Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [mod-ssl]

The Apache Httpd interface to OpenSSL

0
votes
1answer
25 views

How to connect through SSL to server requiring certificate exchange via an apache proxy?

I need to connect to an external server via SSL which only accepts certificates exchange following this architecture : Client (my Nodejs server) -----http-----> (Reverse?) Proxy ----https-----> ...
0
votes
0answers
32 views

Loop Through Apache HTTPD Environment Variables and Set Header

I'm currently requesting client certificates from people that hit my httpd servers set up as reverse proxies. One of the things I pull from the certificate is their email: RequestHeader set ...
0
votes
0answers
23 views

apache installed from source not starting/stopping after enabling ssl

have installed Apache in Redhat following steps given by compile and install Apache link with port 80, the Apache is working fine without any issue, with proxy settings done with Apache tomcat, but ...
0
votes
0answers
144 views

could not read request body for SSL buffer / could not buffer message body to allow SSL renegotiation to proceed

I am trying to improve my Apache security configuration and I seem to fail when it comes to the cipher suite. This is what I had and works (but is less secure): SSLCipherSuite "EECDH+ECDSA+AESGCM:...
0
votes
1answer
53 views

RewriteEngine rules ignored by Apache on SSL

I have a working Apache setup on CentOS 7.6 using the standard Apache 2.4.6-88 package, using HTTP. I am trying to enable HTTPS on the server, and everything works, except for my RewriteEngine rules. ...
1
vote
0answers
16 views

How to allow a newly inserted user certificate with Apache 'SSLVerifyClient optional'?

My web users are able to optionally use a Smart Card Certificate to identify themself via Firefox to my web server running Apache httpd 2.4. For this I use SSLVerifyClient optional plus for speed ...
0
votes
0answers
147 views

Django app not running on apache 2.4 with mod_wsgi daemon

I need help in understanding if I have correctly upgraded my website's older config from httpd-2.2 to httpd-2.4. It was hosted on a local server that we have since retired and the entire /etc/httpd ...
0
votes
2answers
281 views

Apache2 URL Rewrite with Reverse Proxy

I've been trying to accomplish a goal of using Apache as a reverse proxy to translate HTTP to HTTPS as well as using mod_rewrite to inject a query string. The reverse proxy works if tested without ...
0
votes
0answers
171 views

Apache 2.4 SSLSessionCache missed

Apache server is behind a physical loadbalancer et it uses an https connection between. The loadbalance break the https en create a new https connexion with apache. So it's always the same client ...
0
votes
2answers
3k views

Apache: SSLCertificateFile: file does not exist or is empty

I created a Private Key, CSR, and CRT using the below commands to run a Website using HTTPS on Apache 2.4.6. And the Operating System is Cent OS 7. // To generate a Private Key 1. openssl genrsa -...
0
votes
1answer
136 views

Apache on SLES only starts https with -D SSL arguments

I've been hacking up this server for a few days trying to convert a new installation of apache to HTTPS with the plan to convert it to NSS once I have SSL running properly. This server is not ...
0
votes
1answer
86 views

“Server should be SSL-aware but has no certificate configured” Apache won't start

Never have set up a web server like this so I'm not sure what i'm doing wrong. I'm setting up my SSL certificate on my Ubuntu 14.04 server. The SSL is from NameCheap as is the domain. I'm getting this ...
0
votes
0answers
194 views

apache2 segmentation fault on https requests

I am trying to configure an old OpenSuse server with https. The http virtualhost seems to work fine, however when I try to load the https url from my browser I get a: This site can’t be reached ...
0
votes
2answers
116 views

Apache Canonical Host with one SSL certificate for with www. and without

Using SNI, there are multiple domains with their own SSL certificates (LetsEncrypt) on one IP address. For one of the primary domains, let's just say https://thedomain.tld, visiting https://www....
0
votes
1answer
304 views

Apache SSLProxy

I am looking for a solution to provide a webapplication running on our local network under a subdomain via SSL. We dont want to use a DynDNS but a subdomain of our own domain. Our current setup Root ...
1
vote
1answer
1k views

How to bypass SSLVerifyClient for specific IP Address

I'm fairly new to HTTPD so I need some insight from the pro's. The previous admins set up HTTPD on a Linux box. It is configured to read Certs by the user accessing a specific DNS (ex: https://cxg-...
1
vote
1answer
1k views

Apache 2.4 / SSL certificates error: AH01903: Failed to configure CA certificate chain

I recently had to renew one of my SSL certificates on an Apache 2.4/Mod_ssl server. I have 2 Vhosts, no SNI, each running on a separate NIC. Until now the certificates were both Globalsign ...
0
votes
1answer
173 views

