SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
0answers
4 views

rabbitmq-shovel amqps connection handshake failure

I fail to setup a rabbitmq shovel over amqps. The same shovel works fine over amqp. my (edited) uri: ...
-2
votes
0answers
3 views

nginx ssl server rewrite request to external url to be http

I have an nginx server configured as a reverse proxy with SSL offloading. The server name is example.com Everything works fine, but there is a form in the webpage that needs to post to an external ...
0
votes
1answer
17 views

Dedicated server issues with SSL and IPs, content showing on wrong site [on hold]

We have a number of sites on this dedicated server. Pages from one site are showing up on another site. Example: clientsite1.com (right site, no SSL installed) clientsite2.com (forwards to SSL, ...
2
votes
0answers
13 views

Apache - Virtual Hosting Mass Client Configurable SSL, Reverse Proxy

My scenario is that we host multiple websites for clients and all of the clients sites run on SSL only. Currently we have a seperate virtual host file for each client for Apache. Each file is ...
0
votes
1answer
20 views

Configure a transparent Elastic Load Balancer

I want to create an Elastic Load Balancer in front of my SSL site which simply passes through ports 80 and 443. I do not want my Elastic Load Balancer to have an SSL certificate of its own, I just ...
-1
votes
2answers
92 views

What should I do to know if SSL is working? [on hold]

I am working with NGINX, I just set up a domain and subdomain where I need to have SSL on both. Look at the server block for the subdomain server { listen 80; listen 443 ssl; server_name ...
0
votes
0answers
14 views

Extra certs issue with Nginx SSL config

It seems that I've set up my SSL wrong. SSL labs gives me the following: https://www.ssllabs.com/ssltest/analyze.html?d=pitot.io&hideResults=on The issue in question is "extra certs". This ...
0
votes
1answer
20 views

Proper method to generate a secure self-signed certificate

I have several websites on which I want to install a self-signed SSL certificate. I tried following various guides, such as this one (all provided more or less the exact same instructions). The given ...
0
votes
0answers
8 views

Domain validation for SSL certificate from StartSSL for personal mail server [on hold]

relatively new member here. I'm trying to set up my own mail server using AWS for hosting and am trying to get an SSL certificate. A tutorial I'm following recommends using StartSSL for this, and ...
-1
votes
1answer
38 views

If SSL certificate expired, will it get automatically deleted? [on hold]

Our website is http://example.com is redirecting to https://example.com/cgi-sys/defaultwebpage.cgi So maybe our SSL certificate expired? I can't see the SSL cert. in the cPanel list of SSL ...
0
votes
0answers
15 views

Wiresharking access to AWS to debug permission problems

I have a plugin which pushes files to S3. It's not my plugin and auditing what exactly it does has proved difficult. I'm trying to enable access logging on the bucket to figure out what exactly is ...
0
votes
0answers
14 views

How to prevent MITM in mobile apps [on hold]

I want to make sure that my mobile app is the only one making calls to my API. How to ensure that if softwares like Fiddler generate a HTTPs certificate (man-in-the-middle) and anyone is able to ...
1
vote
0answers
20 views

Debugging client certificate problems

I am trying to configure an Apache install to accept client certificates. When I work with self-signed certificate, unknown to Apache and using Firefox, it works when SSLVerifyClient set to ...
0
votes
0answers
20 views

sec_error_unknown_issuer after new ip [closed]

Yesterday my vps provider locked down my ip during 24 hours because of an external ddos attack. I immediately purchased a new ip, set it up in the network as eth0:0 (and added the original one as ...
-4
votes
1answer
53 views

How to open Port 443 on External Firewall? [closed]

I've been trying to configure SSL on my server for last 4 days now, with absolutely no success. I've generated a CSR file and uploaded the certificate and configured a Vhost, but nothing seems to ...
1
vote
2answers
35 views

How to set up TLS on hMailServer?

