SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
0answers
25 views

How can i do redirect from mail.example.com to httpS://example.com [on hold]

My website work on CSM Joomla 3.6 and have subdomain mail.example.com which can duplicating content. I need to redirect it to mane page .htaccess is includes #Redirecting http://www.example.com and ...
1
vote
1answer
37 views

Redirecting HTTPS traffic without certificate errors

I have a captive portal that I'm attempting to redirect HTTPS traffic to my portal - preferably without the certification warning from redirecting https traffic. E.G User attempts to access https://...
0
votes
2answers
31 views

Nginx unexpected end of file

I have nginx set up in a docker container (https://hub.docker.com/r/aptalca/nginx-letsencrypt/). Some changes were made (adding the last location block) and now nginx fails to start. Using the nginx ...
-1
votes
0answers
9 views

is it good idea to pass jboss outbound connections through a web server? [on hold]

We are trying to integrate Jboss application to make Web services calls, so was wondering is it a good practice to make the web services call go through a web server always instead of handling SSL ...
0
votes
0answers
6 views

Jboss eap 6.2 not sending certificate in SSL web service call

I am a newbie in Jboss configuration and i am trying to make an API call from Jboss with Two way TLS configuration in my jboss and i am unable to do so till now and getting below error. javax.net.ssl....
0
votes
0answers
9 views

Galera/Mariadb won't start WSREP: handshake with remote endpoint ssl://x.x.x.x:4567 failed

I am trying to set up a galera cluster. I am running RHEL7.2. I have my master running but when I try to start mariadb on one of my slaves like so ... # /usr/bin/systemctl start mariadb ... it ...
0
votes
0answers
9 views

Tomcat 8.5 w/Java 8 and openssl 1.0.1: Can't get port 8443 to respond

Hoping for some help getting the SSL 8443 port to accept https connections. Have the following setup: CentOS: 2.6.32-220.el6.i686 Java: 1.8.0-openjdk-1.8.0.91-3.b14.el6_8.i386 OpenSSL: 1.0....
2
votes
1answer
33 views

Allow SSL connection on port 8081 with nginx

I have a problem to acces to the port 8081 in https. Here you will find my configuration in nginx: server { listen 443 ssl default_server; server_name _; ssl on; ssl_certificate /...
0
votes
1answer
8 views

“Error: Could not complete SSL handshake. 5” in syslog of otherwise fine Nagios monitored host

I have a nagios server on ubuntu that monitors many other ubuntu servers. They have configured with chef, and they are correctly monitoring things over NRPE (i.e. the NRPE checks work. When something ...
0
votes
0answers
15 views

Apache presenting wrong ssl certificate

We have a website set-up that uses multiple sub domains per client: a.yyy.com b.yyy.com etc. We also have this working with a wildcard SSL certificate so they are all secure, works a treat. We also ...
0
votes
1answer
24 views

Wildcard self signed SSL cert across many hosts

I would like to be able to communicate over SSL with several different devices each which is running a web service. To expand, on a local network there may be many devices (Raspberry Pi units) which ...
0
votes
0answers
12 views

server certificate does NOT include an ID …, but CN is same as ServerName in config

Setting up a local test server. Getting a log error on httpd -k restart. Message in log: sl:warn] [pid 11684:tid 348] AH01909: localhost:443:0 server certificate does NOT include an ID which matches ...
0
votes
1answer
33 views

The request was aborted: Could not create SSL/TLS secure channel

I have seen a few of these questions around but they are related to IIS or something similar. I am using Apache with Nginx reverse proxy and cloudflare enabled with full (strict) SSL and the PEM and ...
0
votes
0answers
18 views

Private Docker Registry (with TLS certificate)

I'm trying to setup a private docker registry based on the documentation of https://docs.docker.com/registry/deploying/#running-a-domain-registry. I'm using StartSSL as certificate issuer, downloaded ...
0
votes
1answer
27 views

mysql php ssl connect certificate verify failed

I have followed this steps to add mysql ssl support on Server A: # Generate a CA key and certificate with SHA1 digest openssl genrsa 2048 > ca-key.pem openssl req -sha1 -new -x509 -nodes -days ...
-2
votes
0answers
18 views

Missing trailing slash after tld breaks ssl redirection from external link [duplicate]

I have changed my website to ssl. It is working ok and all links internal to the website work but external links to ther http version are broken becuause the trailing slash at the end of the domain ...
0
votes
1answer
22 views

SSL Handshake Optimisation

My server seems to take a very long time (half the time of page load) to go through the initial ssl handshake process. I've tested the SSL load times using https://www.wormly.com/test_ssl it's telling ...
0
votes
0answers
13 views

