Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [mod-ssl]

The Apache Httpd interface to OpenSSL

1
vote
3answers
838 views

Apache not starting, nothing in log files despite being “debug” level

Our cloud hosting company decided today to upgrade all CentOS implementations to 2.6.39.2. Unfortunately this had an adverse affect on our Apache server, preventing it from starting with mod_ssl ...
0
votes
3answers
37 views

EC2 - httpd service not running with 443 vhosts after installing mod_ssl

I'm experiencing issues with the configuration of mod_ssl on an AWS EC2 instance It appears I'm at some point where I cannot run httpd service via sudo service httpd restart since I installed the ...
0
votes
2answers
338 views

Apache2 URL Rewrite with Reverse Proxy

I've been trying to accomplish a goal of using Apache as a reverse proxy to translate HTTP to HTTPS as well as using mod_rewrite to inject a query string. The reverse proxy works if tested without ...
0
votes
2answers
684 views

After Setting Up SSL for one vhost https://sitename.com shows Apache 2 Test Page

Thank you in advance for your support! We have been working on this for a couple days, lots of research and no luck with a solution. Our web server is running on centos6 with apache (httpd-2.2.15-53)...
2
votes
1answer
3k views

Apache SSL Handshake Slow

I am running an Apache 2.4.18 server running under Ubuntu 16.04.1 LTS, only with PHP 7 and Exim 4 installed. In the early morning the SSL handshake is extremely fast, about 200ms, but as time passes ...
2
votes
1answer
602 views

Web Server with PKCS11 support for server certificates?

I have a PKCS#11-compatible smart card with either a private key, or a combination of a certificate and a private key on it (I can have both). I want to present the certificate from the smart card to ...
1
vote
1answer
531 views

Apache client authentication: browser not sending certificate when CA name not matching by case?

Using Apache 2.4. We have two valid CA certificates whose distinguished names differ only by the case of one character (say CA1 with dn: cn=MyCA,O=myOrg and CA2 with dn: cn=MyCA,O=MyOrg). These two ...
1
vote
1answer
598 views

Website does not advertise HTTP in its NPN Extension spdy

I have configure Apache with SPDY (and PHP-FPM). Everything works fine. However, spdycheck.org shows me following error: HTTP Over SSL Not Supported! This website only supports SPDY over SSL, ...
1
vote
1answer
357 views

OpenSSL response 404 issue on centOS 6

I followed this tutorial (though it's for 5.2, I figured I'd be alright). The changes I had to make that seemed to have worked: Rename ca.csr to ca.cslr (that's the one the command generated) List ...
0
votes
1answer
87 views

“Server should be SSL-aware but has no certificate configured” Apache won't start

Never have set up a web server like this so I'm not sure what i'm doing wrong. I'm setting up my SSL certificate on my Ubuntu 14.04 server. The SSL is from NameCheap as is the domain. I'm getting this ...
0
votes
1answer
440 views

HTTPD + OpenSSL - Long time to connnect to port 443 then ssl_handshake_failure

I know that ssl_handshake_failure is a generic error, however this is my last resort, since I've been investigating this issue for three weeks. I'm deploying Apache HTTPD server on an AIX Server. AIX ...
0
votes
1answer
39 views

How to configure SSL using two different Web Servers

I am a noob when it comes to System Administration & Networking and I thought I would get some valuable insight from the pros in here. I work for my University's IT department and I overlook the ...
0
votes
1answer
934 views

Redirection from http to https in Apache httpd24 with mod24_ssl is not working

I have my Amazon linux server and I had installed httpd24 and mod24_ssl. I had been setup ssl certificate in /etc/httpd/conf.d/ssl.conf file with https redirect instructions: <VirtualHost *:80> ...
0
votes
1answer
75 views

Apache + mod_ssl configuration settings not being used

The configuration settings i set in httpd.conf don't seem to be actually working. After restarting Apache I used some online SSL check type websites and it appears that Apache isn't using the ...
0
votes
1answer
107 views

How to correctly setup an Apache VirtualHost as HTTP and HTTPS?

I am trying to setup a locally (for development/testing purposes) SSL site using Apache and mod_ssl and this is what I have in my VirtualHost files: /etc/httpd/conf.d/local.conf <VirtualHost *:80&...
0
votes
1answer
606 views

Force httpd 2.0 mod_ssl to use TLSv1 for proxied handshakes

I have an instance of httpd (version 2.0) that uses mod_proxy to transform incoming http requests to https. My problem is that I need my proxy to connect to a server that only supports SSLv3/TLSv1 ...
0
votes
1answer
62 views

What refer/mean “Remote Server Authentication” at Apache mod_ssl doc?

