The Apache Httpd interface to OpenSSL

learn more… | top users | synonyms

1
vote
1answer
192 views

What do I need for SSL?

just a quick question, I'm kind of confused. I've had set-up my own certification authority and I can create requests and signed them. But, I'm not sure, what I need to give to Apache, currently I've ...
0
votes
1answer
245 views

Are apache2 mod_ssl BIO dumps sensitive?

When apache2 is serving https using mod_ssl, and running with 'LogLevel debug', it frequently logs lines like this, followed by a hex dump: ssl_engine_io.c(1882): OpenSSL: read 518/518 bytes from ...
0
votes
1answer
662 views

Apache, SSL, UCC not working on CN but works on subjectAltName

I recently generated a UCC for domain1.com *.domain1.com domain2.com *.domain2.com now when i visit http://domain1.com in Firefox i get: domain1.com uses an invalid security certificate. The ...
0
votes
1answer
939 views

Apache, SSL, Self signed, Multidomain Certificates

Target: Generate a single SSL Certificate thats valid for domain1.com *.domain1.com domain2.com *.domain2.com Let it be self signed or a locally-generated CA signed. Scenario 1 # ssl.conf [ ...
2
votes
2answers
4k views

Client certificate authentication sslv3 alert handshake failure when Location directive is set

I am trying to setup Client Certificate Authentication for a web service that is running on Rails. The service is running on apache2, passenger, and mod_ssl. I have been able to successfully generate ...
1
vote
1answer
3k views

502: proxy: pass request body failed

Sometimes I get the following error (in apache's error.log) when viewing my site over https: (502)Unknown error 502: proxy: pass request body failed to xxx.xxx.xxx.xxx:443 I'm not entirely sure what ...
1
vote
2answers
1k views

Validating SSL clients using a list of authorised certificates instead of a Certificate Authority

Is it possible to configure Apache (or any other SSL-aware server) to only accept connections from clients presenting a certificate from a pre-defined list? These certificates may be signed by any CA ...
4
votes
7answers
33k views

How do I disable MEDIUM and WEAK/LOW strength ciphers in Apache + mod_ssl?

A PCI Compliance scan has suggested that we disable Apache's MEDIUM and LOW/WEAK strength ciphers for security. Can someone tell me how to disable these ciphers? Apache v2.2.14 mod_ssl v2.2.14 This ...
1
vote
2answers
940 views

Compiling Apache mod_ssl for different target hardware (hardware capability unsupported SSE2 error)

I am building and packaging the following on one machine (the "build" machine) and attempting to install and use on other machines ("target" machines) some of which have different processors. ...
10
votes
1answer
1k views

Apache2 with SSL do I have to copy VirtualHost blocks?

In Apache2 on ubuntu I have my site listening on 80, and now I want to add SSL. Is there a way to enable the SSLEngine for port 443 so I do not have to copy the entire VirtualHost block? When I do ...
2
votes
2answers
1k views

Apache and mod_ssl working with multiple remote CA for client certs

Generating client certificates by becoming your own CA with an Apache web server is trivial work and there's plenty of documentation out there on how to achieve this. My problem is slightly different. ...
5
votes
4answers
1k views

How can I configure Apache to use HTTPS for external access but HTTP for internal access?

I have two servers, one a development server that is accessible internally on our company's local network and the other a public-facing web server. The development server hosts several tools that we ...