SSL and its successor - TLS - is primarily used to encrypt the connection between two applications at the presentation layer. It is most often used to secure websites in the form of HTTPS protocol but can also be used for other protocols and applications.
0
votes
0answers
5 views
debian apache config
So I've got two general problems. for some reason the default site doesn't work, it just directs to the first virtual host that I have when trying to connect via ip address. I do not have local dns, ...
0
votes
0answers
13 views
Dovecot TLS Handshake not working
I have set up my mailserver using http://workaround.org/ispmail and it worked until today, where I can not access the server using IMAP.
The error I see in dovecot.log is
2012-02-09 16:37:40 ...
0
votes
0answers
24 views
SSL Handshake, Cannot Pinpoint Problem
When attemting to communicate with an Alfresco Server to perform a file upload the client receives the following error in their logs.
SSLPeerUnverifiedException:
Indicates that the peer's ...
1
vote
0answers
13 views
All client browsers repeatedly asking for NTLM authentication when running through local proxy server
All client browsers repeatedly asking for NTLM authentication when running through local proxy server.
When pointing browsers through the local proxy to the internet, some but not all clients are ...
0
votes
1answer
52 views
Which port number to use for FTP on IIS 7
Following these instructions I managed to configure my FTP server for SSL on a windows server 2008 (IIS 7) while enabling Require SSL connections. However I'm not able to connect to the FTP server ...
1
vote
1answer
22 views
Secure LDAP Alias Lookup through Sendmail
I'm trying to configure sendmail to use an LDAP lookup as an alias table.
I have this line in my config:
Kldapfullname ldap -k"uid=%s" -v"mail" -h"my-ldap-server"
I've been using that for a long ...
1
vote
1answer
28 views
How do I avoid URL redirect when using SSLRequireSSL + ErrorDocument
Ok, so I have an Apache host I'm working on (shared host) who has this in their root .htaccess file.:
Options -Indexes
SSLOptions +StrictRequire
ErrorDocument 401 "<!DOCTYPE html><html ...
0
votes
0answers
28 views
Cannot access https page and HTTP error 500.19 when accessing over http
I cannot to access a https webpage - the page of a WCF service I need to create proxy client for.
The page loads OK when accessed from ANY other pc (even a VM hosted on my pc), I can access the page
...
2
votes
2answers
91 views
SSL Certificate on Apache Not Working on iPhone and iPad
I am having a strange problem. I have installed a new certificate from RapidSSL onto Apache on an Ubuntu server for the website http://www.radflek.com/shop/.
It seems to work absolutely fine on all ...
1
vote
0answers
14 views
Apache: change PHP suexec user/group per SSL client
I've got a server running several vhost sites, and was wondering if there could be a way to get some vhost PHPs executed under a different user/group depending on the client connecting to them. I ...
2
votes
2answers
66 views
Is there a Linux HA software load balancer that serves HTTPS for multiple unrelated domain names but balances to a single web server cluster?
I have a cloud-based (Amazon AWS, Rackspace, whatever) multi-tenant SaaS application, and I need to support HTTPS communications for multiple unrelated tenant domains.
As an illustrative example, ...
1
vote
1answer
22 views
Need help trouble shooting Https webserver error - SSL Handshake failed
I followed this guide:
http://hints.macworld.com/article.php?story=20041129143420344
Here is my virtual host definition
<VirtualHost *:443>
SSLEngine on
SSLProxyEngine On
...
2
votes
2answers
83 views
Puppet agent to puppet master (running on nginx/ruby1.9) SSL certificate issues
I have two machines, puppet master--host name puppet--and a lone client, host name git. The puppet agent on the master machine works without issue. The agent on git fails with a '400 No required SSL ...
0
votes
1answer
58 views
Wildcard certificate with SAN
I am attempting to create a wildcard SSL cert with a Subject Alternative Name (SAN) for use in IIS 7.5 and I'm having some issues. Because I need to include a SAN, I am using the Custom Certificate ...
1
vote
1answer
39 views
mod_rewrite redirects for site root and subdirectory from HTTP to SSL
Ok, so I have two sites within the same webroot — the main site (in the root) and an unrelated bunch of files in a subdirectory. We would like both of these sites to force rendering under SSL.
At the ...
2
votes
1answer
16 views
How to specify a CA for Courier POP3s?
We have our own CA that signed this certificate. Our CA's public cert is in /etc/ssl/certs on the server. It appears that Courier is not trusting or finding the CA cert?
