Questions tagged [mod-ssl]
The Apache Httpd interface to OpenSSL
253
questions
0
votes
1answer
418 views
“Can't Connect to Server” from 2nd virtual host on VPS
I'm using Debian 7 Wheezy and Apache 2.2.22, and I'm setting up Virtual Hosts for a number of websites on my VPS. I've successfully configured the VirtualHost directives for one of the sites, but the ...
0
votes
1answer
449 views
Server suddenly stops responding and then resumes an hour later
My FreeBSD server had been perfectly working for over 2 years without any major changes to the system. Recently I installed SSL certificate using Apache's mod_ssl, and after 10 days of running fine ...
2
votes
1answer
5k views
How can I troubleshoot an Apache Server reverse proxy dropped connection?
We are suddenly seeing an intermittent, but very frequent, error while POSTing files to a Tomcat servlet over https via an Apache Server reverse proxy. The error only seems to occur while POSTing ...
0
votes
0answers
55 views
Apache2 + Mod_SSL user management
I'm currently playing around with PKI auth on my Apache2 server and I was just wondering if there is a quick/easy way to add/remove users from the SSLRequire line? Right now I have something like ...
0
votes
1answer
943 views
Howto join ssl_access_log and access_log? [closed]
Recently I discovered in my /var/log/httpd files called ssl_access_log and ssl_error_log. Now I always looked and scanned the regular access_log and error_log. Questions are?
Do ssl_error_log and ...
1
vote
0answers
8k views
Apache SSL handshake interrupted by system
I have an up-to-date Ubuntu 12.04 server running Apache 2.2.22-1ubuntu1.4.
For every HTTPS request my Apache logs record what appear to be error messages related to encrypted connections.
Self-signed ...
0
votes
0answers
2k views
Apache 2.4 reload succeeds but restart fails when using SSL
On Apache 2.4, reload succeeds but restart fails when using SSL. Or to say it another way, the SSL configuration directives appear to work perfectly when doing a service reload but not a service ...
0
votes
2answers
177 views
Wrong application loads on port 443
I have a server with two web application that configured as follow:
app1:
www.domain1.com
has https version
app2:
www.domain1.com
has not https version
This is my VirtualHost config for domain1:
...
5
votes
0answers
2k views
Apache 2.2 fails with “unable to write 'random state'” with 2048-bit RSA key (1024-bit works fine)
I'm usually pretty good with Apache and OpenSSL, but this one has me completely baffled. I'm running Apache 2.2.22 and OpenSSL 1.0.1 on a Ubuntu 12.04 LTS Server. I have an IP-based virtual host ...
3
votes
1answer
3k views
Discrepancy in SSL Ciphers between Apache 2.2 and OpenSSL 1.0.1
I'm running up-to-date Ubuntu 12.04 LTS with Apache 2.2.22-1ubuntu1.4 and OpenSSL 1.0.1-4ubuntu5.11.
I have configured Apache to use ciphersuites list from https://wiki.mozilla.org/Security/...
2
votes
2answers
2k views
Apache and mod_ssl working with multiple remote CA for client certs
Generating client certificates by becoming your own CA with an Apache web server is trivial work and there's plenty of documentation out there on how to achieve this. My problem is slightly different.
...
2
votes
1answer
362 views
How to log both HTTP and HTTPS requests to the same file
Using recent Apache on Linux.
It's inconvenient to have the two different kinds of requests sent to two different log files since I like to watch the log file scroll by live via the shell. I also ...
3
votes
1answer
282 views
is it possible to use KeyChain / ssh-agent with apache?
There are a lots a question (and duplicates) on serverfault asking how restart Apache without the passphrase prompt.
Two solutions are proposed :
removing the password from the key
the apache ...
0
votes
3answers
423 views
PCI scan findings and problems with week ciphers on ports 993, 443, 995, 465
From PCI scan results:
Synops is : The remote service encrypts traffic using a protocol with known
weaknesses .
Description : The remote service accepts connections encrypted
using SSL 2....
1
vote
2answers
89 views
Apache: Assign SSL server / client certs to directories
I have multiple directories on my system, e.g.,
/var/www/dir1
/var/www/dir2
/var/www/dir3
And what I'd like to do is to generate a server/client SSL certificate for each directory, and then set up ...
0
votes
0answers
178 views
google site map generator can't login admin console
I installed Google Sitemap Generator for linux x86_64 CentOS 6
But when I try to login to the admin console using this link
myserverip:8181
and my password nothing happened. After refreshing I ...
