SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.
0
votes
2answers
33 views
SSL on Subdomain, Already on Domain
I already have a Single Domain SSL on my main domain (example.com), but I would like to add a new SSL cert to my subdomain (api.example.com). Can I purchase another single Domain SSL, or do I need to ...
-1
votes
0answers
12 views
How to add self signed certificate to certificate bundle? [migrated]
How to add self signed certificate to certificate bundle so that the Curl http client can verify the self signed certificate as valid one?
0
votes
2answers
26 views
“Unable to locally verify the issuer's authority” for GeoTrust SSL CA
I am having troubles connecting to an SSL site (not mine) from the command-line. The certification path goes "GeoTrust Global CA" > "GeoTrust SSL CA" > "*.131500.com.au". The server recently ...
-1
votes
0answers
19 views
Access is denied while trying to add GoDaddy's SSL into my IIS 8
I'm trying to setup SSL on my website that I purchased through GoDaddy and I'm having some issues w/ it. Unfortunately they don't have instruction on how to do it w/ IIS 8 but what they do have is ...
0
votes
1answer
30 views
curl fails to take self signed certificate
I've installed apache 2 server with self signed certificate.My browser is showing 'It works!' when I tried to connect to the sever. But from an application when I issued cur_easy_perform() the call ...
1
vote
1answer
30 views
How to setup SSL for Active Directory?
I have a Windows 2008 Server (Base2) machine.
In Server Manager > Roles, i can see:
1. Active Directory Domain Services
2. DNS Server
3. Active Directory Certificate Services.
Under Active Directory ...
0
votes
1answer
15 views
SSL Certificate error with Custom Domain in Openshift Wordpress
I'm trying to deploy a wordpress installation to Openshift but I can't refer my custom domain without a ssl certificate error when in the backend. I read a article and it says that it is expected, but ...
-1
votes
1answer
17 views
How to disable SSL/TLS compression in Apache 2.2.16?
I have one sever running on Apache 2.2.16. I run the VA scanner on the server. According to the VA report it is recommended that SSL/TLS compression should be off.
I tried to search google, but didnt ...
-1
votes
1answer
20 views
SSL secured account section, Subdirectory vs Subdomain [closed]
I'm currently running Drupal on an nginx server, and I also have a separate user account system running on account.domain.com. I purchased a wildcard SSL certificate to protect the login form, but the ...
0
votes
2answers
30 views
SSL install issue on Apache2 for virtual host
I"m trying to get an ssl cert installed but i'm getting an error when reboot apache.
I get this error
Syntax error on line 25 of /etc/apache2/sites-enabled/xxxx.com:
Invalid command ...
1
vote
0answers
56 views
Why does Chrome fetch file in SSL so fast?
I have a remote server, which is about 390 ms ping delay. The server is nginx with ssl (spdy/2). When I use curl to fetch a small resource, it takes mostly 2 seconds.
* About to connect() to ...
0
votes
0answers
24 views
Enable SSL Renegotiation on OpenSSL [closed]
This reference shows that SSL_get_secure_renegotiation_support() is the C macro that ...
indicates whether the peer supports secure renegotiation.
Can I modify a configuration file to enable ...
0
votes
3answers
27 views
Wrong redirection in ProxyPass from http to https
This is the scenario:
I have got a linux server accesible only by one url (because the server is a virtual machine in a vpn):
url: http://foo.bar.com
I have got several web apps accessible in this ...
0
votes
0answers
29 views
Squid https_port not responding
I set up an squid with https_port. My goal is to connect from browser to squid with ssl. documentation says that squid can handle this kind of browser-squid connection.
So i set https_port with ...
0
votes
0answers
22 views
HTTPS to Apache and HTTP to Weblogic doesn't work
The link below contains an image that is how I wish my build architecture:
http://i.imgur.com/qg7LM5j.png
I can configure this, without SSL at any point, and works fine. But when I configure a SSL ...
-2
votes
1answer
31 views
How to add SSL support to web browser? [closed]
Please suggest me how can I add SSL support to thttpd. Or if I can put it straight, how to make my web server have SSL support?
0
votes
1answer
35 views
how to install 2 simple ssl certificates on 2 web site having the same ip, in iis8?
how to add a second ssl certificate to the same server for two different web sites?. How to setup a second ip for the second web site considering that the server is balanced?
more information:
i've ...
