Questions tagged [mod-ssl]

The Apache Httpd interface to OpenSSL

mod_ssl is a module for the Apache HTTPD webserver which allows it to perform SSL and TLS encryption on connections. Documentation is provided by Apache covering installation and setup for httpd 2.0 and 2.2

This tag should be used for questions around using mod_ssl in your application, extending it, controlling the state from your application, writing other Apache modules that talk to it and similar.

For questions around setting it up, and advanced configuration, the mod-ssl tag on ServerFault is likely to be a better place to ask.

118 questions
5
votes
2 answers

How to solve Error: Need OpenSSL support for https:// requests?

I am using the VWS - PHP Samples and it works as expected from local PC, but when I uploaded it to the server it is giving me the following error: POST 999e93717344885fd7c458301a5b00c9 application/json Thu, 11 Sep 2014 08:14:20 GMT /targetsError:…
Waqleh
  • 9,741
  • 8
  • 65
  • 103
5
votes
1 answer

SSLCipherSuite in .htaccess not taking effect

I am trying to specify SSLCipherSuite in my .htaccess file, but the changes don't seem to take effect. I am running on a shared hosting account, so only have access to .htaccess, and not server/virtual host config files. The Apache documentation…
Mark
  • 440
  • 4
  • 16
4
votes
0 answers

apache's SSLSessionCache not working correctly with TLSv1.3 and graceful restart? (session-resumption)

I have a very simple httpd-setup with SSLSessionCache directive set so that sessions are available also after a graceful restart (in shared memory). I then connect to the server with openssl s_client and the -sess_out parameter so i have a…
USP-dos
  • 83
  • 1
  • 9
4
votes
2 answers

Apache ssl-enabled vhost returns random 400 bad request

I've setup two local vhosts (http and self-signed https) for billing.example.com and trying them in firefox with firebug. Http vhost only purpose is redirecting all requests to https. Almost each time I request page from https, one or two files with…
Kai
  • 1,478
  • 2
  • 15
  • 15
4
votes
1 answer

Unset HTTPS environment variable when X-Forwarded-Proto is http

I have endpoint termination setup on my Google Cloud Platform HTTP Load Balancer and HTTPS set as the protocol for communication with my backends. This means that all requests, HTTP or HTTPS, is HTTPS to apache. The problem with this is that the…
4
votes
1 answer

Apache ProxyPassReverse not rewriting Location header properly

I'm configuring apache to proxy SSL requests to a local backend server. Here are the relevant parts of the virtual host: ... SSLEngine on SSLCertificateFile /path/to/server.crt SSLCertificateKeyFile…
alexsanford1
  • 3,587
  • 1
  • 19
  • 23
4
votes
1 answer

Jenkins + Apache + SSL = no available updates

I have followed this tutorial and many others: https://wiki.jenkins-ci.org/display/JENKINS/Running+Jenkins+behind+Apache However, none of my attempts have been successful: When I go to Plugin Manager -> Available, it says "No updates" When I go to…
James Watkins
  • 4,806
  • 5
  • 32
  • 42
4
votes
2 answers

Unable to configure Apache to serve static content for CherryPy app. What I am doing wrong?

I have Apache 2.2.15 configured with Mod_Proxy and Mod_SSL and serving CherryPy web application on RHEL 6.3. The only thing I'm struggling with is getting Apache to serve the website's static content (*.js, *.css, *.jpg). Here is my VirtualHost…
Andrew Kloos
  • 4,189
  • 4
  • 28
  • 36
3
votes
1 answer

Apache basic authentication SSL only

I've been given a setup in which Apache runs on Windows, and we have two folders that need basic authentication with .htpasswd. First, I tested that the authentication worked: AuthUserFile E:/path-to/.htpasswd AuthType Basic AuthName "Secure…
Jonathan Stegall
  • 530
  • 1
  • 6
  • 23
3
votes
1 answer

SSLRequire file expression

I have an issue with SSLRequire file expression in Apache 2.4 in that it doesn't seem to be finding or be able to access the file in question. Here's the code excerpt: SSLOptions +StrictRequire …
Captain Jack
  • 144
  • 13
3
votes
2 answers

How to upgrade openssl 0.9.8 to 1.0.2 with mod_ssl in Apache 2.2.9

I am asked to recompile mo_ssl with openssl 1.0.2 in SuseSE11SP3. However, I am a newbie to Suse, but know a little bit of linux. OS : Suse SE11SP3 Openssl : 0.9.8j <-which comes with original Suse linux Web Server : Apache httpd 2.2.9 Here is…
CharlieSiNB
  • 90
  • 1
  • 1
  • 10
3
votes
0 answers

Apache crashes with Parent: child process exited with status 3221226356

Apache crashes and I get the following error in the apache log: AH00428: Parent: child process exited with status 3221226356 -- Restarting. Backtrace: Count: 2 Exception #: 0XC0000008 Stack: ntdll!KiRaiseUserExceptionDispatcher+0x3a …
oldbucsfan
  • 31
  • 4
3
votes
0 answers

Diffie-Hellman min key size for different browsers

I am interested in whether there is somewhere described what is the min size of Diffie-Hellman key that is supported for each browser. As I know modern browsers don't allow this key to be downgraded to 512 key size. As example latest chrome is…
user1459144
  • 4,439
  • 5
  • 28
  • 35
3
votes
1 answer

mod_ssl.so not loading

I am trying to run Apache with SSL for my website. But when I start the Apache it throws the error saying: httpd: Syntax error on line 127 of /usr/local/custom/apache/conf/httpd.conf: Cannot load modules/mod_ssl.so into server:…
JammuPapa
  • 138
  • 1
  • 1
  • 10
3
votes
1 answer

Trouble configuring apache server to proxy an SSL connection

I'm running an application on Tomcat7 with Apache Portable Runtime, I bought an SSL certificate and configured it correctly - when I try to connect through the ip:port combination, it connects fine but warns me the certificate is issued to the…
vivri
  • 885
  • 2
  • 12
  • 23