SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
0answers
28 views

HAProxy and Intermediate SSL Certificate Issue

We are currently experiencing an issue with verifying a Comodo SSL certificate on an Ubuntu AWS cluster. Browsers are displaying the site/content fine and showing all the relevant certificate ...
1
vote
1answer
23 views

HAproxy 1.5 Trusted CAs

I'm trying to get HAproxy 1.5.x to trust any certificate authority already in the trust store of the machine (/etc/ssl/certs) without having to explicitly specify the individual ca-file root authority ...
0
votes
1answer
15 views

Does stunnel prevent non ssl traffic to “the” specified port?

So say I have an arbitrary tcp port 12345 and it's non ssl and I want to put stunnel to secure traffic to it. When stunnel is in front of it does it mean that this port is now tls/ssl only? Or can ...
-3
votes
1answer
23 views

Apache HTTP to HTTPS redirection rule

I am trying to apply SSL to a staging server. At the moment, we already have an ssl installed by an "unknown" guy in the production server. While going through prd server's apache settings, I found ...
-1
votes
1answer
37 views

Amazon EC2 - HTTPS - Certificate body is invalid. The body must not contain a private key

I'm very new to Amazon EC2. I am trying to setup https for my website, I follow the offical instruction from amazon doc: http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/configuring-https.html ...
0
votes
0answers
13 views

SSL cert issued to and SAN attribute

I have added a cert to my application cacerts file. The new cert is issued to one DNS(abc.com) and they have added few other DNS(XYZ.com, TEST.com) to the SAN attribute while creating. I tried ...
1
vote
0answers
10 views

Attach certificate to remote desktop connection - not gateway services

I have a Windows server that I want to attach a 3rd party signed certificate for remote desktop connections. This is not a remote desktop services server, i.e. it is just remote desktop ...
-3
votes
0answers
37 views

Nginx redirect HTTP to HTTPS (SSL) [duplicate]

On my server http is installed Nginx version: 1.2.7 Today I turned on SSL. But I have a big problem, i do not know how to set the absolute all subpages diverted permanently to: https://example.com ...
-1
votes
0answers
16 views

Apache client side SSL authentication using smartcards

I'm trying to build an authentication system for a site using Apache, which I want only to be accessible to users that have a valid UK NHS issue smart card. When a card is inserted into a compatible ...
-1
votes
0answers
42 views

Nginx multiple IPv6 ssl

I'm running several websites with Nginx 1.6.1. Now I want to make them accessible over IPv6. Normal HTTP is working but with ssl I have problems. Site1 server { listen xxx.xxx.xxx.1:80; ...
-2
votes
0answers
31 views

Where can I get the cheapest SSL certificate that will be recognized by all major browsers? [closed]

I have a free StartSSL certificate which FireFox may not recognize. How and where can I get the cheapest SSL certificate (for HTTPS) that is recognized in all major browsers?
1
vote
1answer
44 views

Apache will not serve site over SSL

I have an Apache server that serves my site fine if I just use http, but I can't connect to it over https. I've combed all error logs and found nothing. I've tried several things from other answers on ...
1
vote
1answer
28 views

Configuring SSL through IIS on an AWS EC2 Windows instance

I am trying to enable HTTPS connections to a website hosted through IIS on an Amazon EC2 instance. The instance is running Windows Server 2012. I do not have a wildcard certificate. The EC2 instance ...
0
votes
1answer
23 views

Using an EV SSL certificate for your site with non-EV SSL content

If I purchase an EV SSL certificate for a site that is using static content from a non-EV SSL site does that effect the EV SSL certificate presentation on the main www site? For example: ...
0
votes
0answers
17 views

Convert IIS CA Certificate to Ubuntu Haproxy cerificate

Alright, I setup a simple Windows 2012 R2 RDs server aio farm with Web Access, everything works fine internally if I access the server directly (https: // rdsiisserver/RDWeb/). I created a Ubuntu ...
0
votes
1answer
20 views

Where should I apply the SSL certificate?

I just bought a positive SSL for my company's staging server. We Apache web server and tomcat installed on the server. I'm not an expert but I saw some settings in httpd.conf file that has url like ...
-2
votes
2answers
36 views

How can I scan a IP & Port range to get information about all SSL certificates in use

From a Linux system, for a given IP range I need to check each open port to see if an SSL certificate is in use. For example, I would like to check ports 1 - 9999 on the address range ...
2
votes
1answer
62 views

Wildcard SSL with name-based virtualhosting?