The part of the doc in that such term is used is this. Can anybody give some context or explain me what mean Remote Server Authentication there? I know that Apache server can authenticate clients but ...
0
votes
1answer
3k views

Verify client certificate CN in Tomcat(APR)

I'm running a tomcat installation with the APR libraries installed (with the OpenSSL HTTPS stack that comes with it). What I'm trying to do is to lock a specific HTTPS connector down to users of a ...
0
votes
1answer
1k views

Apache 500 error, I dont fully understand the error log

I'm trying to connect a backend server(gitorious running in https) to my frontend apache2 server running on ubuntu server. I believe that I have the vhost file and proxy config setup right but it ...
0
votes
1answer
340 views

Rackspace Red Hat 5.4 converted to CentOS repository, mod_ssl will not install

I am trying to add mod_ssl to apache, but it fails due to the repository change to CentOS as we needed a newer version of imagemagick, which was only available on CentOS. I am now getting the ...
-1
votes
1answer
326 views

Can't get 2nd ssl virtual host to work

I have an Centos 5.7 Server running apache 2. The server had ssl configured by default for the default site I have. When I try to add another ssl vhost I can't get httpd to restart. I have been trying ...
5
votes
0answers
2k views

Apache 2.2 fails with “unable to write 'random state'” with 2048-bit RSA key (1024-bit works fine)

I'm usually pretty good with Apache and OpenSSL, but this one has me completely baffled. I'm running Apache 2.2.22 and OpenSSL 1.0.1 on a Ubuntu 12.04 LTS Server. I have an IP-based virtual host ...
4
votes
0answers
256 views

mod_ssl client certificates on a reverse proxy

I am trying to add client certificate authentication on a reverse proxy that proxies an oracle application. Before adding, and if i remove the subsequent code, the oracle application is able to start ...
3
votes
0answers
123 views

Puzzled by SSLCACertificateFile parameter

there's something I can't understand with the SSLCACertificateFile parameter on Apache SSL conf. Put for example I have a ROOT cert "A" that issued an intermediate cert "B". Then, I produced a couple ...
2
votes
0answers
3k views

SSLRequire %{SSL_CLIENT_S_DN_CN}

Q1) I'm new to Apache HTTP Server, I'm trying to configure the SSLRequire for particular contexts. Below are the 2 cases: a) Checking against CA-Signed Certificate's attributes, it is working as ...
2
votes
0answers
3k views

Setting up an Apache forward proxy with 2-way SSL with certificate CN check fails

I need to set up a forward proxy with 2-way SSL verification. I got pretty far using Apache 2.4.10 on Debian, but it fails because the certificate CN is compared to the wrong name. I've searched and ...
2
votes
0answers
1k views

Apache2:Unable to read server certificate from file

Cannot start apache2 server. error info is below. Looking into similar questions (SSL Error - unable to read server certificate from file, Apache cannot read certificate file, and so on), still ...
2
votes
0answers
1k views

Windows 8 IE 10 TLS Handshake Errors to Apache 2.2 on Centos 6.6

We are really stumped on this. During an upgrade to a newer Apache environment running on CentOS 6.6 we encountered weird problems with TLS connections from Windows 8 machines. The first hint at the ...
1
vote
0answers
16 views

How to allow a newly inserted user certificate with Apache 'SSLVerifyClient optional'?

My web users are able to optionally use a Smart Card Certificate to identify themself via Firefox to my web server running Apache httpd 2.4. For this I use SSLVerifyClient optional plus for speed ...
1
vote
0answers
120 views

What's different between 'Using-Default-VirtualHost' and 'Using-Correctly-Named-VirtualHost'?

Conclusion: I believe I mismatched openssl version when I had compiled apache. It works now; and I recompiled it with openssl which is already installed. Thank you for your help, Unbeliever. ...
1
vote
0answers
180 views

SSLProxyMachineCertificatePath certificate selection

How does SSLProxyMachineCertificatePath cert selection works? Or does it sends all of them in the request ?
1
vote
0answers
2k views

SSL Configuration failed in Apache after moving keys/certs to another machine

I'm in the process of moving my website to another server, and after moving the SSL key and certs and recreating the same Apache config, I encounter the following in the error logs at the time of ...
1
vote
0answers
1k views

Apache, mod_ssl, unsafe renegotiation and segmentation fault

I have a newly installed CentOS 7 server, running Apache httpd 2.4.6 and I just noticed that its audit logs grow too fast, with lots of entries like this one: type=ANOM_ABEND msg=audit(06/02/15 15:44:...
1
vote
0answers
7k views

Apache SSL handshake interrupted by system

I have an up-to-date Ubuntu 12.04 server running Apache 2.2.22-1ubuntu1.4. For every HTTPS request my Apache logs record what appear to be error messages related to encrypted connections. Self-signed ...
1
vote
0answers
646 views

Reverse SSL_CLIENT_S_DN order in Apache?

