SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
1answer
17 views

Where do I find the SSL configuration for a tomcat 6 web server?

I've inherited a small secure web application that runs on a single Tomcat 6 web server on a machine running Amazon Linux. I need to disable the SSLv3 fallback, but I just can't find where the HTTPS ...
1
vote
1answer
18 views

nginx and SSL redirect

I have a nginx server which I use as a proxy. I want to have all requests forwarded as normal http requests, expect request to api.mydomain.org, those request I want to run with ssl/https. This works ...
-2
votes
1answer
23 views

Verify HASH value of certificate

How can I verify Hash value of a certificate I get from a website using openssl? Say for example or facebook.com.
-1
votes
1answer
19 views

EV Certificate on browser

How does the browser recognise that the presented certificate actually is an EV certi cate? I went through this article but I couldn't figure out any thing for sure.
-2
votes
1answer
30 views

Why is this SSLerror coming on sending request to any subdomain like sandbox.example.com?

>>> import requests >>> requests.get("https://api.example.com/index.php") <Response [200]> >>> requests.get("https://sandbox.example.com/index.php") Traceback (most ...
0
votes
0answers
12 views

Disable SSL3 on tomcat4

I have a very old web application that uses tomcat4. B/c of the poodle vulnerability I need to disable SSL3 and disable a bunch of weak ciphers. My connector looks like this, but apparently ...
0
votes
0answers
33 views

Why my server responds with outdated ssl certificate, even after removing certificates?

I have a RackSpace VPS with nginx and a domain on GoDaddy. Previously I had ssl certificate from GoDaddy connected to my domain. Now, some time after the certificate expired, I have a new ssl ...
-1
votes
0answers
15 views

How to add SSL certificate to domain that is URL-frame redirected to AWS EC2 server

Currently running a node.js webapp with a NginX reverse proxy on an Amazon EC2 web server instance. Furthermore, I have a domain, call it example.com, which URL-frame redirects to this web server. ...
1
vote
0answers
12 views

IIS 8 SSL Stops working Windows 2012 Core

Is there any known bug or cause for an IIS server to just stop serving SSL overnight? The certificate has not been changed for some time and is still valid. Same certificate works on other identically ...
2
votes
0answers
13 views

Apache reverse proxy location based access control not working

I'm running a small web server with Ubuntu 12.05.5 LTS and Apache 2.2.22 and ran into this problem recently: For an IIS server on a virtual machine I have the following reverse proxy config: ...
2
votes
1answer
23 views

HAProxy 1.5 SSL and many website

Actually I'm hosting hundred website on Apache2 with some HTTP and some HTTPS, I'm preparing a new hosting infrastructure and I'm using HAProxy to loadbalance all my HTTP and HTTPS query on my ...
-1
votes
1answer
43 views

Nginx Enable HTTPS/SSL when forwarding to other URL

Currently, I'm working with an AWS Ubuntu EC2 instance, running a Node.js app on port 3000, that has an Nginx reverse proxy. I have been trying to enable HTTPS and add a SSL certificate and I've been ...
0
votes
1answer
17 views

AWS EC2 SSL Server certificate does not match the URL

After uploading the certificate to iam, when I visit https://www.mywebsite.com I get this error The identity of this website has not been verified. • Server's certificate does not match the URL. ...
1
vote
1answer
32 views

SSL proxying on nginx — different behavior in different clients

I'm running an SSL-required web service and planning to switch hosting providers. To avoid downtime for our users while DNS caches clear, I'm planning to proxy requests from our old server to the new ...
1
vote
1answer
40 views

Setting up SSL on nginx

I'm trying to set up SSL with Nginx, however I'm having a few problems. I received all the required files, and created the bundle as shown here, and added it to my site configuration as below: server ...
1
vote
0answers
5 views

Can OpenDirectory on OS X reasonably be configured to use an intermediate CA cert from an existing CA?

We're trying to set up OpenDirectory. It seems to want to create its own CA, and then an intermediate CA with a certificate signed by its own CA. I'd prefer to generate an intermediate CA certificate ...
0
votes
0answers
36 views

How to configure Coldfusion 10 CFLDAP to use TLS instead of SSL2

We are using CFLDAP to authenticate users from a remote system. The remote system has now shut down SSL 2 and 3 due to the POODLE issue. Is there a way to configure either Coldfusion or Tomcat to use ...
1
vote
1answer
16 views

How do I use a wildcard certificate with SSRS?

