Questions tagged [mod-ssl]
The Apache Httpd interface to OpenSSL
273
questions
3
votes
1
answer
1k
views
Has SHA256 but why is it not used?
After performing an upgrade on Apache and modssl, I get a security warning in the security logo of the URL bar in Chrome when visiting my website on Apache server:
The site is using outdated ...
- 33
-2
votes
1
answer
316
views
how many SSL certificate can be listed in SSLServercert?
I wanted to list more than one certificate in SSLServercert, so that websites can use either one of these certificates. i will use "SSLServercert label1 label2" in httpd.conf file. label1 has IP based ...
- 115k
0
votes
1
answer
72
views
Redirect non https domains to http [duplicate]
I have around 6-7 DOMAINS hosted on linode server where apache is a webserver. One domain is ssl configured and other runs on http only.
Suppose https://www.example.com is ssl configured .
others ...
- 6,613
4
votes
3
answers
7k
views
SSL URL gives a 404
I have recently created an SSL cert on my server *.key and a *csr file.
I then created the *crt and the *.ca-bundle with Comodo.
I have 2 current vhosts:
vhost for - http://www.example.com
...
CommunityBot
- 1
0
votes
1
answer
682
views
Force httpd 2.0 mod_ssl to use TLSv1 for proxied handshakes
I have an instance of httpd (version 2.0) that uses mod_proxy to transform incoming http requests to https. My problem is that I need my proxy to connect to a server that only supports SSLv3/TLSv1 ...
- 166
2
votes
2
answers
2k
views
Apache redirect user if they are using SSLv3
I'd like to redirect any users on our site if they try to use SSLv3 (if I just disable SSLv3 and a browser like IE6 comes along, I couldn't seem to properly redirect it to an http version of our site ...
- 31
4
votes
0
answers
339
views
mod_ssl client certificates on a reverse proxy
I am trying to add client certificate authentication on a reverse proxy that proxies an oracle application. Before adding, and if i remove the subsequent code, the oracle application is able to start ...
5
votes
2
answers
6k
views
Why did git stop working after server disabled SSLv3?
Like most others, our repository server needs to disable SSLv3 (and v2) ASAP.
However, doing so seems to break our git-clients -- at least, on RHEL5 (connections from my FreeBSD desktop work fine). ...
github
2
votes
1
answer
3k
views
Apache passphrase working sometimes
On one of my servers I observe the following problem with SSL passphrase: some certs are passing it without asking for a password, while some others keep asking for it.
I have set it up globally:
...
- 261
3
votes
1
answer
5k
views
SHA-2 signed SSL certificate crashes apache on startup on CentOS 5.X
In preparation of the warnings that are going to start showing up in browsers when visiting SSL sites with SHA1 signed certificates, I wanted to get all of the certs that I have upgraded.
Some of ...
- 51
0
votes
1
answer
2k
views
Avoid the need of CAfile on client
I am trying to configure my apache that it is delivering all certificates files to get always a positive validation.
To be clear there is no issue with any browsers, I am talking about openssl ...
- 80.3k
3
votes
1
answer
7k
views
How to setup multiple Apache SSL sites using multiple IP addresses
How do you setup a single Apache2 config to host multiple HTTPS sites each on their own IP address? There will also be multiple HTTP sites on just a single IP address.
I do not want to use Server ...
CommunityBot
- 1
1
vote
2
answers
3k
views
Yum Update Failing mod_ssl and glibc_devel
Any ideas on how to get this to not fail?
# yum update
Freeing read locks for locker 0x82: 4189/140342084876032
Freeing read locks for locker 0x84: 4189/140342084876032
Freeing read locks for locker ...
- 41
1
vote
1
answer
619
views
Website does not advertise HTTP in its NPN Extension spdy
I have configure Apache with SPDY (and PHP-FPM). Everything works fine. However, spdycheck.org shows me following error:
HTTP Over SSL Not Supported!
This website only supports SPDY over SSL, and ...
CommunityBot
- 1
2
votes
1
answer
4k
views
Apache certificates for some urls not working
We are having a rather strange problem with a Apache-installation. Here is a short summary:
Currently I'm setting up Apache with https, and server-certificates. This is fairly easy and works straight ...
CommunityBot
- 1
2
votes
2
answers
44k
views
Apache SSL Port Redirection (8443 to 443)
I've got a Tomcat server (JIRA) working behind an Apache reverse proxy server (took a while but I got there).
I'm upgrading my old server and adding Apache to give me some extra functionality and ...
- 30.7k
4
votes
2
answers
1k
views
YouTrack on Tomcat 7 using SSL
I have a running YouTrack instance deployed using Tomcat 7 and it works fine on http://example.com:8080/youtrack
Apache is already configured to support SSL for the main domain (I have .pem file). ...