I have two sites that require different domains, but must both use the same server running Apache httpd and also use SSL. Here's the example: www.example.com legacy application receiving high ...
0
votes
1answer
33 views

Using different certificate for one domain

I currently have Apache setup to use a certificate on all my domains using these settings in ssl.conf: <VirtualHost _default_:443> SSLEngine on SSLCertificateFile /etc/httpd/conf/mycert.crt ...
0
votes
1answer
29 views

Sharepoint and SSRS report trust relationship ssl/tls secure channel remote certificate is invalid

I have no experience with sharepoint at all. but this is what I observed. I intermittently getting this error message on my sharepoint. could not establish trust relationship for the ssl/tls secure ...
0
votes
0answers
23 views

When trying to ProxyPass with SSL on Virtual Host (Apache2) I receive AH01630: client denied by server configuration: /var/www/

To give a little background; I am on EC2. I am running Apache2 version 2.4.7. I have also opened port 443 on my security group to allow SSL traffic. What I am trying to do in the long run is have a ...
1
vote
1answer
32 views

Atlassian Crowd + Nginx + SSL Setup Not Working - Redirect Loop

The nginx config: server { listen 443 ssl; server_name crowd.example.com; access_log off; client_max_body_size 10M; ssl_certificate ...
1
vote
2answers
50 views

What is the server.ca file?

I have a VPS with Directadmin panel. I have two files in my ssl.crt in the path /etc/httpd/conf which include server.ca and server.crt. My question is how is the first one originally created. My guess ...
0
votes
1answer
71 views

openssl giving me errors and apache is not working with https

I try to configure apache-tomcat with ssl, but find some issues [root@manage conf]# openssl s_client -state -debug -connect 10.104.1.38:443 -key server.key -cert server.crt CONNECTED(00000003) ...
0
votes
2answers
63 views

SSL certificate for www. and non-www domain [duplicate]

What SSL certificate should I buy to get my domain work? I use nginx web server and want that all users requests go to https. http://example.com -> https://example.com http://www.example.com ...
0
votes
1answer
18 views

Connection Reset error trying to set up HTTPS locally using VS and IIS Express

I'm trying to set up Facebook authentication on my application, so I tried following the steps at this page: ...
0
votes
1answer
40 views

nginx fails to load a file - ssl certificate - even if its clearly there

I want to use ssl with nginx. I create the necessary certificates: [root@arch ssl]# pwd /etc/nginx/ssl [root@arch ssl]# ls -l total 12 -rwx------ 1 root root 1346 Aug 3 14:36 server.crt -rwx------ 1 ...
0
votes
0answers
25 views

Courier IMAP, no response

I've got a Postfix with Courier IMAP mail server mostly set up. IMAP authentication works as expected on port 143 (when SSL is disabled), but whenever SSL is enabled or port 993 is used, nothing ...
0
votes
1answer
33 views

RedHat OS Upgrade - 5.5 to 6.5 is SSL certificate effected?

Doing an old web-server upgrade from 5.5 to 6.5 and was wondering if the existing ssl certificate (still valid) will be accepted by the new RedHat 6.5 OS
-1
votes
1answer
65 views

Error code: ssl_error_rx_record_too_long on nginx ubuntu server

I have a site which was perfectly running with apache on some old ubuntu server and also has https for it. But now for some reasons i need to move to different(new ubuntu server with high ...
1
vote
1answer
32 views

SSL chain verification problems - Barracuda load balancer

I've installed a new SSL certificate using SHA1 hashing. Im user a security certificate by GeoTrust SSL CA - G2 but With WebServices communications I'm getting a PKIX error. The follow page: ...
0
votes
0answers
38 views

SSL Certificate error only on host server

I'm running Windows Server 2008 R2 with IIS 7.5. This is in a development environment. I have a self-signed certificate, and a second wildcard server authentication certificate which was issued by ...
2
votes
0answers
30 views

Should load balancers ever use TLS session ID to direct traffic?

One of my vendors caused an outage today by using TLS SessionID (sent by the browser) as a way to determine which host to direct traffic to. Since SessionID can leak privacy details, and more ...
0
votes
1answer
30 views

Redis security using stunnel and AUTH

Im a redis newbie but want to make sure everything is setup securely as we deal with medical info. I have a few EC2 instances. One of which is a server that runs two redis instances, one for a dev ...
0
votes
2answers
34 views

Does qmail-pop3s supports multiple SSL certificates?