Haproxy: how to configure backend to talk with a https server? [duplicate]

We have in our LAN a nginx server configured in https. In front, we have Haproxy with SSL and we need to establish a connection SSL from backend to nginx server. Is it possible to do this? Client -> ...
0
votes
0answers
10 views

mod_rewrite enabled but does not working (with letsencrypt)

I know this has been asked a dozen times, but I searched in all the similarly named threats for a solution for hours now. As I did not found one, I will ask again. I have mod_rewrite enabled, but it ...
0
votes
1answer
11 views

nginx serves content/ssl from a different host via HTTPS

I have the latest nginx version on a Ubuntu Server 14.04. I host a few domains and I am now trying to implement letsencrypt on all of them. I already have one domain with a comodo certificate, let's ...
2
votes
1answer
15 views

Http ngin behind https ELB and index auto redirect

I've got an Amazon ELB that listens for http and https traffic. Instances behind it have nginx on port 80. Http only. So ELB forwards both https and http to http of nginx. When I make an https ...
0
votes
1answer
21 views

How to prevent other Apache 2.2 multiple VirtualHosts domains from accessing https (SSL_ERROR_BAD_CERT_DOMAIN) using SNI?

I am running Apache 2.2 on Ubuntu 14.04.4 LTS on a Linode server. I have multiple domains hosted on this machine (with only 1 IP address). I have a domain tbw.com hosted here for which I have an SSL ...
0
votes
0answers
23 views

nginx redirect to another server with ssl

I'm migrating my application to another server. And to start I had installed the nginx in the new server, point the dns at it and redirect to the old one. The redirect is working, but the old server ...
0
votes
1answer
25 views

ADFS v3 on Windows Server 2012 R2 rejects SSLv3 requests

I faced an issue with ADFS v3 running on Windows Server 2012 R2 When client which is restricted to use SSLv3 only accesses the ADFS site url, the request fails. The same thing works when using ...
0
votes
2answers
27 views

Updated the openssl version, but the old version still appears as being used

I updated to openssl 1.0.2h, but when I hit lsof | grep -i libssl I still get 1.0.1e nginx 19645 nginx mem REG 182,420273 441256 398853 /usr/lib64/libssl.so.1.0....
0
votes
1answer
47 views

What's wrong with my self-signed certificate? [closed]

I want to create a self-sign certificate on a Windows Server 2012 R2, just to test and try it. I have no error on my certificate information but when I browse to http://localhost, I see the browser ...
0
votes
1answer
35 views

Force HTTP to HTTPS redirect

I have a site on SharePoint and I have implemented HTTP To HTTPS redirect successfully. However, if user goes to the URL and remove 's' from 'https' then site becomes accessible without SSL. I want ...
0
votes
1answer
22 views

Apache 2.4 SSL _default_ overriding virtualhost

I have an Apache 2.4 server that I have created a self-signed cert for testing https with a new client site. The problem I'm encountering is that the ssl.conf file's is always loading for my site ...
-1
votes
1answer
61 views

Lets encrypt SSL certificate in Docker container via nginx-proxy

currently I am using nginx-proxy to route my subdomains to different docker containers. Now, I would like to add a SSL certifcate to my Owncloud container but I am failing to set it up correctly. ...
0
votes
1answer
41 views

How do I repair DROWN vulnerability on Centos 6.4 server?

I am running Centos 6.4 with Apache 2.2. According to CA Security Council SSL Report I am receiving an F grade due to DROWN vulnerability. The report states Vulnerable (same key with SSL v2) In ...
1
vote
1answer
188 views

How do I fix OpenSSL Padding Oracle vuln. (CVE-2016-2107) on Centos 6.4

I am running Centos 6.4 with Apache 2.2 on a Linux VPS and I have recently upgraded my OpenSSL to version 1.0.2h. I am scoring an F on the CA Security Council SSL report due to the OpenSSL Padding ...
2
votes
2answers
25 views

Nginx reverse proxy pass through client certificate

I'm trying to set up a load balancer via an Nginx reverse proxy. My application uses client certificates to authenticate clients. I would like my reverse proxy to forward the client certificate to my ...
6
votes
2answers
121 views

Can I use HAProxy's new 'capture' feature to save the remote address in a TCP frontend, and use it as the `X-Forwarded-For` header in an HTTP backend?

