Podcast #128: We chat with Kent C Dodds about why he loves React and discuss what life was like in the dark days before Git. Listen now.

Questions tagged [mod-ssl]

The Apache Httpd interface to OpenSSL

Filter by
Sorted by
Tagged with
0
votes
1answer
48 views

Apache not finding the HSM-protected private key over PKCS#11

I have installed Apache on my Centos7 virtual machine together with mod_ssl. I'm trying to make TLS working with the private key protected by an HSM over PKCS#11, but when I try to start Apache it ...
0
votes
0answers
94 views

Apache SSLVerifyClient not working for some users

I inherited a system that is running Apache 2.4 that requires users to present client certificates. For some users, their client certificate is not being passed, and are thus denied access. ssl.conf ...
0
votes
1answer
123 views

OpenSSL error when compiling Apache HTTPD - undefined reference to `SSL_in_init'

We run Apache HTTPD as a production load balancer using mod_ssl with OpenSSL. I'm trying to recompile Apache HTTPD on the latest version (2.4.41) and am encountering the following error when running ...
0
votes
1answer
38 views

Apache 2.4 compatibility with OpenSSL

We run Apache HTTPD as a load balancer in production, using mod_ssl with OpenSSL. Whilst trying to compile the latest Apache version (2.4.41) we've hit problems with OpenSSL whilst building. My ...
0
votes
1answer
36 views

Unable to get Client Certificate Chain from apache

I'm trying to get the client certificate chain and root from apache to my Java backend. This is the relevant part of my apache config: SSLOptions +StdEnvVars +ExportCertData RequestHeader set "...
1
vote
0answers
42 views

Apache 2.4 vhosts get redircted (missrouting)

I have a problem with apache config, like this issue (Apache 2.2.22 - Random Vhost misrouting) I have multi domains servered by same apache (using vhosts). sometimes I got response from other domain ...
1
vote
0answers
16 views

Disabling Apache client certificate validation on a specific page

I've setup client certificate validation in apache and it's working just fine. However I'd like to disable the client certificate validation on specific page. Here's the config I use so far : # ...
1
vote
0answers
56 views

Server saying no TLS/SSL protocols available even though mod_ssl/openssl installed and enabled

I am trying to add SSL certs to my server but when I connect via a browser it throws an error (ERR_SSL_PROTOCOL_ERROR in Chrome). This is confirmed using testssh (https://testssl.sh/) Testing ...
0
votes
0answers
63 views

apache2 sends 404 responses after some time without requests

I'm getting the following <body>404 - File not found</body> response from my apache server every time after more than a day without sending requests. My setup is: OS: Ubuntu 16.04 Apache/...
0
votes
0answers
23 views

What certificate encoding supported by Apache?

According to the documentation, Apache supports only PEM-encoded certificates: https://httpd.apache.org/docs/2.4/mod/mod_ssl.html What strange, we were able to configure Apache with DER encoded ...
1
vote
2answers
157 views

Redirect port 8080 to 80

I've a tomcat running along with the apache2 on Amazon AMI. Till now all of my users were accessing my webapp by putting port number 8080 in url and then tomcat does auto-redirection to 8443. But now ...
0
votes
3answers
168 views

EC2 - httpd service not running with 443 vhosts after installing mod_ssl

I'm experiencing issues with the configuration of mod_ssl on an AWS EC2 instance It appears I'm at some point where I cannot run httpd service via sudo service httpd restart since I installed the ...
0
votes
1answer
111 views

How to connect through SSL to server requiring certificate exchange via an apache proxy?

I need to connect to an external server via SSL which only accepts certificates exchange following this architecture : Client (my Nodejs server) -----http-----> (Reverse?) Proxy ----https-----> ...
0
votes
0answers
49 views

Loop Through Apache HTTPD Environment Variables and Set Header

I'm currently requesting client certificates from people that hit my httpd servers set up as reverse proxies. One of the things I pull from the certificate is their email: RequestHeader set ...
0
votes
0answers
30 views

apache installed from source not starting/stopping after enabling ssl

have installed Apache in Redhat following steps given by compile and install Apache link with port 80, the Apache is working fine without any issue, with proxy settings done with Apache tomcat, but ...
0
votes
0answers
283 views

could not read request body for SSL buffer / could not buffer message body to allow SSL renegotiation to proceed

I am trying to improve my Apache security configuration and I seem to fail when it comes to the cipher suite. This is what I had and works (but is less secure): SSLCipherSuite "EECDH+ECDSA+AESGCM:...
0
votes
1answer
97 views

RewriteEngine rules ignored by Apache on SSL

I have a working Apache setup on CentOS 7.6 using the standard Apache 2.4.6-88 package, using HTTP. I am trying to enable HTTPS on the server, and everything works, except for my RewriteEngine rules. ...
1
vote
0answers
22 views

How to allow a newly inserted user certificate with Apache 'SSLVerifyClient optional'?

