Questions tagged [mod-ssl]

The Apache Httpd interface to OpenSSL

Filter by
Sorted by
Tagged with
12
votes
3answers
46k views

How to disable TLS 1.1 & 1.2 in Apache?

I have an Ubuntu 12.04.2 LTS server running Apache 2.2.22 with mod_ssl and OpenSSL v1.0.1. In my vhosts config (everything else within which behaves as I would expect), I have the SSLProtocol line ...
1
vote
1answer
2k views

How to bypass SSLVerifyClient for specific IP Address

I'm fairly new to HTTPD so I need some insight from the pro's. The previous admins set up HTTPD on a Linux box. It is configured to read Certs by the user accessing a specific DNS (ex: https://cxg-...
4
votes
2answers
2k views

Requiring client certificate issued by a specific intermediate CA in Apache

I have a CA hierarchy like this: Root-CA ________|_____________ | | TEST-CA PRODUCTION-CA _____|_____ ____|...
1
vote
2answers
807 views

SSLRequire - file function

I'm having trouble with Apache 2.2 and the small documentation that I can find for the file function of SSLRequire. I'm trying to check the email property of the client certificate in a request using ...
1
vote
1answer
2k views

Apache 2.4 / SSL certificates error: AH01903: Failed to configure CA certificate chain

I recently had to renew one of my SSL certificates on an Apache 2.4/Mod_ssl server. I have 2 Vhosts, no SNI, each running on a separate NIC. Until now the certificates were both Globalsign ...
0
votes
1answer
194 views

Can I purchase an EV SSL for a single subdomain? [duplicate]

Hey everyone sorry for the noob question, I was getting different answers on Google. My question specifically is: Am I able to purchase a EV SSL for each of my sub-domains. Thanks in advance.
0
votes
2answers
76 views

Something is regenerate ports.conf [closed]

Since the last update of my Raspbian "something" is updating my apache ports.conf file by adding these two lines automatically: Listen 81 And: <IfModule mod_ssl.c> Listen 443 </IfModule>...
0
votes
2answers
17k views

Apache2 - SSL is not working

I am currently trying to install an SSL certificate issued through Namecheap by Comodo. I am however currently having issues. In the error log, I have this error: [Sun Apr 10 17:59:06.567045 2016] [...
0
votes
1answer
533 views

HTTPD + OpenSSL - Long time to connnect to port 443 then ssl_handshake_failure

I know that ssl_handshake_failure is a generic error, however this is my last resort, since I've been investigating this issue for three weeks. I'm deploying Apache HTTPD server on an AIX Server. AIX ...
1
vote
1answer
617 views

Apache client authentication: browser not sending certificate when CA name not matching by case?

Using Apache 2.4. We have two valid CA certificates whose distinguished names differ only by the case of one character (say CA1 with dn: cn=MyCA,O=myOrg and CA2 with dn: cn=MyCA,O=MyOrg). These two ...
0
votes
1answer
7k views

Upgrade OpenSSL (mod_ssl) on WIndows Apache 2.2.18 to v1.1.0b

I am running Apache 2.2.18 on my work machine and have a dedicated IP and paid SSL certificate. Since this server should be secure, I only use HTTPS when I access it. To do a test I went to ssllabs....
-2
votes
1answer
469 views

Apache recompile with mod_ssl and openssl

I have a Nagios (dev) server built on AWS EC2. The server had preinstalled: OpenSSL 1.0.1k-fips Apache/2.4.25 Qualys scan notified that there are vulnerabilities. The package available on AWS ...
2
votes
1answer
9k views

How to Install mod_ssl on RHEL7 when it's missing from yum

I've been given a RHEL7 server with Apache 2.4.6 and OpenSSL and I would like to install mod_ssl. The issue is yum doesn't find the package: yum install mod_ssl No package mod_ssl available. Error: ...
0
votes
1answer
576 views

Repairing Apache after OpenSSL update

I made an OpenSSL upgrade on ubuntu server (14.04 LTS) via apt to 1.1.0f. After the upgrade was finished, I tried to (re)start apache2. Then this appears: * Starting Apache httpd web server apache2 ...
2
votes
1answer
17k views

502: proxy: pass request body failed

Sometimes I get the following error (in apache's error.log) when viewing my site over https: (502)Unknown error 502: proxy: pass request body failed to xxx.xxx.xxx.xxx:443 I'm not entirely sure what ...
1
vote
1answer
829 views

Apache SNI Issues with SSL Certificates

I'm having issues with my VirtualHost configurations on my server. My server is running Ubuntu 14.04.5 LTS (GNU/Linux 4.4.0-31-generic x86_64), with Apache/2.4.7 (Ubuntu). I've done a lot of reading ...
3
votes
3answers
10k views

How to run a virtualhost 443 without an SSL cert?

