The Apache Httpd interface to OpenSSL

learn more… | top users | synonyms

-1
votes
2answers
1k views

Apache multiple virtual hosts with ssl certificates [duplicate]

Possible Duplicate: Multiple SSL domains on the same IP address and same port? I have an problem with Apache and multiple SSL certificates. In case if i config it only for one domain, ...
0
votes
2answers
218 views

Apache not responding after SSL handshake

Sometimes on my CentOS servers with Apache 2 + mod_ssl, Apache stops responding to requests made through HTTPS. The SSL connection and handshake is successfull (I tested it with openssl s_client), but ...
0
votes
1answer
1k views

Is it possible to do client certificate authentication without running HTTPS on a webserver?

(Please note: this question is one of many "why don't you just try it?" questions. I certainly will, but since I haven't found an obvious answer by googling, I thought I might as well make it easier ...
0
votes
1answer
691 views

Installing mod_ssl on Centos, dependency issue

I'm installing a SSL certificate for a currently productive CentOS 5.8 (final) So I runned this: yum install mod_ssl and got this: Error: Missing Dependency: httpd = 2.2.3-65.el5.centos is needed ...
2
votes
1answer
1k views

Apache certificates for some urls not working

We are having a rather strange problem with a Apache-installation. Here is a short summary: Currently I'm setting up Apache with https, and server-certificates. This is fairly easy and works straight ...
0
votes
1answer
421 views

RHEL6 - Fips140-2 - Apache fails when trying to start with SSLFIPS on directive

Hello server warriors! I have a situation where I need to make my RHEL6 system FIPS140-2 compliant...which includes apache and mod_ssl. However, after I make the server run in "fips 140 mode" Apache ...
0
votes
1answer
114 views

Configure apache mod_ssl to use different certificates for incoming and outgoing messages

How could I configure mod_ssl to use different certificates for incoming and outgoing messages? I have managed to configure apache2 only to handle incoming messages with single certificate. Is it ...
0
votes
2answers
1k views

How to run a virtualhost 443 without an SSL cert?

I have a virtualhost directive that serves up a custom 404 error if invalid subdomain is entered: <VirtualHost *:80> # the first virtual host ServerName site_not_found RedirectMatch 404 ...
1
vote
0answers
146 views

WebDAV over SSL - Cannot access folders - no errors in logs

I am running a CentOS server on Amazon EC2 and have WebDAV, Apache, and mod-ssl installed. I tested my current configuration first through port 80 and was able to connect to the dav without a hitch. ...
1
vote
1answer
170 views

HTTPS via a floating IP

I ran in what seems to see a case with little to no documentation. I'm trying to serve content sitting behind Apache 2.2 via HTTPS. This Apache server is listening on two IP addresses, one static ...
0
votes
1answer
139 views

trouble in install mod_ssl

I make some trouble in install mod_ssl on my centos5.5. when I type: yum install mod_ssl Some wrong happened for: Loaded plugins: fastestmirror Determining fastest mirrors addons ...
0
votes
1answer
118 views

Host couldn't be reached by domain name, only by IP: Apache's fault?

I have this Windows Server 2003 R2 32 bit machine running Apache 2.4.2 with OpenSSL 1.0.1c and PHP 5.4.5 via mod_fcgid 2.3.7. This config worked just fine for some hours, but then the site couldn't be ...
8
votes
4answers
13k views

Apache: SSLCertificateKeyFile: file does not exist or is empty

I am configuring SSL for Apache 2. My system is Ubuntu Server 10.04 LTS. I have the following settings related to SSL in my vhost configuration: SSLEngine On SSLCertificateKeyFile ...
3
votes
2answers
16k views

Session Cache is not configured… why?

I'm running (trying to run, actually) Apache 2.4.2 on Windows Server 2003 R2 32 bit (plus PHP 5.4.5 and OpenSSL 1.0.1c, but I don't think that matters), and I'm getting the following line in the error ...
6
votes
4answers
8k views

How to Disable SSLv2 for Apache httpd

I just tested my site on https://www.ssllabs.com/ and it said SSLv2 is insecure and I should disable that along with weak Cipher Suites. How can I disable that? I tried the following but it isn’t ...
4
votes
1answer
1k views

SSL_CLIENT_CERT_CHAIN not being passed to backend server

I have client certificate configured and working in Apache. I want to pass the PEM-encoded X.509 certificates of the client to the backend server. I tried with the SSLOptions +ExportCertData. This ...
-1
votes
2answers
410 views

Troubles installing mod_ssl on RHEL 5 [closed]

[root@localhost ~]# yum install mod_ssl Loaded plugins: security Setting up Install Process No package mod_ssl available. Nothing to do This my yum repo list: Loaded plugins: security repo id ...
0
votes
1answer
155 views

EC2 Apache server giving some old browsers a self signed certificate?

