the server run in "fips 140 mode" Apache ...
0
votes
1answer
81 views

Configure apache mod_ssl to use different certificates for incoming and outgoing messages

How could I configure mod_ssl to use different certificates for incoming and outgoing messages? I have managed to configure apache2 only to handle incoming messages with single certificate. Is it ...
0
votes
2answers
889 views

How to run a virtualhost 443 without an SSL cert?

I have a virtualhost directive that serves up a custom 404 error if invalid subdomain is entered: <VirtualHost *:80> # the first virtual host ServerName site_not_found RedirectMatch 404 ...
1
vote
0answers
138 views

WebDAV over SSL - Cannot access folders - no errors in logs

I am running a CentOS server on Amazon EC2 and have WebDAV, Apache, and mod-ssl installed. I tested my current configuration first through port 80 and was able to connect to the dav without a hitch. ...
1
vote
1answer
139 views

HTTPS via a floating IP

I ran in what seems to see a case with little to no documentation. I'm trying to serve content sitting behind Apache 2.2 via HTTPS. This Apache server is listening on two IP addresses, one static ...
0
votes
1answer
108 views

trouble in install mod_ssl

I make some trouble in install mod_ssl on my centos5.5. when I type: yum install mod_ssl Some wrong happened for: Loaded plugins: fastestmirror Determining fastest mirrors addons ...
0
votes
0answers
149 views

How to pass subject.serialNumber of client certificate in Apache

We are doing client authenticatie using certificates in Apache. We want to pass the value in the subject.serialNumber of the certificate to the application server. It seems every field of the suject ...
0
votes
1answer
109 views

Host couldn't be reached by domain name, only by IP: Apache's fault?

I have this Windows Server 2003 R2 32 bit machine running Apache 2.4.2 with OpenSSL 1.0.1c and PHP 5.4.5 via mod_fcgid 2.3.7. This config worked just fine for some hours, but then the site couldn't be ...
5
votes
3answers
7k views

Apache: SSLCertificateKeyFile: file does not exist or is empty

I am configuring SSL for Apache 2. My system is Ubuntu Server 10.04 LTS. I have the following settings related to SSL in my vhost configuration: SSLEngine On SSLCertificateKeyFile ...
2
votes
2answers
12k views

Session Cache is not configured… why?

I'm running (trying to run, actually) Apache 2.4.2 on Windows Server 2003 R2 32 bit (plus PHP 5.4.5 and OpenSSL 1.0.1c, but I don't think that matters), and I'm getting the following line in the error ...
6
votes
2answers
5k views

How to Disable SSLv2 for Apache httpd

I just tested my site on https://www.ssllabs.com/ and it said SSLv2 is insecure and I should disable that along with weak Cipher Suites. How can I disable that? I tried the following but it isn’t ...
4
votes
1answer
973 views

SSL_CLIENT_CERT_CHAIN not being passed to backend server

I have client certificate configured and working in Apache. I want to pass the PEM-encoded X.509 certificates of the client to the backend server. I tried with the SSLOptions +ExportCertData. This ...
-1
votes
2answers
328 views

Troubles installing mod_ssl on RHEL 5 [closed]

[root@localhost ~]# yum install mod_ssl Loaded plugins: security Setting up Install Process No package mod_ssl available. Nothing to do This my yum repo list: Loaded plugins: security repo id ...
0
votes
1answer
145 views

EC2 Apache server giving some old browsers a self signed certificate?

I bought a wildcard SSL from RapidSSL. It has been working great on my AWS load balancer, but recently, I noticed that the same certificate was not working on our test server which is not on the load ...
2
votes
2answers
8k views

SSL over non-standard port?

I have two different sites in one server: a.com and b.com. If I use named virtualhost on ssl port, IE won't work. So, I decided to use port 444 for SSL for b.com. However, it seems all browsers ...
0
votes
2answers
449 views

Apache2 ssl with ecc

Is it possible to configure Apache2 to use elliptic curve crypto (ecc) with SSL? This bug https://issues.apache.org/bugzilla/show_bug.cgi?id=40132 appears (to me) to indicate that this is supported, ...
2
votes
1answer
116 views

Apache (mod_ssl) not delivering SSL Certificates when requested

Houston, I have a problem. I have an instance of Apache (httpd) on one machine using mod_ssl with openssl and mod_jk pointing at several tomcat instances on other physical machines. Apache is really ...
1
vote
0answers
128 views

Apache SSL x509 authentication timeout

I have setup a location to enable client authentication based on x509 certificates: <Location /authenticate> SSLRequireSSL SSLVerifyClient require SSLVerifyDepth 10 </Location> ...
3
votes
1answer
825 views

mod_spdy problems and speculations

I'm trying out mod_spdy and I've run into a problem - it seems to be incompatible with AJAX requests and mod_php as in this: https://www.modspdy.com/blog/2012/04/15/using-mod_spdy-with-php/ The ...
2
votes
2answers
986 views

Building an SSL server farm

I'm interested in building the the architecture in the article referenced below. I currently have a modestly-priced layer-4 load balancer and my application servers are the SSL endpoints. I want to ...
0
votes
1answer
648 views

Apache mod_rewrite behaves differently on SSL and non-SSL configs

I have a system where I'm hosting a number of SSL sites on my server. I also need to setup OAuth for each domain, with Google and Yahoo in particular. They each require verification files be installed ...
0
votes
1answer
236 views

Lost mod_ssl on debian, how to get it back?

I lost my mod_ssl on my debian machine. How can I get it back. I accidently removed it from mods_available instead of mods_enable, and as it was a symlink I lost the file. Is it possible to get this ...
1
vote
2answers
2k views

Is it possible to run an Apache VirtualHost on port 443 with SSL off?

I am running a site completely over SSL using a load balancer in front of Apache doing all the certificate handling and decryption. I let HTTP traffic through the load balancer so Apache can handle ...
0
votes
2answers
5k views

SSL Library Error: 218570875 error:0D07207B:asn1 encoding routines:ASN1_get_object:header too long

I am trying to install SSL certificate from a certificate authority into my httpd server in CentOS 5.x. When I configure it and start the server I am getting the following errors, [error]Init: Unable ...