Questions tagged [mod-ssl]

The Apache Httpd interface to OpenSSL

Filter by
Sorted by
Tagged with
5
votes
4answers
2k views

How can I configure Apache to use HTTPS for external access but HTTP for internal access?

I have two servers, one a development server that is accessible internally on our company's local network and the other a public-facing web server. The development server hosts several tools that we ...
1
vote
1answer
658 views

HTTPS via a floating IP

I ran in what seems to see a case with little to no documentation. I'm trying to serve content sitting behind Apache 2.2 via HTTPS. This Apache server is listening on two IP addresses, one static ...
0
votes
1answer
308 views

trouble in install mod_ssl

I make some trouble in install mod_ssl on my centos5.5. when I type: yum install mod_ssl Some wrong happened for: Loaded plugins: fastestmirror Determining fastest mirrors addons ...
0
votes
1answer
145 views

Host couldn't be reached by domain name, only by IP: Apache's fault?

I have this Windows Server 2003 R2 32 bit machine running Apache 2.4.2 with OpenSSL 1.0.1c and PHP 5.4.5 via mod_fcgid 2.3.7. This config worked just fine for some hours, but then the site couldn't be ...
5
votes
1answer
7k views

CentOS6 - Apache2 working but when installing / enabling SSL, server won't start because of permissions error

I'm attempting to install Apache with SSL on CentOS6 to use as a development server. I've been following the directions posted here to get SSL working: http://wiki.centos.org/HowTos/Https (Note: ...
2
votes
1answer
144 views

Apache (mod_ssl) not delivering SSL Certificates when requested

Houston, I have a problem. I have an instance of Apache (httpd) on one machine using mod_ssl with openssl and mod_jk pointing at several tomcat instances on other physical machines. Apache is really ...
-1
votes
2answers
872 views

Troubles installing mod_ssl on RHEL 5 [closed]

[root@localhost ~]# yum install mod_ssl Loaded plugins: security Setting up Install Process No package mod_ssl available. Nothing to do This my yum repo list: Loaded plugins: security repo id ...
0
votes
1answer
180 views

EC2 Apache server giving some old browsers a self signed certificate?

I bought a wildcard SSL from RapidSSL. It has been working great on my AWS load balancer, but recently, I noticed that the same certificate was not working on our test server which is not on the load ...
2
votes
2answers
18k views

SSL over non-standard port?

I have two different sites in one server: a.com and b.com. If I use named virtualhost on ssl port, IE won't work. So, I decided to use port 444 for SSL for b.com. However, it seems all browsers ...
1
vote
0answers
269 views

Apache SSL x509 authentication timeout

I have setup a location to enable client authentication based on x509 certificates: <Location /authenticate> SSLRequireSSL SSLVerifyClient require SSLVerifyDepth 10 </Location> The ...
0
votes
1answer
2k views

apache2: ssl_error_rx_record_too_long when visiting port 80?

I have an Ubuntu 10 x64 server edition machine. I got a second IP and configured /etc/network/interfaces like so (actual IPs and gateways removed): auto lo iface lo inet loopback #iface eth0 inet ...
4
votes
1answer
1k views

mod_spdy problems and speculations

I'm trying out mod_spdy and I've run into a problem - it seems to be incompatible with AJAX requests and mod_php as in this: https://www.modspdy.com/blog/2012/04/15/using-mod_spdy-with-php/ The ...
2
votes
2answers
2k views

Building an SSL server farm

I'm interested in building the the architecture in the article referenced below. I currently have a modestly-priced layer-4 load balancer and my application servers are the SSL endpoints. I want to ...
0
votes
1answer
965 views

Apache mod_rewrite behaves differently on SSL and non-SSL configs

I have a system where I'm hosting a number of SSL sites on my server. I also need to setup OAuth for each domain, with Google and Yahoo in particular. They each require verification files be installed ...
0
votes
1answer
1k views

Lost mod_ssl on debian, how to get it back?

I lost my mod_ssl on my debian machine. How can I get it back. I accidently removed it from mods_available instead of mods_enable, and as it was a symlink I lost the file. Is it possible to get this ...
-1
votes
1answer
326 views

Can't get 2nd ssl virtual host to work

I have an Centos 5.7 Server running apache 2. The server had ssl configured by default for the default site I have. When I try to add another ssl vhost I can't get httpd to restart. I have been trying ...
0
votes
1answer
1k views

Apache mod_ssl TLS channel dying in 5 seconds - how do I extend that timeout?

