SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

-1
votes
0answers
11 views

How to setup non SSL (listen on port 80) and SSL (listen on port 443) with Apache for same Virtual Host in Centos

I'm having troubles setting up and putting to work a non SSL and SSL environment with Apache (httpd 2.2.15) in CentOS 6.6 locally for testing purposes. I'm following this guide, apparently CentOS ...
2
votes
0answers
11 views

Command line to set up SNI on IIS for Windows 2012

I'm trying to complete the automated build script of my web server, which runs Windows 2012 and has two SSL websites, each with its own digital certificate. I am using SNI, which works fine when I ...
0
votes
1answer
18 views

Why I have set HTTP_X_FORWARDED_PROTO and unset HTTPS on Apache 2.4?

Recently I updated my website: CMS (Drupal), it's OS (Ubuntu 14.04) and Apache (2.4.7). The situation is that when surfing on https://example.com/whatever PHP can't detect HTTPS. $_SERVER['HTTPS'] is ...
-1
votes
1answer
27 views

Which kinds of SSL certs there are?

When I visit eg. https://www.google.com, my web browser (IceWeasel) shows just a (grey) lock icon next to the URL. However, when I visit eg. https://www.cia.gov, a green lock and "Central Intelligence ...
0
votes
1answer
21 views

Apache SSL Errors every 30 seconds

I have three load-balanced Apache 2.4.6 servers running on fresh installs of CentOS 7. The load-balancer is a Barracuda 340. I know its old, but it's more than capable of handling the traffic, and ...
0
votes
1answer
22 views

Nginx SSL cant connect to site

I just bought a SSL certicate for my website and tried to get it working with my nginx install, but uppon connection the browser refuses the connection with the website. Here is the relevant part of ...
0
votes
1answer
28 views

Job for httpd.service failed

after following this tutorial :https://www.digitalocean.com/community/tutorials/how-to-create-an-ssl-certificate-on-apache-for-centos-7 I have tried everything I possibly can to fix the error I have ...
0
votes
4answers
56 views

How can I move certificates from 1 server to another

I'm using StartSSL which , after you proove who you say you are, provides a certificate which I can install to authenticate myself. I have some SSL certificates associated with this account. I've ...
0
votes
0answers
12 views

Dynamics CRM 2015 Outlook Client not connect

My Outlook CRM client don't connect to the crm 2015 server, not in the LAN nor the Internet. The error is: Authentication failed. The network is a test environment with virtual machines, installed ...
3
votes
3answers
39 views

What subdomains does an Exchange 2013 SSL certificate require?

I need to order a SSL certificate for an Exchange 2013 server. I am going to order an UC Certificate from Comodo Group Inc. I understand that I need to specify the below subdomains whilst ordering: ...
2
votes
1answer
25 views

configuring ssl on nginx - is this ciphers list up to date?

I have bought a certificate from Comodo and I'm following an article on their site on how to configure the certificate on my nginx. The question is, is this configuration, mainly the ciphers list, up ...
2
votes
2answers
29 views

AD server not using cert for Active Directory LDAP + SSL

I'm trying to enable SSL for Active Directory in our domain. The problem I'm running into is that the server is failing to recognize the certificate I've made for it. Whenever I try to query the ...
0
votes
1answer
13 views

ELB Https with HTTP on backend using Tomcat without nginx or haproxy

I want to setup ELB to terminate SSL at load balancer and communicate with backend instances over HTTP. I have uploaded valid certificate on ELB. When I set up following configuration ELB - HTTPS ...
0
votes
0answers
24 views

CURL & SSL failing on a specific site [duplicate]

I can't get curl to download https://www.sicdm.caixa.gov.br/cadmut/login_internet_form.do on a CentOS 6.2 server. The command curl -v -k -3 ...
1
vote
1answer
32 views

SSLRequire - file function

I'm having trouble with Apache 2.2 and the small documentation that I can find for the file function of SSLRequire. I'm trying to check the email property of the client certificate in a request using ...
0
votes
0answers
18 views

Lync Server SSL Cert

I have a cert issued by the domain CA. The cert subject is the name of the server. The subject alternative name contains sip.domain sip.domain2 dialin, meet, admin, and the auto discover for ...
0
votes
1answer
30 views

Apache refused to include TLS1.2

I was running openssl0.9.8 for a long time and suddenly my SSL gave me a red X. From the company that I purchased the ssl, they told me that i need to update my server config to include tls1.2 and ...
0
votes
0answers
26 views