I've added the CA to ...
3
votes
1answer
62 views
Terminating a high volume of SSL connections cost effectively on EC2
I have recently set up a Node.js based web socket server that has been tested to handle around 2,000 new connection requests per second on a small EC2 instance (m1.small). Considering the cost of a ...
1
vote
0answers
81 views
SSH over HTTPS with proxytunnel and nginx
I'm trying to setup an ssh over https connection using nginx. I haven't found any working examples, so any help would be appreciated!
~$ cat .ssh/config
Host example.net
Hostname example.net
...
0
votes
0answers
11 views
Apache Virtual Host: won't navigate into subdirectory
I set up apache to serve virtual hosts for ports 80, and 443 (see below). The problem is with "myurl2.me".
For some reason, I can access "myurl2.me/test.html" but I cannot access ...
0
votes
3answers
42 views
Apache becomes unresponsive on Sundays
For some reason, most Sundays around 5-6AM local time Apache is not working properly. I can't find the reason, and I'm stuck troubleshooting.
I'm running Magento on Apache2 with an SSL certificate, ...
0
votes
1answer
39 views
Apache proxy over port 443
I want to be able to redirect http and https traffic coming in to my central server to different virtual servers.
I have a host (the central server) and four different guests. Each guest hosts a ...
-2
votes
2answers
41 views
How to create my own SSL proxy with an SSL cert and a VPS?
The aim is to have my SSL proxy so I can add it to my FireFox by
Options -> Advanced -> Network -> Settings -> Manual proxy configuration -> SSL Proxy, Port -> OK
What I currently have:
a VPS ...
0
votes
1answer
45 views
Using UCC to offer SSL certificates to customers with WHM based on a EC2 instance
The heading says it all i think. I have researched this topic a while now, and it seems like it is possible to use UCC to offer SSL certificates to multiple domains with only one IP address (EC2 only ...
1
vote
1answer
51 views
Procedure to renew ssl certificate
I recently got a mail from my hosting server that the SSL certificate for one of my Wordpress website is about to expire in 5 days.
It says the certificate needs to be renewed; this can be done using ...
2
votes
2answers
64 views
nginx, multiple domains, ssl support for clients without SNI
I want to support SSL for clients which lack of SNI support (IE/FF/Safari on win XP, Android < 2.2, and others).
The solution I picked was to have nginx listen on separate port for each ...
0
votes
0answers
5 views
connection partially encrypted, SSL for perl app [migrated]
I am getting error on FireFox "connection partially encrypted" other browsers show that's not encrypted...
When I setup apache with ssl I use "/var/www/html/" for default directory, but all scripts ...
0
votes
2answers
26 views
ssl certificate mismatch issue and nginx
I have a website with an SSL cert. Let's say it's called example.com , I have a rewrite rule set to redirect any request to http://example.com to go to https://example.com/ this works great.
But, ...
2
votes
1answer
50 views
IIS7 SSL Cert replaced, still sending old expired cert to browser
Previously I had a SSL Cert from another company. It expired last night. I purchased a new one this morning, deleted the first one from the server under "Server Certificates" and created a new ...
0
votes
1answer
18 views
Apache 2 Vhost listen issue
I am adding a VHost (two, actually, on 80 and 443) to an existing config that does the same thing for two other names to Apache/2.2.9 / Debian.
The symptom is that Apache happily starts with no ...
2
votes
1answer
67 views
How important is LDAP over SSL with Active Directory?
I set out to integrate Active Directory with the iDRAC LOM for our Dell servers. One of the prerequisites is that the Domain Controllers be SSL enabled for ldap communication. The setup process in ...
0
votes
1answer
38 views
Amazon RDS: encryption on port 3306?
It looks like Amazon's RDS instances have encryption turned off for their connections - is there a way to turn on SSL encryption on RDS instances?
3
votes
0answers
31 views
Need to identify the ideal way to deploy SSL to blades/chassis
I have about 14 Dell M1000e chassis and corresponding 224 blades. I just received a wildcard SSL cert, but don't want to manually visit each administrative page to upload the cert/key. I understand ...
-1
votes
1answer
37 views
setup issue of two SSL certificate in one apache web server [closed]
Possible Duplicate:
Multiple SSL domains on the same IP address and same port?
I am trying to setup SSL certificate for my two domains on one apache web server. I do have two certificated ...