Can I purchase an EV SSL for a single subdomain? [duplicate]

Hey everyone sorry for the noob question, I was getting different answers on Google. My question specifically is: Am I able to purchase a EV SSL for each of my sub-domains. Thanks in advance.
0
votes
2answers
66 views

Something is regenerate ports.conf [closed]

Since the last update of my Raspbian "something" is updating my apache ports.conf file by adding these two lines automatically: Listen 81 And: <IfModule mod_ssl.c> Listen 443 </IfModule>...
0
votes
1answer
433 views

HTTPD + OpenSSL - Long time to connnect to port 443 then ssl_handshake_failure

I know that ssl_handshake_failure is a generic error, however this is my last resort, since I've been investigating this issue for three weeks. I'm deploying Apache HTTPD server on an AIX Server. AIX ...
1
vote
1answer
525 views

Apache client authentication: browser not sending certificate when CA name not matching by case?

Using Apache 2.4. We have two valid CA certificates whose distinguished names differ only by the case of one character (say CA1 with dn: cn=MyCA,O=myOrg and CA2 with dn: cn=MyCA,O=MyOrg). These two ...
-2
votes
1answer
444 views

Apache recompile with mod_ssl and openssl

I have a Nagios (dev) server built on AWS EC2. The server had preinstalled: OpenSSL 1.0.1k-fips Apache/2.4.25 Qualys scan notified that there are vulnerabilities. The package available on AWS ...
4
votes
0answers
118 views

Puzzled by SSLCACertificateFile parameter

there's something I can't understand with the SSLCACertificateFile parameter on Apache SSL conf. Put for example I have a ROOT cert "A" that issued an intermediate cert "B". Then, I produced a couple ...
2
votes
1answer
7k views

How to Install mod_ssl on RHEL7 when it's missing from yum

I've been given a RHEL7 server with Apache 2.4.6 and OpenSSL and I would like to install mod_ssl. The issue is yum doesn't find the package: yum install mod_ssl No package mod_ssl available. Error: ...
0
votes
1answer
499 views

Repairing Apache after OpenSSL update

I made an OpenSSL upgrade on ubuntu server (14.04 LTS) via apt to 1.1.0f. After the upgrade was finished, I tried to (re)start apache2. Then this appears: * Starting Apache httpd web server apache2 ...
1
vote
1answer
3k views

How to solve Apache-2.4 AH02026: Failed to acquire SSL session cache lock

I've just stood up a new AWS Ubuntu 16.04 server running Apache2.4 with PHP-FPM 5.6 and 7.1 available via different sockets. Everything is working great, but I'm getting the following errors in the ...
0
votes
1answer
1k views

Apache2.4.25 using system default openssl instead of new version provided during compilation

Trying to compile apache2.4.25 from source on Fedora 15 with dynamically linked mod_ssl. Fedora15 server has a default openssl version (OpenSSL 1.0.0j-fips 10 May 2012) and newer openssl library (...
1
vote
1answer
749 views

Apache SNI Issues with SSL Certificates

I'm having issues with my VirtualHost configurations on my server. My server is running Ubuntu 14.04.5 LTS (GNU/Linux 4.4.0-31-generic x86_64), with Apache/2.4.7 (Ubuntu). I've done a lot of reading ...
3
votes
1answer
5k views

How to check apache for SNI (Server Name Indication ) availability?

I have a centos 7 server. I switched from apache 2.4.6 to apache 2.4.25 using IUS repository (https://ius.io/). My goal is to support multiple SSL certificates with a single IP. I have installed: ...
0
votes
3answers
2k views

Apache2 uses http instead of https, despite LetsEncrypt

Background I have an Ubuntu 16.04 server running Apache/2.4.18 (Ubuntu). I installed lets-encrypt from github and ran ./letsencrypt-auto --apache, choosing the second option from the following dialog:...
0
votes
2answers
87 views

Apache2 mod_ssl goes missing after random time period

Using a fairly typical/standard Apache installation on Ubuntu, with mod_ssl enabled, every "so often" (random time period) a website on the server stops responding. When looking to see why, I noticed ...
0
votes
1answer
684 views

Apache HTTP to HTTPS redirect not working

I am trying to set up a default HTTP to HTTPS redirect. Somehow neither mod_rewrite nor Redirect work. Am I missing something obvious? Listen 80 Listen 443 <VirtualHost *:80> ...
2
votes
0answers
3k views

SSLRequire %{SSL_CLIENT_S_DN_CN}

Q1) I'm new to Apache HTTP Server, I'm trying to configure the SSLRequire for particular contexts. Below are the 2 cases: a) Checking against CA-Signed Certificate's attributes, it is working as ...
2
votes
1answer
3k views

Apache SSL Handshake Slow

I am running an Apache 2.4.18 server running under Ubuntu 16.04.1 LTS, only with PHP 7 and Exim 4 installed. In the early morning the SSL handshake is extremely fast, about 200ms, but as time passes ...
1
vote
0answers
118 views

What's different between 'Using-Default-VirtualHost' and 'Using-Correctly-Named-VirtualHost'?