0
votes
1answer
357 views
mod_ssl RPM conflict
I build Apache httpd into an RPM using these sites:
http://erikwebb.net/blog/compile-and-install-apache-24-red-hat-enterprise-linux-rhel-6-or-centos-6
http://ramblin-dude.blogspot.com/2013/04/...
3
votes
1answer
767 views
Certificates when using cas+apache (mod_auth_cas)
I'm running CAS authentication on one server, and a website that is to be secured on a seperate server on my local network.
When I ran both CAS and Apache on the same server, they worked fine.
When I ...
0
votes
1answer
63 views
What refer/mean “Remote Server Authentication” at Apache mod_ssl doc?
The part of the doc in that such term is used is this. Can anybody give some context or explain me what mean Remote Server Authentication there? I know that Apache server can authenticate clients but ...
3
votes
2answers
6k views
Apache won't start after installing mod_ssl on CentOS
I need to run both http and https on the same hostnames on my server. I had everything running without SSL with hosts configured in the /etc/httpd/conf.d directory.
System: CentOS release 5.6 (...
1
vote
2answers
2k views
Apache ProxyPass with SSL
I have a QA setup that consists of multiple internal development servers and one world-accessible provisioning machine that is setup to proxy pass the web traffic. Everything works fine for non-SSL ...
7
votes
1answer
7k views
How to tell if SSL session caching is in fact working correctly with Apache 2.2?
We have Apache 2.2.22 running on Ubuntu 12.04.
SSL is configured and enabled, with these directives in /etc/apache2/mods-enabled/ssl.conf:
SSLSessionCache shm:/var/www/apache-ssl-cache/ssl_scache(...
0
votes
1answer
596 views
No SSL certificate error when configuring redirection in virtual host
My server is working fine with a self-signed SSL certificate until I added the following lines to redirect request containing wwww to non-www site:
<VirtualHost *:443>
ServerName www.mydomain....
0
votes
1answer
819 views
SSL/TLS Client certificate Authentication using RewriteCond and Rewrite Rules to perceptively redirect traffic not authorized
I finally end up to write here because I´m badly struggling against apache, SSL/TLS and a client certificate authentication that should use the certificate´s Serial Number to restrict access to a ...
4
votes
1answer
3k views
List of SSL Cipher Support by Browser
Not really sure if this is the appropriate SE to post this to, but here it is: Is there some online reference for what SSL ciphers are supported by the various browsers? Basically, I'm interested in ...
5
votes
3answers
4k views
How do I create a custom header from an existing SSL environment variable?
OK I have spent all day on this--
I'm using apache with mod_ssl
I'm trying to take an existing environment header, "%{SSL_CLIENT_S_DN_CN}s" which looks like "Lastname Firstname Mi username" and set a ...
1
vote
1answer
5k views
Trouble configuring apache server to proxy an SSL connection
I'm running an application on Tomcat7 with Apache Portable Runtime, I bought an SSL certificate and configured it correctly - when I try to connect through the ip:port combination, it connects fine ...
0
votes
1answer
2k views
Thawte ssl 123 certificate installation on ubuntu 12, apache
I have recently purchased the ssl123 certificate from thwate.
They have provided me following files
1:x.509 certificate
2:Apache Bundle
3:intermediate CA1
I am trying to install on my server but no ...
1
vote
1answer
371 views
OpenSSL response 404 issue on centOS 6
I followed this tutorial (though it's for 5.2, I figured I'd be alright).
The changes I had to make that seemed to have worked:
Rename ca.csr to ca.cslr (that's the one the command generated)
List ...
1
vote
1answer
822 views
Minimum Key Length for Apache SSL
I'm trying to figure out the minimum key/cipher bit length that my Apache mod_ssl configuration will accept for client connections.
I ran openssl ciphers -v and saw ciphers of all lengths (40, 56, ...
1
vote
2answers
150 views
SSL Certificate Performance
Is it possible that a cheap security certificate could inhibit the performance of a website when serving pages over https?
Background: I have built an e-commerce website using Drupal 7 and Drupal ...
0
votes
1answer
714 views
installing SSL certs on apache … what certs to use?
Im an intermediate Linux user and got assigned the task to make Apache run https connections. Currently running centOS 6 and my problem is following:
installed mod_ssl and tried to set up paths ...
1
vote
1answer
3k views
SSL Error 107 - Apache2 SSL config
I'm trying to configure a new web server to host a website/php application. All web traffic to this server is supposed to be through https. I've read numerous tutorials as well as the Apache docs and ...
6
votes
1answer
4k views
Is it possible to allow only some client certificates in Apache to login?
In my virtual host I have something like that:
SSLEngine on
SSLCertificateKeyFile /etc/apache2/ssl/svn.XXXXX.me.key
SSLCertificateFile /etc/apache2/ssl/svn.XXXXX.me.crt
SSLProtocol ...
