Tag Info

New answers tagged

1

So the file /etc/apache2/sites-enabled/workload-ssl on line 2 is the config you pastebinned, right? Add SSLEngine On to the <VirtualHost> block there.


0

if you're hitting your php script over https and not over http, you should get following output: [root@wcmisdlin02 ~]# /usr/lib64/nagios/plugins/check_http -H localhost -u /php/phpinfo.php -v | grep SERVER_PORT <tr><td class="e">SERVER_PORT </td><td class="v">80 </td></tr> <tr><td ...


1

In your php.ini search for line ; extension=php_openssl.dll and remove ; so it becomes: extension=php_openssl.dll Then save & restart & enjoy.


0

Have you enabled the ssl in the apache modules? If not, you have to execute: a2enmod ssl Then if the ssl site is not enabled, you have to execute: a2ensite default-ssl You also have to modify the ports.conf.


1

LAMP Stands for Linux, Apache, MySQL, PHP The only additional steps needed to be taken on EC2 are opening up the correct ports (HTTPS defaults to 443). Once that has been done, the instructions are the same for any LAMP server. This includes the openssl commands to generate and self-sign the certificate for use.


1

Https over apache requires mod-ssl that requires a library such as openssl. Please ensure that iptables / allows the https port Not sure if you are using an image that provides a test cert. You could check for it in the docs or in the httpd-ssl.conf. Otherwise what you have detailed captures the essential teps.


1

What I have investigated may be helpful for you. There is an article from intel : https://software.intel.com/sites/default/files/open-ssl-performance-paper.pdf They use apache to test and they said they did not tune any configuration of apache. I think for Nginx is same. Actually you can check the nginx source code, most the openssl related functions ...


2

Place your ILO, IPMI, DRAC and other management devices on their own management VLAN or network. Secure access to that network with VPN or prevent Internet connectivity. Only allow access from trusted networks. That's an acceptable way of mitigating the (still narrow) risk you outlined. You can also disable access to the ILO devices until an updated ...


6

Caused by: java.net.SocketException: Permission denied You need to be root (superuser) to bind to ports under 1024. That's why 9443 works, but 443 doesn't.


0

The agent is not using the pregenerated client certificate. It created a CSR (with a new key) instead, so the master will not trust the agent. Make sure that the files found in `puppet agent --configprint ssldir`/{certs,private_keys}/`puppet agent --configprint certname` are identical to those that you pregenerated and put on your master as well. (The ...


-2

With PHP 5.3.3 on CentOS 6.3 this was an error I ran across because the webserver user didn't have a valid shell. Adding .bashrc to the nginx user's home directory fixed it for us. See answer as this dupe question: https://stackoverflow.com/questions/20648949/php-warning-exec-unable-to-fork/24517481#24517481


1

The KeyUsage is a v3 extension, which may or may not be present in a certificate. A useful (if slightly dated) summary of id-ce-keyUsage values: http://www.alvestrand.no/objectid/2.5.29.15.html [newly added values are 7 = encipherOnly and 8 = decipherOnly] The trick is that this "OID=2.5.29.15 keyUsage extension" /might or might not/ be present in a ...


0

Check /etc/httpd/conf.d/ssl.conf look at the path assigned to SSLCertificateFile ...sounds like it is pointing to the default cert, as Robert suggests Bumped this because I just had a 'duh' moment myself while setting up SSL on an Amazon EC2 instance


1

If they don't copy, you can just do it yourself. Afterward, register the dlls using regsvr32 libssl32.dll and regsvr32 ssleay32.dll so they can be used.


2

The JKS has certificates in DER and for Apache you want to have PEM (AKA X509) format. Sample of how to do this: $JAVA_HOME/bin/keytool --list -keystore <mykeystore> $JAVA_HOME/bin/keytool -export -rfc -alias <alias_name> -file <cert.crt> -keystore <mykeystore> So you will want to export the private key and then the certificates. ...



Top 50 recent answers are included