0
votes
2answers
24 views

configuring https on EC2

I know similar questions have been asked here and I read them all, but I could not get a clear answer. So I am asking here. I have an EC2 instance.It is a dedicated instance running LAMP. Everything ...
-1
votes
1answer
68 views

Failed to bind to: /0.0.0.0:443 [closed]

I am having problems starting my play framework server on port 443,i am using scala play 2.20 and my play server running fine on port 9443 by following command ./start -Dhttps.port=9443 ...
2
votes
2answers
61 views

How to prevent https:// being accessible from domains without a certificate?

I have this setup Server version: Apache/2.2.22 (Ubuntu) OpenSSL 1.0.1c 10 May 2012 One IP with multiple domains connected to it. For example1.com I have a signed SSL certificate, and thus ...
0
votes
0answers
100 views

cURL NSS error -12286 SSL_ERROR_NO_CYPHER_OVERLAP

Using cURL 7.36.0 (x86_64-redhat-linux-gnu) on EC2 Amazon Linux, I can't connect to certain websites (not all) using HTTPS and receive the above error. From researching the issue I have learned that ...
2
votes
2answers
197 views

Managing server certificates for wildcard

I have a wildcard certificate for *.example.com (signed by GeoTrust) and am going to host lots of application instances on different servers, each on my subdomain. I am not willing to copy my ...
2
votes
1answer
228 views

OpenSSL missing cipher

I'm trying to configure proper setup for my HTTPS server and I am have a little trouble with IE8@WinXP. This platform has a very poor support for TLS siphers: ...
1
vote
2answers
73 views

No https for nginx Server Name

I have configured nginx 1.4.1 to use tls/ssl using a self-signed certificate. I can connect over https using the LAN IP address only. I can also connect to the server_name, but only over http and it ...
2
votes
1answer
76 views

Why do I get a 404 for my index.page in my http/https nginx setup?

I'm using WPN-XM (stack with Nginx, MariaDB, PHP and OPENSSL) and am trying to setup OpenSSL in a HTTP/HTTPS server. I'm following the instructions from NGINX here and my server starts/stops without ...
0
votes
2answers
144 views

SPDYCheck says “yay”, but my browser says “nay”?

SPDYcheck.org gives the thumbs up all round, with its only criticism being Out-of-Date SPDY Protocol Support The most recent version of SPDY is spdy/3. The highest version this website supports is ...
0
votes
1answer
287 views

nginx refusing SSL connection on cPanel server

I have nginx 4.4 installed on a cPanel server (via nginx admin plugin) as a proxy to Apache. I used to have nginx listening on ports 80 and 443 on a dedicated IP address without any problems but ...
-1
votes
1answer
84 views

How to set up https only on one directory of VirualHost

I have VPS with several sites and applications, and I want to run MySQL administration tool over https to avoid possibility of man-in-the-middle attack, since I often have to use mysql root password. ...
1
vote
1answer
233 views

How do I get iPXE to boot from HTTPS server with self signed cert?

I am chainloading iPXE (undionly.kpxe) and using an embedded script wanting to boot from HTTPS. The problem is the HTTPS server is connecting to the http server (a custom service) via stunnel using a ...
0
votes
1answer
225 views

Apache ~ how to force SSL client auth for specific IP

Haven't been able to figure out how to easily manage access to my SSL website. I'm trying to allow access to a specific location based on client IP. If client IP = 192.168.x.x => bypass client ...
-1
votes
1answer
864 views

Can't enable HTTPS and SSL streams in PHP no matter what

I've been trying to enable my HTTPS/SSL (443) streams in PHP but no had success at all. My certs are properly installed and I can normally browse through the site using HTTPS, but phpinfo() tells that ...
3
votes
1answer
617 views

openssl s_client reports certificate OK, but other clients report problems

I have set up a server with a SSL certificate, added the necessary chain, and done the apache set up. I have tested using: openssl s_client -CAPath /etc/ssl/certs -connect www.example.org:443 and ...
2
votes
1answer
827 views

How to secure both root domain and wildcard subdomains with one SSL cert?

I am trying to generate a self-signed SSL certificate to secure both example.com and *.example.com. Looking at the answers to this and this questions, there seems to be an equal number of people ...
0
votes
2answers
795 views

How to run a virtualhost 443 without an SSL cert?