Complete noob here. Please be gentle :) I have a Windows 2008 server, running hMailServer. Right now all my communication is unencrypted. I want to start using TLS. So now I've got myself a SSL ...
2
votes
1answer
44 views

NginX dropping session data when acting as an SSL reverse proxy for a sinatra application

I'm pretty much stuck at this point. I've got a website, served up on Mizuno (A Jetty variant, I think) using Padrino (A sinatra variant), on port 8080, with Nginx listening at 80/443 to allow for SSL ...
1
vote
0answers
20 views

Nginx user uploaded SSL Certificates

I'm wondering what's the best way to let users upload their SSL certificates. I have a multitenant application based on rails/passenger/nginx and I need each user to use his own domain with his SSL ...
0
votes
1answer
25 views

SMTP doesn't work on distinct machine [closed]

I'm trying to setup TLS e-mail on remote machine, but it doesn't work. Trying to send e-mail on my local machine (Windows 7 x64 locale ru-ru): 16:33:18 CONNECT : Looking up host name ...
-2
votes
2answers
25 views

Creating a self signed certificate for demonstration purposes on Centos 7 server

I have setup my default tomcat website (tomcat 8.0.3) on a server inside my company LAN. From my work computer if I try to access the website by typing it into google chrome it is not working. The IP ...
0
votes
1answer
96 views

apache ssl configuration - ssllabs how to get A+

I have this configuration SSLCipherSuite AES128+EECDH:AES128+EDH SSLProtocol All -SSLv2 -SSLv3 for apache 2.4.6, openssl 1.0.2a and on ssllabs' ssltest I get A, it suggests (warns) that I have ...
1
vote
1answer
28 views

Enabling LDAPS: Cannot get to open port 636

I have a domain controller, which has Active Directory (AD). I want to turn on LDAPS on this AD, so that I could access the AD via secure connection. I have followed the following guide: ...
1
vote
0answers
30 views

curl error 51 - of multiple requesting machines, only one has the issue

I have an SSL cURL request that fails from a single machine with the following error: curl: (51) SSL peer certificate or SSH remote key was not OK This error seems to have popped up overnight, and ...
0
votes
2answers
39 views

Redirect loop when forcing HTTPS

I am using the following to force HTTPS on my main website. ### Force SSL RewriteCond %{HTTPS} !=on RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301] If you want to view the full htaccess ...
0
votes
1answer
24 views

Reverse proxy Apache rewrite rule doesn't work

I've an apache reverse proxy and i try to make a rules for redirects few urls of example2 to example1 but my rewrite rules doesn't work. I've try this in the vhost of example2 : ProxyPass / ...
8
votes
1answer
182 views

Why is Internet Explorer 11 unable to connect to HTTPS sites when TLS 1.2 is enabled?

Normally I don't use Internet Explorer at all. I use it only in design time for interface tests (development machine and with unencrypted http). Every week I run the SSL Labs server test which says ...
-2
votes
0answers
18 views

Certificate chain, middle certificate error

I want to save time so I go straight in to it. I have generated a root certificate by this guide, www.akadia.com/services/ssh_test_certificate.html then I have generated more certificates and signed ...
0
votes
1answer
19 views

Which L1K entrust certificates should be kept private?

One of our client has made an update to his SSL certificate and he did send us a procedure to update the certificate on our side. They also provided the L1Kchain.txt (that should be converted to a ...
0
votes
0answers
44 views

nginx config - pass all to https apart from one folder [duplicate]

I've been banging my head on this for 3 days day and I'm getting nowhere. I transferred the whole site over to ssl and that change over didn't go too bad and the site was only down for about 30 min. ...
0
votes
1answer
15 views

Apache Reverse Proxy with SSL handling

I am trying to use apache as a reverse proxy, and to off load SSL processing from the underlying Node Js application. I have the configuration defined but it doesn't look as though the system is ...
2
votes
1answer
40 views

logging SSLv3-handshaking failure on nginx

I have website server by Nginx in FreeBSD. Last week we decided to drop support for SSLv3 connection for our site. However I wondering if nginx has logs of all client who can't do SSL-handshake ...
1
vote
0answers
35 views

nginx: Redirection from http://*.example.com to https://example.com showing strange behaviour

I have an SSL certificate being only valid for example.com (not valid for subdomains) and therefore want to redirect both http://example.com and http://www.example.com to https://example.com using ...
0
votes
0answers
22 views

Server returning 404 for only Baiduspider

I recently updated my website to enforce HTTPS for all requests. Everything appears to be working well after this change but Baidu's web crawler (Baiduspider) is receiving a 404 for all requests. ...
0
votes
1answer
16 views

Signed SSL certificates on Zyxel USG60 web interface?