Current setup: 1. I work for E-mail service provider company. 2. We have multiple mail servers on which we use qmail for mail delivery. 3. Each server is hosting multiple different domains for ...
0
votes
0answers
22 views

How to add a security exception using openssl s_server on a CA signed SSL Cert?

I have a connection problem with my websockets over https. I tried using the ports 80, 443, 9000, and a few others but nothing works. I don't get any error messages or logs. I ran my website on SSL ...
-1
votes
0answers
21 views

SSL warning icon - how to get rid of it [migrated]

I installed my SSL certificate yesterday. However I get the SSL warning (triangle) icon. The excuse for that is that "the page includes other resources which are not secure". I am not sure what ...
0
votes
1answer
37 views

How many elastic IP's do I need to host two sites using SSL in IIS on one windows EC2 instance

I have one windows instance on instance in EC2. I have two websites configured in IIS on this instance, each with a different SSL certificate for two completely different domains. Each is a wild card ...
0
votes
0answers
11 views

Is there a step by step tutorial how to install NGINX for a websocket connection? [duplicate]

I have a chat application that worked fine using ws:// before I added the SSL. Then when I added the SSL, I changed the connection to wss:// and the chat will not work. I read everywhere that a ...
1
vote
2answers
94 views

Nginx does not serve static files over HTTPS

I am trying to set up Nginx in front of Apache as a reverse proxy and to serve static files. I 301 http to https, and provide the directives in https section to serve a static folder via an alias. ...
0
votes
2answers
87 views

Setting up SSL - https works, http not working

Update: A temp solution I found was to just redirect all http requests to https. I have been working on setting up SSL on my website. It is like on a Rails. I use nginx with unicorn. I bought the ...
-1
votes
3answers
92 views

Exim after Thunderbird update: “Could not negotiate a supported cipher suite” [closed]

Recently, after I installed updates on my Kubuntu 14.04. system and a new version of thunderbird was installed, I could not send emails any more. It prompts: Sending of message failed. The message ...
-1
votes
0answers
29 views

Multiple SSL certificates and Multiple secondary IP on AWS VPC

AWS are leading me to believe I can have Multiple SSL certificates on the same EC2 instance, as long as I have multiple secondary IPs on the Network interface. I have followed the two guides below, ...
0
votes
0answers
28 views

Can you do a masked URL rewrite to a different protocol (in Apache)

Apache 2.2.15; I want to do: RewriteCond %{HTTP_HOST} site1.com RewriteRule (.*) https://site2.com [R=301,P,L] But that does not work. I put the P in there thinking it might allow the mod_proxy ...
-1
votes
0answers
61 views

WS or WSS websocket connection is block by SSL [duplicate]

I have a websocket.js file that is open when the page does. Inside the file I have this.connection = new WebSocket('ws://localhost:815'); I get a message "Uncaught SecurityError: Failed to ...
0
votes
0answers
36 views

Proxy to SSL site (on another server) from a non SSL site

I have a *:80 virtual host in Apache 2.2.15 which is just a bunch of URL rewrites like: ServerAlias foo.bar biz.baz tit.tat RewriteRule / http://somesite.com (R=301,L) ServerAlias ...
1
vote
2answers
45 views

Apache2 not asking for password of private SSL key

I am trying to set up SSH for my apache2 server. Apache seems to find my private key, because it complains once I move it. But it doesn't check the content of the file: When I replace it with ...
2
votes
2answers
64 views

SSL connection not working with public ip address

EDIT : Problem solved, it was indeed the firewall of the server wich was blocking port 443. Everything is working now I'm trying to install a self-signed SSL certificate on an apache server running ...
0
votes
0answers
30 views

nginx HTTPS virtual hosts valid across all hosts

I have a nginx server that is listening on both port 80 and port 443. Currently, all port 80 traffic (i.e. http://0.0.0.0 and http://my.example.domain) is redirected to https://my.example.domain (as ...
0
votes
0answers
25 views

Apache mod_proxy with HTTPS without key material (using SNI)

I would like to have an Apache 2.4 proxy which redirects port 80 and 443 requests to different machines in the local network, depending on the host name. I used mod_proxy and it works fine with port ...