Questions tagged [mod-ssl]
The Apache Httpd interface to OpenSSL
273
questions
15
votes
7
answers
87k
views
Session Cache is not configured... why?
I'm running (trying to run, actually) Apache 2.4.2 on Windows Server 2003 R2 32 bit (plus PHP 5.4.5 and OpenSSL 1.0.1c, but I don't think that matters), and I'm getting the following line in the error ...
- 525
8
votes
4
answers
23k
views
How to Disable SSLv2 for Apache httpd
I just tested my site on https://www.ssllabs.com/ and it said SSLv2 is insecure and I should disable that along with weak Cipher Suites.
How can I disable that? I tried the following but it isn’t ...
- 141
5
votes
2
answers
6k
views
SSL_CLIENT_CERT_CHAIN not being passed to backend server
I have client certificate configured and working in Apache. I want to pass the PEM-encoded X.509 certificates of the client to the backend server.
I tried with the SSLOptions +ExportCertData. This ...
- 161
-1
votes
2
answers
1k
views
Troubles installing mod_ssl on RHEL 5 [closed]
[root@localhost ~]# yum install mod_ssl
Loaded plugins: security
Setting up Install Process
No package mod_ssl available.
Nothing to do
This my yum repo list:
Loaded plugins: security
repo id ...
- 1
0
votes
1
answer
210
views
EC2 Apache server giving some old browsers a self signed certificate?
I bought a wildcard SSL from RapidSSL. It has been working great on my AWS load balancer, but recently, I noticed that the same certificate was not working on our test server which is not on the load ...
- 103
2
votes
2
answers
19k
views
SSL over non-standard port?
I have two different sites in one server: a.com and b.com.
If I use named virtualhost on ssl port, IE won't work.
So, I decided to use port 444 for SSL for b.com. However, it seems all browsers ...
- 812
1
vote
4
answers
5k
views
Apache2 ssl with ecc
Is it possible to configure Apache2 to use elliptic curve crypto (ecc) with SSL? This bug https://issues.apache.org/bugzilla/show_bug.cgi?id=40132 appears (to me) to indicate that this is supported, ...
- 159
2
votes
1
answer
164
views
Apache (mod_ssl) not delivering SSL Certificates when requested
Houston, I have a problem.
I have an instance of Apache (httpd) on one machine using mod_ssl with openssl and mod_jk pointing at several tomcat instances on other physical machines. Apache is really ...
- 142
1
vote
0
answers
431
views
Apache SSL x509 authentication timeout
I have setup a location to enable client authentication based on x509 certificates:
<Location /authenticate>
SSLRequireSSL
SSLVerifyClient require
SSLVerifyDepth 10
</Location>
The ...
- 31
4
votes
1
answer
1k
views
mod_spdy problems and speculations
I'm trying out mod_spdy and I've run into a problem - it seems to be incompatible with AJAX requests and mod_php as in this: https://www.modspdy.com/blog/2012/04/15/using-mod_spdy-with-php/
The ...
- 163
2
votes
2
answers
2k
views
Building an SSL server farm
I'm interested in building the the architecture in the article referenced below.
I currently have a modestly-priced layer-4 load balancer and my application servers are the SSL endpoints.
I want to ...
- 426
0
votes
1
answer
987
views
Apache mod_rewrite behaves differently on SSL and non-SSL configs
I have a system where I'm hosting a number of SSL sites on my server. I also need to setup OAuth for each domain, with Google and Yahoo in particular. They each require verification files be installed ...
- 117
0
votes
1
answer
2k
views
Lost mod_ssl on debian, how to get it back?
I lost my mod_ssl on my debian machine. How can I get it back.
I accidently removed it from mods_available instead of mods_enable, and as it was a symlink I lost the file. Is it possible to get this ...
- 111
1
vote
2
answers
6k
views
Is it possible to run an Apache VirtualHost on port 443 with SSL off?
I am running a site completely over SSL using a load balancer in front of Apache doing all the certificate handling and decryption. I let HTTP traffic through the load balancer so Apache can handle ...
- 21
8
votes
4
answers
68k
views
SSL Library Error: 218570875 error:0D07207B:asn1 encoding routines:ASN1_get_object:header too long
I am trying to install SSL certificate from a certificate authority into my httpd server in CentOS 5.x. When I configure it and start the server I am getting the following errors,
[error]Init: Unable ...
- 423
4
votes
2
answers
3k
views
Requiring client certificate issued by a specific intermediate CA in Apache
I have a CA hierarchy like this:
Root-CA
________|_____________
| |
TEST-CA PRODUCTION-CA
_____|_____ ____|...
- 143
4
votes
3
answers
7k
views
SSL URL gives a 404
I have recently created an SSL cert on my server *.key and a *csr file.
