-2
votes
1answer
24 views

nginx refuxing connection SSL

I have a site that I am trying to get SSL working on. This is my first time ever doing so. My server config looks something like: server { listen 80 ssl; server_name {site_name}; ...
25
votes
8answers
16k views

My server is still vulnerable to heartbleed even after I update OpenSSL

I have an Ubuntu 12.04 server. I have updated the OpenSSL package in order to fix the heartbleed vulnerability. But I am still vulnerable even, even though I have restarted the web server, and even ...
4
votes
1answer
247 views

Heartbleed, which specific services must be restarted?

Trying to figure out exactly what services should be restarted after patching openssl against Heartbleed. At least one post mentions restarting: sshd, apache, nginx, postfix, dovecot, courier, ...
0
votes
2answers
49 views

PHP exec “unable to fork” intermittent error on CentOS VPS

Using: PHP 5.5.10 nginx 1.5.10 Centos 6.5 a xen-based 4GB VPS My site uses encrypted paypal buttons. This encryption is done by the following code: $openssl_cmd = "($OPENSSL smime -sign -signer ...
0
votes
0answers
21 views

Fixing nginx 1.4.6 dependency on old openssl version (libssl0.9.8)?

I'm trying to enable TLSv1.1 & TLSv1.2 on my Ubuntu 12.04 EC2 instance w/ nginx 1.4.6, but this version of nginx is dependent upon libssl0.9.8, even though the newest version of OpenSSL is ...
0
votes
1answer
84 views

Restart of nginx service fails because of /etc/nginx/nginx.conf test failure

Installing 3rd party SSL on DigitalOcean Droplet, Apache running Ubuntu 12.10. Following the instructions here: AlphaSSL on Apache Self signed SSL instructions from DigitalOcean So everything ...
1
vote
1answer
50 views

Configuration of root ssl certificates

I wanted to install an SSL certificate for a domain. So I googled up and did some R&D and found this link https://www.symantec.com/page.jsp?id=roots. It says we can download and use without any ...
1
vote
0answers
73 views

How to check multiple CRL lists with nginx client authentication?

I have a custom easyrsa setup with a root and three CAs signed by the root. (Three different sub-cas depending on the user type), like this: RootCA +----- AdminUserCA +----- EmployeeCA +----- ...
1
vote
2answers
63 views

No https for nginx Server Name

I have configured nginx 1.4.1 to use tls/ssl using a self-signed certificate. I can connect over https using the LAN IP address only. I can also connect to the server_name, but only over http and it ...
2
votes
1answer
49 views

Why do I get a 404 for my index.page in my http/https nginx setup?

I'm using WPN-XM (stack with Nginx, MariaDB, PHP and OPENSSL) and am trying to setup OpenSSL in a HTTP/HTTPS server. I'm following the instructions from NGINX here and my server starts/stops without ...
3
votes
3answers
283 views

Forward secrecy in Nginx (CentOS6)

I am trying to enable Forward secrecy in CentOS with nginx webserver. What I have tried I have read some tutorials and seems like we should have nginx, openssl latest versions to enable it. So I had ...
0
votes
1answer
59 views

RapidSSL nginx Certificate issuer is me

I have baught the SSL certificate from RapidSSL. I have concatenated the chain files of RapidSSL CA and GeoTrust Global CA But when I check it on http://www.sslshopper.com/ I have this : The ...
0
votes
2answers
100 views

SPDYCheck says “yay”, but my browser says “nay”?

SPDYcheck.org gives the thumbs up all round, with its only criticism being Out-of-Date SPDY Protocol Support The most recent version of SPDY is spdy/3. The highest version this website supports is ...
-1
votes
1answer
80 views

Create self signed SSL certificate - nginx

I want to create a self signed SSL sertificate for my website. I will not use it for accessing the website itself but for other services i am going to be using (roundcube, phpmyadmin etc). I want to ...
0
votes
2answers
603 views

