Questions tagged [mod-ssl]

The Apache Httpd interface to OpenSSL

mod_ssl is a module for the Apache HTTPD webserver which allows it to perform SSL and TLS encryption on connections. Documentation is provided by Apache covering installation and setup for httpd 2.0 and 2.2

This tag should be used for questions around compiling, building, configuring, extending, provisioning, debugging and using mod_ssl.

For questions around building Apache modules on top of mod_ssl, or working on the code, the mod-ssl tag on StackOverflow is likely to be a better place to ask.

272 questions
0
votes
1 answer

Apache not finding the HSM-protected private key over PKCS#11

I have installed Apache on my Centos7 virtual machine together with mod_ssl. I'm trying to make TLS working with the private key protected by an HSM over PKCS#11, but when I try to start Apache it doesn't find my private key (see the error below).…
quinz
  • 119
  • 6
0
votes
1 answer

Apache 2.4 compatibility with OpenSSL

We run Apache HTTPD as a load balancer in production, using mod_ssl with OpenSSL. Whilst trying to compile the latest Apache version (2.4.41) we've hit problems with OpenSSL whilst building. My question is, is there an official source for…
DGoodman
  • 43
  • 1
  • 5
0
votes
1 answer

Unable to get Client Certificate Chain from apache

I'm trying to get the client certificate chain and root from apache to my Java backend. This is the relevant part of my apache config: SSLOptions +StdEnvVars +ExportCertData RequestHeader set "SSL_CLIENT_CERT" "%{SSL_CLIENT_CERT}e" …
0
votes
3 answers

EC2 - httpd service not running with 443 vhosts after installing mod_ssl

I'm experiencing issues with the configuration of mod_ssl on an AWS EC2 instance It appears I'm at some point where I cannot run httpd service via sudo service httpd restart since I installed the mod24_ssl. I've got no Syntax errors, just a FAILED…
0
votes
2 answers

How to connect through SSL to server requiring certificate exchange via an apache proxy?

I need to connect to an external server via SSL which only accepts certificates exchange following this architecture : Client (my Nodejs server) -----http-----> (Reverse?) Proxy ----https-----> External Server asking for certificate. I don't own…
tristao
  • 3
  • 1
  • 2
0
votes
1 answer

RewriteEngine rules ignored by Apache on SSL

I have a working Apache setup on CentOS 7.6 using the standard Apache 2.4.6-88 package, using HTTP. I am trying to enable HTTPS on the server, and everything works, except for my RewriteEngine rules. I cannot find any mention anywhere about…
nafmo
  • 450
  • 4
  • 13
0
votes
0 answers

Apache 2.4 SSLSessionCache missed

Apache server is behind a physical loadbalancer et it uses an https connection between. The loadbalance break the https en create a new https connexion with apache. So it's always the same client that makes calls to the apache server. But in my…
Mr_Thorynque
  • 141
  • 6
0
votes
3 answers

Apache: SSLCertificateFile: file does not exist or is empty

I created a Private Key, CSR, and CRT using the below commands to run a Website using HTTPS on Apache 2.4.6. And the Operating System is Cent OS 7. // To generate a Private Key 1. openssl genrsa -des3 -out www.licweb.com.key 1024 // To generate…
Ankit Prajapati
  • 111
  • 2
  • 2
  • 5
0
votes
1 answer

Apache on SLES only starts https with -D SSL arguments

I've been hacking up this server for a few days trying to convert a new installation of apache to HTTPS with the plan to convert it to NSS once I have SSL running properly. This server is not internet facing and strictly for use within our internal…
Bill
  • 136
  • 12
0
votes
1 answer

"Server should be SSL-aware but has no certificate configured" Apache won't start

Never have set up a web server like this so I'm not sure what i'm doing wrong. I'm setting up my SSL certificate on my Ubuntu 14.04 server. The SSL is from NameCheap as is the domain. I'm getting this in the console which is stopping Apache from…
0
votes
0 answers

apache2 segmentation fault on https requests

I am trying to configure an old OpenSuse server with https. The http virtualhost seems to work fine, however when I try to load the https url from my browser I get a: This site can’t be reached xxxxxxxx.it unexpectedly closed the…
Niko Zarzani
  • 111
  • 1
  • 4
0
votes
2 answers

Apache Canonical Host with one SSL certificate for with www. and without

Using SNI, there are multiple domains with their own SSL certificates (LetsEncrypt) on one IP address. For one of the primary domains, let's just say https://thedomain.tld, visiting https://www.thedomain.tld results in a browser error (mis-matching…
0
votes
1 answer

Apache SSLProxy

I am looking for a solution to provide a webapplication running on our local network under a subdomain via SSL. We dont want to use a DynDNS but a subdomain of our own domain. Our current setup Root Server (internet) We have a root server with…
drohhyn
  • 1
  • 2
0
votes
1 answer

Can I purchase an EV SSL for a single subdomain?

Hey everyone sorry for the noob question, I was getting different answers on Google. My question specifically is: Am I able to purchase a EV SSL for each of my sub-domains. Thanks in advance.
user3724476
  • 121
  • 3
0
votes
1 answer

HTTPD + OpenSSL - Long time to connnect to port 443 then ssl_handshake_failure

I know that ssl_handshake_failure is a generic error, however this is my last resort, since I've been investigating this issue for three weeks. I'm deploying Apache HTTPD server on an AIX Server. AIX does not have standard repository so I've…