For some odd reason, mod_nss makes the client DN look like this: SSL_CLIENT_S_DN=C=SE,DC=FOO,serialNumber=123456789012,CN=BAR BAZ Mod_ssl however makes it look like this: SSL_CLIENT_S_DN=/CN=BAR ...
1
vote
0answers
259 views

Apache SSL x509 authentication timeout

I have setup a location to enable client authentication based on x509 certificates: <Location /authenticate> SSLRequireSSL SSLVerifyClient require SSLVerifyDepth 10 </Location> The ...
1
vote
0answers
75 views

How can I relax SSL requirements inside a specific folder?

I have a root folder that is protected by a SSLRequire rule; say: SSLRequire %{SSL_CLIENT_S_DN_Email} =~ m/^.+@foobar\.com$/ However, I'd like a subfolder of this root folder to be protected by a ...
0
votes
0answers
36 views

Loop Through Apache HTTPD Environment Variables and Set Header

I'm currently requesting client certificates from people that hit my httpd servers set up as reverse proxies. One of the things I pull from the certificate is their email: RequestHeader set ...
0
votes
0answers
26 views

apache installed from source not starting/stopping after enabling ssl

have installed Apache in Redhat following steps given by compile and install Apache link with port 80, the Apache is working fine without any issue, with proxy settings done with Apache tomcat, but ...
0
votes
0answers
171 views

could not read request body for SSL buffer / could not buffer message body to allow SSL renegotiation to proceed

I am trying to improve my Apache security configuration and I seem to fail when it comes to the cipher suite. This is what I had and works (but is less secure): SSLCipherSuite "EECDH+ECDSA+AESGCM:...
0
votes
0answers
166 views

Django app not running on apache 2.4 with mod_wsgi daemon

I need help in understanding if I have correctly upgraded my website's older config from httpd-2.2 to httpd-2.4. It was hosted on a local server that we have since retired and the entire /etc/httpd ...
0
votes
0answers
196 views

Apache 2.4 SSLSessionCache missed

Apache server is behind a physical loadbalancer et it uses an https connection between. The loadbalance break the https en create a new https connexion with apache. So it's always the same client ...
0
votes
0answers
200 views

apache2 segmentation fault on https requests

I am trying to configure an old OpenSuse server with https. The http virtualhost seems to work fine, however when I try to load the https url from my browser I get a: This site can’t be reached ...
0
votes
0answers
523 views

SSL with Virtual Hosts Using SNI (multiple name based configs) - Need to get working with client certificate

I have the following configuration along with other name based virtual hosts. All others work fine but this one fails when enabling certificate authentication with the following error: Non-default ...
0
votes
0answers
2k views

Apache mod_ssl StdEnvVars appear not to be set?

I have a CentOS 6.5 server running Apache 2.2.15 with mod_ssl and PHP 5.3.3. My problem is that PHP does not seem to recognize the HTTPS connection. I have the following in my /etc/httpd/conf.d/ssl....
0
votes
0answers
2k views

apache 2.4 don't find the SSL Certificate File

I try to configure SSL on my apache 2.4.12 Webserver. But apache2 can't find the Certificate and Key File in the corespondening ssl directory. I already checked file permissions but without success. ...
0
votes
0answers
942 views

Apache mod_ssl [2.2.26] and Openssl [0.9.8za] compatibility

Our product running over RHEL has Apache 2.2.26 & OpenSSL 0.9.7 [ofcourse, pretty old]. We are currently upgrading Openssl to 0.9.8za. I have installed the latest OpenSSL RPMs. However Apache is ...
0
votes
0answers
55 views

Apache2 + Mod_SSL user management

I'm currently playing around with PKI auth on my Apache2 server and I was just wondering if there is a quick/easy way to add/remove users from the SSLRequire line? Right now I have something like ...
0
votes
0answers
1k views

Apache 2.4 reload succeeds but restart fails when using SSL

On Apache 2.4, reload succeeds but restart fails when using SSL. Or to say it another way, the SSL configuration directives appear to work perfectly when doing a service reload but not a service ...
0
votes
0answers
178 views

google site map generator can't login admin console

I installed Google Sitemap Generator for linux x86_64 CentOS 6 But when I try to login to the admin console using this link myserverip:8181 and my password nothing happened. After refreshing I ...