[users@httpd] SSL Certificate Validation
Dear users, We are currently using Apache 2.2.22 (mod_ssl 2.2.22, OpenSSL/0.9.8t) and we have a security concern since developers are able to bypass the SSL certificate verification when using HTTPS calls. Kindly advise what configuration is needed to enforce the certificate verification? In other words should anyone tries to bypass this verification, the call fails returning some kind of error code. Please note that our environment is a simple one; it consists of one web server with no proxies. Your help is greatly appreciated. Regards, Nizar Belmona Deputy Section Head Card Management System Department | CSCBank SAL [cid:imaged5b512.JPG@243f48e4.45b02783] t +961 1 742555 | ext. 1647 | f +961 1 352281 e nbelm...@cscgroup.com | w www.cscgroup.com 150 Commodore Street, Hamra | Beirut, 1103 2120, Lebanon [cid:image358861.JPG@be4d6a98.4e95e270] [cid:image48f45c.JPG@5ba7acc8.489e0939] Save a tree. Please consider the environment before printing this email.
Re: [users@httpd] symbol SSLv2_client_method
No, because I do not have it. Afraid, you need to hunt on the internet yourself. > Am 07.02.2018 um 11:05 schrieb Pietro Pesce: > > hello > > tnx for the response, you can give me the procedure? > > pls > > 2018-02-07 11:03 GMT+01:00 Stefan Eissing : > Your openssl is not the version that your apache was compiled > against. If you updated it, you need to also re-compile > any executables that link it. > > Note that running SSL without staying on current software > versions is highly discouraged. For example, Apache does > not support versions 2.0 or 2.2 any longer. > > -Stefan > > > Am 07.02.2018 um 10:44 schrieb Pietro Pesce : > > > > hello > > > > i have a solaris zone whit apache: > > > > # /app/apache/bin/httpd -version > > Server version: Apache/2.0.59 > > Server built: Jun 18 2007 14:27:08 > > > > when a try to start receive this error: > > > > yntax error on line 32 of /app/apache/conf/httpd.conf: > > Cannot load /app/apache/modules/mod_ssl.so into server: ld.so.1: httpd: > > fatal: relocation error: file /app/apache/modules/mod_ssl.so: symbol > > SSLv2_client_method: referenced symbol not found > > > > # ldd /app/apache/modules/mod_ssl.so > > libc.so.1 => /lib/libc.so.1 > > libgcc_s.so.1 => /usr/sfw/lib/libgcc_s.so.1 > > libm.so.2 => /lib/libm.so.2 > > /lib/libm/libm_hwcap1.so.2 > > /platform/sun4v/lib/libc_psr.so.1 > > > > ldd /lib/libc.so.1 > > libm.so.2 => /lib/libm.so.2 > > /lib/libm/libm_hwcap1.so.2 > > /platform/sun4v/lib/libc_psr.so.1 > > > > > > can help please? > > > > tnx > > > - > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > > - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [users@httpd] symbol SSLv2_client_method
hello tnx for the response, you can give me the procedure? pls 2018-02-07 11:03 GMT+01:00 Stefan Eissing: > Your openssl is not the version that your apache was compiled > against. If you updated it, you need to also re-compile > any executables that link it. > > Note that running SSL without staying on current software > versions is highly discouraged. For example, Apache does > not support versions 2.0 or 2.2 any longer. > > -Stefan > > > Am 07.02.2018 um 10:44 schrieb Pietro Pesce : > > > > hello > > > > i have a solaris zone whit apache: > > > > # /app/apache/bin/httpd -version > > Server version: Apache/2.0.59 > > Server built: Jun 18 2007 14:27:08 > > > > when a try to start receive this error: > > > > yntax error on line 32 of /app/apache/conf/httpd.conf: > > Cannot load /app/apache/modules/mod_ssl.so into server: ld.so.1: httpd: > fatal: relocation error: file /app/apache/modules/mod_ssl.so: symbol > SSLv2_client_method: referenced symbol not found > > > > # ldd /app/apache/modules/mod_ssl.so > > libc.so.1 => /lib/libc.so.1 > > libgcc_s.so.1 => /usr/sfw/lib/libgcc_s.so.1 > > libm.so.2 => /lib/libm.so.2 > > /lib/libm/libm_hwcap1.so.2 > > /platform/sun4v/lib/libc_psr.so.1 > > > > ldd /lib/libc.so.1 > > libm.so.2 => /lib/libm.so.2 > > /lib/libm/libm_hwcap1.so.2 > > /platform/sun4v/lib/libc_psr.so.1 > > > > > > can help please? > > > > tnx > > > - > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > >
Re: [users@httpd] symbol SSLv2_client_method
Your openssl is not the version that your apache was compiled against. If you updated it, you need to also re-compile any executables that link it. Note that running SSL without staying on current software versions is highly discouraged. For example, Apache does not support versions 2.0 or 2.2 any longer. -Stefan > Am 07.02.2018 um 10:44 schrieb Pietro Pesce: > > hello > > i have a solaris zone whit apache: > > # /app/apache/bin/httpd -version > Server version: Apache/2.0.59 > Server built: Jun 18 2007 14:27:08 > > when a try to start receive this error: > > yntax error on line 32 of /app/apache/conf/httpd.conf: > Cannot load /app/apache/modules/mod_ssl.so into server: ld.so.1: httpd: > fatal: relocation error: file /app/apache/modules/mod_ssl.so: symbol > SSLv2_client_method: referenced symbol not found > > # ldd /app/apache/modules/mod_ssl.so > libc.so.1 => /lib/libc.so.1 > libgcc_s.so.1 => /usr/sfw/lib/libgcc_s.so.1 > libm.so.2 => /lib/libm.so.2 > /lib/libm/libm_hwcap1.so.2 > /platform/sun4v/lib/libc_psr.so.1 > > ldd /lib/libc.so.1 > libm.so.2 => /lib/libm.so.2 > /lib/libm/libm_hwcap1.so.2 > /platform/sun4v/lib/libc_psr.so.1 > > > can help please? > > tnx - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
[users@httpd] symbol SSLv2_client_method
hello i have a solaris zone whit apache: # /app/apache/bin/httpd -version Server version: Apache/2.0.59 Server built: Jun 18 2007 14:27:08 when a try to start receive this error: yntax error on line 32 of /app/apache/conf/httpd.conf: Cannot load /app/apache/modules/mod_ssl.so into server: ld.so.1: httpd: fatal: relocation error: file /app/apache/modules/mod_ssl.so: symbol SSLv2_client_method: referenced symbol not found # ldd /app/apache/modules/mod_ssl.so libc.so.1 => /lib/libc.so.1 libgcc_s.so.1 => /usr/sfw/lib/libgcc_s.so.1 libm.so.2 => /lib/libm.so.2 /lib/libm/libm_hwcap1.so.2 /platform/sun4v/lib/libc_psr.so.1 ldd /lib/libc.so.1 libm.so.2 => /lib/libm.so.2 /lib/libm/libm_hwcap1.so.2 /platform/sun4v/lib/libc_psr.so.1 can help please? tnx