Nginx and openSSL conf to use newest TLS protocols

Since few weeks, my webserver, Niginx, had a problem with TLS protocols version 1.1 & 1.2 : When an user try to connect to my website, web browser and Nginx chose only TLS 1.0 for the conection. ...
0
votes
1answer
232 views

nginx refusing SSL connection on cPanel server

I have nginx 4.4 installed on a cPanel server (via nginx admin plugin) as a proxy to Apache. I used to have nginx listening on ports 80 and 443 on a dedicated IP address without any problems but ...
0
votes
1answer
486 views

nginx unknown directive ssl_protocols

I've compiled NGINX 1.4.1 with ssl support and wanted to secure my configuation with these lines: ssl_prefer_server_ciphers on; ssl_protocols        SSLv3 TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers          ...
0
votes
0answers
175 views

ngnix - required cipher missing

I just started using nginx 1.4.0 to reverse proxy to my application and manage ssl. I am getting this error occasionally 2013/05/04 09:02:16 [crit] 32651#0: *4663 SSL_do_handshake() failed (SSL: ...
2
votes
1answer
625 views

SSL Termination with HAProxy and Nginx on Ubuntu

I've been following this tutorial: http://www.exratione.com/2012/12/websockets-over-ssl-haproxy-nodejs-nginx/ ...but I've been having problems connecting to Nginx through HAProxy via SSL. I'm ...
1
vote
4answers
2k views

Nginx and client certificates from hierarchical OpenSSL-based certification authorities

I'm trying to set up root certification authority, subordinate certification authority and to generate the client certificates signed by any of this CA that nginx 0.7.67 on Debian Squeeze will accept. ...
1
vote
1answer
228 views

Should I include the root CA cert when making a chained cert

I am using Godaddy cert, normally I would concat the cert and make into a chained cert cat www.example.com.crt sf_bundle.crt > chained.cert And in my nginx.conf, ssl_certificate chained.cert ...
0
votes
2answers
513 views

Enabling openssl With PHP/nginx

I'm getting the following error when trying to connect to SMTP + SSL through PHP using nginx + PHP 5, Could not connect to smtp host 'ssl://smtp.gmail.com' (5) (Unable to find the socket transport ...
1
vote
2answers
3k views

Can't compile nginx with SSL support, OpenSSL not found

I'm trying to compile nginx from source with the SSL module enabled. When I run this command: ./configure --with-http_ssl_module it does its usual checks to see if everything is installed ...
0
votes
2answers
2k views

RC4_128 to avoid BEAST?

I'm using a Verisign Extended SSL cert which is piped downstream by nginx running the default cipher suite config. This results in a 256 bit encrypted connection. However, since it's a CBC method, ...
0
votes
2answers
256 views

InstantSSL's certificate no different than a self signed certificate under Nginx with an IP accessed address

I ordered an ssl certificate from InstantSSL and got the following pair of files: my_ip.ca-bundle, my_ip.crt I also previously generated my own key and crt files using openssl. I concatenated ...
2
votes
1answer
1k views

Configure SSL and HTTP in nginx with Rails 3.2

I've looked at some examples but I really can't figure out why ssl wont work. My situation: First of all I have a rails application with passenger, the normal application works with nginx, no problem ...
1
vote
3answers
5k views

Nginx serving content from the wrong “virtual host” while accessing with https

I have a server running both Nginx and Apache in a proxy setup, Nginx serves the static content and Apache the dynamic content which works really well. This setup is currently hosting two versions of ...
0
votes
1answer
35 views

nginx configuring help required

I have installed nginx with only SSL at http://sub.domain.com with docroot /home/webroot/ Users who login upload files to /home/webroot/uploads/ I want the folder /uploads only to be accessible ...
0
votes
2answers
601 views

SSL/TLS Version in Nginx

I installed Nginx and enabled SSL. server { server_name vorb.de; listen 443; root /var/www/vorb.de/pub; ssl on; ssl_certificate cert.pem; ssl_certificate_key ...
2
votes
1answer
2k views

Testing SSL performance on Nginx

I'm running nginx 1.0.0 on CentOS 6 x86_64 with stock OpenSSL. Below are results of openssl benchmarking. sh# openssl speed aes-256-cbc OpenSSL 1.0.0-fips 29 Mar 2010 built on: Sat Jun 25 04:58:15 ...
2
votes
1answer
1k views

nginx ssl wildcard cert issues

We currently have a single nginx server running as a backend proxy for 4-5 Apache servers. my problem is that after installing the ssl certificate i get the following error when testing the ssl ...
1
vote
2answers
5k views

Globe SSL with NGINX SSL certificate problem, please help

I have a big problem with installing a certificat for nginx (same happends with apache though) I have 3 files __domain_com.crt __domain_com.ca-bundle and ssl.key. I tried to append cat ...