SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
0answers
12 views

secure cookie in Apache => php session resets on every page load

I have set secure cookie in Apache based on this tutorial. But php session resets on every page load. for example this sample code: <?php session_start(); echo session_id(); ?> displays ...
0
votes
0answers
7 views

How can I disable/fix the SSL BEAST issue on windows 2008 SP2 (not R2)

Does anyone know how I can disable/fix the SSL BEAST attack issue on windows 2008 SP2 (not R2)? I'm using IIS-7.0 I found the issue by running a www.ssllabs.com scan. Thanks!
0
votes
0answers
11 views

Port forwarding to internal IP [on hold]

I just installed the apache2 webserver on my raspberry pi, and tried to forward port 80 & 443 to it. It has the internal IP 10.0.0.11 . The pi is behind two routers. (router-IP 192.168.1.13, or ...
1
vote
1answer
74 views

Which SSL certificate would I need for external AND internal domain names?

This is a school-network. Official (outside reachable domain name) is bgschwechat.ac.at (www.bgschwechat..., mail.bgschwechat... and ftp.bgschwechat..) Internally the windows domain is named ...
1
vote
1answer
24 views

How to Disable TLSv1.0 and TLSv1.1 in Nginx

I'm trying to figure out how to disable TLSv1 and 1.1 Nginx and ONLY allow connections on 1.2. This is for testing reasons more than in production use and for the life of me cannot figure out why ...
0
votes
2answers
24 views

SNI for multi tenant load balancing in 2015

We're a multi-tenant service and terminate our SSL at our load balancers (HAProxy + Apache for SSL termination), this has caused growing pains due to dedicated IP requirements. But times have changed ...
-1
votes
0answers
5 views

Disabling SSL on Openshift PHP Gear

Is it possible to disable SSL on my Openshift server? If so, How? I am using openshift with my own domain, so when I connect, it uses the existing certificate for *.rhcloud.com which is incorrect ...
1
vote
0answers
20 views

Disabled SSLv3 in Tomcat, but Still Showing POODLE Vulnerability

I have a Windows 2008 server with Tomcat 7.0.59 & Java 8u31 & I am trying to ensure that SSLv3 is disabled. Looking at the changelog for Java, SSL3 should no longer be supported and the Java ...
0
votes
0answers
21 views

Apache Tomcat for Windows - cannot get https to work

Environment: Windows 2003 Server 64-bit Running on VMWare ESX 5.5 8GB of Ram Apache Tomcat 6.0.36 Server D:\Program Files\Java\jdk1.6.0_26\jre\bin\server\jvm.dll JDK 1.6 update: 26 Have been able ...
-2
votes
1answer
14 views

how many SSL certificate can be listed in SSLServercert?

I wanted to list more than one certificate in SSLServercert, so that websites can use either one of these certificates. i will use "SSLServercert label1 label2" in httpd.conf file. label1 has IP based ...
-2
votes
0answers
15 views

SSL give page not available whe we roll out to production [duplicate]

We configured HTTPS in one of our servers running apache XAMPP (on windows server 2008 platform). Everything looks good when we run SSL checker tool we get an A Qualification, so we switched it to ...
1
vote
1answer
26 views

If a non-SSL-enabled domain is requested via https will Apache serve a different, SSL-enabled domain on the same server?

I am hosting several websites on an Apache server (e.g. http://www.example.com), only one of which has an SSL certificate (e.g. https://www.example.net). Is it possible to set up Apache so that an ...
1
vote
1answer
21 views

Serving http with Apache on port 443 behind SSL terminator

Our network ops folks have set up SSL termination, then reverse-proxy the request to us. Their requirement is that, if they saw the input on port 443, we must serve the content on port 443, so we are ...
1
vote
0answers
6 views

IIS bindings keep being removed

I'm having a problem where the security certificate for a site is being periodically unbound from port 443 and replaced with another certificate which is sitting on the server. So whenever a user ...
0
votes
0answers
8 views

How to make a client's pkcs12 bundle if only server pkcs12 bundle is present

I've got a linux box with openvpn installed on it, openvpn is configured to use pkcs12 certs: dh server.dh pkcs12 server.p12 crl-verify server.crl I'd like to add more vpn clients, but I ...
0
votes
0answers
12 views

External clients get a certificate mismatch - but internal clients do not

I have a scenario where external clients are receiving a certificate that is different than the one that is bound to the IIS site. This is Win2008R2 / IIS, in the following configuration: ...
0
votes
0answers
30 views

