Questions tagged [mod-ssl]

The Apache Httpd interface to OpenSSL

Filter by
Sorted by
Tagged with
0 votes
1 answer
1k views

Apache not finding the HSM-protected private key over PKCS#11

I have installed Apache on my Centos7 virtual machine together with mod_ssl. I'm trying to make TLS working with the private key protected by an HSM over PKCS#11, but when I try to start Apache it ...
quinz's user avatar
  • 119
0 votes
1 answer
742 views

Apache on SLES only starts https with -D SSL arguments

I've been hacking up this server for a few days trying to convert a new installation of apache to HTTPS with the plan to convert it to NSS once I have SSL running properly. This server is not ...
Bill's user avatar
  • 136
0 votes
1 answer
332 views

Can I purchase an EV SSL for a single subdomain? [duplicate]

Hey everyone sorry for the noob question, I was getting different answers on Google. My question specifically is: Am I able to purchase a EV SSL for each of my sub-domains. Thanks in advance.
user3724476's user avatar
0 votes
1 answer
910 views

Repairing Apache after OpenSSL update

I made an OpenSSL upgrade on ubuntu server (14.04 LTS) via apt to 1.1.0f. After the upgrade was finished, I tried to (re)start apache2. Then this appears: * Starting Apache httpd web server apache2 ...
MexHigh's user avatar
0 votes
1 answer
15k views

Upgrade OpenSSL (mod_ssl) on WIndows Apache 2.2.18 to v1.1.0b

I am running Apache 2.2.18 on my work machine and have a dedicated IP and paid SSL certificate. Since this server should be secure, I only use HTTPS when I access it. To do a test I went to ssllabs....
Kaboom's user avatar
  • 103
0 votes
1 answer
1k views

Redirection from http to https in Apache httpd24 with mod24_ssl is not working

I have my Amazon linux server and I had installed httpd24 and mod24_ssl. I had been setup ssl certificate in /etc/httpd/conf.d/ssl.conf file with https redirect instructions: <VirtualHost *:80> ...
Nagarjuna D N's user avatar
0 votes
1 answer
4k views

Apache SSL page times out with server taking too long

I have an SSL site I'm trying to deliver with apache that is timing out when you load it in a web browser. I am seeing this message in the browser: The connection has timed out The server at solr1....
user99201's user avatar
  • 307
0 votes
1 answer
1k views

Howto join ssl_access_log and access_log? [closed]

Recently I discovered in my /var/log/httpd files called ssl_access_log and ssl_error_log. Now I always looked and scanned the regular access_log and error_log. Questions are? Do ssl_error_log and ...
aviv's user avatar
  • 167
0 votes
1 answer
509 views

mod_ssl RPM conflict

I build Apache httpd into an RPM using these sites: http://erikwebb.net/blog/compile-and-install-apache-24-red-hat-enterprise-linux-rhel-6-or-centos-6 http://ramblin-dude.blogspot.com/2013/04/...
Engineer2021's user avatar
0 votes
1 answer
1k views

SSL/TLS Client certificate Authentication using RewriteCond and Rewrite Rules to perceptively redirect traffic not authorized

I finally end up to write here because I´m badly struggling against apache, SSL/TLS and a client certificate authentication that should use the certificate´s Serial Number to restrict access to a ...
zimaldone's user avatar
0 votes
1 answer
1k views

Can't get self-signed CA cert to request corresponding client cert; Apache

I'm running Apache 2.2 on Windows, and have mod_ssl working fine for delivering a commercially signed server cert. (A wildcard cert, though I don't think it matters.) I'm trying to get the server, ...
lairdb's user avatar
  • 129
0 votes
2 answers
994 views

Apache not responding after SSL handshake

Sometimes on my CentOS servers with Apache 2 + mod_ssl, Apache stops responding to requests made through HTTPS. The SSL connection and handshake is successfull (I tested it with openssl s_client), but ...
Antares's user avatar
  • 301
0 votes
1 answer
340 views

Configure apache mod_ssl to use different certificates for incoming and outgoing messages

How could I configure mod_ssl to use different certificates for incoming and outgoing messages? I have managed to configure apache2 only to handle incoming messages with single certificate. Is it ...
altern's user avatar
  • 195
0 votes
1 answer
179 views

Host couldn't be reached by domain name, only by IP: Apache's fault?