I bought a wildcard SSL from RapidSSL. It has been working great on my AWS load balancer, but recently, I noticed that the same certificate was not working on our test server which is not on the load ...
2
votes
2answers
11k views

SSL over non-standard port?

I have two different sites in one server: a.com and b.com. If I use named virtualhost on ssl port, IE won't work. So, I decided to use port 444 for SSL for b.com. However, it seems all browsers ...
0
votes
3answers
612 views

Apache2 ssl with ecc

Is it possible to configure Apache2 to use elliptic curve crypto (ecc) with SSL? This bug https://issues.apache.org/bugzilla/show_bug.cgi?id=40132 appears (to me) to indicate that this is supported, ...
2
votes
1answer
125 views

Apache (mod_ssl) not delivering SSL Certificates when requested

Houston, I have a problem. I have an instance of Apache (httpd) on one machine using mod_ssl with openssl and mod_jk pointing at several tomcat instances on other physical machines. Apache is really ...
1
vote
0answers
156 views

Apache SSL x509 authentication timeout

I have setup a location to enable client authentication based on x509 certificates: <Location /authenticate> SSLRequireSSL SSLVerifyClient require SSLVerifyDepth 10 </Location> ...
3
votes
1answer
1k views

mod_spdy problems and speculations

I'm trying out mod_spdy and I've run into a problem - it seems to be incompatible with AJAX requests and mod_php as in this: https://www.modspdy.com/blog/2012/04/15/using-mod_spdy-with-php/ The ...
2
votes
2answers
1k views

Building an SSL server farm

I'm interested in building the the architecture in the article referenced below. I currently have a modestly-priced layer-4 load balancer and my application servers are the SSL endpoints. I want to ...
0
votes
1answer
743 views

Apache mod_rewrite behaves differently on SSL and non-SSL configs

I have a system where I'm hosting a number of SSL sites on my server. I also need to setup OAuth for each domain, with Google and Yahoo in particular. They each require verification files be installed ...
0
votes
1answer
369 views

Lost mod_ssl on debian, how to get it back?

I lost my mod_ssl on my debian machine. How can I get it back. I accidently removed it from mods_available instead of mods_enable, and as it was a symlink I lost the file. Is it possible to get this ...
1
vote
2answers
3k views

Is it possible to run an Apache VirtualHost on port 443 with SSL off?

I am running a site completely over SSL using a load balancer in front of Apache doing all the certificate handling and decryption. I let HTTP traffic through the load balancer so Apache can handle ...
0
votes
2answers
7k views

SSL Library Error: 218570875 error:0D07207B:asn1 encoding routines:ASN1_get_object:header too long

I am trying to install SSL certificate from a certificate authority into my httpd server in CentOS 5.x. When I configure it and start the server I am getting the following errors, [error]Init: Unable ...
3
votes
1answer
366 views

Requiring client certificate issued by a specific intermediate CA in Apache

I have a CA hierarchy like this: Root-CA ________|_____________ | | TEST-CA PRODUCTION-CA _____|_____ ...
3
votes
3answers
2k views

SSL URL gives a 404

I have recently created an SSL cert on my server *.key and a *csr file. I then created the *crt and the *.ca-bundle with Comodo. I have 2 current vhosts: vhost for - http://www.example.com ...
-1
votes
1answer
287 views

Can't get 2nd ssl virtual host to work

I have an Centos 5.7 Server running apache 2. The server had ssl configured by default for the default site I have. When I try to add another ssl vhost I can't get httpd to restart. I have been trying ...
0
votes
1answer
883 views

Apache mod_ssl TLS channel dying in 5 seconds - how do I extend that timeout?