I have a virtualhost directive that serves up a custom 404 error if invalid subdomain is entered: <VirtualHost *:80> # the first virtual host ServerName site_not_found RedirectMatch 404 ...
1
vote
2answers
1k views

Possible to have different SSLCACertificateFiles under different Location in Apache (client side ssl certs)

I am setting up Apache to do smartcard authentication. The smartcard login is based on client-side SSL certificates handled by an OS driver. I have currently just one smartcard provider, but in the ...
2
votes
1answer
1k views

Configure SSL and HTTP in nginx with Rails 3.2

I've looked at some examples but I really can't figure out why ssl wont work. My situation: First of all I have a rails application with passenger, the normal application works with nginx, no problem ...
0
votes
1answer
33 views

HTTPS but don't share certficate, manual installation required

Is it possible, from a server level (Apache), to enable HTTPS but that we don't share the certificate via the browser, the certificate must be installed prior to accessing HTTPS via the browser? Best ...
1
vote
3answers
7k views

Is it possible to generate RSA key without pass phrase?

I'm working with Apache2 and Passenger for a Rails project. I would like to create a self-signed SSL Certificate for testing purposes. sudo openssl rsa -des3 -in server.key -out server.key.new ...
0
votes
1answer
35 views

nginx configuring help required

I have installed nginx with only SSL at http://sub.domain.com with docroot /home/webroot/ Users who login upload files to /home/webroot/uploads/ I want the folder /uploads only to be accessible ...
1
vote
1answer
1k views

Zend Server SSL Error

I'm having a weird issue with trying to setup SSL (https) on Zend Server CE for OSX. Currently I am running Zend Server 5.5. $ sudo zendctl.sh version Password: Zend Server version: 5.5.0 I ...
0
votes
2answers
647 views

SSL/TLS Version in Nginx

I installed Nginx and enabled SSL. server { server_name vorb.de; listen 443; root /var/www/vorb.de/pub; ssl on; ssl_certificate cert.pem; ssl_certificate_key ...
2
votes
1answer
577 views

How to create per-user SSL certificates using my own CA?

This is the situation: I have a secure server but I only want to provide access to those having certain certificate files. I've already setup apache (see How to provide HTTPS access to a webserver ...
0
votes
1answer
44 views

https not working with apache2

can anyone tell me how I can implement SSL in apache. I mean the code that have to be written in virtual host file for using https. Actually I had generate dummy certificate for testing, but with my ...
1
vote
3answers
3k views

Is there a possibility to monitor https sites in nagios over a proxy?

i have a little question about the nagios tool: Is there a possibility to monitor https sites in nagios over a proxy? Which means i want to monitor whether my proxy can reach some https ressources in ...
2
votes
2answers
154 views

When should I generate a new private key for SSL?

I'm renewing a wildcard SSL cert. The easiest option is to use my existing private key and generate a new CSR using that. Is there any reason (assuming my private key hasn't been compromised) to go ...
0
votes
1answer
92 views

HTTPS debugging

I tried debugging my HTTPS settings for a server and got an error as: error:num=19:self signed certificate in certificate chain Here is the complete output of the test. ...
1
vote
1answer
6k views

HAProxy not passing SSL traffic in TCP mode (unknown protocol)

I've got a HAProxy LB solution setup and working correctly. All HTTP traffic on port 80 is being passed through succesfully. I'm now trying to get SSL traffic to work (in TCP mode and on just one ...
0
votes
2answers
102 views

Root CA's: Is there an agreed upon standard of CA's?

I know that the Root CA bundles differ between OS/browsers/applications. However, it seems like Verisign is always included. How did this become the case? Is there some sort of standard? I'm just ...
6
votes
3answers
9k views

Connecting to HTTPS with netcat (nc)

I'm working on homework assignment for my college. Task is to fetch web page on HTTPS using nc (netcat). To fetch page on HTTP you I do this: cat request.txt | nc -w 5 <someserver> 80 In ...
0
votes
1answer
4k views

ssl_error_bad_mac_alert error in Firefox

I've installed an SSL cert onto an Apache2 server which serves intranet content. Internet Explorer 6/7 and Safari 4 can connect to the site just fine. However, when I attempt to access the site with ...