I have this Windows Server 2003 R2 32 bit machine running Apache 2.4.2 with OpenSSL 1.0.1c and PHP 5.4.5 via mod_fcgid 2.3.7. This config worked just fine for some hours, but then the site couldn't be ...
MaxArt's user avatar
  • 515
0 votes
1 answer
987 views

Apache mod_rewrite behaves differently on SSL and non-SSL configs

I have a system where I'm hosting a number of SSL sites on my server. I also need to setup OAuth for each domain, with Google and Yahoo in particular. They each require verification files be installed ...
Aaron Vegh's user avatar
0 votes
1 answer
2k views

Lost mod_ssl on debian, how to get it back?

I lost my mod_ssl on my debian machine. How can I get it back. I accidently removed it from mods_available instead of mods_enable, and as it was a symlink I lost the file. Is it possible to get this ...
Oldek's user avatar
  • 111
0 votes
1 answer
887 views

Multiple Django sites on a single SSL certificate using a single IP with Apache

Is it technically possible to setup multiple Django sites using a single SSL certificate on a single IP address with Apache? Below is an excerpt from my SSL config: Alias /media/ x:/home/djang-apps/...
Imran Azad's user avatar
0 votes
1 answer
2k views

Apache2, mod_proxy, mod_ssl on OSX not working

I am trying to setup apache2 on OSX and am having an issue. I am trying to proxy a domain to 127.0.0.1:8081 (which is up and running) but when try to load through apache I get a "Web Page Not Found". ...
maclema's user avatar
  • 191
0 votes
1 answer
121 views

Can't copy Ilias-folder via FQDN, but via ip-address?

I have an Ilias-Installation, which is available through two virtual hosts: the FQDN and the ip-address. The first server is ssl only, the second plain http. Both configuration files look the same ...
Lars's user avatar
  • 458
0 votes
1 answer
2k views

apache2: ssl_error_rx_record_too_long when visiting port 80?

I have an Ubuntu 10 x64 server edition machine. I got a second IP and configured /etc/network/interfaces like so (actual IPs and gateways removed): auto lo iface lo inet loopback #iface eth0 inet ...
John's user avatar
  • 21
0 votes
1 answer
424 views

Are apache2 mod_ssl BIO dumps sensitive?

When apache2 is serving https using mod_ssl, and running with 'LogLevel debug', it frequently logs lines like this, followed by a hex dump: ssl_engine_io.c(1882): OpenSSL: read 518/518 bytes from BIO#...
dfranke's user avatar
  • 379
0 votes
0 answers
12 views

How to rewrite URL to reflect name of NLB not backends?

I have a network load balancer in front of my httpd backends servers, but if I try to use write the name of NLB in the URL of my browser it'll redirect me to one backend, which is the goal, however, ...
N. J's user avatar
  • 125
0 votes
1 answer
49 views

Virtual Host SSL and nonSSL with Proxy

I have 1 nonSSL server and many SSL with Proxy in Apache. Configuration SSL server: <VirtualHost *:443> ServerName test.com ServerAdmin [email protected] ErrorLog ${...
Jo K's user avatar
  • 111
0 votes
0 answers
104 views

Apache: Cannot make exception for SSLVerifyClient whith server-level restriction

I cannot make an exception for SSLVerifyCLient when it is at server level: SSLVerifyClient require SSLVerifyDepth 2 RequestHeader set SSL_CLIENT_VERIFY "" <Location /> <If "-R '...
sebelk's user avatar
  • 702
0 votes
0 answers
318 views

