|
Related Topics:
| Apache +OpenSSL - Hi Group, I'm having a problem with Apache 2.0.45 on Win32. I'm trying to install a chained SSL but on Apache, I get the error to configure verify locations for client The was purchased from..
Apache and openSSL - Does anyone know if Apache comes inbuilt with the openSSL module? or does openSSL have to be slapped on to apache ? We have a Apache 1.3.28 (I know, very old) and the openSSL version on that seems to bother the security folks and they are..
Apache 2.0.54. openssl-0.9.7 - I am receiving numerous errors while trying to compile Apache / Openssl on CentOs4 (RHEL). Here is the greatly s/include -static -c..
apache 2 + ssl + openssl 0.9.7c solution! - after a while of search post after post, and site after site, i think i finally put together something here that works.. i hope it helps anyone out there... 1. Install OpenSSL the normal way: ../config make make install 2. configure openssl to be shared
Apache/2..48 (Win32) DAV/2 PHP/4.3.4 mod_ssl/2.0.48 OpenSS.. - Hi all of you experts out there. Before I even ask, thank you for any and all help. I have 2 problems. 1 is the vhosts, can get it to work going by the DOCs and 2 is the SSL same thing again. I am not an expert in any way so, I don't even know what you.
|
|
|
Next: Apache: Server becomes unaccessible after hours.
|
| Author |
Message |
External
Since: Oct 17, 2007
Posts: 4
|
(Msg. 1) Posted: Wed Oct 17, 2007 10:57 am
Post subject: Apache and OpenSSL Configuration Question
Archived from groups: alt>apache>configuration (more info?)
|
|
|
I have 3 Redhat Linux servers that I inherited.
Now I have a problem that I can not figure out.
All 3 are running Apache 2.0.4 and OpenSSL 0.9.7m. Well I wanted to
turn off the SSLv2 on all of these along with the low encryption.
I did exactly the same thing on all 3 servers to the ssl.conf file, in
the SSLProtocol I changed it to: -All +SSLv3 +TLSv1
and in the SSLCipherSuite I removed the +LOW
On 2 of the servers it worked just fine. When I check the SSLv2 is
totally unsupported, however the 3rd one it doesn't seem to be
changing a thing. I am still getting the SSLv2 supported.
I know that the httpd service is reading this file, as a quick test I
mis-spelled something in the file, saved it and restarted the httpd
service and it bombed. Fixed it and it restarted fine.
So anyone have any idea as to what might be overridding the ssl.conf
file settings? I am finding nothing.
Thanks in advance. |
|
| Back to top |
|
 | |
External
Since: Oct 15, 2007
Posts: 12
|
(Msg. 2) Posted: Wed Oct 17, 2007 1:57 pm
Post subject: Re: Apache and OpenSSL Configuration Question [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
Hi Mike,
Sounds strange. I'm not an Apache expert, but reasonably familiar with
it. Here are a few ideas that come up.
Does it load more config files that might contain SSL configuration
directives? Maybe there are some SSL-related things in httpd.conf? I
know I used to do that in the past...
Does Apache try to load the SSL module twice? It should give a warning
about that when it starts up.
Maybe I'm talking rubbish now, but how about the certificates? Does
server #3 have a low-grade certificate? Say, 56 bits?
Kind regards,
Hans
mike wrote:
> I have 3 Redhat Linux servers that I inherited.
> Now I have a problem that I can not figure out.
>
> All 3 are running Apache 2.0.4 and OpenSSL 0.9.7m. Well I wanted to
> turn off the SSLv2 on all of these along with the low encryption.
>
> I did exactly the same thing on all 3 servers to the ssl.conf file, in
> the SSLProtocol I changed it to: -All +SSLv3 +TLSv1
> and in the SSLCipherSuite I removed the +LOW
>
> On 2 of the servers it worked just fine. When I check the SSLv2 is
> totally unsupported, however the 3rd one it doesn't seem to be
> changing a thing. I am still getting the SSLv2 supported.
>
> I know that the httpd service is reading this file, as a quick test I
> mis-spelled something in the file, saved it and restarted the httpd
> service and it bombed. Fixed it and it restarted fine.
>
> So anyone have any idea as to what might be overridding the ssl.conf
> file settings? I am finding nothing.
>
> Thanks in advance.