I'm an IIS admin. I've done the best I can with mod_ssl documentation, google, etc, and can't find anyone else who's even experienced my problem, much less found a solution. That, of course, makes me ...
2
votes
1answer
16k views

centos6 apache2 Invalid Command SSLEngine

Running: CentOS6 x64 When I restart httpd, I get the following error. What am I missing? [root@localhost ~]# service httpd restart Stopping httpd: [ OK ]...
7
votes
1answer
1k views

How does Apache interpret multiple SSLRandomSeed sources

In my Apache configuration I have these lines: SSLRandomSeed connect builtin SSLRandomSeed connect file:/dev/random SSLRandomSeed connect file:/dev/urandom 1024 How, exactly, does Apache interpret ...
4
votes
2answers
9k views

Installing mod_ssl on CentOS

I am trying to install mod_ssl on my server with: yum install mod_ssl All i get in response is: Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: centosv4-msync-dvd....
4
votes
1answer
816 views

Can apache use a key agent to store private keys for SSL?

For mod_ssl in apache to work, you need your RSA private key on the server. If the key is passphrase protected, you have to enter the passphrase whenever you restart apache. There is ...
0
votes
1answer
340 views

Rackspace Red Hat 5.4 converted to CentOS repository, mod_ssl will not install

I am trying to add mod_ssl to apache, but it fails due to the repository change to CentOS as we needed a newer version of imagemagick, which was only available on CentOS. I am now getting the ...
4
votes
1answer
7k views

Forcing SSL in Apache without hard-coding the hostname

I think that I have this sorted (thanks mainly to the question How to redirect non-www to www without hardcoding using .htaccess?), but I still don't entirely understand a couple of things. I would ...
0
votes
1answer
648 views

Multiple Django sites on a single SSL certificate using a single IP with Apache

Is it technically possible to setup multiple Django sites using a single SSL certificate on a single IP address with Apache? Below is an excerpt from my SSL config: Alias /media/ x:/home/djang-apps/...
1
vote
1answer
814 views

Load balancing based on client certificate with Apache mod_proxy_ajp and Tomcat

Currently, I am using mod_proxy_ajp to load balance requests to multiple Tomcat servers. Callers are authenticated using client certificates and an ACL. This has been working fine, callers are routed ...
0
votes
1answer
1k views

Apache2, mod_proxy, mod_ssl on OSX not working

I am trying to setup apache2 on OSX and am having an issue. I am trying to proxy a domain to 127.0.0.1:8081 (which is up and running) but when try to load through apache I get a "Web Page Not Found". ...
1
vote
0answers
75 views

How can I relax SSL requirements inside a specific folder?

I have a root folder that is protected by a SSLRequire rule; say: SSLRequire %{SSL_CLIENT_S_DN_Email} =~ m/^.+@foobar\.com$/ However, I'd like a subfolder of this root folder to be protected by a ...
1
vote
1answer
5k views

Self signed Apache cert error: asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag

Can anyone see where I went wrong on these steps (on Windows XP + Apache 2.2)? I tried to create my own self signed SSL certificate with my own CA and when its all done my Apache server wont start ...
0
votes
1answer
109 views

Can't copy Ilias-folder via FQDN, but via ip-address?

I have an Ilias-Installation, which is available through two virtual hosts: the FQDN and the ip-address. The first server is ssl only, the second plain http. Both configuration files look the same ...
2
votes
2answers
5k views

Client certificate authentication sslv3 alert handshake failure when Location directive is set

I am trying to setup Client Certificate Authentication for a web service that is running on Rails. The service is running on apache2, passenger, and mod_ssl. I have been able to successfully generate ...
8
votes
2answers
13k views

mod_ssl SSLCACertificatePath Proper Usage or What is the Best way to Handle Multiple Acceptable Client Certificate CAs

I am attempting to use the mod_proxy SSLCACertificatePath directive, but I'm a tad bit confused on how to use it properly. Here are two links explaining the SSLCACertificatePath directive: http://...
1
vote
1answer
4k views

SSLVerifyClient not working in Directory context

According to Apache documentation about SSLVerifyClient, one can define its value in Directory context. However, the following configuration is not working: <IfModule mod_ssl.c> <...
0
votes
1answer
135 views

Verify and authenticate digital certificates from trusted CA with Apache+mod_ssl

I set a test server with a self signed SSL certificate and http-authentication with personal digital certificates issued by my test CA and everything works fine. What if I want to authenticate users ...
1
vote
3answers
1k views

