SSL and its successor - TLS - is primarily used to encrypt the connection between two applications at the presentation layer. It is most often used to secure websites in the form of HTTPS protocol but can also be used for other protocols and applications.
2
votes
1answer
18 views
NTLM Authorization using Apache NameBased VirtualHosts over SSL
I have a development environment that is fronted via an Apache server. This apache server requires SSL and Centrify-enabled NTLM authentication/authorization with the AD backend, using group access to ...
1
vote
1answer
18 views
Mismatched address error on self-signed ssl certtificate
I have a self-signed ssl certificate that I am trying to use on my Windows 7 development IIS7 machine. The certificate is working; however I am still getting a mismatched address error in IE9.
This ...
1
vote
1answer
24 views
How do I set up lighttpd for x.509 client certificate authentication
So far I've had HTTPS working for a long time, so I don't think there are any trouble with the server certificates. Now I tried to add this to lighttpd.conf:
ssl.engine = "enable"
...
1
vote
0answers
12 views
Clearing Java certificates cache (force reload certificates)
A simple question here.
One application gave me this exception when trying to access a website with a expired certificate: java.security.cert.CertificateExpiredException
So, I renewed the ...
1
vote
1answer
22 views
Apache2 + SSL + Proxy to Sinatra App: Will it work? Or will there be some warning to the user?
I have an situation where the main website is a legacy app written in ColdFusion which I've recently migrated from MX 6.1 to 9.0.1. Another part of the website is a blog/forum in PHP5 on WordPress. ...
0
votes
1answer
48 views
after enabling mod ssl apache stops listening on port 80
I have an ubuntu 12.04 server with zend server CE installed. I now wanted to enable https but after the first steps according to the documentation, 'a2enmod ssl' and 'apache service restart', apache ...
0
votes
1answer
13 views
“Assertion failed: n->len <= 32” in montmul_vt.c part of pkcs11_softtoken_extra
My Java application makes SSL connections to https://domains.live.com:443. When moving my app to Solaris 10 from Solaris 9 those SSL connection attempts caused an assertion error in a Solaris library:
...
2
votes
0answers
19 views
How to mitigate SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability? [migrated]
Disclaimer: I'm not a sysadmin, please try to give your answers in developer friendly language ;)
I'm test scanning a fresh VPS image with Nessus and I'm getting plugin 58751. I tried figuring out ...
2
votes
2answers
34 views
SSL with Amazon EC2 is invalid
I purchased an SSL certificate from Comodo and have followed their (terrible) setup instructions.
I'm confident I have all the files in the right places, but browsers are still giving an error.
When ...
1
vote
1answer
25 views
Broad SSL questions about certificates, domains & servers
I've only done basic stuff with signed certificates (basically follow the instructions from CA).
I have general questions moving forward that I hope someone can answer. There are so many different ...
0
votes
2answers
26 views
Haproxy Acl in Https
In haproxy settings there is frontend which bind on 443.
The problem is inside this frontend I need to use acl rules in order to distinguish traffic based on server_name.
However, if I am understand ...
0
votes
2answers
74 views
Why is my RapidSSL Certificate chain is not trusted on ubuntu?
I have a website that works perfectly with Chrome & other browser but i get some errors with PHP in CLI mode so i'm investigating it, running this:
openssl s_client -showcerts -verify 32 -connect ...
2
votes
1answer
35 views
How to turn off SSL certificate verification for RedHat Kickstartfile downloading
I'm using Foreman for RedHat 6.0 booting over ipxe (but that shouldn't matter ;)
The kernel parameters used for booting are:
kernel http://192.168.1.5/dist/rhel/6.0/os/x86_64/images/pxeboot/vmlinuz ...
0
votes
0answers
22 views
Unable to Connect to ssl://cml.application.cz:443. Error #0: php_network_getaddresses: getaddrinfo failed: Name or service not known
I have two servers communicating via XML-RPC
code in Zend is realy simple:
$client = new Zend_XmlRpc_Client(Zend_Registry::get('config')->core->cml->url);
return ...
3
votes
3answers
115 views
How many domains can be bound with one SSL certificate?
Let say I have an ASP.NEt application which is bound with more than 10 domains using host headers. Is one certificate is enough for me? or I need more than 1 certificate for each domain? If I need 1 ...
1
vote
2answers
41 views
SSL Certificate for a subdomain does work
I have one domain xyz.com but it is a subdomain of abc.com (xyz.abc.com). I have installed a SSL certificate for xyz.com but it doesn't work.
Congratulations! your request for a thawte SSL123 ...
