2
votes
1answer
46 views
Redirect https .com to https .co.uk without a valid SSL cert on .com without DNS change
I have an SSL cert valid for the www. and . subdomains on a domain. That's up and working great. All traffic on http redirects to https, and all bare domain traffic redirects to the www. version. In ...
0
votes
0answers
7 views
Intermittent SSL “Timeout” w/ Apache and a RoR Passenger App
I am completely lost on this one so I'm hoping someone here may have experienced it before.
I have a RoR application running with passenger in apache. It sits on EC2 and is load balanced using ELB.
...
1
vote
2answers
37 views
Possible to have 2 SSL certificates in Apache?
I would like to change the hostname of an Apache 2.2.15-28.el6 (CentOS6) webserver from https://old-domain.com to https://new-domain.com.
If visitors right now type http://old-domain.com (normal ...
0
votes
0answers
12 views
RewriteRule to send static files from Apache2 SSL to Lighttpd?
I'm working on this particular website which is supposed to be SSL-enabled in all pages. I'm trying to reduce the load on Apache by using Lighttpd to serve static files.
I have Lighttpd listening on ...
8
votes
2answers
199 views
Why store Apache SSL certificate and private key in separate files?
The Apache mod_ssl documentation for the SSLCertificateFile and SSLCertificateKeyFile directives states that it is 'strongly discouraged' to store a private key and an SSL certificate in the same ...
-2
votes
0answers
23 views
Installing SSL cert on cpanel WHM causes SSL error [closed]
I have purchased an SSL certificate from 123-reg and am trying to install it in Cpanel WHM but everytime I install it, apache fails to restart showing an SSL error: Cannot read SSL cert from file
The ...
0
votes
2answers
59 views
SSL chain verification problems
I've installed a new SSL certificate using SHA2 hashing instead of SHA1. My chain checks out using these online verifiers:
http://www.sslshopper.com/ssl-checker.html
http://www.digicert.com/help/
...
0
votes
0answers
9 views
UCC certificates and XP browser support [duplicate]
I have a goDaddy UCC SSL certificate to work with multiple named vHosts on Apache2.
My primary domain (Common Name) is www.someSite.com and I have listed under SANs www.anotherSite.com
I have been ...
0
votes
0answers
22 views
using SSL certificate
I have created one web application and setup SSL configuration as follows:
1) I have created SSl certificate as follow:
C:\Program Files\Java\jdk1.6.0_31\bin>keytool -genkey -alias pravin ...
4
votes
1answer
75 views
+50
How to disable TLS 1.1 & 1.2 in Apache?
I have an Ubuntu 12.04.2 LTS server running Apache 2.2.22 with mod_ssl and OpenSSL v1.0.1.
In my vhosts config (everything else within which behaves as I would expect), I have the SSLProtocol line ...
0
votes
1answer
17 views
Is it good idea to set SSLStrictSNIVHostCheck on?
Is it good idea to set SSLStrictSNIVHostCheck on for Apache server? Is it better idea set it just for virtual host?
What are cons and props of this settings?
2
votes
2answers
45 views
Certificate Authentication from Salesforce.com through a reverse proxy
I am attempting to allow Salesforce.com to connect to a biztalk instance that sits inside our corporate network. In between, is a reverse proxy and a series of firewalls.
When a standard HTTP ...
1
vote
1answer
31 views
Default Apache test page when on SSL
I have the exact same configuration for my rails site on a staging server and a production server, aside from the "staging" vs "production" in the file paths.
They're both set up to redirect all ...
1
vote
3answers
53 views
Apache rewrite http request to https
I have an apache server v2.2, with a virtual host on 80 and another with SSL on 444.
I would like to redirect all this kind of request:
http://domain.tld:444/dir1
http://domain.tld:444/dir2
...
0
votes
0answers
17 views
Apache AB (ApacheBench) : -no-check-certificate option available?
It seems there is no option to avoid this error : "Verify return code: 20 (unable to get local issuer certificate)". Is there a way to avoid issuer ssl check with AB (like wget's -no-check-certificate ...
0
votes
1answer
28 views
Redirecting SSL Traffic to Non-secure site
I am currently running a website on a shared server (Hostgator). The site does not have an SSL certificate and doesn't really need it since it is just informational.
However, I've noted that a few ...
1
vote
1answer
26 views
ServerAlias with SSL
I would like to know if the SSL certification would still be valid in the scenario. By valid I mean it will display both sites with SSL certificate without any issues or errors etc.