AWS cloudfront with SNI + ELB with 443 to 80 redirection to EC2 issue

I have configured web server front ending with AWS ELB and CloudFront. I have deployed SSL certificate on load balancer (ELB) for HTTPS connection. We have set up 2 listener protocols: Source -> 80 ...
3
votes
2answers
36 views

Firefox sec_error_unknown_issuer after renewing root CA certificate [closed]

For our corporate network we use an internal CA, which directly signs some intranet server certificates. Now the root certificate is about to expire. I tried to renew it with the following OpenSSL ...
1
vote
1answer
53 views

nginx: How to log TLS error (if unsupported ciphers / protocol)

I'm in the progress of switching to 100% https. Server is running nginx+libressl. Before going https:100% I'm interested in seeing which clients would no longer be able to connect to my site. E.g. ...
0
votes
1answer
43 views

Best way to manage multiple domain with SSL in single droplet?

Firts of sorry about my poor english, but I'll do my best. Currently I manage 2 domain on my $5 DigitalOcean droplet and have use Cloudflare as my DNS manager with Flexible SSL configuration, ...
0
votes
1answer
16 views

Nginx forward ssl to ISPConfig lxc container

I am having issues with https connexions to the ISPConfig admin panel (port 8080). My setup is relatively standard. I own a physical host, which routes all traffic on common ports to an LXC container ...
0
votes
0answers
19 views

haproxy get ssl interrupt error, how haproxy tell server to close ssl or tcp?

I use haproxy 1.5 and a windows server build site. my site work under the https protocol, so for haproxy I use tcp mode since I think the ssl can not work on http mode. my problem is the ssl ...
0
votes
1answer
31 views

SSL connection to server ip address

I have a server which equipment at remote locations on private networks connect to via the internet using SSL. An SSL Certificate for the domain name of the server is installed. I have a number of ...
0
votes
0answers
31 views

Machine cannot connect to SSL website [migrated]

I have two machines that I use to submit data to a secure HTTPS website using a C# program. One of them has no trouble, but the other one fails handshake. I've noticed that the working machine sends a ...
0
votes
0answers
33 views

SChannel errors after enabling SSL on a Windows Server 2012 R2

I have a Windows Server 2012 R2 instance on Azure. For a new website I have ordered a certificate by GlobalSign. After getting the certificates from them I have completed the certificate request in ...
0
votes
3answers
34 views

Server setup for SSL for sending and receiving emails?

I managed to setup one physical server using postfix, dovecot with mysql server. I do plan to use virtual domains and users. Current setup to send and receive emails. SENDING smtp.example.com ...
0
votes
1answer
29 views

openldap SSL/TLS Cert: Get a 'real' one or use Self Signed?

I'm setting up SSL/TLS on OpenLDAP and wondering why the Debian Handbook has the user create a self-signed cert? Wouldn't one signed by a 'real' CA be more secure?
-1
votes
0answers
16 views

How to issue a Client Certificate with the Client's hostname using openssl?

I recently went through the process of securing a communication between two servers, one internal to my network, the other external. In order to accomplish this, I used openssl and went through the ...
1
vote
0answers
31 views

Outlook/Exchange certificate errors after setting clientaccessserver, etc… properties

After updating exchange 2010 using the commands for Set-ActiveSyncVirtualDirectory, Set-ClientAccessServer, Set-ECPVirtualDirectory, Set-OABVirtualDirectory, Set-OWAVirtualDirectory, & ...
0
votes
0answers
10 views

Non-domain log forwarding certificate types

I'm trying to set up a source initiated subscription (Log forwarding) where the event source server is not in the same domain as the event collector server. I'm following these steps. It states that ...
0
votes
2answers
33 views

HAProxy backend with TLS stopped working

I'm having trouble with one of our HAProxy-Servers that uses a backend with TLS. When starting HAProxy the backend will report all servers as down: Server web_remote/apache_rem_1 is DOWN, reason: ...
0
votes
3answers
175 views

Why does Chrome on 1 computer say my certificate is invalid/insecure? [duplicate]

I have a wildcard domain certificate from StartSSL for a site (https://later.webblocks.nl/). When I check it in any browser on my home PC, it's all good. (Green lock in Chrome.) When I check it in ...
0
votes
1answer
43 views

