SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
0answers
24 views

NginX dropping session data when acting as an SSL reverse proxy for a sinatra application

I'm pretty much stuck at this point. I've got a website, served up on Mizuno (A Jetty variant, I think) using Padrino (A sinatra variant), on port 8080, with Nginx listening at 80/443 to allow for SSL ...
1
vote
0answers
17 views

Nginx user uploaded SSL Certificates

I'm wondering what's the best way to let users upload their SSL certificates. I have a multitenant application based on rails/passenger/nginx and I need each user to use his own domain with his SSL ...
0
votes
0answers
10 views

How to import existing SSL private key into Glassfish?

We have a wildcard SSL certificate and we successfully installed it into our mail server - uses Zimbra. Now we want to use the certificate on our application servers based on Oracle Glassfish. If I ...
0
votes
1answer
18 views

SMTP doesn't work on distinct machine [on hold]

I'm trying to setup TLS e-mail on remote machine, but it doesn't work. Trying to send e-mail on my local machine (Windows 7 x64 locale ru-ru): 16:33:18 CONNECT : Looking up host name ...
-2
votes
2answers
23 views

Creating a self signed certificate for demonstration purposes on Centos 7 server

I have setup my default tomcat website (tomcat 8.0.3) on a server inside my company LAN. From my work computer if I try to access the website by typing it into google chrome it is not working. The IP ...
0
votes
1answer
66 views

apache ssl configuration - ssllabs how to get A+

I have this configuration SSLCipherSuite AES128+EECDH:AES128+EDH SSLProtocol All -SSLv2 -SSLv3 for apache 2.4.6, openssl 1.0.2a and on ssllabs' ssltest I get A, it suggests (warns) that I have ...
1
vote
1answer
25 views

Enabling LDAPS: Cannot get to open port 636

I have a domain controller, which has Active Directory (AD). I want to turn on LDAPS on this AD, so that I could access the AD via secure connection. I have followed the following guide: ...
1
vote
0answers
27 views

curl error 51 - of multiple requesting machines, only one has the issue

I have an SSL cURL request that fails from a single machine with the following error: curl: (51) SSL peer certificate or SSH remote key was not OK This error seems to have popped up overnight, and ...
0
votes
2answers
33 views

Redirect loop when forcing HTTPS

I am using the following to force HTTPS on my main website. ### Force SSL RewriteCond %{HTTPS} !=on RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301] If you want to view the full htaccess ...
0
votes
1answer
22 views

Reverse proxy Apache rewrite rule doesn't work

I've an apache reverse proxy and i try to make a rules for redirects few urls of example2 to example1 but my rewrite rules doesn't work. I've try this in the vhost of example2 : ProxyPass / ...
8
votes
0answers
121 views

Why is Internet Explorer 11 unable to connect to HTTPS sites when TLS 1.2 is enabled?

Normally I don't use Internet Explorer at all. I use it only in design time for interface tests (development machine and with unencrypted http). Every week I run the SSL Labs server test which says ...
-2
votes
0answers
16 views

Certificate chain, middle certificate error

I want to save time so I go straight in to it. I have generated a root certificate by this guide, www.akadia.com/services/ssh_test_certificate.html then I have generated more certificates and signed ...
0
votes
1answer
17 views

Which L1K entrust certificates should be kept private?

One of our client has made an update to his SSL certificate and he did send us a procedure to update the certificate on our side. They also provided the L1Kchain.txt (that should be converted to a ...
0
votes
0answers
32 views

nginx config - pass all to https apart from one folder

I've been banging my head on this for 3 days day and I'm getting nowhere. I transferred the whole site over to ssl and that change over didn't go too bad and the site was only down for about 30 min. ...
0
votes
1answer
14 views

Apache Reverse Proxy with SSL handling

I am trying to use apache as a reverse proxy, and to off load SSL processing from the underlying Node Js application. I have the configuration defined but it doesn't look as though the system is ...
2
votes
1answer
38 views

logging SSLv3-handshaking failure on nginx

I have website server by Nginx in FreeBSD. Last week we decided to drop support for SSLv3 connection for our site. However I wondering if nginx has logs of all client who can't do SSL-handshake ...
1
vote
0answers
32 views

nginx: Redirection from http://*.example.com to https://example.com showing strange behaviour

I have an SSL certificate being only valid for example.com (not valid for subdomains) and therefore want to redirect both http://example.com and http://www.example.com to https://example.com using ...
0
votes
0answers
22 views

Server returning 404 for only Baiduspider

I recently updated my website to enforce HTTPS for all requests. Everything appears to be working well after this change but Baidu's web crawler (Baiduspider) is receiving a 404 for all requests. ...
0
votes
1answer
14 views

Signed SSL certificates on Zyxel USG60 web interface?

