Geek Answers Handbook

Https: restart Apache TLS: Debian, Apache2, openssl. How?

In modern browsers, my site is marked as sorta insecure:

Google Chrome, for example, says " " in "Page Info." The server does not support the TLS renegotiation extension

HTTPS is working fine, but the connection is encrypted and the certificate is valid.

# openssl version
OpenSSL 0.9.8g 19 Oct 2007

# cat /etc/debian_version
5.0.6

# apache2ctl -V
Server version: Apache/2.2.9 (Debian)
Server built:   Apr 20 2010 21:44:40
Server Module Magic Number: 20051115:15
Server loaded:  APR 1.2.12, APR-Util 1.2.12
Compiled using: APR 1.2.12, APR-Util 1.2.12
Architecture:   64-bit
Server MPM:     ITK
  threaded:     no
    forked:     yes (variable process count)
Server compiled with....
 -D APACHE_MPM_DIR="server/mpm/experimental/itk"
 -D APR_HAS_SENDFILE
 -D APR_HAS_MMAP
 -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
 -D APR_USE_SYSVSEM_SERIALIZE
 -D APR_USE_PTHREAD_SERIALIZE
 -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT
 -D APR_HAS_OTHER_CHILD
 -D AP_HAVE_RELIABLE_PIPED_LOGS
 -D DYNAMIC_MODULE_LIMIT=128
 -D HTTPD_ROOT=""
 -D SUEXEC_BIN="/usr/lib/apache2/suexec"
 -D DEFAULT_PIDLOG="/var/run/apache2.pid"
 -D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
 -D DEFAULT_LOCKFILE="/var/run/apache2/accept.lock"
 -D DEFAULT_ERRORLOG="logs/error_log"
 -D AP_TYPES_CONFIG_FILE="/etc/apache2/mime.types"
 -D SERVER_CONFIG_FILE="/etc/apache2/apache2.conf"

I use the dotdeb repository to configure LAMP, so Apache 2.2.9.

  • Is there something wrong with my server configuration?

  • Or is something wrong with the certificate being used?

  • Where should I start tracking the problem?

+5
source share
2 answers

Debian changelog apache2 2.2.9-10 + lenny8 ( Lenny), 20 2010 . 2.2.9-10 + lenny6 (CVE-2009-3555):

SSL/TLS .         TLS (CVE-2009-3555).         , -/         "SSLVerifyClient optional" - .

, SSLVerifyClient optional Directory Location.

TLS (RFC 5746), SSLVerifyClient optional , OpenSSL 0.9.8m 1.0.0a, , .

SSLVerifyClient optional location/directory, , TLS, -/.

Apache Httpd 2.2.15 SSLInsecureRenegotiation, ( OpenSSL 0.9.8m ).

+5

, , , , , . 1 vhost SSL , http → https . . vhost 80. , , Chrome https : D

0

More articles:


All Articles