SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
1answer
12 views

SSL Not Working in Apache2/Ubuntu

I'm trying to get my SSL working on apache2 with Joomla. However, I run into a connection timed out issue. I have done tons of research and am fairly certain that my code is correct. I've got my ...
0
votes
0answers
5 views

Add Site Certificate for Java system wide

I have a server that uses java and if we try to access it complains about the certificate. The best approach is to download the cert and add it into Java's certificate exception list. This is being ...
0
votes
1answer
22 views

AWS : IP filtering with Load Balancer

I have an Amazon EC2 Instance which I use to expose an API to my clients (Django and Nginx if that can help you). Now, I needed an SSL connection so I had to use a load balancer. I should mention ...
2
votes
1answer
60 views

Nginx setup, 443 open but no respons on https://

So i just integrated my certificate and my nginx conf verifies it when i restart. When i do a: netstat -anp | grep 443 it returns: tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN ...
0
votes
1answer
16 views

Is it possible to send mail to other domain without ssl authentication? [duplicate]

we are using Postfix 2.11.3 on Ubuntu 15.10 Here is configuration file: smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu) biff = no append_dot_mydomain = no readme_directory = no ...
0
votes
0answers
6 views

Apache SSL mod_wsgi only getting directory listing

I'm trying to setup SSL with Apache and mod_wsgi (flask app). The http version of the site works fine, and I've tried duplicating the virtual hosts section minus the WSGIDaemonProcess statement, plus ...
0
votes
1answer
29 views

Lost my key file when I generated the csr

This is the first time for me dealing with ssl. I have created a csr file, but I lost the key file in this generation. The certificate was issued and I got all the crt files. Now I want to install it ...
3
votes
1answer
30 views

Curl: unable to get local issuer certificate. How to debug?

I’ve got an odd problem. Updated my LAMP dev machine (Debian) to PHP 7. Afterwards I cannot connect to a specific TLS encrypted API via Curl anymore. The SSL cert in question is signed by thawte. ...
0
votes
1answer
16 views

Azure Virtual Machine Images Tomcat SSL

Here's the run by, yes I have done research on all of what I am about to say. I simply wish to summarize it and hope someone with knowledge on this can let me know if something is wrong with my plan ...
0
votes
0answers
15 views

HTTPS tomcat 7 working only with curl not in browser

I have added in server.xml: <Connector port="8081" protocol="HTTP/1.1" SSLEnabled="true" maxHttpHeaderSize="8192" maxThreads="150" minSpareThreads="25" ...
0
votes
1answer
19 views

HTTPS not working on Tomcat 7

I am trying to add ssl configuration in tomcat 7 in ubuntu 11.10 but it is not working and there are no errors in logs. I added in server.xml this: <Connector port="8443" protocol="HTTP/1.1" ...
0
votes
2answers
9 views

openldap TLS error -8179:Peer's Certificate issuer is not recognized

tl;dr Does this error mean that I need to find my company's ldap server's public certificate and install it, or that my company's ldap server needs to install my public cert? If the former, how can I ...
-1
votes
2answers
40 views

How to install SSL certificate for Windows 8.1

I have a Windows 8.1 machine that I RDP into on a public IP (also secured by 2FA). I am getting a failing PCI scan because the default SSL cert created by Windows for RDP is using SHA1 hashing. So ...
-2
votes
2answers
48 views

redirect https://www.example.com to https://example.com in nginx [duplicate]

I have SSL issued for domain.com. Now these url works fine: http://www.example.com -> https://example.com http://example.com -> https://example.com https://example.com But when accessed with ...
0
votes
2answers
10 views

Creating local self-signed Certificate for user 'tomcat'

When I installed Tomcat 8 on my Ubuntu 15.04 I used the following command to create the user "tomcat": sudo adduser \ --system \ --shell /bin/bash \ --gecos 'Tomcat Java Servlet and JSP engine' ...
3
votes
1answer
25 views

Bluehost claiming that an SSL certificate needs to be a wildcard certificate to cover a single subdomain?

I am new to SSL certification, and have just purchased a standard SSL certificate for a single sub-domain; however, when my server administrator installed it using cPanel on the main domain, HTTPS ...
2
votes
2answers
152 views

RHEL Nginx SSL versus non SSL performance huge difference.