Moving SSL certificate to another Apache server

We just setup new Windows machine as a web server, with Apache 2.2.19 with openssl installed and we want to move our existing web including the SSL certificate (Verisign) from the old setup, Linux, ...
1
vote
1answer
1k views

apache2 SSL Diffie Hellman key sizes

How to make apache 2.2 in debian lenny use Diffie Hellman key exchange with keys larger than 1024bits? I found a patch that theoretically adds this ability at Apache bugzilla but can't find any ...
1
vote
3answers
843 views

Apache not starting, nothing in log files despite being “debug” level

Our cloud hosting company decided today to upgrade all CentOS implementations to 2.6.39.2. Unfortunately this had an adverse affect on our Apache server, preventing it from starting with mod_ssl ...
2
votes
1answer
490 views

apache client certificate if-else condition

I have a <Location> within a virtualhost that looks like this: <Location /app1/> SSLVerifyClient require SSLVerifyDepth 2 SSLRequireSSL SSLOptions +OptRenegotiate ...
0
votes
1answer
154 views

Apache SSL certificate used branch on hostname

I have mass virtual hosting set up on one of our servers allowing me to basically create a symlink in a certain directory and immediately have that host available on both http as well as https. This ...
1
vote
2answers
577 views

Trouble renewing my SSL certificate

So my free SSL certificate from startcom expired, and I went to renew it. I was given a choice of pasting in the contents of my csr, or generating a new one on their website, so I pasted in my csr. ...
0
votes
1answer
734 views

How to include mod_ssl into httpd on rhel5.4

I'm trying to get apache running over https with mod_ssl on a rhel 5.4 x64 machine. I don't have mod_ssl.so in the modules directory, nor can i find any ssl type output from httpd -M or httpd -l. ...
6
votes
1answer
2k views

Upgrade openssl/mod_ssl on Mac OS X Server?

Context: I'm trying to set up an SVN server on a Mac OS X Server 10.6.7, and I'm running into the “SSL error parse tlsext” issue. I've tried changing the SSLProtocol option as described, but then I ...
4
votes
1answer
449 views

Apache ServerName uses AlternativeName instead of CommonName

I have recently purchased an SSL Certificate. The CommonName (CN) of the certificate is www.mydomain.com and has several AlternativeNames such as subdomain1.mydomain.com, subdomain2.mydomain.com etc. ...
0
votes
2answers
304 views

Why is apache with mod_ssl configured for one VirtualHost responding to requests to any domain?

I've just setup Apache 2.2.18 with mod_ssl enabled and its configured to listen to one IP address on port 443. There are many domains with A DNS record poiting to this IP address. But I want to ...
2
votes
1answer
120 views

How to install mod_ssl with minimum effect on a running site

I just took over an old Apache httpd site that was maintained by somebody else. It's running httpd 2.2.2-1.3 on Fedora 5. I think the httpd was originally installed from an RPM. I was asked to enable ...
2
votes
1answer
4k views

REMOTE_USER = SSL_CLIENT_S_DN_CN under x509 with +FakeBasicAuth in Apache. Is it possible?

Hi I'm trying to incorporate a software to our intranet services (BackupPc) This Software uses the environment variable REMOTE_USER to get the username. Placed under an Apache 2.2 server with Client ...
2
votes
1answer
2k views

SSLVerifyClient require in .htaccess on shared host—CVE-2009-3555 mitigation woes

After some research I got the idea that I can't use SSLVerifyClient successfully anywhere except within a server context because of current CVE-2009-3555 mitigation efforts. Specifically, because of ...
1
vote
2answers
6k views

Apache SSL Log Incomplete SSL Handshake

Scenario: We're running some experiments in our classroom around trusted connections and SSL, and I want to demonstrate the SSL handshake request on a man-in-the-middle attack. I have an Apache ...
1
vote
1answer
1k views

Apache SSL for login and NON-SSL for everything else (.htacces)

I've almost figured it out on my own but there's something I'm missing. I want to set a couple of directories and files to require SSL and everything else that's not related to those files and dirs to ...
1
vote
1answer
208 views

What do I need for SSL?

just a quick question, I'm kind of confused. I've had set-up my own certification authority and I can create requests and signed them. But, I'm not sure, what I need to give to Apache, currently I've ...
0
votes
1answer
334 views

Are apache2 mod_ssl BIO dumps sensitive?

When apache2 is serving https using mod_ssl, and running with 'LogLevel debug', it frequently logs lines like this, followed by a hex dump: ssl_engine_io.c(1882): OpenSSL: read 518/518 bytes from BIO#...