-1
votes
0answers
17 views
Gitweb Auth using Apache on Freebsd [closed]
I'm having trouble trying to set up gitweb so that a private project repository may be accessed through the browser, requiring a simple user/pass for the process.
My vhost conf is as follows
...
1
vote
1answer
29 views
Apache “SSLCipherSuite” Directive
Apache describes the SSLCipherSuite directive:
Cipher Suite available for negotiation in SSL handshake
Let's say I configured this directive to HIGH to only use Triple DES encryption.
Would ...
0
votes
2answers
43 views
Can IPv6 IPSec replace https/ssl for secure website network encryption?
Take away the 'authentication' part and just talk about the encryption part please! (Authentication is a different problem.)
Example: a connection to http://ipv6.google.com can be encrypted via HTTPS ...
0
votes
0answers
26 views
Squid configuration for accessing https site requring client certificate using url-rewrite
I've never dealt with setting up a proxy server and that is why a bit puzzled about how to set up a rather complicated config.Help me, please!
I've got squid running with login/password ...
0
votes
0answers
11 views
VPN cutting off Citrix streamed apps and local external client internet signal
My networking knowledge is weak, so please bare with me.
We have Citrix XenApp Server 6.5 for Windows Server 2008 R2. Everything with this runs fine and our apps run fine until an external VPN ...
1
vote
1answer
47 views
How can I detect if a server is using SNI for HTTPS?
I'm looking for a simple way to know if a server is using the Server Name Indication SSL extension for its HTTPS certificate on a website. A method that uses either a browser or Unix command line is ...
0
votes
2answers
38 views
-bash: www.mydomain.com.pem: Permission denied
I have these three files in /etc/nginx/ssl folder:
www.mydomain.com.csr
www.mydomain.com.key
www.midomain.com.key.nopass
I bought and downloaded the positive ssl certs in ...
0
votes
1answer
56 views
CentOS Apache + Tomcat SSL using mod_jk
I have Apache + Tomcat (using mod_jk) working correctly on a CentOS 6.3 machine. I am trying to set up SSL with Apache. When I browse to the site I get the following output:
Forbidden
You don't ...
0
votes
1answer
33 views
SSL Certificate, multiple servers, and DNS
We have two servers in different physical locations. They will be configured in a cluster so that information can be transferred between them.
Server hostnames are as follows:
...
1
vote
2answers
51 views
SSL Certificate Performance
Is it possible that a cheap security certificate could inhibit the performance of a website when serving pages over https?
Background: I have built an e-commerce website using Drupal 7 and Drupal ...
0
votes
1answer
37 views
I have changed my server, Do I need to re generate the ssl key
I am using AWS for hosting. I have got one productions instance and pre-production instance in it. I have installed ssl to the production site. But unfortunately its crashed. So we cloned the ...
0
votes
0answers
17 views
Gandi SSL root domain redirection and Heroku
I have a heroku app with Cedar which has a ssl configuration. All is working well.
When it comes to the root/naked domain we have a redirection set up via gandi.net to redirect to www.domain.com.
...
1
vote
1answer
60 views
How secure is CloudFlare's basic SSL
CloudFlare's basic SSL package provides SSL encryption for you site, but only between your customer's browser, and the CloudFlare server where SSL is terminated. The connection between CloudFlare and ...
0
votes
0answers
30 views
SSL certificate changed to outside network
I've two websites hosted on IIS7, each bound to two network cards with 192.168.x.x IPs, and these IPs are mapped to two public IPs.
Both sites have two different (different domains) SSL certificates ...
0
votes
1answer
59 views
IIS 7.5 + CGI + SSL - How to increase the upload limit?
I'm hitting a really annoying problem with IIS 7. I've setup my web.config by the books as follows:
<?xml version="1.0" encoding="UTF-8"?>
<configuration>
<system.webServer>
...
1
vote
1answer
47 views
SSL setup with apache in front of tomcat
i m trying to setup Apache with SSl and proxy SSL requests to my tomcat instance. I think i made the SSL work but theres still a error that shows up:
Bad Gateway
The proxy server received an ...
0
votes
0answers
13 views
slapd Target is quarantined
I have a syncrepl set up in my slapd that was previously working.
I've checked the ssl connection using:
$openssl s_client -connect host.mydomain.com.au:636 -key /etc/ca/host.key -cert ...