I am trying to setup SSRS access via SSL, and I have followed the instructions here; however, I do not receive a clickable url in the Configuration Manager to click on and test. The url shows as ...
6
votes
1answer
575 views

Why does my wildcard SSL certificate cause a domain mismatch error on a second level subdomain?

I have a server https://www.groups.example.com - in FireFox I get the "This Connection is Untrusted" message and the "technical details" say www.groups.example.com uses an invalid security ...
1
vote
1answer
36 views

Disabling weak ciphers

Does anyone have any experience disabling weak ciphers on Windows Registry? Server doesn't have IIS installed. Below is the results of my security scan but not 100% what registry entries should be ...
0
votes
0answers
6 views

com.sun.aas.jws.signing.alias Not working in Glassfish - still self signed

I found some articles like this one stating that in order to tell Glassfish to use a specific certificate to sign your Java Web Start code, you should set -Dcom.sun.aas.jws.signing.alias=myalias in ...
1
vote
1answer
30 views

SSL - create private.key from private-key.pem for Apache

I followed this tutorial to generate a private-key.pem and csr.pem for my AWS SSL Loadbalancer. Everything went well but now I need to setup Apache and need 3 files. SSLCertificateFile ...
-2
votes
1answer
30 views

SSL Certificate on CNAME

I have been reviewing the other posts regarding the issue, but having some trouble understanding since I've tried implementing it but still not able to figure it out. I have 2 servers. The main ...
1
vote
2answers
68 views

Setting up SSL with a redundant connection

My situation: We have two servers, Server A and Server B. Server A has a proxy configured, which serves data (over SSL) from Server B. Server B is reachable via 1.1.1.1 (one.server.example.com) and ...
1
vote
1answer
14 views

How can I log the negotiated SSL Cipher in Windows 2008 R2

I have a web server running IIS 7.0, on Windows Server 2008 R2. The web application is written in C# .Net 4.0. The web application receives web requests, and sometimes makes outbound https requests to ...
1
vote
2answers
155 views

Disabled SSLv3 to combat Poodle now cannot connect to SQL “Connection forcibly closed by remote host”

I have disabled SSL3 on my web server to combat the Poodle Vulnerability and now I am unable to connect to my SQL server using SQL Authentication. I just get "Connection forcibly closed by remote ...
1
vote
2answers
56 views

Is it possible to set SSL/TLS version HTTP header with Apache which an backend application can use?

There is one service on a virtual machine with a dedicated IP that required to be accessible via SSLv3 (WinXP with IE6 clients). I moved that service several several years ago to a that virtual ...
1
vote
1answer
36 views

SSL_accept error when mail client connect to postfix

I've managed to set up postfix and dovecot with self-signed certificate on my server. I can send and receive email using telnet command there. Now I want to connect to my mail server from a ...
1
vote
1answer
59 views

Connection to URL using OpenSSL client works, but curl fails

I have a CentOS 5.9 server, from which I need to make SSL connections to another server. The remote server has a certificate ultimately signed by the GeoTrust Global CA. At the time of writing, this ...
2
votes
1answer
28 views

Possible to Mix SNI and Dedicated IP SSL on Apache?

I've reached the limit of available IP addresses on my Apache web server but increasingly need sites to run under SSL. I'd be comfortable with some of the sites running under SNI but a few of them ...
0
votes
1answer
34 views

Domino SSL 301 redirect with www and non www

With reference to this question How to do a 301 redirect from http to https in a domino server? My redirects are failing. (gaps between protocol and : are because i dont have the rep to post multiple ...
0
votes
0answers
16 views

Windows SSL Cipher Suite Policy

I'm looking to customise the cipher suite priorities for my Windows Server 2008 R2 and 2012 R2 servers via Group Policy. Am I able to create one policy for both systems? Windows Server 2012 R2 ...
-3
votes
0answers
20 views

SSL Cert expired, need to redirect to non-ssl, but can't do it early enough in the connection process [duplicate]

I've got an expired SSL certificate which we don't plan to renew, as things have changed and we don't need it any more, or certainly not right now anyway. So I need to redirect all https traffic to ...
-1
votes
1answer
47 views

Nginx rewrite HTTP to HTTPS says redirect loop? [on hold]

I am trying to redirect all HTTP traffic to HTTPS,so when i got to www.domain.com it goes to https://www.domain.com. This is my current .conf file - server { listen 80; #listen [::]:80; ...
0
votes
0answers
4 views