I'm in the process of setting up an Nginx 1.8 reverse proxy. In short - Serving HTML content HTTP traffic is up to 50x faster than HTTPS. Serving ProxyPass HTTP traffic is up to 7x faster than ...
0
votes
0answers
23 views

Set up IIS as forward proxy for HTTPS requests

Is it possible to set up IIS as a forward proxy for HTTPS requests? My use case is this: I have some process running locally on the IIS machine which is able to make HTTP calls, but not HTTPS calls. ...
0
votes
0answers
14 views

SSL in aws ec2 windows running node js

I have a domain via namecheap (say example.com) and server is a aws ec2 windows instance. There's a node js server listening at 443 , with following code require('https').createServer({ key: ...
0
votes
0answers
14 views

Adding SSL to Virtual Host takes down all sites [closed]

First question on here. Not fantastic with server side stuff but I have had to take it over at work. One of our servers has site that needs an SSL certificate. Now I have gone through all the ...
-1
votes
2answers
41 views

Will CSR become invalid

I have a domain registered with namecheap and server instance is aws ec2 (windows machine running node js) , cname record pointing to ec2 instance's public ip. Now i want to configure ssl on it , I ...
1
vote
0answers
17 views

HTTP to HTTPS redirect not working!? - Tried multiple methods

I purchased a Standard UCC SSL Up to 100 pack from Godaddy. I have installed all the required files on my server, and going to https://www.example.com works fine, but http://www.example.com is NOT ...
0
votes
0answers
16 views

SSL's don't work on both www. and non www. when using SNI in IIS

I am trying to migrate some ASP websites from a Windows 2008 environment where each host using an SSL is on a separate IP. I would like to move these websites to a Windows 2012 environment where each ...
0
votes
1answer
25 views

Geotrust SSL certification issue

I have an issue with curl (Centos 6 env) does not recognize Geotrust intermediary certificate: * Trying 192.168.6.6... connected * Connected to composer.graymatter.co.uk (192.168.6.6) port 443 (#0) ...
0
votes
1answer
37 views

Running Hudson, Sonar and HA Proxy on the same server

I am running Hudson, Sonar and HA Proxy on the same server (Doing this for the sake of a POC so do not have access to multiple servers. I am Using HAProxy to enable SSL for both servers. I can ...
0
votes
0answers
15 views

OpenVPN with IPSec

OpenVPN with IPSec We are using OpenVPN to connect multiple devices. The customer requires using IPSec, but OpenVPN is SSL VPN. Their website says this OpenVPN's security model is based on using ...
-2
votes
1answer
28 views

aws windows apache24 multiple subdomain [on hold]

i have two subdomains api.domain.com with A record xx.xx.xx.xx // elastic ip address user.domain.com with A record xx.xx.xx.xx // elastic ip address apache httpd-ssl.cnf Listen 443 ...
0
votes
0answers
34 views

ssl (https) for https://my.example.com resolves to https://example.com ip address

I have a server my.example.com with ip address 111.111.111.222 I have a server example.com with ip address 111.111.111.111 I created an ssl certificate with letsencrypt for my.example.com However, ...
0
votes
1answer
29 views

Apache configuration using SNI and mix of SSL certs

Up to this point I've been using SNI in my ssl.conf file with Apache 2.2.31 I'm serving up different sites all in the same document root. For example: NameVirtualHost *:443 <VirtualHost *:443> ...
0
votes
1answer
17 views

WSREP: Bad value for 'socket.ssl_key'

I am attempting to initialize a new MariaDB Galera cluster with SSL-encrypted replication. I have followed this guide to the letter, specified different details for CA, Server, and Client ...
1
vote
1answer
33 views
+50

Galera Rsync SST Secured via SSL/SSH

Is it possible to secure Galera Cluster SST via rsync with SSL/SSH? This page suggests it is not, specifically the following quote: Unlike rsync, xtrabackup includes support for SSL encryption ...
0
votes
1answer
22 views

Preloading Strict Transport Security (HSTS)

I configured my webserver to use Strict Transport Security (HSTS). I more or less used a configuration as in this manual. But I get the following in my SSL-report if I run a test on Qualys SSL LABS: ...
0
votes
0answers
16 views

Windows Server 2008 R2 with IIS7 - RC4/SSL3 disabled, but still flagged for having them

According to IIS Crypto, my RC4 and SSL3 items are disabled; however, ssllabs still rings up the site as failing. SSLLabs result IIS Crypto results: IIS Crypto results Same settings on server and ...
-1
votes
2answers
42 views