0
votes
0answers
34 views
ngnix - required cipher missing
I just started using nginx 1.4.0 to reverse proxy to my application and manage ssl. I am getting this error occasionally
2013/05/04 09:02:16 [crit] 32651#0: *4663 SSL_do_handshake() failed (SSL: ...
1
vote
1answer
29 views
How to setup CodeIgniter with nginx allowing for SSL?
My nginx.conf file has:
server {
listen 80;
listen 443;
server_name www.mysite.com;
#charset koi8-r;
#access_log /var/log/nginx/host.access.log main;
root ...
2
votes
2answers
49 views
Windows PKI with offline root (maybe with OpenSSL) - Possible?
I'm trying to setup a two-tier PKI and I have a ton of questions.
Since there's the tombstone limit for the AD, I'm assuming that the root (which will be offline) shouldn't be part of the AD. Am I ...
0
votes
3answers
81 views
DNS Messed Up After Adding SSL
I need some advice.
We have an e-commerce website hosted at HostGator. Yesterday I ordered a RapidSSL certificate and they auto-configured it for me which made https://www.ourdomain.com work fine. I ...
0
votes
1answer
41 views
SSL: Is a SAN certificate what I need?
I have 3 web-applications (api, app and admin) that I want to protect with SSL and need a certificate. I'm not sure what certificate I need so I'll try to describe what I have, hoping that someone ...
1
vote
1answer
55 views
When do SSL certs require a dedicated IP, and when don't they? [duplicate]
My host has informed me that I need to purchase a dedicated IP from them in order to use a SSL cert I want to buy. I don't believe them. Is there a way to leave them out of the loop and get this done ...
2
votes
1answer
38 views
How to redirect all non www and http traffic to www and https with Apache2
In my httpd.conf, I have
RewriteEngine On
RewriteBase /
RewriteCond %{HTTP_HOST} ^mysite.com [NC]
RewriteRule ^(.*)$ https://www.mysite.com/$1 [L,R=301]
But that's not working properly. I want the ...
34
votes
9answers
2k views
Why do I need to purchase an SSL certificate when I can generate one locally?
I am having trouble understanding why we need to purchase SSL certificates when we can generate them locally using openSSL. What is the difference between the certificate I purchase and a test ...
0
votes
1answer
79 views
Load balance https and websockets wth sticky sessions and NGINX
I'm using NGINX to do sticky session load balancing in front of a node.js app that will support http, ssl, and websockets. If I want the load balancer to simply forward requests to the node.js server ...
-1
votes
0answers
21 views
ssl vhost proxy caching accelerator - or - ssl vhost reverse proxy mitm
I am building a reverse proxy to connect origin servers offering https. Via DNS End user connects to proxy accelerator and is authenticated via ldap and then sent directly to remote origin site (vhost ...
3
votes
1answer
73 views
CHECK_NRPE: Error - Could not complete SSL handshake
I've just moved to a new nagios server and have got all the old hosts/services working. There is just one host that will not allow nrpe checks, producing an error on the nagios server as in the title. ...
1
vote
0answers
31 views
Setting up SSL on an Apache Ubuntu Server
I am setting up an SSL certificate for the first time on an Ubuntu server. I have purchased a dedicated IP address and have purchased the certificate under the subdomain of secure.example.com
Port ...
0
votes
0answers
27 views
Add and remove SSL binding with a non admin account
Is it possible to add and remove SSL bindings with a non-admin account? I've tried to add my non-admin account to IIS Manager Users, but when I connect remotely with this user there is no "Bindings" ...
0
votes
1answer
29 views
SSL certificate error in IE and chrome in apache
You attempted to reach www.domainname.domain.ac.in, but instead you actually reached a server identifying itself as *.domain.ac.in.
but the site works fine with https://domainname.domain.ac.in in all ...
0
votes
1answer
50 views
NGinx to Apache SSL Proxy - Exposing weakness using VPS?
There are several questions and how-tos, on how to setup NGinx to work with Apache in handling SSL requests, but after reading several of them, I noticed a pattern, which raised the following ...
1
vote
2answers
28 views
how to CHECK the version of SSL in IIS server 7? [duplicate]
I have disabled SSL 2.0 in IIS server 7. How can I determine which SSL version is enabled in my web server?