SSL stops working randomly and often with no changes made prior

Searched this site for a while and couldn't find anything the same as this. Most point to signet which I don't see. SSL site was working great for the last two years. All of a sudden it went down ...
0
votes
2answers
26 views

Cannot set up https on microsoft azure VM

For over a week now I am trying to set up https to work with my owncloud hosted on a Microsoft Azure virtual machine (ubuntu server 14.04). I am using apache2. I have gone through every single ...
0
votes
1answer
33 views

Two https virtualhosts on same server: same port, different subdomains

I've tried searching for this scenario, but can't seem to find exactly this setup. I want to have something along the lines of the following: I want to have two subdomains redirect to different ...
0
votes
1answer
24 views

Is it normal for the identity of a host to change after enabling SSL?

I logged in to a known host - ssh username@example.com. I did a2enmod ssl and I generated a CSR to enable SSL on one of the virtual hosts on the server. From a separate terminal tab, I tried to do an ...
-1
votes
0answers
16 views

how to Disable sslv3 and tlsv1 of ejabberd

to remove these protocols vulnerable I did the following in my file ejabberd.cfg {s2s_use_starttls, required}. %% %% s2s_certfile: Specify a certificate file. %% {s2s_certfile, ...
0
votes
3answers
41 views

How to force a own set of ciphers in Postfix 2.11?

I would like to force a own set of TLS cipher suites rather than use the Postfix built in ones. My desired set of ciphers is (taken from nginx configuration): ...
0
votes
1answer
14 views

How to exclude some path/page from client certification in Apache 2

I am trying to set up an Apache server with client certification enabled. So that the customers could access the content with a valid client certificate. Let's say, I have the server running as ...
0
votes
2answers
61 views

Wget, self signed cert and --no-check-certificate not working

I recently installed a self signed SSL cert on one of our nginx webservers. If I attempt to wget a file with --no-check-certificate I receive the errors below. You can reach the site with a browser, ...
0
votes
0answers
55 views

HTTPS request works to Linux, not to Mac, sometimes

I have two sites, say mac.example.com and linux.example.com. I'm using the same wildcard SSL cert, obtained from RapidSSL. If hit up either of the sites in a browser, hosted either in Linux (on ...
2
votes
1answer
22 views

How to serve multiple SSL certificates for the default virtual host on NGINX?

I have a static app on Amazon S3 that is served through a NGINX proxy. The purpose I use a proxy is to allow users to point their domains to my Amazon EC2 instance (via CNAME record pointing to ...
1
vote
0answers
36 views

Nagios check_http gives 'HTTP/1.0 503 Service Unavailable' for HAProxy'd site

I asked this on stackoverflow, but I think it's better suited for here. Can't figure this one out! OS: CentOS 6.6 (Up-To-Date) I get the following 503 error when using my nagios check_http check ...
0
votes
0answers
4 views

smb.conf - where do I set key and certificate for 'smb encrypt' transport encryption?

Reading smb.conf man page I can enforce encrypted smb transport; smb encrypt = mandatory. Where do I set the keys to use for the encrypted transport? I was expecting something like apache2: ...
0
votes
2answers
38 views

Nginx - 2 https servers on same public ip [duplicate]

I currently have several regular http servers and 1 https server. I would like to add another https server with the same public ip. I have something similar to server { listen 443 ssl; ...
1
vote
0answers
9 views

IIS 7 set up web service on port 8080 with SSL

I'm trying to set up a web service on port 8080 with SSL on IIS 7. There is already a website set up on port 80 with SSL. I've tried a few things like adding a https binding with port 443 and a ...
0
votes
0answers
24 views

Node + PM2 - How to securely read SSL private key with non-root user?

I'm looking for a way to run node via PM2 whilst reading an SSL private-key that is placed in a secure directory. Details: Bitnami LEMP stack with Node permissions for /etc/ssl/private: drwx------ ...
1
vote
1answer
51 views

How to disable SSLv3 in Postfix 2.11?