My web users are able to optionally use a Smart Card Certificate to identify themself via Firefox to my web server running Apache httpd 2.4. For this I use SSLVerifyClient optional plus for speed ...
0
votes
2answers
631 views

Apache2 URL Rewrite with Reverse Proxy

I've been trying to accomplish a goal of using Apache as a reverse proxy to translate HTTP to HTTPS as well as using mod_rewrite to inject a query string. The reverse proxy works if tested without ...
0
votes
0answers
270 views

Apache 2.4 SSLSessionCache missed

Apache server is behind a physical loadbalancer et it uses an https connection between. The loadbalance break the https en create a new https connexion with apache. So it's always the same client ...
0
votes
2answers
5k views

Apache: SSLCertificateFile: file does not exist or is empty

I created a Private Key, CSR, and CRT using the below commands to run a Website using HTTPS on Apache 2.4.6. And the Operating System is Cent OS 7. // To generate a Private Key 1. openssl genrsa -...
0
votes
1answer
194 views

Apache on SLES only starts https with -D SSL arguments

I've been hacking up this server for a few days trying to convert a new installation of apache to HTTPS with the plan to convert it to NSS once I have SSL running properly. This server is not ...
0
votes
1answer
109 views

“Server should be SSL-aware but has no certificate configured” Apache won't start

Never have set up a web server like this so I'm not sure what i'm doing wrong. I'm setting up my SSL certificate on my Ubuntu 14.04 server. The SSL is from NameCheap as is the domain. I'm getting this ...
0
votes
0answers
238 views

apache2 segmentation fault on https requests

I am trying to configure an old OpenSuse server with https. The http virtualhost seems to work fine, however when I try to load the https url from my browser I get a: This site can’t be reached ...
0
votes
2answers
134 views

Apache Canonical Host with one SSL certificate for with www. and without

Using SNI, there are multiple domains with their own SSL certificates (LetsEncrypt) on one IP address. For one of the primary domains, let's just say https://thedomain.tld, visiting https://www....
0
votes
1answer
423 views

Apache SSLProxy

I am looking for a solution to provide a webapplication running on our local network under a subdomain via SSL. We dont want to use a DynDNS but a subdomain of our own domain. Our current setup Root ...
1
vote
1answer
1k views

How to bypass SSLVerifyClient for specific IP Address

I'm fairly new to HTTPD so I need some insight from the pro's. The previous admins set up HTTPD on a Linux box. It is configured to read Certs by the user accessing a specific DNS (ex: https://cxg-...
1
vote
1answer
2k views

Apache 2.4 / SSL certificates error: AH01903: Failed to configure CA certificate chain

I recently had to renew one of my SSL certificates on an Apache 2.4/Mod_ssl server. I have 2 Vhosts, no SNI, each running on a separate NIC. Until now the certificates were both Globalsign ...
0
votes
1answer
194 views

Can I purchase an EV SSL for a single subdomain? [duplicate]

Hey everyone sorry for the noob question, I was getting different answers on Google. My question specifically is: Am I able to purchase a EV SSL for each of my sub-domains. Thanks in advance.
0
votes
2answers
75 views

Something is regenerate ports.conf [closed]

Since the last update of my Raspbian "something" is updating my apache ports.conf file by adding these two lines automatically: Listen 81 And: <IfModule mod_ssl.c> Listen 443 </IfModule>...
0
votes
1answer
519 views

HTTPD + OpenSSL - Long time to connnect to port 443 then ssl_handshake_failure

I know that ssl_handshake_failure is a generic error, however this is my last resort, since I've been investigating this issue for three weeks. I'm deploying Apache HTTPD server on an AIX Server. AIX ...
1
vote
1answer
609 views

Apache client authentication: browser not sending certificate when CA name not matching by case?

Using Apache 2.4. We have two valid CA certificates whose distinguished names differ only by the case of one character (say CA1 with dn: cn=MyCA,O=myOrg and CA2 with dn: cn=MyCA,O=MyOrg). These two ...
-2
votes
1answer
464 views

Apache recompile with mod_ssl and openssl

I have a Nagios (dev) server built on AWS EC2. The server had preinstalled: OpenSSL 1.0.1k-fips Apache/2.4.25 Qualys scan notified that there are vulnerabilities. The package available on AWS ...
3
votes
0answers
131 views

Puzzled by SSLCACertificateFile parameter

there's something I can't understand with the SSLCACertificateFile parameter on Apache SSL conf. Put for example I have a ROOT cert "A" that issued an intermediate cert "B". Then, I produced a couple ...
2
votes
1answer
9k views

