Questions tagged [mod-ssl]
The Apache Httpd interface to OpenSSL
26
questions
14
votes
1
answer
30k
views
How to disable SSLCompression on Apache httpd 2.2.15? (Defense against CRIME/BEAST)
I read about the CRIME attack against TLS Compression (CVE-2012-4929, CRIME is a successor to the BEAST attack against ssl & tls), and I want to protect my webservers against this attack by ...
- 24k
4
votes
1
answer
9k
views
Forcing SSL in Apache without hard-coding the hostname
I think that I have this sorted (thanks mainly to the question How to redirect non-www to www without hardcoding using .htaccess?), but I still don't entirely understand a couple of things.
I would ...
- 631
0
votes
1
answer
751
views
installing SSL certs on apache ... what certs to use?
Im an intermediate Linux user and got assigned the task to make Apache run https connections. Currently running centOS 6 and my problem is following:
installed mod_ssl and tried to set up paths ...
- 3
59
votes
8
answers
122k
views
Apache: SSLCertificateKeyFile: file does not exist or is empty
I am configuring SSL for Apache 2. My system is Ubuntu Server 10.04 LTS. I have the following settings related to SSL in my vhost configuration:
SSLEngine On
SSLCertificateKeyFile /etc/ssl/private/...
- 4,350
36
votes
6
answers
296k
views
How to enable TLS 1.1 and 1.2 with OpenSSL and Apache
In light of a growing number of security issues, such as the newly announced Browser Exploit Against SSL/TLS (BEAST), I was curious how we could go about enabling TLS 1.1 and 1.2 with OpenSSL and ...
- 2,276
17
votes
1
answer
17k
views
Why is my SSL certificate untrusted on Android?
The SSL certificate is trusted on most Desktop computers, but only some Android devices. However, even on Android devices where the certificate is untrusted, the root certificate is installed.
I must ...
- 291
15
votes
3
answers
24k
views
SSLCertificateChainFile Deprecation Warning on Apache 2.4.8+
We have an SSL Certificate for our website from Network Solutions. After upgrading Apache/OpenSSL to version 2.4.9, I now get the following warning when starting HTTPD:
AH02559: The ...
- 811
15
votes
7
answers
87k
views
Session Cache is not configured... why?
I'm running (trying to run, actually) Apache 2.4.2 on Windows Server 2003 R2 32 bit (plus PHP 5.4.5 and OpenSSL 1.0.1c, but I don't think that matters), and I'm getting the following line in the error ...
- 525
13
votes
4
answers
55k
views
How to disable TLS 1.1 & 1.2 in Apache?
I have an Ubuntu 12.04.2 LTS server running Apache 2.2.22 with mod_ssl and OpenSSL v1.0.1.
In my vhosts config (everything else within which behaves as I would expect), I have the SSLProtocol line ...
- 279
9
votes
2
answers
16k
views
mod_ssl SSLCACertificatePath Proper Usage or What is the Best way to Handle Multiple Acceptable Client Certificate CAs
I am attempting to use the mod_proxy SSLCACertificatePath directive, but I'm a tad bit confused on how to use it properly.
Here are two links explaining the SSLCACertificatePath directive:
http://...
- 245
6
votes
2
answers
31k
views
Can I upgrade OpenSSL version used by apache without recompiling the server but just mod_ssl?
I have an Apache server on a Unix machine:
Apache/2.2.29 (Unix) OpenSSL/0.9.8zg
I would like to upgrade the OpenSSL version to 1.0.2, which is the version currently installed on my system:
machine:/...
- 161
5
votes
2
answers
6k
views
SSL_CLIENT_CERT_CHAIN not being passed to backend server
I have client certificate configured and working in Apache. I want to pass the PEM-encoded X.509 certificates of the client to the backend server.
I tried with the SSLOptions +ExportCertData. This ...
- 161
5
votes
0
answers
2k
views
Apache 2.2 fails with "unable to write 'random state'" with 2048-bit RSA key (1024-bit works fine)
I'm usually pretty good with Apache and OpenSSL, but this one has me completely baffled. I'm running Apache 2.2.22 and OpenSSL 1.0.1 on a Ubuntu 12.04 LTS Server. I have an IP-based virtual host ...