I know that you can add SSH certificates for client/server authentication for the web interface and SSL VPN, but is there a way to change the SSL cert that the web interface sends to the browser just ...
-2
votes
0answers
13 views

Using ssl on open vpn server

So I'm getting crazy annoyed with the following problem. I have a Ubuntu 14.04 Server with OpenVPN acces server running on sub.domein.com . Now I can request different folders from the server with ...
1
vote
2answers
42 views

SSL Issue Only For Some Clients (Linode Server)

Leadup: Set up a wordpress linode. Imported a wordpress site. Everything worked. Added an ssl certificate from godaddy. It looks like the SSL certificate is installed correctly: ...
0
votes
2answers
42 views

Certificate Chain with AWS ELB & GoDaddy Certs

I'm trying to setup SSL on my AWS ELB, but I am thus far unable to figure out what goes into the "Certificate Chain" field. I receive the following error: Unable to validate certificate chain. The ...
8
votes
2answers
445 views

Is this SSL certificate chain broken and how to fix it?

For the SSL cert on the domain example.com, some tests tell me that the chain is incomplete and since Firefox keeps its own certificate store, it might fail on Mozilla (1, 2, 3). Others tell me it is ...
-2
votes
1answer
27 views

Connect to IPython via HTTPS, got SSL error

This question is migrated from here. I have a server running Ubuntu 12.04. I have installed IPython on it. Now, I would like to access IPython via HTTPS. I have done the following steps: Creating ...
0
votes
0answers
27 views

Random error code: ssl_error_rx_record_too_long for certain clients

I have an apache2 web server that's been working for a couple of years without issue. Last week, a two of our users began randomly getting Error code: ssl_error_rx_record_too_long when trying to ...
0
votes
1answer
21 views

Jboss SSL connection persistent

I have a Client code relying on Jboss 5.1 which uses self signed certificates for connecting to credit card servers over HTTPS. Certificate expired on 03-13-2015 9:55 AM and it got replaced the ...
0
votes
1answer
28 views

How to health check hosts over HTTPS behind the load-balancer?

I have NGINX serving my site over HTTPS on EC2 hosts behind Elastic Load Balancer. I need to set up a proper health-check in ELB. However, I cannot use https://www.example.com because I need to ...
2
votes
2answers
49 views

Wildcard certificates with short hostnames?

I'm trying to generate a certificate with the following subjectAltName: hostname *.hostname hostname.mydomain.local *.hostname.mydomain.local I generate the CSR via OpenSSL and then get the ...
0
votes
1answer
24 views

Is return traffic for SSL-enabled HAProxy secured also?

I've got a HAProxy in front of a number of Webservers. Connection from clients to HAProxy is SSL secured. But it is terminated at HAProxy and traffic from HAProxy to the underlying Webservers are in ...
-1
votes
1answer
30 views

URL on SSL certificate is not the website I am on [closed]

When I go to https://www.virgintrainseastcoast.com/ I get repeatedly get asked by Chrome to "Select a certificate". The certificate in the popup is usually either an Apple or Facebook URL. Any ideas ...
3
votes
2answers
285 views

Fastest SSL cipher implementation for Nginx if strength is NOT needed?

I have a use case that is the inverse of most: I'd like to implement very weak SSL ciphers in the name of performance, with the option to fall back to stronger ciphers if the client requests it. ...
-1
votes
1answer
35 views

MySQL gives error “SSL connection error: Unable to get private key”

I keep getting the errors "SSL connection error: Unable to get private key" when using mysql client. In order to get it to work, I have change the permission 444. However, I would like to lock it ...
-1
votes
2answers
21 views

HTTPS only on subdomain

I have a Jenkins install at ci.example.com, and a static site at example.com. The Jenkins install is configured to use HTTPS exclusively. I'm a cheapskate, so I only have a certificate for the ...
1
vote
1answer
72 views

How to make wget trust my self signed certificate (without using --no-check-certificate)? [duplicate]

Ubuntu 12.04 OpenSSL 1.0.1 14 Wget 1.13.4 My setup: create our own CA (our_own_ca.crt) generate a certificate which is signed with the above CA (graphite.local.crt) Concatenate that cert and the ...
-1
votes
0answers
25 views

Wireshark capture SSL only [migrated]

I would like to capture SSL or HTTPS traffic only in Wireshark, this is not something that can be filtered after due to the length of the time I would be recording the data after and the size of the ...