I just noticed (by some online check tools) that my mailserver may allow SSLv3 and updated my configuration. My current config in Postfix 2.11.2: # inbound smtpd_tls_security_level = may ...
1
vote
2answers
47 views

Windows 2008 R2 Standard server - how to disable RC4

I have just used www.ssllabs.com and ran a few tests - my server is capped to a B grade because my server accepts RC4 This server accepts the RC4 cipher, which is weak. Grade capped to B. I've ...
1
vote
0answers
13 views

how to configure a default (or common) virtualhost for non-ssl domains when ssl domains exist? [duplicate]

I have several domains running on the same (physical) server under Apache 2.4 web server. Some of these domains support secure connections (over the standard HTTPS protocol). For them I configured ...
-1
votes
0answers
11 views

apt repository signature and key verification

Is there a way to verify the integrity and authenticity of apt-get packages i.e. 1- How can I be sure that its not man-in-middle 2- is there a way to enable public key/cert verification in apt, to ...
1
vote
0answers
25 views

SSL Proxying with mutual authentication

I have a bunch of backend servers each them should make https-requests. I want all my https traffic inspected and controled by few number of machines (many times fewer than server farm) - that's why I ...
0
votes
1answer
40 views

define ssl_ciphers in nginx for each vhost

i`am just wondering if i define something like this: ssl_ciphers 'AES256+EECDH:AES256+EDH:!aNULL'; in my vhost config in nginx, it is active on all my vhosts which use ssl. Is there a way to ...
0
votes
1answer
27 views

Disabling SSLv3 in ELB on Amzon linux ec2

Hi I have Elastic Load Balancer on which I've deployed my ssl certificates and when i check on the web it say site is vulnerable because of SSLv3 is enabled on the site. So my question is What ...
1
vote
1answer
29 views

Apache Limit directive is ignored, the contents are executed always

I want users to be authenticated when calling a specific HTTP method, while not needing to be authenticated when calling other HTTP methods. I use the Limit directive, because that's supposed to do ...
0
votes
0answers
55 views

Nagios - Could not complete SSL handshake

I'm trying to configure Nagios command for checking status of physical memory on a remote Windows host using NRPE plugin. I'm using Nagios v3.0.6 on Ubuntu Server v14.10, and latest stable version of ...
4
votes
0answers
28 views

Forward proxy for webservices with SSL client certs

I have lots of servers which access various external webservices, most of which use SSL, some of which require client certificates. I would like to centralize the configuration of client certs and ...
-2
votes
2answers
30 views

Building Mongodb 3.0.0 with SSL

I am trying to build Mongodb 3.0.0-rc8 (tried latest nightly too) with ssl support. I found a gist which works for 2.6.7 but when I run it with 3.0.0-rc8 I get that eror ...
-1
votes
0answers
45 views

Roundcube Connection to storage server failed

I am setting up a web mail server on my droplet with digital ocean. I have followed these tutorials: ...
-1
votes
0answers
15 views

Tomcat 8 ssl configuration hangs during handshake

I'm setting up a ssl connector on my tomcat8 my connector looks like this <Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol" SSLEnabled="true" ...
1
vote
1answer
24 views

exim4 gnu_tls cipher configuration for incoming connections to gmail

On the Debian 7 / exim4 / gnutls mailserver I'm running, since about 1-2 weeks, mails from gmail don't arrive any more with the following typical error message in the log file: 2015-02-14 17:32:07 ...
1
vote
1answer
21 views

How do I use SSL with Amazon S3 CNAME masked buckets?

I am successfully running an Amazon S3 bucket as media.mydomain.com. The problem is, I'm running an https site and I'm unable to link to files using https//media.mydomain.com. How can I switch to ...
2
votes
1answer
17 views

How would one configure an IIS that has SSL and client certs functional, to show a warning page before logon

I have a web site that uses a CAC client certificate, which is functioning like it should. The problem is, there's a requirement that the site regurgitate a message warning that it's a US Government ...
-1
votes
1answer
40 views

Tomcat 7 is being unresponsive when I turn on SSL (no SSL handshake) [duplicate]

My question is: why won't tomcat respond when I turn on SSL? I've attempted to migrate a working tomcat7 web application from an Ubuntu 12.10 x64 Server to a fresh Ubuntu 14.04 x64 server. Every ...
0
votes
1answer
30 views

Apache: SSL and Non-SSL (without VirtualHosts?)

I have a web server and have two folders I would like to treat differently. One folder on the local filesystem should use SSL and the other should not, for example: /path/to/ssl/site ...
0
votes
0answers
5 views

Exception during starting a JMX SSL server without client authentication [migrated]

I'm stuck with this problem, here its: i have to implement a secure JMX server. i generate keystore and trustore using : keytool -genkey -keyalg RSA -alias JMD -validity 10800 -keysize 2048 -sigalg ...