- 570
3
votes
1
answer
7k
views
How to setup multiple Apache SSL sites using multiple IP addresses
How do you setup a single Apache2 config to host multiple HTTPS sites each on their own IP address? There will also be multiple HTTP sites on just a single IP address.
I do not want to use Server ...
- 1,426
3
votes
1
answer
4k
views
Discrepancy in SSL Ciphers between Apache 2.2 and OpenSSL 1.0.1
I'm running up-to-date Ubuntu 12.04 LTS with Apache 2.2.22-1ubuntu1.4 and OpenSSL 1.0.1-4ubuntu5.11.
I have configured Apache to use ciphersuites list from https://wiki.mozilla.org/Security/...
- 2,382
2
votes
1
answer
4k
views
OpenSSL error when compiling Apache HTTPD - undefined reference to `SSL_in_init'
We run Apache HTTPD as a production load balancer using mod_ssl with OpenSSL. I'm trying to recompile Apache HTTPD on the latest version (2.4.41) and am encountering the following error when running ...
- 43
2
votes
2
answers
2k
views
Apache redirect user if they are using SSLv3
I'd like to redirect any users on our site if they try to use SSLv3 (if I just disable SSLv3 and a browser like IE6 comes along, I couldn't seem to properly redirect it to an http version of our site ...
- 261
2
votes
1
answer
17k
views
centos6 apache2 Invalid Command SSLEngine
Running: CentOS6 x64
When I restart httpd, I get the following error. What am I missing?
[root@localhost ~]# service httpd restart
Stopping httpd: [ OK ]...
- 796
2
votes
2
answers
2k
views
Building an SSL server farm
I'm interested in building the the architecture in the article referenced below.
I currently have a modestly-priced layer-4 load balancer and my application servers are the SSL endpoints.
I want to ...
- 426
1
vote
1
answer
92
views
httpd crash with ssl_io_filter_cleanup () from /usr/lib64/httpd/modules/mod_ssl.so
version: httpd-2.4.54-1.el8.x86_64
Core generated when i do httpd condrestart for a task and also i can see some ssl_error_logs which is related to the core file pid.
gdb logs:
Core was generated by `/...
1
vote
1
answer
3k
views
Missing NPN Extension
I'm trying to set up mod_spdy with Apache (mod_spdy-0.9.4.3-r420 and apache2-2.2.22-13+deb7u3 on Debian Wheezy). As far as I can tell, everything is the way it's supposed to be, but I'm getting the "...
- 167
1
vote
4
answers
5k
views
Apache2 ssl with ecc
Is it possible to configure Apache2 to use elliptic curve crypto (ecc) with SSL? This bug https://issues.apache.org/bugzilla/show_bug.cgi?id=40132 appears (to me) to indicate that this is supported, ...
- 159
1
vote
2
answers
3k
views
Yum Update Failing mod_ssl and glibc_devel
Any ideas on how to get this to not fail?
# yum update
Freeing read locks for locker 0x82: 4189/140342084876032
Freeing read locks for locker 0x84: 4189/140342084876032
Freeing read locks for locker ...
- 145
1
vote
2
answers
3k
views
Validating SSL clients using a list of authorised certificates instead of a Certificate Authority
Is it possible to configure Apache (or any other SSL-aware server) to only accept connections from clients presenting a certificate from a pre-defined list? These certificates may be signed by any CA (...
- 103
1
vote
0
answers
10k
views
Apache SSL handshake interrupted by system
I have an up-to-date Ubuntu 12.04 server running Apache 2.2.22-1ubuntu1.4.
For every HTTPS request my Apache logs record what appear to be error messages related to encrypted connections.
Self-signed ...
- 2,382
0
votes
1
answer
40k
views
Job for httpd.service failed
after following this tutorial :https://www.digitalocean.com/community/tutorials/how-to-create-an-ssl-certificate-on-apache-for-centos-7
I have tried everything I possibly can to fix the error I have ...
- 103