Apache OpenSSL httpd-ssl.conf config stops Apache, no error except when httpd-ssl.conf include disabled [migrated]

I followed directions to setup SSL on my custom WAPP stack (Windows/Apach/PHP/PostgreSQL) here... http://www.tehuber.com/article.php?story=20110315153800545 After back-tracking I discovered when ...
0
votes
0answers
21 views

How to Flush NginX's SSL buffer mid-request for Server Push

I'm writing an app that uses long polling to push messages to clients. It doesn't end the request when it finishes sending a message though: it just flushes. It works fine, even when I proxy it ...
0
votes
0answers
7 views

Can we use open SSL on our customers websites? [migrated]

We have more then 100 customers and we need to set there website a SSL. Do we have to buy them an SSL from one of the companies (Godddy and etc) or we can use OpenSSL for free? Thanks
0
votes
0answers
6 views

How to set SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS in Ubuntu 14 SSL Settings [duplicate]

I believe I'm having this problem: https://www.daniweb.com/hardware-and-software/microsoft-windows/threads/50765/why-i-cant-access-the-web-pages-by-ie-https-with-des-cbc-sha Their solution is this ...
0
votes
1answer
29 views

Multiple SSL Certificates Deployment For Multiple Domains at Single Server Ubuntu 12.04 [closed]

I would like to host multiple domains at same VPS and need to configure SSL certificate for those. The server is Ubuntu 12.04. All domains have their own certificates. I need help regarding multiple ...
-3
votes
1answer
40 views

Where to optain my client key for SSL decryption? [closed]

example.pcap is a traffic capture I have made on my local Linux box of and now I would like to decrypt it. tshark -o "ssl.desegment_ssl_records: TRUE" -o "ssl.desegment_ssl_application_data: ...
0
votes
0answers
16 views

Error when trying to force Glassfish to use HTTPS instead of HTTP

I am developing a JavaEE applicaction using Glassfish as server. I would like to force http connections to https. I have added to following code to web.xml, but when I run the application I have a ...
1
vote
1answer
203 views

Internet Explorer 8 - TLS Fatal Error Close Notify - Oracle HTTP - Server Apache 2.2.22.0

I applied the POODLE fix for Apache via "SSLProtocol All -SSLv2 -SSLv3" in the ssl.conf file for our Apache server but am having issues with the CAC Client authentication via "SSLVerifyClient ...
0
votes
0answers
58 views

GitLab can not send email correctly through public SMTP server

I installed gitlab on ubuntu 14.04 server following official instruction. I want to send email to new users using public mail server, like gmail, 163, qq. However gitlab can't send email successfully ...
1
vote
1answer
33 views

Why layer 7 load balancer cannot pass through SSL termination?

I need to share ssl termination task among server farm or multiple processes. In this architecture, there should be a load balancer before this ssl termination task. After looking for an appropriate ...
1
vote
1answer
28 views

Determining if an SSL cert is affected by SHA-1 phase-out

Google chrome will start to warn users that their SSL connection is insecure under the following conditions: The cert uses the SHA1 hashing algorithm, and The cert expires on or after 2016-01-01 (or ...
0
votes
1answer
54 views

Spacewalk client OSAD service SSL error

I have some problems with my freshly Spacewalk setup. I have registered my test client, and installed osad service to avoid executing rhn_check. But when I start osad service, I get the following ...
0
votes
1answer
33 views

IIS 7 Still showing old certificate

I installed an SSL certificate in my IIS 7 (Windows Server 2008). I deleted the expired certificate but still showing when i access from any browser. I deleted the expired certificate. I Installed ...
0
votes
1answer
93 views

Nginx reverse proxy with multiple ssl domain

I have problem with Nginx when I need configure it as reverse proxy for multiple locations based on source server, but on one port. For example I have these servers: server1.domain.com ...
0
votes
0answers
100 views

Wordpress behind nginx reverse proxy doesnt work in https

I'm trying to run wordpress on a docker based cloud. The setup is: There is a server running a mysql array, which serves a container with Wordpress Running on Nginx. The setup is copied from this ...
1
vote
0answers
53 views

How to replace Zentyal CA certificates and key with an already existing CA

The context: we're using a CA which is deployed on all our client machines, and a lot of hosts and web servers. It seems that Zentyal CA module only allows to issue a new CA using the GUI, but not to ...