Using HAProxy 1.6 and a clever hack, I now have an HAProxy tcp mode frontend, that detects if the browser is capable of SNI, and based on that, routes to a strongly ciphered SSL termination backend, ...
0
votes
0answers
8 views

How to configure a Tomcat 7 TLS connector for maximum security

I'm trying to configure a Tomcat 7 TLS connector for best possible security. To test, I'm allowing the Qualsys test to run against my server. However I keep failing on the following points: ...
0
votes
0answers
13 views

Is this a new type of exploit on SNI on apache2 web server with php? [duplicate]

This are some lines I am worried about which I found inside apache2/error.log [Wed Jul 06 23:37:33.013582 2016] [ssl:error] [pid 2754:tid 139761960302336] AH02032: Hostname www.redacted.net provided ...
0
votes
3answers
43 views

Multiple domains on VPS with SSL for mail

I've setup a VPS server with multiple domains all pointing to the same server. The multiple domains are: www.maindomain.com www.seconddomain.com etc. For the main domain i've disabled the mail ...
1
vote
2answers
12 views

Apache wildcard ssl cert

I have wildcard cert that I pulled from one of my Windows servers and am attempting to put that cert onto a machine running Apache. I have the pem file that contains the private key as well as 4 ...
2
votes
2answers
25 views

SSRS 2012 without SSL

We are writing a deployment package to install SSRS 2012 on client servers. Some of them may have a certificate installed, but in all cases we do not want the installation to force the SSL (https) ...
0
votes
1answer
27 views

502 Bad Gateway on Nginx acting as Reverse proxy to add ssl for Upsource and Hub

I have set up Jetbrains Hub and Upsource on a machine using the ports 1111 and 1112 respectively. These work, and if I access the machines using the local-network ip address of the machine they load. ...
0
votes
2answers
13 views

Can I use Public-Key-Pins with LetsEncrypt?

Can I setup Public-Key-Pins when I setup a cronjob to renew the LetsEncrypt certificate every 30 days? If the certificate is renewed then the Public-Key-Pin is also renewed right?
4
votes
1answer
75 views

Let's Encrypt certbot validation over HTTPS

From the docs of the Certbot webroot plugin The webroot plugin works by creating a temporary file for each of your requested domains in ${webroot-path}/.well-known/acme-challenge. Then the Let’...
0
votes
1answer
28 views

Convert Key file and Cer file to keystore [closed]

My boss has used Openssl to buy a certificate and now I have this files: a key file, (yourdomain.key), a csr file (yourdomain.csr), a cer file (my_domain.cer) (IIS SSL Certificate (PKCS#7) received ...
0
votes
0answers
14 views

Configure Squid to pass througt SSL traffic for specific hosts instead of intercepting it

I'm currenty using squid on a pfSense box to intercept SSL which works well. The problem now is that WhatsApp Web will not work throught this proxy because it does not hold up to the Handshake ...
0
votes
0answers
17 views

Could I have a postmortem on a bumpy update with Let's Encrypt?

I asked a question earlier about Let's Encrypt details at How can I use Let's Encrypt (letsencrypt.org) as a free SSL certificate provider?, and @warren answered, saying: I have written a pair ...
-1
votes
1answer
36 views

This server's certificate chain is incomplete

After running a test on SSL Server Test, I got This server's certificate chain is incomplete. Later I read in orange: Chain issues Incomplete, Contains anchor. I tried to understand what was wrong ...
0
votes
0answers
22 views

Server based SSLVPN vs HTTPS

I'm looking to set up a more secure way to access the backend to our company website that employees use. I'd like to do it in the most minimal way possible so as to not require additional hardware and ...
3
votes
1answer
47 views

MySQL JDBC force ignore client certificate on AWS RDS

I have a Java web app running on AWS and connecting to a MySQL database running on AWS RDS. My app uses SSL client certificates signed by our own CA to connect to various web services, so I have set ...
0
votes
0answers
31 views

SSL certificate mismatch on certain networks

I am encountering a very curious problem with my ubuntu server setup. I am running a few websites using a LAMP stack. One of the websites has a dedicated ip and a comodo ssl certificate. The other ...
1
vote
3answers
53 views

Is it safe to disable HSTS Preloading as long as the site will remain accessible via HTTPS?

I have a website which is using the free Cloudflare service and have enabled HTTP Strict Transport Security (HSTS) preloading on it. If I wish to remove the domain from Cloudflare and route directly ...
0
votes
1answer
7 views

Supporting different TLS versions by service on a tomcat web application

I have a legacy web application that runs on Tomcat7 with Java6 and makes web service calls to multiple external services. One of those service providers has decided to end support for TLS1. I tried ...