Questions tagged [mod-ssl]

The Apache Httpd interface to OpenSSL

mod_ssl is a module for the Apache HTTPD webserver which allows it to perform SSL and TLS encryption on connections. Documentation is provided by Apache covering installation and setup for httpd 2.0 and 2.2

This tag should be used for questions around using mod_ssl in your application, extending it, controlling the state from your application, writing other Apache modules that talk to it and similar.

For questions around setting it up, and advanced configuration, the mod-ssl tag on ServerFault is likely to be a better place to ask.

118 questions
1
vote
2 answers

How to make mod_ssl pointing to different openssl directory instead of default one in apache?

The question is raised because the original openssl version doesn't pass the Vulnerability Scanning, therefore I need to upgrade the openssl package on apache centos 7 and I am using httpd. I have some observations after spending some time The…
David Cheung
  • 61
  • 1
  • 5
1
vote
1 answer

ProxyRemote leads to "AH00898: Error during SSL Handshake with remote server ...", works on other server

Goal Set up a Virtual Host as Reverse Proxy, which also acts as Forward Proxy to another "Remote" Proxy for a specific URL pattern. Issue I have 2 servers (actually 2 separate machines), both having the same config but only one server is able to…
von_court
  • 152
  • 2
  • 10
1
vote
0 answers

Multiple SSL certificates for single host on apache at same time

Aim: To host 2 certificates in the Apache configuration for the SAME HOST (domain), either of them is OK for communication at the same time. If Public key 1 is used by client then if it matches with either of the 2 Private keys, it should…
1
vote
1 answer

Compiling issue with C using OpenSSL s2n call

I'm a complete n00b to C and have tried googling the errors, but haven't been able to figure out what to change for this to work. I'm trying to compile an exploitdb .c file (764.c). Following this guide, I've made all the changes, but it still won't…
1
vote
2 answers

Is it possible to have severals keys/certificates on a virtualhost in Apache 2?

I would like to know how I can configure my Apache 2 (version 2.0.64) to use multiple key/certificate pairs for mutual authentication. More precisely, I have configured my apache to accept SSL connections on port 443 by using this…
tunix2fr
  • 381
  • 3
  • 9
1
vote
1 answer

How Can I Verify the Contents of a Subject Alternate Name in URI Format Using Apache mod_ssl Variables?

I am working on a web service project which requires that clients connecting to my service authenticate themselves via X.509 certificates as part of a Mutual Authentication TLS negotiation. In addition to linking the client certificate to a…
roboscott
  • 19
  • 5
1
vote
1 answer

JkEnvVar SSL_CLIENT_CERT doesn't work when "SSLVerifyClient require" (setup on a directory-level)

[My environment is this: Apache/2.2.17 (Win32) mod_ssl/2.2.17 OpenSSL/0.9.8o PHP/5.2.9-2 mod_jk/1.2.31 (although we get the same behavior under an Ubuntu 10.04.2 LTS with similar apache/mod_jk/tomcat specs)] I have setup a virtual host for serving…
tpav
  • 11
  • 1
  • 2
1
vote
1 answer

mod_ssl not compiling with apache2

SOLVED Resolved, but it was a strange issue. I check config.log, as suggested by Capsule and found the following line: configure:14368: checking whether to enable mod_ssl configure:16123: result: no I was wondering why it wasn't installing ssl when…
HyderA
  • 20,651
  • 42
  • 112
  • 180
1
vote
1 answer

Apache: Allow TLS 1.0 for one host while forcing all others to use 1.2?

Is there a way to configure Apache mod_ssl to allow TLS 1.0 for one particular IP while enforcing TLS 1.2 for all other IPs? I need to support connections from one legacy system that only supports TLS 1.0 but I would like to not completely open up…
reibuehl
  • 35
  • 1
  • 1
  • 5
1
vote
1 answer

Build mod_ssl.so using OpenSSL from non-standard location

So we have to use TLS1.1 on the webpage but are at the moment running OpenSSL0.9.8za. So have to upgrade OpenSSL to at least 1.0.2. Operating system MacOS 10.12.6 Sierra. Apache version 2.2.34 I installed OpenSSL using the quick way in the install…
D.Gaters
  • 11
  • 1
  • 4
1
vote
0 answers

SSL/TLS certificate works without ServerName directive on one EC2, won't on another

I've purchased a TLS certificate from godaddy for a domain (say somebeta.com - actual is different). The DNS points to an AWS EC2 Linux server which I operate. The httpd web server on this EC2 serves the REST API requests. I've installed the…
Ouroboros
  • 1,432
  • 1
  • 19
  • 41
1
vote
1 answer

Apache with mod_ssl and mod_proxy returns 413 Request Entity Too Large

I have a apache which uses SSL and ProxyReverse which transfers the incomming request to a simple rest webservice running on a tomcat. The problem I am now facing is that my apache returns an HTTP 413 Request Entity Too Large if send an POST Request…
Chris S.
  • 323
  • 1
  • 4
  • 13
1
vote
1 answer

log apache2 ssl session id and unique client values

I want to realize a more detailed apache2 server log with the unique ssl_session_id of each user for forensic reasons. I adapted the LogFormat in my apache2.conf but it does not log the session id. using apache 2.2.22 - mod_ssl is enabled. current…
d4ny3l
  • 163
  • 18
1
vote
1 answer

Current version of "Using mod_ssl on Mac OS X" documentation?

I'm fairly new to Mac I want to enable SSL on my Mac (10.6.4) for some local development. In searching for an answer, I ran across Using mod_ssl on Mac OS X. However, this Apple developer support document looked out of date. In further searching,…
Kevin Hakanson
  • 41,386
  • 23
  • 126
  • 155
1
vote
1 answer

Sanity Check - Should my Public AMIs for EC2 generate new Apache SSL Certs on First Boot?

I want to offer ready-to-deploy Public Ubuntu Lucid AMIs on Amazon Web Services EC2. As these AMIs use open-source web apps, I want to pre-configure apache mod_ssl and force all traffic over https. That's easy enough. I'm interested in a sanity…
Cloud Controller
  • 458
  • 3
  • 10