- 1,481
0
votes
2
answers
519
views
configuring https on EC2
I know similar questions have been asked here and I read them all, but I could not get a clear answer. So I am asking here.
I have an EC2 instance.It is a dedicated instance running LAMP. Everything ...
- 146
0
votes
0
answers
1k
views
Apache mod_ssl [2.2.26] and Openssl [0.9.8za] compatibility
Our product running over RHEL has Apache 2.2.26 & OpenSSL 0.9.7 [ofcourse, pretty old].
We are currently upgrading Openssl to 0.9.8za. I have installed the latest OpenSSL RPMs.
However Apache is ...
- 1
-2
votes
1
answer
204
views
Virtual host, port 443 and ssl issue [closed]
I have a centos server, but I am having some issue regarding port 443 and ssl. my problem is that all domain on my server are accessible from HTTPS port.
like when I visit a domain on my server from ...
- 218
0
votes
1
answer
435
views
"Can't Connect to Server" from 2nd virtual host on VPS
I'm using Debian 7 Wheezy and Apache 2.2.22, and I'm setting up Virtual Hosts for a number of websites on my VPS. I've successfully configured the VirtualHost directives for one of the sites, but the ...
- 123
0
votes
1
answer
515
views
Server suddenly stops responding and then resumes an hour later
My FreeBSD server had been perfectly working for over 2 years without any major changes to the system. Recently I installed SSL certificate using Apache's mod_ssl, and after 10 days of running fine ...
- 22.4k
2
votes
1
answer
7k
views
How can I troubleshoot an Apache Server reverse proxy dropped connection?
We are suddenly seeing an intermittent, but very frequent, error while POSTing files to a Tomcat servlet over https via an Apache Server reverse proxy. The error only seems to occur while POSTing ...
- 3,561
0
votes
0
answers
65
views
Apache2 + Mod_SSL user management
I'm currently playing around with PKI auth on my Apache2 server and I was just wondering if there is a quick/easy way to add/remove users from the SSLRequire line? Right now I have something like ...
- 185
0
votes
1
answer
1k
views
Howto join ssl_access_log and access_log? [closed]
Recently I discovered in my /var/log/httpd files called ssl_access_log and ssl_error_log. Now I always looked and scanned the regular access_log and error_log. Questions are?
Do ssl_error_log and ...
- 7,167
1
vote
0
answers
10k
views
Apache SSL handshake interrupted by system
I have an up-to-date Ubuntu 12.04 server running Apache 2.2.22-1ubuntu1.4.
For every HTTPS request my Apache logs record what appear to be error messages related to encrypted connections.
Self-signed ...
- 673
0
votes
0
answers
2k
views
Apache 2.4 reload succeeds but restart fails when using SSL
On Apache 2.4, reload succeeds but restart fails when using SSL. Or to say it another way, the SSL configuration directives appear to work perfectly when doing a service reload but not a service ...
- 116k
0
votes
2
answers
184
views
Wrong application loads on port 443
I have a server with two web application that configured as follow:
app1:
www.domain1.com
has https version
app2:
www.domain1.com
has not https version
This is my VirtualHost config for domain1:
...
- 2,854
5
votes
0
answers
2k
views
Apache 2.2 fails with "unable to write 'random state'" with 2048-bit RSA key (1024-bit works fine)
I'm usually pretty good with Apache and OpenSSL, but this one has me completely baffled. I'm running Apache 2.2.22 and OpenSSL 1.0.1 on a Ubuntu 12.04 LTS Server. I have an IP-based virtual host ...
- 570
3
votes
1
answer
4k
views
Discrepancy in SSL Ciphers between Apache 2.2 and OpenSSL 1.0.1
I'm running up-to-date Ubuntu 12.04 LTS with Apache 2.2.22-1ubuntu1.4 and OpenSSL 1.0.1-4ubuntu5.11.
I have configured Apache to use ciphersuites list from https://wiki.mozilla.org/Security/...
CommunityBot
- 1
2
votes
2
answers
3k
views
Apache and mod_ssl working with multiple remote CA for client certs
Generating client certificates by becoming your own CA with an Apache web server is trivial work and there's plenty of documentation out there on how to achieve this. My problem is slightly different.
...
- 1
2
votes
1
answer
845
views
How to log both HTTP and HTTPS requests to the same file
Using recent Apache on Linux.
It's inconvenient to have the two different kinds of requests sent to two different log files since I like to watch the log file scroll by live via the shell. I also ...
- 6,613
3
votes
1
answer
328
views
is it possible to use KeyChain / ssh-agent with apache?
There are a lots a question (and duplicates) on serverfault asking how restart Apache without the passphrase prompt.
Two solutions are proposed :
removing the password from the key
the apache ...
CommunityBot
- 1
0
votes
3
answers
471
views
PCI scan findings and problems with week ciphers on ports 993, 443, 995, 465
From PCI scan results:
Synops is : The remote service encrypts traffic using a protocol with known
weaknesses .