0
votes
1answer
70 views
MySQL ERROR 2026 (HY000): SSL connection error
I have enabled SSL on MySQL 5.1.52 on CentOS 6.0 using the following guide: http://www.madirish.net/node/244
I have followed the instructions correctly but I am running into the following error when ...
0
votes
2answers
90 views
Why is https not working?
I am trying to redirect just the root of my site to https. Although the rewrite happens,
https does not yield anything. The browser says. connecting to thinkingmonkey.me... and stagnates.
...
2
votes
2answers
109 views
SSL Redirect in IIS without causing the browser to give a warning
I have the subdomain https://a.site.com. I need to redirect it to https://a.site2.com as site.com is no longer is in use (we have rebranded).
What is the best way to do this without getting the ...
1
vote
2answers
63 views
Python - rebuild with SSL
I have built/installed Python 2.7 on my Ubuntu 10.04 and I just saw that SSL is not activated.
Do I have to rebuild Python ?
How can I rebuild it with SSL support and update my current install ?
I ...
0
votes
1answer
41 views
How can I redirect a JSP to use HTTPS
My web app is running, so that access to /admin/login.jsp happens over an unsecure HTTP connection.
I do not want to change web.xml file.
How can I change access to /admin/login.jsp from HTTP to ...
0
votes
2answers
59 views
Issue while configuring certified SSL certificate
I have got a nic signed certificate which I am trying to configure in my apache server without much luck :(. For this certificate to be generated, they needed CSR from my side. I created CSR using the ...
1
vote
1answer
93 views
Is it okay to use the FREE SSL Certificate offered by: Instant SSL by comodo? or Is StartCom better? [closed]
Is it okay to use the FREE SSL Certificate offered by: Instant SSL by comodo.
The site says:
Our promise to you:
There is absolutely no cost or commitment for your SSL certificate.
...
0
votes
1answer
35 views
Site down after renewing Intermediate SSL Pro Certificate (Verisign)?
I have a site where the intermediate certificate has expired. My IT guy says that he has renewed the intermediate certificate, but now the site is inaccessible with a 404 error page.
To troubleshoot ...
0
votes
2answers
46 views
SSL FTP fails on Windows 7 but not Windows XP clients
We currently use a free SSL-FTP client called Move-It-Freely to transmit data from a custom data entry program at over forty facilities scattered around the state to our central server. Under XP, it ...
1
vote
2answers
47 views
adding another security layer on top of openvpn
I've set up a VPS that handles mail, files, jabber, etc. All these services are available only to the local network that OpenVPN creates. For example all of the services will only listen on the ...
1
vote
1answer
60 views
SSL on Multiple Sites, 1 IP, Different Certificates, UCC not an option
We are looking to set up a cloud solution for one of our systems, but we need multiple TLD SSL's
We are only allowed 5 public IP's
Can't use UCC/Wildcard Certs since each client has own cert and ...
0
votes
1answer
154 views
ProFTPD - Failed to retrieve directory listing while using TLS
I have problem with my ProFTPD server.
When I try to connect to the server using TLS then I get timeout after MLSD command.
It only happens whenI use TLS - without it it works perfectly.
I checked ...
1
vote
1answer
37 views
Wildcard SSL certificate with automatic subdomain forwarding
I have a server where, as part of the service, users are given their own personalised subdomain, i.e. username.servicename.com. It's not particularly feasible to generate personalised vhost entries ...
1
vote
1answer
97 views
How to identify SSL Cipher Suite (IDEA-CBC-MD5) issue?
I have a server keep warning me about event id 36874, source Schannel: An SSL connection request was received from a remote client application, but none of the cipher suites supported by the client ...
0
votes
2answers
88 views
Can't get SSL to work
I'm trying to get Apache 2 to use SSL for one of many domains on a server. I don't care about any of the other domains running SSL on the server. I'm trying to do this for a Facebook app. Nothing on ...
0
votes
0answers
41 views
SMTP AUTH with SSL via Mail clients fail. Successful using command line. Successful without SSL. Ubuntu 10.04, Postfix, Dovecot, squirrelmail stack
I have set up an email server stack with Postfix, Dovecot and SquirrelMail. Everything works except SSL communication with the SMTP server.
When I manually test the communication by following the ...
0
votes
2answers
44 views
Stunnel Error binding pop3s to 0.0.0.0:110
I'm setting up stunnel so a non SSL enabled app can access a Gmail / Google Apps account. Here's the config I'm using:
CLIENT=YES
[pop3s]
accept = 110
connect = pop.gmail.com:995
[imaps]
accept = ...