> |
|
| Back to top |
|
| |
External
Since: Oct 17, 2007
Posts: 4
|
(Msg. 3) Posted: Wed Oct 17, 2007 4:58 pm
Post subject: Re: Apache and OpenSSL Configuration Question [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
On Oct 17, 1:19 pm, Hans van Zijst <h....DeleteThis@syncera.nl> wrote:
> Hi Mike,
>
> Sounds strange. I'm not an Apache expert, but reasonably familiar with
> it. Here are a few ideas that come up.
>
> Does it load more config files that might contain SSL configuration
> directives? Maybe there are some SSL-related things in httpd.conf? I
> know I used to do that in the past...
>
> Does Apache try to load the SSL module twice? It should give a warning
> about that when it starts up.
>
> Maybe I'm talking rubbish now, but how about the certificates? Does
> server #3 have a low-grade certificate? Say, 56 bits?
>
> Kind regards,
>
> Hans
>
>
>
> mike wrote:
> > I have 3 Redhat Linux servers that I inherited.
> > Now I have a problem that I can not figure out.
>
> > All 3 are running Apache 2.0.4 and OpenSSL 0.9.7m. Well I wanted to
> > turn off the SSLv2 on all of these along with the low encryption.
>
> > I did exactly the same thing on all 3 servers to the ssl.conf file, in
> > the SSLProtocol I changed it to: -All +SSLv3 +TLSv1
> > and in the SSLCipherSuite I removed the +LOW
>
> > On 2 of the servers it worked just fine. When I check the SSLv2 is
> > totally unsupported, however the 3rd one it doesn't seem to be
> > changing a thing. I am still getting the SSLv2 supported.
>
> > I know that the httpd service is reading this file, as a quick test I
> > mis-spelled something in the file, saved it and restarted the httpd
> > service and it bombed. Fixed it and it restarted fine.
>
> > So anyone have any idea as to what might be overridding the ssl.conf
> > file settings? I am finding nothing.
>
> > Thanks in advance.- Hide quoted text -
>
> - Show quoted text -
I had thought about having SSL directives in other places. I have
been looking for 2 days now, but can not find anything anywhere. I
wonder however if I enter them into the httpd.conf if it will take
care of my problem at any rate and override what ever is the
controlling file.
As far as I know it is not loading it 2X, it is not at any rate giving
an error message.
As far as the certificate goes, no it is not a low-grade cert.
Thanks,
Mike >> Stay informed about: Apache and OpenSSL Configuration Question |
|
| Back to top |
|
| |
External
Since: Oct 15, 2007
Posts: 12
|
(Msg. 4) Posted: Thu Oct 18, 2007 1:38 pm
Post subject: Re: Apache and OpenSSL Configuration Question [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
It won't make any difference if you put your directives in separate
config files or in one central httpd.conf. In the past everything used
to be in httpd.conf, but several smaller config files usually make for a
system that's easier to manage. What I meant was that the guy(s) who
built the servers you inherited, may have added some directives on
several places. It's easy to do, I shot myself in the foot a couple of
times in the past.
Can you post your config files? Makes the analysis that much easier 
Regards,
Hans
mike wrote:
> I had thought about having SSL directives in other places. I have
> been looking for 2 days now, but can not find anything anywhere. I
> wonder however if I enter them into the httpd.conf if it will take
> care of my problem at any rate and override what ever is the
> controlling file.
>
> As far as I know it is not loading it 2X, it is not at any rate giving
> an error message.
>
> As far as the certificate goes, no it is not a low-grade cert.
>
> Thanks,
> Mike
> >> Stay informed about: Apache and OpenSSL Configuration Question |
|
| Back to top |
|
| |
External
Since: Oct 31, 2007
Posts: 1
|
(Msg. 5) Posted: Wed Oct 31, 2007 4:33 am
Post subject: Re: Apache and OpenSSL Configuration Question [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
|
|
| Back to top |
|
| |
External
Since: Oct 17, 2007
Posts: 4
|
(Msg. 6) Posted: Wed Oct 31, 2007 9:59 am
Post subject: Re: Apache and OpenSSL Configuration Question [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
On Oct 31, 7:33 am, towe....RemoveThis@gmail.com wrote:
> Hi,
>
> Did you find a solution for this problem? I got a very similar
> problem.
>
> Thanks
> Rasmus
Yea I added them to the httpd.conf file and it worked fine.
Still do not know what file was controlling it since, but by using the
httpd.conf file I was able to get it to work. >> Stay informed about: Apache and OpenSSL Configuration Question |
|
| Back to top |
|
| |
|
FAQ
Search
Profile
Private Messages
Log in/Register/Password