I have two ...
0
votes
1answer
26 views
Stop default SSL response on Shared IP using SNI
Previously I asked a question here: Single domain SSL presented for all domains on Shared IP about setting up secure and non-secure domains on a single IP.
Opinions were mixed, but it appears SNI ...
1
vote
1answer
48 views
ssl error handshake failure alert
I'm getting the error mentioned in the title in Firefox when i try to access my website on my machine.
This is the error i get :
An error occurred during a connection to www.st.um.
SSL peer was ...
1
vote
1answer
48 views
Single domain SSL presented for all domains on Shared IP [duplicate]
I have a VPS running Apache/2.2.22 on Ubuntu Server 12.04 LTS.
I have successfully installed an SSL for domaina.com
Unfortunately if I visit https://domainb.com, https://domainc.com, etc… I am ...
-1
votes
1answer
25 views
Replacing existing SSL cert on RHEL5/Apache2.2.3
My existing SSL cert is about to expire so I need to replace it with the new one. I have been provided a .cer and .key file. How can I smoothly replace the cert with minimal downtime?
0
votes
0answers
17 views
Apache SSL Connections being killed
Frequently (25%-50%), when we do a post request, the client ssl connection is killed causing a bad request. Get requests do not seem to be suffering from this issue. We are using standard appache ssl ...
0
votes
1answer
50 views
Apache ~ how to force SSL client auth for specific IP
Haven't been able to figure out how to easily manage access to my SSL website.
I'm trying to allow access to a specific location based on client IP.
If client IP = 192.168.x.x => bypass client ...
0
votes
1answer
39 views
curl fails to take self signed certificate
I've installed apache 2 server with self signed certificate.My browser is showing 'It works!' when I tried to connect to the sever. But from an application when I issued cur_easy_perform() the call ...
-1
votes
1answer
63 views
How to disable SSL/TLS compression in Apache 2.2.16?
I have one sever running on Apache 2.2.16. I run the VA scanner on the server. According to the VA report it is recommended that SSL/TLS compression should be off.
I tried to search google, but didnt ...
0
votes
2answers
31 views
SSL install issue on Apache2 for virtual host
I"m trying to get an ssl cert installed but i'm getting an error when reboot apache.
I get this error
Syntax error on line 25 of /etc/apache2/sites-enabled/xxxx.com:
Invalid command ...
0
votes
3answers
39 views
Wrong redirection in ProxyPass from http to https
This is the scenario:
I have got a linux server accesible only by one url (because the server is a virtual machine in a vpn):
url: http://foo.bar.com
I have got several web apps accessible in this ...
0
votes
1answer
37 views
HTTPS to Apache and HTTP to Weblogic doesn't work
The link below contains an image that is how I wish my build architecture:
http://i.imgur.com/qg7LM5j.png
I can configure this, without SSL at any point, and works fine. But when I configure a SSL ...
1
vote
1answer
47 views
Apache “SSLCipherSuite” Directive
Apache describes the SSLCipherSuite directive:
Cipher Suite available for negotiation in SSL handshake
Let's say I configured this directive to HIGH to only use Triple DES encryption.
Would ...
0
votes
1answer
99 views
CentOS Apache + Tomcat SSL using mod_jk
I have Apache + Tomcat (using mod_jk) working correctly on a CentOS 6.3 machine. I am trying to set up SSL with Apache. When I browse to the site I get the following output:
Forbidden
You don't ...
1
vote
2answers
56 views
SSL Certificate Performance
Is it possible that a cheap security certificate could inhibit the performance of a website when serving pages over https?
Background: I have built an e-commerce website using Drupal 7 and Drupal ...
1
vote
1answer
79 views
SSL setup with apache in front of tomcat
i m trying to setup Apache with SSl and proxy SSL requests to my tomcat instance. I think i made the SSL work but theres still a error that shows up:
Bad Gateway
The proxy server received an ...
1
vote
0answers
16 views
Apache 2.2.3 SSLProxyVerifyDepth picky with certificates
I am trying to setup an Apache Proxy for HTTPS web requests. The proxy is configured the following:
<VirtualHost <IP>:8081>
RewriteEngine On
RewriteCond %{HTTP:targetPort} ^3443$
...