I'm an IIS admin. I've done the best I can with mod_ssl documentation, google, etc, and can't find anyone else who's even experienced my problem, much less found a solution. That, of course, makes me ...
2
votes
1answer
3k views

CentOS6 - Apache2 working but when installing / enabling SSL, server won't start because of permissions error

I'm attempting to install Apache with SSL on CentOS6 to use as a development server. I've been following the directions posted here to get SSL working: http://wiki.centos.org/HowTos/Https (Note: ...
2
votes
1answer
10k views

centos6 apache2 Invalid Command SSLEngine

Running: CentOS6 x64 When I restart httpd, I get the following error. What am I missing? [root@localhost ~]# service httpd restart Stopping httpd: [ OK ...
1
vote
2answers
2k views

Installing mod_ssl on CentOS

I am trying to install mod_ssl on my server with: yum install mod_ssl All i get in response is: Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: ...
0
votes
1answer
288 views

Rackspace Red Hat 5.4 converted to CentOS repository, mod_ssl will not install

I am trying to add mod_ssl to apache, but it fails due to the repository change to CentOS as we needed a newer version of imagemagick, which was only available on CentOS. I am now getting the ...
0
votes
1answer
210 views

Multiple Django sites on a single SSL certificate using a single IP with Apache

Is it technically possible to setup multiple Django sites using a single SSL certificate on a single IP address with Apache? Below is an excerpt from my SSL config: Alias /media/ ...
4
votes
1answer
2k views

Forcing SSL in Apache without hard-coding the hostname

I think that I have this sorted (thanks mainly to the question How to redirect non-www to www without hardcoding using .htaccess?), but I still don't entirely understand a couple of things. I would ...
6
votes
1answer
644 views

How does Apache interpret multiple SSLRandomSeed sources

In my Apache configuration I have these lines: SSLRandomSeed connect builtin SSLRandomSeed connect file:/dev/random SSLRandomSeed connect file:/dev/urandom 1024 How, exactly, does Apache interpret ...
1
vote
1answer
633 views

Load balancing based on client certificate with Apache mod_proxy_ajp and Tomcat

Currently, I am using mod_proxy_ajp to load balance requests to multiple Tomcat servers. Callers are authenticated using client certificates and an ACL. This has been working fine, callers are routed ...
2
votes
3answers
7k views

apache Client Certificate Authentication errors: Certificate Verification: Error (18): self signed certificate

So I have been following instructions on setting up Client Certificate Authentication in Apache2 w/ mod_ssl. This is solely for the purpose of testing an application against CAA, not for any sort of ...
0
votes
1answer
680 views

Apache2, mod_proxy, mod_ssl on OSX not working

I am trying to setup apache2 on OSX and am having an issue. I am trying to proxy a domain to 127.0.0.1:8081 (which is up and running) but when try to load through apache I get a "Web Page Not Found". ...
4
votes
1answer
2k views

Apache sends plain-text response when accessing SSL-enabled site without HTTPS

I've never encountered something such as this before. I was attempting to simply redirect the page to the HTTPS version if it determined that HTTPS was off, but instead it's displaying an HTML page ...
1
vote
0answers
51 views

How can I relax SSL requirements inside a specific folder?

I have a root folder that is protected by a SSLRequire rule; say: SSLRequire %{SSL_CLIENT_S_DN_Email} =~ m/^.+@foobar\.com$/ However, I'd like a subfolder of this root folder to be protected by a ...
1
vote
1answer
3k views

Self signed Apache cert error: asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag

Can anyone see where I went wrong on these steps (on Windows XP + Apache 2.2)? I tried to create my own self signed SSL certificate with my own CA and when its all done my Apache server wont start ...
0
votes
1answer
95 views

Can't copy Ilias-folder via FQDN, but via ip-address?

I have an Ilias-Installation, which is available through two virtual hosts: the FQDN and the ip-address. The first server is ssl only, the second plain http. Both configuration files look the same ...
1
vote
1answer
4k views

How to setup multiple Apache SSL sites using multiple IP addresses

How do you setup a single Apache2 config to host multiple HTTPS sites each on their own IP address? There will also be multiple HTTP sites on just a single IP address. I do not want to use Server ...
4
votes
1answer
358 views

Can apache use a key agent to store private keys for SSL?

For mod_ssl in apache to work, you need your RSA private key on the server. If the key is passphrase protected, you have to enter the passphrase whenever you restart apache. There is ...
1
vote
1answer
1k views

SSLVerifyClient not working in Directory context

According to Apache documentation about SSLVerifyClient, one can define its value in Directory context. However, the following configuration is not working: <IfModule mod_ssl.c> ...
14
votes
5answers
42k views

How to enable TLS 1.1 and 1.2 with OpenSSL and Apache

In light of a growing number of security issues, such as the newly announced Browser Exploit Against SSL/TLS (BEAST), I was curious how we could go about enabling TLS 1.1 and 1.2 with OpenSSL and ...