1
vote
1answer
35 views
Google App Engine and SSL Payment Page
I have an app hosted on Google App Engine and I need to have a payment page that uses SSL. GAE only allows you to use SSL on their appspot domain but I want to keep it on my custom domain. Is it ...
3
votes
2answers
57 views
Do I need a dedicated IP address per sub domain for SSL?
I currently have a dedicated server with a domain name eg. domain.com which has its own dedicated IP address. I need to secure only one sub domain eg. secure.domain.com
Does this subdomain need its ...
1
vote
1answer
27 views
SSL Certificate install GlassFish or Apache or both?
I've got GlassFish 3.1.2 installed on Linux CentOS 6.2, but it's fronted by Apache web server version 2.2.21 using mod_jk. That is, all traffic to GlassFish passes through Apache port 80 via mod_jk.
...
0
votes
1answer
62 views
How to configure SSL with apache2/httpd mass virtual hosting using mod_vhost_alias
I have been searching quite a bit now but couldn't find any answers.
I'm using httpd 2.2.15 and Centos 6.2.
I have configured apache for mass virtual hosting. I.e.:
UseCanonicalName off
...
0
votes
1answer
58 views
godaddy's wildcard SSL certificate is not working on heroku
I have several related services on different first level subdomains of one domain. The goal is enable https in all of them.
So I've bought a wildcard SSL certificate from GoDaddy for my domain: ...
0
votes
1answer
52 views
Is it Possible to use a Single Certificate for a site which has many different domains
I have an ASP.NET application on IIS(Windows Azure) which has many different domains. All domains are working on http. Now, I need to use https. Whether, a single certificate is fine for all of my ...
1
vote
1answer
41 views
Single IP, Multiple SSL Certs, NOT using wildcard, TLS on IIS 7 possible?
We host many sites with domains on a single IP ie. www.domain1.com, www.domain2.com. We want to secure /admin using SSL. Historically each SSL cert needs a unique IP address. These are small sites and ...
6
votes
5answers
113 views
Redirect to SSL only if browser supports SNI
I have Apache 2.2 with mod_ssl and a bunch of sites in HTTPS on the same IP/port with VirtualHosting, so client must support SNI to connect to those virtual hosts.
I would like to configure my server ...
0
votes
1answer
12 views
How can I create multiple VirtualHost entries that share a set or RewriteRules?
I have an apache configuration with three virtualhost entries. Each entry is bound to a different port so that we can provide a different SSL certificate based on the port. Our load balancer is ...
5
votes
4answers
82 views
What host name should the SSL certificate for an SMTP server contain?
I have a server foo.example.com at 192.0.2.1
It runs exim to receive e-mail for several of my domains.
My domains each have an MX record pointing to mx.example.com, which resolves to 192.0.2.1
If I ...
0
votes
1answer
42 views
Which SSL certificate providers support 2nd-level subdomains? [closed]
I'd like to have SSL-protected 2nd-level subdomains, as in Wildcard SSL certificate for second-level subdomain
Which providers support this (my current one does not)?
3
votes
1answer
106 views
SSL routines:SSL23_WRITE:ssl handshake failure
I'm trying to use OpenSSL to connect to an SSL server.
When I run:
openssl s_client -connect myhost.com:443
The following SSL client configurations work just fine:
Windows (OpenSSL 0.9.83e 23 ...
0
votes
1answer
78 views
Why is there a difference in the prices of code signing certificates [closed]
Beside the pricing what factor should I cosinder when buying a code signing certificate.
Per year in Comodo is about $100 , In Goddady about $200 and in Verisign is about $500
Why this high ...
2
votes
0answers
55 views
How to make TLS the preferred secure connection in IIS 7
I have a mvc3 website that is hosted on a Server 2008 r2 server and I have a security certificate installed and all seems to be working ok. However if I connect to the site with Google Chrome, and ...
1
vote
1answer
23 views
How to setup Apache so some websites across multiple sub-domains are always using https
I realise there are lots of different variations on this question on serverfault but I haven't had any luck with combining answers to match our situation.
We have a CentOS 6.2 web server running ...
0
votes
0answers
21 views
Secure Handshake failing (SSL) [migrated]
I'm usng a library called Lacewing. http://lacewing-project.org/
It uses windows crypt api to make a secure server.
I have created a certificate for my PC (Josh-Laptop), and I used netsh to bind it ...
0
votes
1answer
39 views
wampserver2.2 ssl - how to make both http and https work
I followed this tutorial install SSL
http://guides.jlbn.net/setssl/setssl1.html
I setup up to localhost
after the configuration, I able to access HTTPS (https:// localhost/)
however, when I want to ...