I have a virtualhost directive that serves up a custom 404 error if invalid subdomain is entered: <VirtualHost *:80> # the first virtual host ServerName site_not_found RedirectMatch 404 ^/(?...
3
votes
1answer
6k views

How to check apache for SNI (Server Name Indication ) availability?

I have a centos 7 server. I switched from apache 2.4.6 to apache 2.4.25 using IUS repository (https://ius.io/). My goal is to support multiple SSL certificates with a single IP. I have installed: ...
0
votes
3answers
2k views

Apache2 uses http instead of https, despite LetsEncrypt

Background I have an Ubuntu 16.04 server running Apache/2.4.18 (Ubuntu). I installed lets-encrypt from github and ran ./letsencrypt-auto --apache, choosing the second option from the following dialog:...
0
votes
2answers
96 views

Apache2 mod_ssl goes missing after random time period

Using a fairly typical/standard Apache installation on Ubuntu, with mod_ssl enabled, every "so often" (random time period) a website on the server stops responding. When looking to see why, I noticed ...
6
votes
2answers
19k views

Can I upgrade OpenSSL version used by apache without recompiling the server but just mod_ssl?

I have an Apache server on a Unix machine: Apache/2.2.29 (Unix) OpenSSL/0.9.8zg I would like to upgrade the OpenSSL version to 1.0.2, which is the version currently installed on my system: machine:/...
0
votes
1answer
793 views

Apache HTTP to HTTPS redirect not working

I am trying to set up a default HTTP to HTTPS redirect. Somehow neither mod_rewrite nor Redirect work. Am I missing something obvious? Listen 80 Listen 443 <VirtualHost *:80> ...
30
votes
3answers
52k views

Using Https between Apache Loadbalancer and backends

I am using an apache (2.4) server configured as loadbalancer in front of 2 apache servers. It works fine when I use http connections between loadbalancer and backends, however using https does not ...
2
votes
0answers
3k views

SSLRequire %{SSL_CLIENT_S_DN_CN}

Q1) I'm new to Apache HTTP Server, I'm trying to configure the SSLRequire for particular contexts. Below are the 2 cases: a) Checking against CA-Signed Certificate's attributes, it is working as ...
14
votes
3answers
20k views

SSLCertificateChainFile Deprecation Warning on Apache 2.4.8+

We have an SSL Certificate for our website from Network Solutions. After upgrading Apache/OpenSSL to version 2.4.9, I now get the following warning when starting HTTPD: AH02559: The ...
1
vote
0answers
129 views

What's different between 'Using-Default-VirtualHost' and 'Using-Correctly-Named-VirtualHost'?

Conclusion: I believe I mismatched openssl version when I had compiled apache. It works now; and I recompiled it with openssl which is already installed. Thank you for your help, Unbeliever. ...
2
votes
1answer
549 views

Why is my request queueing time so high?

I am running a Rails application server. My setup is: Apache 2, using mod_ssl for both https and ssl client certificates Phusion Passenger 5 Rails 4 Ruby 2.1 I use NewRelic to monitor the running ...
0
votes
1answer
40 views

How to configure SSL using two different Web Servers

I am a noob when it comes to System Administration & Networking and I thought I would get some valuable insight from the pros in here. I work for my University's IT department and I overlook the ...
0
votes
2answers
9k views

Apache:mod_ssl:Error: Private key not found

I'm installing a SSL certificate to serve HTTPS. I'm using Apache 2.4 in Amazon Linux and got the certificate in Startssl. My Vhost config is the following: <IfModule mod_ssl.c> <...
33
votes
6answers
226k views

How to enable TLS 1.1 and 1.2 with OpenSSL and Apache

In light of a growing number of security issues, such as the newly announced Browser Exploit Against SSL/TLS (BEAST), I was curious how we could go about enabling TLS 1.1 and 1.2 with OpenSSL and ...
0
votes
1answer
2k views

Apache SSL page times out with server taking too long

I have an SSL site I'm trying to deliver with apache that is timing out when you load it in a web browser. I am seeing this message in the browser: The connection has timed out The server at solr1....
14
votes
1answer
9k views

Why is my SSL certificate untrusted on Android?