I then created the *crt and the *.ca-bundle with Comodo.
I have 2 current vhosts:
vhost for - http://www.example.com
...
- 251
-1
votes
1
answer
336
views
Can't get 2nd ssl virtual host to work
I have an Centos 5.7 Server running apache 2. The server had ssl configured by default for the default site I have. When I try to add another ssl vhost I can't get httpd to restart. I have been trying ...
- 101
0
votes
1
answer
2k
views
Apache mod_ssl TLS channel dying in 5 seconds - how do I extend that timeout?
I'm an IIS admin. I've done the best I can with mod_ssl documentation, google, etc, and can't find anyone else who's even experienced my problem, much less found a solution. That, of course, makes me ...
- 133
5
votes
1
answer
8k
views
CentOS6 - Apache2 working but when installing / enabling SSL, server won't start because of permissions error
I'm attempting to install Apache with SSL on CentOS6 to use as a development server.
I've been following the directions posted here to get SSL working: http://wiki.centos.org/HowTos/Https (Note: ...
- 449
2
votes
1
answer
17k
views
centos6 apache2 Invalid Command SSLEngine
Running: CentOS6 x64
When I restart httpd, I get the following error. What am I missing?
[root@localhost ~]# service httpd restart
Stopping httpd: [ OK ]...
- 796
4
votes
2
answers
14k
views
Installing mod_ssl on CentOS
I am trying to install mod_ssl on my server with:
yum install mod_ssl
All i get in response is:
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
* base: centosv4-msync-dvd....
- 207
0
votes
1
answer
371
views
Rackspace Red Hat 5.4 converted to CentOS repository, mod_ssl will not install
I am trying to add mod_ssl to apache, but it fails due to the repository change to CentOS as we needed a newer version of imagemagick, which was only available on CentOS. I am now getting the ...
- 1
0
votes
1
answer
887
views
Multiple Django sites on a single SSL certificate using a single IP with Apache
Is it technically possible to setup multiple Django sites using a single SSL certificate on a single IP address with Apache?
Below is an excerpt from my SSL config:
Alias /media/ x:/home/djang-apps/...
- 145
4
votes
1
answer
9k
views
Forcing SSL in Apache without hard-coding the hostname
I think that I have this sorted (thanks mainly to the question How to redirect non-www to www without hardcoding using .htaccess?), but I still don't entirely understand a couple of things.
I would ...
- 631
7
votes
1
answer
2k
views
How does Apache interpret multiple SSLRandomSeed sources
In my Apache configuration I have these lines:
SSLRandomSeed connect builtin
SSLRandomSeed connect file:/dev/random
SSLRandomSeed connect file:/dev/urandom 1024
How, exactly, does Apache interpret ...
- 2,711
1
vote
1
answer
953
views
Load balancing based on client certificate with Apache mod_proxy_ajp and Tomcat
Currently, I am using mod_proxy_ajp to load balance requests to multiple Tomcat servers. Callers are authenticated using client certificates and an ACL. This has been working fine, callers are routed ...
- 221
4
votes
3
answers
23k
views
apache Client Certificate Authentication errors: Certificate Verification: Error (18): self signed certificate
So I have been following instructions on setting up Client Certificate Authentication in Apache2 w/ mod_ssl. This is solely for the purpose of testing an application against CAA, not for any sort of ...
- 393
0
votes
1
answer
2k
views
Apache2, mod_proxy, mod_ssl on OSX not working
I am trying to setup apache2 on OSX and am having an issue. I am trying to proxy a domain to 127.0.0.1:8081 (which is up and running) but when try to load through apache I get a "Web Page Not Found". ...
- 191
5
votes
1
answer
5k
views
Apache sends plain-text response when accessing SSL-enabled site without HTTPS
I've never encountered something such as this before. I was attempting to simply redirect the page to the HTTPS version if it determined that HTTPS was off, but instead it's displaying an HTML page ...
- 279
1
vote
0
answers
88
views
How can I relax SSL requirements inside a specific folder?
I have a root folder that is protected by a SSLRequire rule; say:
SSLRequire %{SSL_CLIENT_S_DN_Email} =~ m/^.+@foobar\.com$/
However, I'd like a subfolder of this root folder to be protected by a ...
- 328
1
vote
1
answer
7k
views
Self signed Apache cert error: asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
Can anyone see where I went wrong on these steps (on Windows XP + Apache 2.2)?
I tried to create my own self signed SSL certificate with my own CA and when its all done my Apache server wont start ...
- 4,200
0
votes
1
answer
122
views
Can't copy Ilias-folder via FQDN, but via ip-address?
I have an Ilias-Installation, which is available through two virtual hosts: the FQDN and the ip-address. The first server is ssl only, the second plain http. Both configuration files look the same ...