Apache SSL not working - server took too long to respond

I am trying to get Apache (2.4.41, Ubuntu) to work with SSL and am not having luck. Whenever I visit the site in my browser, I get the error "This site can't be reached: my-domain took too long ...
Jeff's user avatar
  • 135
0 votes
1 answer
1k views

Apache reverse proxy mTLS only between client and proxy, regular TLS between proxy and backends

am trying to create an apache reverse proxy (for webservices) where i need Imutual authentication (mTLS) between clients and the proxy itself, but i don't need mTLS between the proxy & the ...
olivierg's user avatar
  • 524
0 votes
0 answers
623 views

502 on redirects from http to https on GCP

I'd like to start by saying that I know there are quite literally hundreds of topics about this, which I've followed before to get things working. Yet, this configuration, which I had working for ...
Jetto Martínez's user avatar
0 votes
1 answer
3k views

How to add a custom OpenSSL engine with OpenSSL and use from apache server?

I have a custom-built OpenSSL engine. I'm trying to make changes to openssl.cnf to load this engine automatically. My ultimate goal is to use this engine for Apache mod-ssl. Apache mod_ssl to use ...
user45698746's user avatar
0 votes
0 answers
961 views

Apache 2.4.37 on CentOS 8 doesn't start with SSL enabled

So, I got a brand new CentOS 8 server and I migrated from openSUSE Leap 15.1. The configuration of Apache is pretty much the standard one and I simply added my own sites as includes under the /etc/...
ptselios's user avatar
0 votes
0 answers
23 views

SSL versions of sites not working on 2 sites same machine and ip virtual hosts

I have CentOS 8 I installed LAMP, Varnish, etc. I setup hosts /etc/hosts ip site1.com www.site1.com ip site2.com www.site2.com I setup Apache like this: /etc/httpd.conf to include sites-enabled/ ...
Wed's user avatar
  • 15
0 votes
0 answers
202 views

Apache 2.4 SSLClientVerify on top of Vhost, but exclude one URL

I have the following configuration: <VirtualHost *:443> SSLVerifyClient require SSLVerifyDepth 4 <Location /> ####SSLVerifyClient require ####SSLVerifyDepth 4 ...
Fozix's user avatar
  • 1
0 votes
1 answer
699 views

apache2 webdav givng a 405 error after enabling ssl certificate

Apache 2.4.29 \ Ubuntu 18.04 LTE The webdav was working fine before I was using an SSL connection, that is, when I was using a "http://" URL to access the folders in my server (which is pc with ...
Lord Amateur's user avatar
0 votes
1 answer
3k views

Apache 2.4 compatibility with OpenSSL

We run Apache HTTPD as a load balancer in production, using mod_ssl with OpenSSL. Whilst trying to compile the latest Apache version (2.4.41) we've hit problems with OpenSSL whilst building. My ...
DGoodman's user avatar
0 votes
1 answer
1k views

Unable to get Client Certificate Chain from apache

I'm trying to get the client certificate chain and root from apache to my Java backend. This is the relevant part of my apache config: SSLOptions +StdEnvVars +ExportCertData RequestHeader set "...
Surya Midatala's user avatar
0 votes
3 answers
2k views

EC2 - httpd service not running with 443 vhosts after installing mod_ssl

I'm experiencing issues with the configuration of mod_ssl on an AWS EC2 instance It appears I'm at some point where I cannot run httpd service via sudo service httpd restart since I installed the ...
Bastien Serprix's user avatar
0 votes
2 answers
3k views

How to connect through SSL to server requiring certificate exchange via an apache proxy?