2
votes
1answer
58 views
How to redirect all non www and http traffic to www and https with Apache2
In my httpd.conf, I have
RewriteEngine On
RewriteBase /
RewriteCond %{HTTP_HOST} ^mysite.com [NC]
RewriteRule ^(.*)$ https://www.mysite.com/$1 [L,R=301]
But that's not working properly. I want the ...
1
vote
0answers
33 views
Setting up SSL on an Apache Ubuntu Server
I am setting up an SSL certificate for the first time on an Ubuntu server. I have purchased a dedicated IP address and have purchased the certificate under the subdomain of secure.example.com
Port ...
0
votes
1answer
34 views
SSL certificate error in IE and chrome in apache
You attempted to reach www.domainname.domain.ac.in, but instead you actually reached a server identifying itself as *.domain.ac.in.
but the site works fine with https://domainname.domain.ac.in in all ...
0
votes
1answer
80 views
NGinx to Apache SSL Proxy - Exposing weakness using VPS?
There are several questions and how-tos, on how to setup NGinx to work with Apache in handling SSL requests, but after reading several of them, I noticed a pattern, which raised the following ...
0
votes
0answers
38 views
Setting SSL with Debian-based Wordpress Installation
I'm trying to set up HTTPS for Wordpress Authentication without success. Only SSL in wp-admin is sufficient.
Here is the conf file for the Virtual host:
<VirtualHost *:80>
ServerName ...
0
votes
0answers
31 views
RoundCube mail redirects to itself all https requests
All requests to https://example.com end up being redirected to RoundCube login page.
I want https to work the same way as regular protocol does, and to use the same URLs.
Setup: Ubuntu 12.10 with ...
0
votes
1answer
20 views
SSL on WHM/CPanel
I am running cPanel/WHM on Apache server and have just installed an SSL certificate. I'm given the 'successfully installed' message when installing the SSL certificate, however when trying to visit ...
0
votes
0answers
38 views
Apache configuration when ssl terminated at Amazon ELB
I have an EC2 instance behind a Amazon ELB.
I have configured a godaddy SSL certificate on the ELB.
I have configured the ELB listener to be HTTPS (443) to HTTP(80) on the instance side.
...
0
votes
1answer
44 views
SSL Apache site not found
I tried to install web2py on our web server but I have to access the admin panel through SSL because there is no graphical interface on the server itself.
I'm not very familiar with setting up an ...
0
votes
1answer
142 views
Setting up SSL: Recompiling Apache with mod_ssl
I've got an old machine running Ubuntu 12.04 32bit in my office to host our internal wiki and bugzilla sites. We're also testing our new php app with it and I'm trying to get SSL working with a self ...
0
votes
0answers
38 views
SSL Error / RSA premaster secret error
anyone know what is the problem regarding the error that encountered in the PayPal sandbox?
It was working fine for months last time and we changed our server and IPN stopped working. We are not ...
0
votes
0answers
95 views
Redirect from one ssl-virtual host to another on the same server in Apache2
We have a problem with redirecting from one ssl-virtual host to another ssl-virtual host, FF or MSIE only hangs when we try the URL.
Server: Linux xxx 3.2.0-36-generic #57-Ubuntu SMP Tue Jan 8 ...
0
votes
0answers
34 views
OpenSSL: Installed certificates not showing in Acceptable client certificate CA names list
I'm trying to implement client authentication with PHP and Apache2 on Debian using a certificate stored in a smart card (digital signature card).
In order to verify the certificate i installed the ...
0
votes
1answer
24 views
Is it possible to allow only some client certificates in Apache to login?
In my virtual host I have something like that:
SSLEngine on
SSLCertificateKeyFile /etc/apache2/ssl/svn.XXXXX.me.key
SSLCertificateFile /etc/apache2/ssl/svn.XXXXX.me.crt
SSLProtocol ...
2
votes
1answer
55 views
Apache mod_ssl - can you refuse to respond to requests with incorrect hostnames?
I've had problems in the past with old DNS entries (belonging to other people) pointing to a server. To prevent the server responding and making those hostnames appear to hold exact copies of my ...
0
votes
1answer
35 views
Webmin ssl misconfiguration
I've done something wrong in my webmin/ssl configuration. All the websites are trying to load the same certificate when accessing with "https://". There is a virtual server with its own certificate ...
0
votes
0answers
60 views
Configuring SSL Proxy in Apache
I attempted to follow the instructions at How to configure Apache to act as an SSL proxy to an application server?, but I'm still getting some odd errors. I'm not familiar with configuring SSL, and ...