0
votes
1answer
862 views
Can't get self-signed CA cert to request corresponding client cert; Apache
I'm running Apache 2.2 on Windows, and have mod_ssl working fine for delivering a commercially signed server cert. (A wildcard cert, though I don't think it matters.)
I'm trying to get the server, ...
12
votes
1answer
28k views
How to disable SSLCompression on Apache httpd 2.2.15? (Defense against CRIME/BEAST)
I read about the CRIME attack against TLS Compression (CVE-2012-4929, CRIME is a successor to the BEAST attack against ssl & tls), and I want to protect my webservers against this attack by ...
10
votes
1answer
27k views
Disable SSL / TLS compression in Apache 2.2.x
Is there a way to disable SSL/TLS Compression in Apache 2.2.x when using mod_ssl?
If not, what are people doing to mitigate the effects of CRIME/BEAST in older browsers?
Related Links:
https://...
4
votes
3answers
3k views
Problems with multiple SSL on same IP, but only in select clients
I know there are tons of posts about multiple SSL on same IP, but I promise I'm not beating a dead horse. My question is very clear. First, a little background...
Our organization has several ...
0
votes
1answer
450 views
Apache 2 reverse proxy to ssl local networked lamp app server - 95% working, except first page login redirection
Dived into the joys of using apache as a proxy. Awesome. There is a learning curve to deal with but the payoff is well worth it!
I took the virtual host approach to benefit from having the same urls ...
0
votes
1answer
1k views
Could not resolve host — no address associated with name
I'm setting up a web server on an old OpenBSD machine, and am getting an error each time I try to start Apache.
The server refused to start after I added my virtual host with HTTPS.
Error
could not ...
0
votes
1answer
8k views
How to install godaddy's ssl on apache
I'm setting up a mail server for a company, I've done everything, generated csr, everything is working, I just need to add godaddy's ssl, the instructions given by godaddy aren't clear, i need some ...
1
vote
2answers
5k views
Is it possible to run an Apache VirtualHost on port 443 with SSL off?
I am running a site completely over SSL using a load balancer in front of Apache doing all the certificate handling and decryption. I let HTTP traffic through the load balancer so Apache can handle ...
0
votes
2answers
705 views
Apache not responding after SSL handshake
Sometimes on my CentOS servers with Apache 2 + mod_ssl, Apache stops responding to requests made through HTTPS.
The SSL connection and handshake is successfull (I tested it with openssl s_client), but ...
2
votes
2answers
336 views
Disabling Apache Directives That Don't Have an “Off” Value
I want certain Apache directives, like SSLCACertificateFile, to be enabled in some Locations, but disabled in others. For example,
# Require client certificates for http://example.com/secure
<...
1
vote
0answers
663 views
Reverse SSL_CLIENT_S_DN order in Apache?
For some odd reason, mod_nss makes the client DN look like this:
SSL_CLIENT_S_DN=C=SE,DC=FOO,serialNumber=123456789012,CN=BAR BAZ
Mod_ssl however makes it look like this:
SSL_CLIENT_S_DN=/CN=BAR ...
0
votes
1answer
633 views
RHEL6 - Fips140-2 - Apache fails when trying to start with SSLFIPS on directive
Hello server warriors!
I have a situation where I need to make my RHEL6 system FIPS140-2 compliant...which includes apache and mod_ssl. However, after I make the server run in "fips 140 mode" Apache ...
-1
votes
2answers
5k views
Apache multiple virtual hosts with ssl certificates [duplicate]
Possible Duplicate:
Multiple SSL domains on the same IP address and same port?
I have an problem with Apache and multiple SSL certificates. In case if i config it only for one domain, everithing ...
0
votes
1answer
8k views
OpenSSL Handshake Failure (14094410) - Erroneous Client Certificate Check from Mobile Phone
I'm running a proxy server through Apache with modssl, which we're using to proxy POSTs from mobile devices to another internal server. This works successfully for most clients, but requests from a ...
0
votes
1answer
2k views
Installing mod_ssl on Centos, dependency issue
I'm installing a SSL certificate for a currently productive CentOS 5.8 (final)
So I runned this:
yum install mod_ssl
and got this:
Error: Missing Dependency: httpd = 2.2.3-65.el5.centos is needed ...
0
votes
1answer
248 views
Configure apache mod_ssl to use different certificates for incoming and outgoing messages
How could I configure mod_ssl to use different certificates for incoming and outgoing messages? I have managed to configure apache2 only to handle incoming messages with single certificate. Is it ...