Weblogic Mitigate POODLE vulnerability after upgrade and still use CBC ciphers

I recently upgraded my Weblogic server to 10.3.6 with java 7. So with that I have TLS1.0 - TLS 1.2 enabled via the setEnv.sh. Some of the ciphers I am using to make sure that they are compatible ...
0
votes
0answers
46 views

Nginx TLS renegotiation

Our webserver has recently failed a PCI compliance test due to existence of "TLS Session Renegotiation Vulnerability" (CVE-2009-3555) However I'm not sure whether those results are right. We're using ...
2
votes
1answer
29 views

Apache cipher configuration of my website makes Google Chrome complain

My website, here, is on my server (Debian Wheezy, Apache 2.4.10 on the testing repos). I configured Apache myself and blocked all attackable ciphers after reading many websites discussing those ...
1
vote
1answer
38 views

the same certificates are sold at different prices?

I've encountered so many times with this situation. For example everybody know if I buy a Positive SSL for a year from a reseller, its price is about $5.95 . If I buy the certificate from CA ...
0
votes
0answers
21 views

Multiple static IPs Amazon EC2

I want to have multiple sites with SSL on IIS (Windows 2008 R2 on Amazon AWS). I've read this other question and the documentation in Amazon where it explains how to add another IP. My question is, ...
0
votes
0answers
38 views

Nginx not looking for ssl cert in location specified in nginx.conf

nginx conf looks like this: server { ssl_certificate /etc/nginx/ssl/nginx.crt; ssl_certificate_key /etc/nginx/ssl/4096_SSL.key; systemctl status nginx.service shows ...
3
votes
1answer
509 views

The site is using outdated security settings that may prevent future versions of Chrome from being able to safely access it

We're using an AWS ELB to do SSL termination and are having an issue where Chrome is displaying "https" in red with a strikethrough. It says "The site is using outdated security settings that may ...
0
votes
0answers
20 views

Can I use a domain name for a TCP process hosted in IIS?

I'm trying to set up a WCF service hosted in IIS 7.5, with TCP bindings. I also need to use a SSL certificate for security. From what I have read, I can add net.tcp as a binding type. However when I ...
0
votes
1answer
33 views

nginx: Why SSL config on one domain enables the others?

Say I have app1.domain.com and app2.domain.com, and its basic config files app1.conf and app2.conf, inside vhosts.d folder. SSL config files should contain the path of the app, and the path of the ...
1
vote
0answers
61 views

Chrome & IE not accepting client certificate

I have two websites on different hosts protected by the same SSL certificate, one Apache2, one JBOSS. My process: Created a private CA. Created a new certificate and signed it with the CA. ...
0
votes
1answer
54 views

PHP cURL call returning error 56 with NSS error -12195

I have an internal server (internal to my network) to which I make a REST API call from my external server. I don't know if it helps but the external server is running php 5.3.6 with cURL 7.19.7. To ...
3
votes
0answers
36 views

OCSP stapling with nginx

I'm having trouble with OCSP stapling in nginx. So I start up the openssl ocsp daemon, and then I visit my site. Then it says Invalid request. I am using a private PKI and CA. SSL key: 8192bit DH key ...
-1
votes
1answer
24 views

https connection can't established behind a gre tunnel

I have a network topological graph like this: Local box GateWay box +---------------+ +--------------------------+ |192.168.1.200 | -> |192.168.1.2 10.2.10.2 | ...
1
vote
0answers
21 views

SVN merge with HTTPS hangs on FreeBSD

I was asked to post it on here instead (original here) I setup SVN and Apache, and when I do a checkout it executes normally, but whenever I try to run svn merge for some reason it just hangs. Here ...
0
votes
0answers
18 views

How to use Apache2 to proxy a service from a subdirectory URL to another port on the same server, while enabling SSL?

I'm running Ubuntu Server 14.10 which has an apache2 install hosting a couple of websites. I also have some other web services installed which are accessible on other ports. Here's a layout (sorry I ...
1
vote
0answers
33 views

SHA-2 issues with Verisign root on OS 10.9 Mavericks?

I'm using a Secure Site Pro with EV certificate from Verisign/Symantec, with a full SHA-2 root chain. Everything is great - except for Mac OS 10.9 (Mavericks), that complains the certificate is ...
0
votes
1answer
25 views

Setup SSL keys when using roles-profiles pattern with Puppet

Here is a scenario. I have two web applications (lets call them webapp1 and webapp2) that needs apache, php (with some modules), and the web app's code it self. This is how I set this I set this up ...