I need to connect to an external server via SSL which only accepts certificates exchange following this architecture : Client (my Nodejs server) -----http-----> (Reverse?) Proxy ----https-----> ...
tristao's user avatar
0 votes
0 answers
716 views

Apache 2.4 SSLSessionCache missed

Apache server is behind a physical loadbalancer et it uses an https connection between. The loadbalance break the https en create a new https connexion with apache. So it's always the same client ...
Mr_Thorynque's user avatar
0 votes
1 answer
671 views

"Server should be SSL-aware but has no certificate configured" Apache won't start

Never have set up a web server like this so I'm not sure what i'm doing wrong. I'm setting up my SSL certificate on my Ubuntu 14.04 server. The SSL is from NameCheap as is the domain. I'm getting this ...
Bob Stevenson's user avatar
0 votes
0 answers
566 views

apache2 segmentation fault on https requests

I am trying to configure an old OpenSuse server with https. The http virtualhost seems to work fine, however when I try to load the https url from my browser I get a: This site can’t be reached ...
Niko Zarzani's user avatar
0 votes
2 answers
307 views

Apache Canonical Host with one SSL certificate for with www. and without

Using SNI, there are multiple domains with their own SSL certificates (LetsEncrypt) on one IP address. For one of the primary domains, let's just say https://thedomain.tld, visiting https://www....
conspireagainst's user avatar
0 votes
1 answer
900 views

Apache SSLProxy

I am looking for a solution to provide a webapplication running on our local network under a subdomain via SSL. We dont want to use a DynDNS but a subdomain of our own domain. Our current setup Root ...
drohhyn's user avatar
0 votes
1 answer
1k views

HTTPD + OpenSSL - Long time to connnect to port 443 then ssl_handshake_failure

I know that ssl_handshake_failure is a generic error, however this is my last resort, since I've been investigating this issue for three weeks. I'm deploying Apache HTTPD server on an AIX Server. AIX ...
vinicius.olifer's user avatar
0 votes
1 answer
81 views

How to configure SSL using two different Web Servers

I am a noob when it comes to System Administration & Networking and I thought I would get some valuable insight from the pros in here. I work for my University's IT department and I overlook the ...
realnsleo's user avatar
  • 117
0 votes
2 answers
2k views

After Setting Up SSL for one vhost https://sitename.com shows Apache 2 Test Page

Thank you in advance for your support! We have been working on this for a couple days, lots of research and no luck with a solution. Our web server is running on centos6 with apache (httpd-2.2.15-53)...
Roddy Rodstein's user avatar
0 votes
1 answer
1k views

extending <VirtualHost _default_:443> defined in conf.d/ssl.conf

I have some global directories, aliases and rewrite rules in my httpd.conf. They aplly to both 80 and 443. Now I want to add an http proxy on port 3128. I don't want it to be affected by existing ...
basin's user avatar
  • 558
0 votes
0 answers
74 views

Do any versions of Apache allow for a different declaration of SSLProtocol for different Virtual Hosts? [duplicate]

We are currently using Apache 2.4.10. For various reasons we need to drop support for TLS 1.0 and 1.1 on some domains, but leave 1.1 support on others. I've been reading but can't find a definitive ...
Ferdia O'Brien's user avatar
0 votes
1 answer
116 views

Apache + mod_ssl configuration settings not being used

The configuration settings i set in httpd.conf don't seem to be actually working. After restarting Apache I used some online SSL check type websites and it appears that Apache isn't using the ...
Analog's user avatar
  • 202
0 votes
1 answer
109 views

How to correctly setup an Apache VirtualHost as HTTP and HTTPS?

I am trying to setup a locally (for development/testing purposes) SSL site using Apache and mod_ssl and this is what I have in my VirtualHost files: /etc/httpd/conf.d/local.conf <VirtualHost *:80&...
ReynierPM's user avatar
  • 720
0 votes
1 answer
628 views

Apache Reverse Proxy with SSL handling

I am trying to use apache as a reverse proxy, and to off load SSL processing from the underlying Node Js application. I have the configuration defined but it doesn't look as though the system is ...
akaphenom's user avatar
  • 143
0 votes
0 answers
5k views

apache 2.4 don't find the SSL Certificate File

I try to configure SSL on my apache 2.4.12 Webserver. But apache2 can't find the Certificate and Key File in the corespondening ssl directory. I already checked file permissions but without success. ...
Oliver G.'s user avatar
  • 115