Description : The remote service accepts connections encrypted
using SSL 2....
- 143
1
vote
2
answers
170
views
Apache: Assign SSL server / client certs to directories
I have multiple directories on my system, e.g.,
/var/www/dir1
/var/www/dir2
/var/www/dir3
And what I'd like to do is to generate a server/client SSL certificate for each directory, and then set up ...
- 21
0
votes
0
answers
182
views
google site map generator can't login admin console
I installed Google Sitemap Generator for linux x86_64 CentOS 6
But when I try to login to the admin console using this link
myserverip:8181
and my password nothing happened. After refreshing I ...
- 101
0
votes
1
answer
512
views
mod_ssl RPM conflict
I build Apache httpd into an RPM using these sites:
http://erikwebb.net/blog/compile-and-install-apache-24-red-hat-enterprise-linux-rhel-6-or-centos-6
http://ramblin-dude.blogspot.com/2013/04/...
- 16.7k
3
votes
1
answer
930
views
Certificates when using cas+apache (mod_auth_cas)
I'm running CAS authentication on one server, and a website that is to be secured on a seperate server on my local network.
When I ran both CAS and Apache on the same server, they worked fine.
When I ...
0
votes
1
answer
81
views
What refer/mean "Remote Server Authentication" at Apache mod_ssl doc?
The part of the doc in that such term is used is this. Can anybody give some context or explain me what mean Remote Server Authentication there? I know that Apache server can authenticate clients but ...
CommunityBot
- 1
3
votes
2
answers
7k
views
Apache won't start after installing mod_ssl on CentOS
I need to run both http and https on the same hostnames on my server. I had everything running without SSL with hosts configured in the /etc/httpd/conf.d directory.
System: CentOS release 5.6 (...
CommunityBot
- 1
1
vote
2
answers
2k
views
Apache ProxyPass with SSL
I have a QA setup that consists of multiple internal development servers and one world-accessible provisioning machine that is setup to proxy pass the web traffic. Everything works fine for non-SSL ...
CommunityBot
- 1
8
votes
1
answer
10k
views
How to tell if SSL session caching is in fact working correctly with Apache 2.2?
We have Apache 2.2.22 running on Ubuntu 12.04.
SSL is configured and enabled, with these directives in /etc/apache2/mods-enabled/ssl.conf:
SSLSessionCache shm:/var/www/apache-ssl-cache/ssl_scache(...
- 403
0
votes
1
answer
850
views
No SSL certificate error when configuring redirection in virtual host
My server is working fine with a self-signed SSL certificate until I added the following lines to redirect request containing wwww to non-www site:
<VirtualHost *:443>
ServerName www.mydomain....
- 3,270
0
votes
1
answer
1k
views
SSL/TLS Client certificate Authentication using RewriteCond and Rewrite Rules to perceptively redirect traffic not authorized
I finally end up to write here because I´m badly struggling against apache, SSL/TLS and a client certificate authentication that should use the certificate´s Serial Number to restrict access to a ...
- 18.4k
6
votes
1
answer
5k
views
List of SSL Cipher Support by Browser
Not really sure if this is the appropriate SE to post this to, but here it is: Is there some online reference for what SSL ciphers are supported by the various browsers? Basically, I'm interested in ...
CommunityBot
- 1
5
votes
3
answers
6k
views
How do I create a custom header from an existing SSL environment variable?
OK I have spent all day on this--
I'm using apache with mod_ssl
I'm trying to take an existing environment header, "%{SSL_CLIENT_S_DN_CN}s" which looks like "Lastname Firstname Mi username" and set a ...
- 303
1
vote
1
answer
8k
views
Trouble configuring apache server to proxy an SSL connection
I'm running an application on Tomcat7 with Apache Portable Runtime, I bought an SSL certificate and configured it correctly - when I try to connect through the ip:port combination, it connects fine ...
- 44.9k
0
votes
1
answer
2k
views
Thawte ssl 123 certificate installation on ubuntu 12, apache
I have recently purchased the ssl123 certificate from thwate.
They have provided me following files
1:x.509 certificate
2:Apache Bundle
3:intermediate CA1
I am trying to install on my server but no ...
1
vote
1
answer
483
views
OpenSSL response 404 issue on centOS 6
I followed this tutorial (though it's for 5.2, I figured I'd be alright).
The changes I had to make that seemed to have worked:
Rename ca.csr to ca.cslr (that's the one the command generated)
List ...
- 25.3k
1
vote
1
answer
1k
views
Minimum Key Length for Apache SSL
I'm trying to figure out the minimum key/cipher bit length that my Apache mod_ssl configuration will accept for client connections.
I ran openssl ciphers -v and saw ciphers of all lengths (40, 56, ...
- 5,321