I know that you can add SSH certificates for client/server authentication for the web interface and SSL VPN, but is there a way to change the SSL cert that the web interface sends to the browser just ...
-2
votes
0answers
13 views

Using ssl on open vpn server

So I'm getting crazy annoyed with the following problem. I have a Ubuntu 14.04 Server with OpenVPN acces server running on sub.domein.com . Now I can request different folders from the server with ...
1
vote
2answers
40 views

SSL Issue Only For Some Clients (Linode Server)

Leadup: Set up a wordpress linode. Imported a wordpress site. Everything worked. Added an ssl certificate from godaddy. It looks like the SSL certificate is installed correctly: ...
0
votes
2answers
35 views

Certificate Chain with AWS ELB & GoDaddy Certs

I'm trying to setup SSL on my AWS ELB, but I am thus far unable to figure out what goes into the "Certificate Chain" field. I receive the following error: Unable to validate certificate chain. The ...
8
votes
2answers
406 views

Is this SSL certificate chain broken and how to fix it?

For the SSL cert on the domain example.com, some tests tell me that the chain is incomplete and since Firefox keeps its own certificate store, it might fail on Mozilla (1, 2, 3). Others tell me it is ...
-2
votes
1answer
23 views

Connect to IPython via HTTPS, got SSL error

This question is migrated from here. I have a server running Ubuntu 12.04. I have installed IPython on it. Now, I would like to access IPython via HTTPS. I have done the following steps: Creating ...
0
votes
0answers
14 views

SSL received a record that exceeded the maximum permissible length. (Error code: ssl_error_rx_record_too_long) on IIS [closed]

I was trying to set SSL in IIS 7.5 but after configuring all the required things when I browse application ssl_error_rx_record_too_long error appeared in Firefox. I created self signed certificate and ...
0
votes
0answers
19 views

Random error code: ssl_error_rx_record_too_long for certain clients

I have an apache2 web server that's been working for a couple of years without issue. Last week, a two of our users began randomly getting Error code: ssl_error_rx_record_too_long when trying to ...
0
votes
1answer
19 views

Jboss SSL connection persistent

I have a Client code relying on Jboss 5.1 which uses self signed certificates for connecting to credit card servers over HTTPS. Certificate expired on 03-13-2015 9:55 AM and it got replaced the ...
0
votes
1answer
26 views

How to health check hosts over HTTPS behind the load-balancer?

I have NGINX serving my site over HTTPS on EC2 hosts behind Elastic Load Balancer. I need to set up a proper health-check in ELB. However, I cannot use https://www.example.com because I need to ...
1
vote
2answers
43 views

Wildcard certificates with shortnames?

I'm trying to generate a certificate with the following sub_alt_names: hostname *.hostname hostname.mydomain.local *.hostname.mydomain.local I generate the CSR via OpenSSL and then get the ...
0
votes
1answer
23 views

Is return traffic for SSL-enabled HAProxy secured also?

I've got a HAProxy in front of a number of Webservers. Connection from clients to HAProxy is SSL secured. But it is terminated at HAProxy and traffic from HAProxy to the underlying Webservers are in ...
-1
votes
1answer
28 views

URL on SSL certificate is not the website I am on [closed]

When I go to https://www.virgintrainseastcoast.com/ I get repeatedly get asked by Chrome to "Select a certificate". The certificate in the popup is usually either an Apple or Facebook URL. Any ideas ...
3
votes
2answers
278 views

Fastest SSL cipher implementation for Nginx if strength is NOT needed?