1
vote
0answers
73 views
FTP proxy with SSL support
I have a bunch of LXC containers with vsftpd daemon installed on each. I would like to forward/proxy traffic from dom0 server port 21 to particular containers based on ftp user name e.g. ...
1
vote
2answers
66 views
http to https with virtual hosts
I'm trying to move trac to secure connection. I want to use https.
Virtual host file works fine when I put *:80 and comment out ssl engine. Whenever I change it to ssl it doesn't respond via 443.
...
1
vote
0answers
46 views
Handshake violation when trying to access one website
I have a TZ 190 Wireless Enhanced with SonicOS Enhanced 4.2.1.0-20e.
Yesterday, people could access without any problems a bank website wich uses HTTPS. Today, it is imposible to access only that ...
3
votes
1answer
74 views
SSL user authentication not working in Apache
I'm facing a problem with authenticating clients through their ssl certificates which seems similar to a lot of problems I found throughout the net - unfortunately to no solution.
Setup is: apache ...
0
votes
3answers
51 views
Browser not asking for client certificate
I am configuring Apache to use client certificate authentication. When I brows to the site however, it does not ask me for a certificate, unless SSLCACertificateFile is specified. It will then ask for ...
0
votes
2answers
43 views
Wildcard SSL certificate error
I installed a wildcard SSL certificate, but somehow I ended up with an error.
When accessing the website I am getting:
The identity of this website has not been verified.
• Server's certificate ...
1
vote
1answer
69 views
SSL Enabled site refusing connections
I am attempting to encrypt my site using SSL. I created a self-signed certificate (in the interim) and am attempting to integrate it into my nginx server.
I placed the certificate into the main ...
0
votes
1answer
38 views
Need help converting wildcard CRT to PFX for use with Windows Azure
I need help preparing a wildcard SSL certificate purchased from NetworkSolutions. I called their tech support, and Jason told me "I am unfamiliar with Windows, just google it...".
Here is what I ...
0
votes
1answer
60 views
configuring ssl in _default_ virtual host
There is a default virtualhost in webmin, the directives seems to same as the file ssl.conf. It seems it processes all requests on port 443 not handled by other virtual servers.
I tried to change the ...
1
vote
0answers
38 views
SSLRequire multiple OU validation
We are using client certificates with multiple OU fields. For example:
OU1= ZZZ(unique value)
OU2= XYZ(dynamic value)
OU3= ABC(dynamic value)
I need to write a rule only if the OU3 matches with the ...
1
vote
1answer
64 views
ssl_error_rx_record_too_long error when accessing Webmin on Scientific Linux 6.2
I just did a fresh install of Scientific Linux 6.2 with Webmin. Accessing the stock Apache test page via HTTPS port 443 works fine, but when trying to get to Webmin via its standard port 10000 gives ...
1
vote
0answers
71 views
Nginx : strip header on HTTP, add header on HTTPS
I'm configuring an Nginx server so as to serve as a reverse proxy to serve a Django app (run on Gunicorn).
My problem is that I want my site secured with HTTPS, and so I want my Django app to be able ...
-2
votes
1answer
32 views
CSR not working [closed]
I generated my csr ( mypubcert.pem ) in openssl for Apache 2.x ( running remotely on localhost ), the content of mypubcert.pem is as follows:
-----BEGIN CERTIFICATE-----
...
5
votes
1answer
135 views
How do I match a certificate file to a key file?
I have a SSL certificate that the former sysadmin was issued (crt file.) Searching the filesystem I found several .key files. How do I match the crt to the key file and confirm that they match? ...
2
votes
2answers
101 views
How do I manually authenticate a CA signed SSL certificate
A service I am using is refreshing their SSL certificate and now my connections to their service fail. They were working before the change (as in, 1 hour before the change).
Their old and new server ...
1
vote
0answers
68 views
ProFTPd/FTPS issue: unable to accept TLS connection: received EOF that violates protocol
It took some time while I tried to find solution over the net. Nothing helped.
The story: I have Ubuntu 10.10 (Amazon EC2 instance). ProFTPD Version 1.3.2e (latest via apt-get). I changed nothing on ...
5
votes
1answer
70 views
SSL redirect on EC2 instance behind SSL terminating load balancer
I'm trying to redirect all url's to https in a web application.
I have an ec2 instance behind an elastic load balancer. SSL is terminated on the load balancer.
Any attempts at redirection end up ...
