Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Apache 2.4 configuration for ssl not working

Apache Server 2.4 with mod_jk 1.3.7 not working for ssl (https)

Error 1:

The Apache service named reported the following error:

SSLSessionCache: 'shmcb' session cache not supported (known names: ). Maybe you need to load the appropriate socache module (mod_socache_shmcb?).

Error 2:

Faulting application name: httpd.exe, version: 2.4.4.0, time stamp: 0x512fec36 Faulting module name: mod_jk.so, version: 1.2.37.0, time stamp: 0x4fc48072 Exception code: 0xc0000005 Fault offset: 0x000000000000752d Faulting process id: 0x3580 Faulting application start time: 0x01cee6d2be493d71 Faulting application path: C:\Program Files\Apache Software Foundation\Apache2.4\bin\httpd.exe Faulting module path: C:\Program Files\Apache Software Foundation\Apache2.4\modules\mod_jk.so Report Id: f8d090fa-52c6-11e3-bce9-e4d53d737212

Our configuration for httpd_ssl.conf is as follows:

Listen 443  SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5  SSLPassPhraseDialog  builtin  SSLSessionCache        "shmcb:C:/Program Files/Apache Software Foundation/Apache2.4/logs/ssl_scache(512000)" SSLSessionCacheTimeout  300  <VirtualHost _default_:443>  DocumentRoot "C:/Program Files/Apache Software Foundation/Apache2.4/htdocs" ServerName 127.0.0.1:443 ServerAdmin [email protected] ErrorLog "C:/Program Files/Apache Software Foundation/Apache2.4/logs/error.log" TransferLog "C:/Program Files/Apache Software Foundation/Apache2.4/logs/access.log"  SSLEngine on  SSLCertificateFile "C:/Program Files/Apache Software Foundation/Apache2.4/conf/serverssl.crt"  SSLCertificateKeyFile "C:/Program Files/Apache Software Foundation/Apache2.4/conf/server.key"  SSLCACertificateFile "C:/Program Files/Apache Software Foundation/Apache2.4/conf/bundle.crt"  <FilesMatch "\.(cgi|shtml|phtml|php)$">     SSLOptions +StdEnvVars </FilesMatch> <Directory "C:/Program Files/Apache Software Foundation/Apache2.4/cgi-bin">     SSLOptions +StdEnvVars </Directory>  BrowserMatch "MSIE [2-5]" \      nokeepalive ssl-unclean-shutdown \      downgrade-1.0 force-response-1.0  CustomLog "C:/Program Files/Apache Software Foundation/Apache2.4/logs/ssl_request.log" \       "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"  </VirtualHost>  

TIA....!

like image 246
Meuk Light Avatar asked Nov 21 '13 16:11

Meuk Light


People also ask

Why is my SSL certificate not working?

The most common cause of a "certificate not trusted" error is that the certificate installation was not properly completed on the server (or servers) hosting the site. Use our SSL Certificate tester to check for this issue. In the tester, an incomplete installation shows one certificate file and a broken red chain.


2 Answers

In Apache2.2 following line is uncommented in apache/conf/httpd.conf by default.

LoadModule socache_shmcb_module modules/mod_socache_shmcb.so

From Apache 2.4 above line is commented so remove the # sign before it.

This should work.

like image 161
Mr Roshan Pawar Avatar answered Oct 05 '22 23:10

Mr Roshan Pawar


On apache 2.4.25-3+deb9u4 (Debian obviously) the line mentioned by @Mr Roshan Pawar doesn't exists. You must create a symbolic link pointing to the module and enabling it in /etc/apache2/mods-enabled this way:

ln -s ../mods-available/socache_shmcb.load socache_shmcb.load

As @ericP said it's neccesary to restart your apache, depending on your distro/config it could be:

service apache2 restart /etc/init.d/apache2 restart systemctl restart apache2 apache2 -k restart 
like image 29
Miguel Ortiz Avatar answered Oct 05 '22 23:10

Miguel Ortiz