I have a use case that is the inverse of most: I'd like to implement very weak SSL ciphers in the name of performance, with the option to fall back to stronger ciphers if the client requests it. ...
-1
votes
1answer
30 views

MySQL gives error “SSL connection error: Unable to get private key”

I keep getting the errors "SSL connection error: Unable to get private key" when using mysql client. In order to get it to work, I have change the permission 444. However, I would like to lock it ...
-1
votes
2answers
21 views

HTTPS only on subdomain

I have a Jenkins install at ci.example.com, and a static site at example.com. The Jenkins install is configured to use HTTPS exclusively. I'm a cheapskate, so I only have a certificate for the ...
1
vote
1answer
65 views

How to make wget trust my self signed certificate (without using --no-check-certificate)? [duplicate]

Ubuntu 12.04 OpenSSL 1.0.1 14 Wget 1.13.4 My setup: create our own CA (our_own_ca.crt) generate a certificate which is signed with the above CA (graphite.local.crt) Concatenate that cert and the ...
-1
votes
0answers
25 views

Wireshark capture SSL only [migrated]

I would like to capture SSL or HTTPS traffic only in Wireshark, this is not something that can be filtered after due to the length of the time I would be recording the data after and the size of the ...
0
votes
0answers
13 views

Set IIS to Require SSL + Require Client Certificate on requests from localhost?

So, This is my scenario: I have a WCF service application which is invoked by the cruel and mean outside world, and it is hosted in IIS to REQUIRE both SSL and client certificate. I.e. no ...
1
vote
1answer
24 views

Cannot disable SSL in courier-imap

I cannot disable SSLv2\v3 in courier-imap. In imapd-ssl config I have following: TLS_CIPHER_LIST="ALL:!SSLv2:!SSLv3:!ADH:!NULL:!EXPORT:!DES:!LOW:@STRENGTH" According, to openssl - SSL is disabled ...
3
votes
3answers
47 views

Why is Android / IE using 3DES when AES is available?

I have a Zimbra installation and want to harden the cipher suites. I disabled some and am quite OK with what is left. The problem now is that the Qualys SSL test shows a lot of clients will use 3DES, ...
2
votes
0answers
30 views

Can IE be considered a reasonable website access test for the .Net framework

We are currently updating our SSL cipher settings in order to improve our SSL rating. The changes included the removal of SSL3 and RC4 ciphers. However this appears to have caused problems with some ...
-1
votes
0answers
8 views

Setting up a CA-signed certificate with Nginx

I need to use Nginx as a SSL-enabled reverse proxy. I have an existing JKS file from our Tomcat servers. It contains the certificate authorities used by our servers and by our client certificates. I ...
0
votes
0answers
27 views

Which browsers and OSes supports ECC based SSL certificates?

We are evaluating whether to buy a RSA based certificate or a ECC based certificate. RSA is older and is supported by all browsers. ECC is newer, they state it is faster due requiring smaller key ...
-2
votes
1answer
54 views

nginx SSL not working (404 error)

On a CentOS 6.6 box I have nginx set to serve two virtual hosts. One for SSL and one for basic HTTP. /etc/nginx/default.conf: server { listen 80 default_server; server_name _; #charset ...
2
votes
3answers
59 views

Where did this wildcard SSL certificate come from?

My company is hosting example.com and sub.example.com on the same server, using a wildcard SSL certificate for *.example.com. Now it's time to renew our certificate, and we're not sure how we got that ...
-2
votes
1answer
47 views

Apache fails to start, ssl issue

For some reason Apache does not start. I tried rebooting the server but to no avail. It's about 2am and my brain is fried. Here is the apache log. I did not touch any configs, certs, or keys to cause ...
0
votes
0answers
36 views

How to use ssl everywhere except an endpoint

I have a Web site where I want all requests to be done with HTTPS except for requests to urls with paths that start with /out/. nginx is configured as proxy to serve gunicorn/django content from ...
0
votes
0answers
32 views

secure cookie in Apache => php session resets on every page load

I have set secure cookie in Apache based on this tutorial. But php session resets on every page load. for example this sample code: <?php session_start(); echo session_id(); ?> displays ...
0
votes
0answers
36 views

How can I disable/fix the SSL BEAST issue on windows 2008 SP2 (not R2)

Does anyone know how I can disable/fix the SSL BEAST attack issue on windows 2008 SP2 (not R2)? I'm using IIS-7.0 I found the issue by running a www.ssllabs.com scan. Thanks!
1
vote
1answer
113 views

Which SSL certificate would I need for external AND internal domain names?

This is a school-network. Official (outside reachable domain name) is bgschwechat.ac.at (www.bgschwechat..., mail.bgschwechat... and ftp.bgschwechat..) Internally the windows domain is named ...
1
vote
1answer
57 views

How to Disable TLSv1.0 and TLSv1.1 in Nginx

I'm trying to figure out how to disable TLSv1 and 1.1 Nginx and ONLY allow connections on 1.2. This is for testing reasons more than in production use and for the life of me cannot figure out why ...