Questions tagged [mod-ssl]

The Apache Httpd interface to OpenSSL

mod_ssl is a module for the Apache HTTPD webserver which allows it to perform SSL and TLS encryption on connections. Documentation is provided by Apache covering installation and setup for httpd 2.0 and 2.2

This tag should be used for questions around compiling, building, configuring, extending, provisioning, debugging and using mod_ssl.

For questions around building Apache modules on top of mod_ssl, or working on the code, the mod-ssl tag on StackOverflow is likely to be a better place to ask.

272 questions
1
vote
1 answer

SSL Fault, Apache won't start

After installing an SSL certificate from Comodo following these instructions, I've found that apache will no longer start. This is my config: ServerName latimer.io ServerAlias *.latimer.io ServerAdmin…
1
vote
0 answers

SSLProxyMachineCertificatePath certificate selection

How does SSLProxyMachineCertificatePath cert selection works? Or does it sends all of them in the request ?
ssedano
  • 214
  • 4
  • 10
1
vote
1 answer

Disable cipher suite or change priority in apache based on IP address

I have run into an issue where I need to disable DH cipher suites or change the cipher suite priority only to certain IP addresses in Apache 2.4.7. Reason being is that a system running on JDK7 needs to connect to my web service which requires DH…
jscho
  • 19
  • 2
1
vote
1 answer

SSL Configuration failed in Apache after moving keys/certs to another machine

I'm in the process of moving my website to another server, and after moving the SSL key and certs and recreating the same Apache config, I encounter the following in the error logs at the time of Apache servie restart (domain anonymized): [Sun May…
1
vote
3 answers

After upgrade Wheezy to Jessie apache 2 SSL stops working

I upgraded server from Wheezy to Jessie, and Apache 2.4 stops working... Especially on port 443 there's no ssl .... telnet myhost 443 GET https://myhost Something in…
SledgehammerPL
  • 773
  • 9
  • 16
1
vote
2 answers

SSLRequire - file function

I'm having trouble with Apache 2.2 and the small documentation that I can find for the file function of SSLRequire. I'm trying to check the email property of the client certificate in a request using SSLRequire. The following option in httpd.conf…
Jos3k4
  • 129
  • 5
1
vote
2 answers

Apache:mod_ssl:Error: Private key not found

I'm installing a SSL certificate to serve HTTPS. I'm using Apache 2.4 in Amazon Linux and got the certificate in Startssl. My Vhost config is the following: ServerAdmin webmaster@myweb.com …
davids
  • 167
  • 2
  • 4
  • 10
1
vote
0 answers

Apache mod_ssl StdEnvVars appear not to be set?

I have a CentOS 6.5 server running Apache 2.2.15 with mod_ssl and PHP 5.3.3. My problem is that PHP does not seem to recognize the HTTPS connection. I have the following in my /etc/httpd/conf.d/ssl.conf file: LoadModule ssl_module…
Oldskool
  • 2,025
  • 1
  • 16
  • 27
1
vote
0 answers

Apache, mod_ssl, unsafe renegotiation and segmentation fault

I have a newly installed CentOS 7 server, running Apache httpd 2.4.6 and I just noticed that its audit logs grow too fast, with lots of entries like this one: type=ANOM_ABEND msg=audit(06/02/15 15:44:09.341:906003) : auid=unset uid=apache gid=apache…
Migtor
  • 369
  • 1
  • 7
1
vote
1 answer

Missing NPN Extension

I'm trying to set up mod_spdy with Apache (mod_spdy-0.9.4.3-r420 and apache2-2.2.22-13+deb7u3 on Debian Wheezy). As far as I can tell, everything is the way it's supposed to be, but I'm getting the "Missing NPN Extension in SSL/TLS Handshake" error…
Jay K
  • 167
  • 1
  • 13
1
vote
1 answer

Website does not advertise HTTP in its NPN Extension spdy

I have configure Apache with SPDY (and PHP-FPM). Everything works fine. However, spdycheck.org shows me following error: HTTP Over SSL Not Supported! This website only supports SPDY over SSL, and does not advertise HTTP in its NPN Extension. Web …
Jumper
  • 11
  • 1
1
vote
2 answers

Yum Update Failing mod_ssl and glibc_devel

Any ideas on how to get this to not fail? # yum update Freeing read locks for locker 0x82: 4189/140342084876032 Freeing read locks for locker 0x84: 4189/140342084876032 Freeing read locks for locker 0x85: 4189/140342084876032 Freeing read locks for…
Kerry Jones
  • 145
  • 1
  • 2
  • 12
1
vote
5 answers

Can't start httpd 2.4.9 with self-signed SSL certificate

I cannot start the httpd 2.4.9 (tried 2.4.x too) on CentOS 6.5 with the simplest SSL config possible. The openssl version installed on the machine is OpenSSL 1.0.1e-fips 11 Feb 2013 (I've upgraded it using 'yum update' to the latest patched version…
Sergey Shcherbakov
  • 143
  • 1
  • 2
  • 9
1
vote
0 answers

Apache SSL handshake interrupted by system

I have an up-to-date Ubuntu 12.04 server running Apache 2.2.22-1ubuntu1.4. For every HTTPS request my Apache logs record what appear to be error messages related to encrypted connections. Self-signed certificate was generated based on instructions…
Mxx
  • 2,362
  • 2
  • 28
  • 40
1
vote
2 answers

Allow connection from localhost to the HTTPS/Port 443 Protocol

We've recently set up a new development server and have been experiencing problems when trying to connect to an API via an instance of SoapClient. I think I've narrowed down the issue to being the fact the new server can't establish a connection to…
Ryan
  • 111
  • 1
  • 3