SSL encryption with CNAME redirect

Here is my current architecture: I have a simple site hosted in the cloud that needs to be served from my company. Thus, mysite.com has a CNAME redirect to 1234.cloud.com. I understand that the SSL ...
0
votes
0answers
11 views

Single certificate for postfix/dovecot mail server with multiple domains

I have a single IP-address and thus one mail server (postfix+dovecot on CentOS 7). I have one main domain name and each client has their own domain name on which they want to receive mail. All A and ...
0
votes
0answers
22 views

Custom Error Page doesn´t work with SSL

I have a custom 404 error page but unfortunatly when I install the HTTPS on my server and set everthing up so that https works the error page doesn´t work. When I enter a wrong url I just get a ...
0
votes
0answers
16 views

Squid3 + HTTPS Authentication issue

I've successfully setup Squid3 to work as a transparent proxy for HTTP and HTTPS, installed the CA on the machines. Everything works OK, but there is this corporation site I work for where Squid does ...
0
votes
0answers
17 views

Analyzing SSL Encryption Alerts

I have captured the traffic between my machine and my server using Wireshark, trying to find why some SSL requests fail. I've read this and this post about debugging SSL entries, and I'm able to find ...
0
votes
1answer
13 views

How to properly set up SSL proxy in Apache?

I'm trying to set up an SSL proxy to access a local web-app externally. I get a 500 error when accessing the page. The log says: [proxy:error] [pid 17153] (502)Unknown error 502: [client ...
0
votes
1answer
26 views

URL incorrectly redirecting to other site hosted on same server (nginx)

I have an Ubuntu VM running nginx that I'm part way through configuring for SSL. I've defined some custom local domains that I use for development, stored in my hosts file (on the host machine, which ...
0
votes
0answers
35 views

LetsEncrypt adding new Cert without killing Service

I use Let's Encrypt for my HTTPS certificates and every time I add a new cert or update a existing one I must stop my HTTP server on port 80 and start the Let's Encrypt script. I want to add new ...
1
vote
1answer
18 views

How do I get apache HTTP server to log the SSL Protocol for requests

I am planning on disabling TLSV1 on an apache 2.4 server running on Ubuntu 14.04. Before doing this I thought it would be good to analyse how many users this would impact. I've read through the apache ...
0
votes
0answers
26 views

HTTPS Content Filtering without de-crypting traffic using squid?

I am attempting to terminate https traffic based on ACLs using ssl_bumping WITHOUT de-crypting the traffic in intercept/transparent mode. Has anyone got this to work before? I have copied my ...
0
votes
1answer
38 views

Haproxy Problems url context and SSL

I have a question about a acls with path_beg in https frontend . My enviroment : haproxy ==> acl 1 /web1 ===> https://app/web1 haproxy ==> acl 2 /web2 ==> https://app/web2 Config: frontend ...
0
votes
1answer
25 views

Generating SSL key for Dovecot and Postfix

Following this tutorial: https://www.vultr.com/docs/simple-mailserver-postfix-dovecot-sieve-debian Trying to create a self-signed SSL certificate for testing purposes for my mail server, using code: ...
0
votes
0answers
26 views

How to setup YouTrack over SSL in Windows

I installed YouTrack 6.5 issue tracker as MSI distribution in Windows Server 2008 Virtual Machine hosted in Azure. It runs in 80 port well, but I cannot find how to apply SSL. I read YouTrack ...
0
votes
1answer
40 views

Certificate not trusted by only a single browser

We have a site that uses a signed cert from thwarte and we have an A rating for the cert across multiple checking tools. However, we have a user that complained that her browser does not trust the ...
0
votes
2answers
79 views

HTTP working HTTPS not working

I set up Comodo SSL on CentOS 6.7 and Apache/2.2.15 and we are running a CakePHP application on the server. When I go to http/domain its working but when I go to httpS/domain it says 404 Not Found ...
2
votes
1answer
118 views

The client and server cannot communicate, because they do not possess a common algorithm on Windows Server Web 2008

I am working on a ASP.Net WebForms application. We are using PayFort's Start API for the payment process. The application is running fine on our local machine (Windows 10) but it shows following error ...
1
vote
0answers
21 views

Dovecot Require Client Certificate for Remote Connections Only

After a bit of a struggle I've managed to configure Dovecot to require client certificates for users logging in, and it works well. However, I also want to setup a web-mail solution (Roundcube) which ...