Conclusion: I believe I mismatched openssl version when I had compiled apache. It works now; and I recompiled it with openssl which is already installed. Thank you for your help, Unbeliever. ...
0
votes
1answer
39 views

How to configure SSL using two different Web Servers

I am a noob when it comes to System Administration & Networking and I thought I would get some valuable insight from the pros in here. I work for my University's IT department and I overlook the ...
0
votes
1answer
5k views

Upgrade OpenSSL (mod_ssl) on WIndows Apache 2.2.18 to v1.1.0b

I am running Apache 2.2.18 on my work machine and have a dedicated IP and paid SSL certificate. Since this server should be secure, I only use HTTPS when I access it. To do a test I went to ssllabs....
2
votes
1answer
450 views

Why is my request queueing time so high?

I am running a Rails application server. My setup is: Apache 2, using mod_ssl for both https and ssl client certificates Phusion Passenger 5 Rails 4 Ruby 2.1 I use NewRelic to monitor the running ...
0
votes
1answer
924 views

Redirection from http to https in Apache httpd24 with mod24_ssl is not working

I have my Amazon linux server and I had installed httpd24 and mod24_ssl. I had been setup ssl certificate in /etc/httpd/conf.d/ssl.conf file with https redirect instructions: <VirtualHost *:80> ...
14
votes
1answer
7k views

Why is my SSL certificate untrusted on Android?

The SSL certificate is trusted on most Desktop computers, but only some Android devices. However, even on Android devices where the certificate is untrusted, the root certificate is installed. I must ...
0
votes
1answer
3k views

Cannot load modules/mod_ssl.so into server: /etc/httpd/modules/mod_ssl.so: undefined symbol: ap_array_str_contains

I am trying to run Apache on Amazon Linux with SSL for my website and I configured all ssl prerequisites. But when I start the Apache it throws the error saying: Starting httpd: httpd: Syntax error ...
1
vote
1answer
750 views

Webmin through apache2 SSL Proxy

I'm trying to make accessible my Webmin through a sub-domain https://webmin.example.com/ I'm using Cloudflare DNS and Cloudflare SSL Certification. Whenever i type the above URL, it's automatically ...
0
votes
2answers
664 views

After Setting Up SSL for one vhost https://sitename.com shows Apache 2 Test Page

Thank you in advance for your support! We have been working on this for a couple days, lots of research and no luck with a solution. Our web server is running on centos6 with apache (httpd-2.2.15-53)...
0
votes
1answer
107 views

How to enable SSL only on certain locations

I have an Apache that serves an application as well as a web service. I want the web service over https but the application over http. How do I enable SSL on only a certain location? None of the SSL ...
2
votes
1answer
407 views

mod ssl error during ssl installation

Server Environment AWS EC2, Ubuntu 14.04LTS, LAMP 443 Port is enabled from security group. Server is listening to 443 port. I have purchased SSL from cheapsslsecurity.com and followed following step....
2
votes
1answer
1k views

How to rename default-ssl.conf in Apache 2.4

I'm running Apache 2.4 on Ubuntu. I'm trying to renamedefault-ssl.conf, but I can't get it to work. Here is what works. If I enable the SSL module a2enmod ssl and the site configuration file ...
0
votes
2answers
16k views

Apache2 - SSL is not working

I am currently trying to install an SSL certificate issued through Namecheap by Comodo. I am however currently having issues. In the error log, I have this error: [Sun Apr 10 17:59:06.567045 2016] [...
0
votes
3answers
5k views

Enable SSL for a single VirtualHost

I have an apache 2.4 webserver running on Ubuntu 14.04 LTS. Is it possible to enable SSL only for a single VirtualHost and leaving the other VirtualHosts unaffected (including the default one)? For ...
2
votes
3answers
740 views

Can't update Apache SSL Protocols or Ciphers

I’ve been searching and testing for a couple of days now and have run out of things to try. Here’s my problem. I have an Apache Lounge 2.4.18 (Win32) VC14 web server running on a Microsoft Windows ...
2
votes
0answers
2k views

Setting up an Apache forward proxy with 2-way SSL with certificate CN check fails

I need to set up a forward proxy with 2-way SSL verification. I got pretty far using Apache 2.4.10 on Debian, but it fails because the certificate CN is compared to the wrong name. I've searched and ...