- 458
3
votes
1
answer
7k
views
How to setup multiple Apache SSL sites using multiple IP addresses
How do you setup a single Apache2 config to host multiple HTTPS sites each on their own IP address? There will also be multiple HTTP sites on just a single IP address.
I do not want to use Server ...
- 1,426
4
votes
1
answer
2k
views
Can apache use a key agent to store private keys for SSL?
For mod_ssl in apache to work, you need your RSA private key on the server. If the key is passphrase protected, you have to enter the passphrase whenever you restart apache. There is ...
- 194
3
votes
1
answer
5k
views
SSLVerifyClient not working in Directory context
According to Apache documentation about SSLVerifyClient, one can define its value in Directory context. However, the following configuration is not working:
<IfModule mod_ssl.c>
<...
- 209
36
votes
6
answers
296k
views
How to enable TLS 1.1 and 1.2 with OpenSSL and Apache
In light of a growing number of security issues, such as the newly announced Browser Exploit Against SSL/TLS (BEAST), I was curious how we could go about enabling TLS 1.1 and 1.2 with OpenSSL and ...
- 2,276
3
votes
2
answers
7k
views
Apache won't start after installing mod_ssl on CentOS
I need to run both http and https on the same hostnames on my server. I had everything running without SSL with hosts configured in the /etc/httpd/conf.d directory.
System: CentOS release 5.6 (...
- 709
1
vote
3
answers
2k
views
Moving SSL certificate to another Apache server
We just setup new Windows machine as a web server, with Apache 2.2.19 with openssl installed and we want to move our existing web including the SSL certificate (Verisign) from the old setup, Linux, ...
- 225
0
votes
1
answer
159
views
Verify and authenticate digital certificates from trusted CA with Apache+mod_ssl
I set a test server with a self signed SSL certificate and http-authentication with personal digital certificates issued by my test CA and everything works fine.
What if I want to authenticate users ...
- 137
1
vote
1
answer
2k
views
apache2 SSL Diffie Hellman key sizes
How to make apache 2.2 in debian lenny use Diffie Hellman key exchange with keys larger than 1024bits?
I found a patch that theoretically adds this ability at Apache bugzilla but can't find any ...
- 6,401
2
votes
1
answer
765
views
apache client certificate if-else condition
I have a <Location> within a virtualhost that looks like this:
<Location /app1/>
SSLVerifyClient require
SSLVerifyDepth 2
SSLRequireSSL
SSLOptions +OptRenegotiate
...
- 2,455
1
vote
3
answers
1k
views
Apache not starting, nothing in log files despite being "debug" level
Our cloud hosting company decided today to upgrade all CentOS implementations to 2.6.39.2. Unfortunately this had an adverse affect on our Apache server, preventing it from starting with mod_ssl ...
Alex
0
votes
1
answer
361
views
Apache SSL certificate used branch on hostname
I have mass virtual hosting set up on one of our servers allowing me to basically create a symlink in a certain directory and immediately have that host available on both http as well as https. This ...
- 294
1
vote
2
answers
607
views
Trouble renewing my SSL certificate
So my free SSL certificate from startcom expired, and I went to renew it.
I was given a choice of pasting in the contents of my csr, or generating a new one on their website, so I pasted in my csr. ...
- 881
0
votes
1
answer
10k
views
OpenSSL Handshake Failure (14094410) - Erroneous Client Certificate Check from Mobile Phone
I'm running a proxy server through Apache with modssl, which we're using to proxy POSTs from mobile devices to another internal server. This works successfully for most clients, but requests from a ...
- 103
0
votes
1
answer
804
views
How to include mod_ssl into httpd on rhel5.4
I'm trying to get apache running over https with mod_ssl on a rhel 5.4 x64 machine.
I don't have mod_ssl.so in the modules directory, nor can i find any ssl type output from httpd -M or httpd -l.
...
- 1,949
4
votes
3
answers
3k
views
Problems with multiple SSL on same IP, but only in select clients
I know there are tons of posts about multiple SSL on same IP, but I promise I'm not beating a dead horse. My question is very clear. First, a little background...
Our organization has several ...
- 548
4
votes
1
answer
506
views
Apache ServerName uses AlternativeName instead of CommonName
I have recently purchased an SSL Certificate. The CommonName (CN) of the certificate is www.mydomain.com and has several AlternativeNames such as subdomain1.mydomain.com, subdomain2.mydomain.com etc.
...
- 573
0
votes
2
answers
386
views
Why is apache with mod_ssl configured for one VirtualHost responding to requests to any domain?
I've just setup Apache 2.2.18 with mod_ssl enabled and its configured to listen to one IP address on port 443. There are many domains with A DNS record poiting to this IP address. But I want to ...
- 283