How to Install mod_ssl on RHEL7 when it's missing from yum

I've been given a RHEL7 server with Apache 2.4.6 and OpenSSL and I would like to install mod_ssl. The issue is yum doesn't find the package: yum install mod_ssl No package mod_ssl available. Error: ...
0
votes
1answer
574 views

Repairing Apache after OpenSSL update

I made an OpenSSL upgrade on ubuntu server (14.04 LTS) via apt to 1.1.0f. After the upgrade was finished, I tried to (re)start apache2. Then this appears: * Starting Apache httpd web server apache2 ...
1
vote
1answer
3k views

How to solve Apache-2.4 AH02026: Failed to acquire SSL session cache lock

I've just stood up a new AWS Ubuntu 16.04 server running Apache2.4 with PHP-FPM 5.6 and 7.1 available via different sockets. Everything is working great, but I'm getting the following errors in the ...
1
vote
1answer
2k views

Apache2.4.25 using system default openssl instead of new version provided during compilation

Trying to compile apache2.4.25 from source on Fedora 15 with dynamically linked mod_ssl. Fedora15 server has a default openssl version (OpenSSL 1.0.0j-fips 10 May 2012) and newer openssl library (...
1
vote
1answer
818 views

Apache SNI Issues with SSL Certificates

I'm having issues with my VirtualHost configurations on my server. My server is running Ubuntu 14.04.5 LTS (GNU/Linux 4.4.0-31-generic x86_64), with Apache/2.4.7 (Ubuntu). I've done a lot of reading ...
3
votes
1answer
6k views

How to check apache for SNI (Server Name Indication ) availability?

I have a centos 7 server. I switched from apache 2.4.6 to apache 2.4.25 using IUS repository (https://ius.io/). My goal is to support multiple SSL certificates with a single IP. I have installed: ...
0
votes
3answers
2k views

Apache2 uses http instead of https, despite LetsEncrypt

Background I have an Ubuntu 16.04 server running Apache/2.4.18 (Ubuntu). I installed lets-encrypt from github and ran ./letsencrypt-auto --apache, choosing the second option from the following dialog:...
0
votes
2answers
96 views

Apache2 mod_ssl goes missing after random time period

Using a fairly typical/standard Apache installation on Ubuntu, with mod_ssl enabled, every "so often" (random time period) a website on the server stops responding. When looking to see why, I noticed ...
0
votes
1answer
779 views

Apache HTTP to HTTPS redirect not working

I am trying to set up a default HTTP to HTTPS redirect. Somehow neither mod_rewrite nor Redirect work. Am I missing something obvious? Listen 80 Listen 443 <VirtualHost *:80> ...
2
votes
0answers
3k views

SSLRequire %{SSL_CLIENT_S_DN_CN}

Q1) I'm new to Apache HTTP Server, I'm trying to configure the SSLRequire for particular contexts. Below are the 2 cases: a) Checking against CA-Signed Certificate's attributes, it is working as ...
2
votes
1answer
3k views

Apache SSL Handshake Slow

I am running an Apache 2.4.18 server running under Ubuntu 16.04.1 LTS, only with PHP 7 and Exim 4 installed. In the early morning the SSL handshake is extremely fast, about 200ms, but as time passes ...
1
vote
0answers
129 views

What's different between 'Using-Default-VirtualHost' and 'Using-Correctly-Named-VirtualHost'?

Conclusion: I believe I mismatched openssl version when I had compiled apache. It works now; and I recompiled it with openssl which is already installed. Thank you for your help, Unbeliever. ...
0
votes
1answer
40 views

How to configure SSL using two different Web Servers

I am a noob when it comes to System Administration & Networking and I thought I would get some valuable insight from the pros in here. I work for my University's IT department and I overlook the ...
0
votes
1answer
7k views

Upgrade OpenSSL (mod_ssl) on WIndows Apache 2.2.18 to v1.1.0b

I am running Apache 2.2.18 on my work machine and have a dedicated IP and paid SSL certificate. Since this server should be secure, I only use HTTPS when I access it. To do a test I went to ssllabs....
2
votes
1answer
539 views

Why is my request queueing time so high?

I am running a Rails application server. My setup is: Apache 2, using mod_ssl for both https and ssl client certificates Phusion Passenger 5 Rails 4 Ruby 2.1 I use NewRelic to monitor the running ...
0
votes
1answer
1k views

Redirection from http to https in Apache httpd24 with mod24_ssl is not working

I have my Amazon linux server and I had installed httpd24 and mod24_ssl. I had been setup ssl certificate in /etc/httpd/conf.d/ssl.conf file with https redirect instructions: <VirtualHost *:80> ...