The SSL certificate is trusted on most Desktop computers, but only some Android devices. However, even on Android devices where the certificate is untrusted, the root certificate is installed. I must ...
0
votes
1answer
4k views

Cannot load modules/mod_ssl.so into server: /etc/httpd/modules/mod_ssl.so: undefined symbol: ap_array_str_contains

I am trying to run Apache on Amazon Linux with SSL for my website and I configured all ssl prerequisites. But when I start the Apache it throws the error saying: Starting httpd: httpd: Syntax error ...
1
vote
1answer
834 views

Webmin through apache2 SSL Proxy

I'm trying to make accessible my Webmin through a sub-domain https://webmin.example.com/ I'm using Cloudflare DNS and Cloudflare SSL Certification. Whenever i type the above URL, it's automatically ...
0
votes
2answers
788 views

After Setting Up SSL for one vhost https://sitename.com shows Apache 2 Test Page

Thank you in advance for your support! We have been working on this for a couple days, lots of research and no luck with a solution. Our web server is running on centos6 with apache (httpd-2.2.15-53)...
2
votes
1answer
527 views

mod ssl error during ssl installation

Server Environment AWS EC2, Ubuntu 14.04LTS, LAMP 443 Port is enabled from security group. Server is listening to 443 port. I have purchased SSL from cheapsslsecurity.com and followed following step....
0
votes
1answer
119 views

How to enable SSL only on certain locations

I have an Apache that serves an application as well as a web service. I want the web service over https but the application over http. How do I enable SSL on only a certain location? None of the SSL ...
2
votes
1answer
1k views

How to rename default-ssl.conf in Apache 2.4

I'm running Apache 2.4 on Ubuntu. I'm trying to renamedefault-ssl.conf, but I can't get it to work. Here is what works. If I enable the SSL module a2enmod ssl and the site configuration file ...
5
votes
1answer
4k views

Apache SSL reverse proxy to a Embed Tomcat

I'm trying to put in place a reverse proxy for an application that is running a tomcat embed server over SSL. The application needs to run over SSL on the port 9002 so I have no way of "disabling SSL" ...
5
votes
2answers
4k views

SSL_CLIENT_CERT_CHAIN not being passed to backend server

I have client certificate configured and working in Apache. I want to pass the PEM-encoded X.509 certificates of the client to the backend server. I tried with the SSLOptions +ExportCertData. This ...
0
votes
3answers
6k views

Enable SSL for a single VirtualHost

I have an apache 2.4 webserver running on Ubuntu 14.04 LTS. Is it possible to enable SSL only for a single VirtualHost and leaving the other VirtualHosts unaffected (including the default one)? For ...
2
votes
0answers
3k views

Setting up an Apache forward proxy with 2-way SSL with certificate CN check fails

I need to set up a forward proxy with 2-way SSL verification. I got pretty far using Apache 2.4.10 on Debian, but it fails because the certificate CN is compared to the wrong name. I've searched and ...
2
votes
3answers
831 views

Can't update Apache SSL Protocols or Ciphers

I’ve been searching and testing for a couple of days now and have run out of things to try. Here’s my problem. I have an Apache Lounge 2.4.18 (Win32) VC14 web server running on a Microsoft Windows ...
3
votes
1answer
1k views

Apache SSL Certificate and Basic Auth combination - password if no certificate

Is it possible, to force apache to ask for password only if user don't have client-certificate installed? I'm almost sure, that this is possible, but I'm not able to find any confirmation anywhere. ...
1
vote
1answer
513 views

bypass apache SSL and use tomcat instead

I don't want my clients to negotiate an SSL connection with Apache web server, I want them to do so with the tomcat server behind it instead. How can I do so? My current httpd.conf configuration is: ...
33
votes
5answers
58k views

Apache: SSLCertificateKeyFile: file does not exist or is empty

I am configuring SSL for Apache 2. My system is Ubuntu Server 10.04 LTS. I have the following settings related to SSL in my vhost configuration: SSLEngine On SSLCertificateKeyFile /etc/ssl/private/...
2
votes
0answers
2k views

Apache2:Unable to read server certificate from file

Cannot start apache2 server. error info is below. Looking into similar questions (SSL Error - unable to read server certificate from file, Apache cannot read certificate file, and so on), still ...
4
votes
1answer
1k views

How apache reverse proxy can be configured without breaking the https tunnel between client & server?

I have configured apache reverse proxy. In that configuration https connection is possible between client to reverse proxy and again reverse proxy to server. But I want https connection between client ...
2
votes
1answer
10k views

SSL mod_proxy issues in <location> bracket

I am having trouble with getting proxypass to work in apache. My configuration file is as follows: <VirtualHost 1.2.3.4:443> ServerName example.com ServerAlias www.example.org ...
0
votes
1answer
1k views

extending <VirtualHost _default_:443> defined in conf.d/ssl.conf

I have some global directories, aliases and rewrite rules in my httpd.conf. They aplly to both 80 and 443. Now I want to add an http proxy on port 3128. I don't want it to be affected by existing ...