SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
0answers
4 views

Domain validation for SSL certificate from StartSSL for personal mail server [on hold]

relatively new member here. I'm trying to set up my own mail server using AWS for hosting and am trying to get an SSL certificate. A tutorial I'm following recommends using StartSSL for this, and ...
-1
votes
1answer
37 views

If SSL certificate expired, will it get automatically deleted? [on hold]

Our website is http://example.com is redirecting to https://example.com/cgi-sys/defaultwebpage.cgi So maybe our SSL certificate expired? I can't see the SSL cert. in the cPanel list of SSL ...
0
votes
0answers
13 views

Wiresharking access to AWS to debug permission problems

I have a plugin which pushes files to S3. It's not my plugin and auditing what exactly it does has proved difficult. I'm trying to enable access logging on the bucket to figure out what exactly is ...
0
votes
0answers
13 views

How to prevent MITM in mobile apps [on hold]

I want to make sure that my mobile app is the only one making calls to my API. How to ensure that if softwares like Fiddler generate a HTTPs certificate (man-in-the-middle) and anyone is able to ...
1
vote
0answers
18 views

Debugging client certificate problems

I am trying to configure an Apache install to accept client certificates. When I work with self-signed certificate, unknown to Apache and using Firefox, it works when SSLVerifyClient set to ...
0
votes
0answers
20 views

sec_error_unknown_issuer after new ip [on hold]

Yesterday my vps provider locked down my ip during 24 hours because of an external ddos attack. I immediately purchased a new ip, set it up in the network as eth0:0 (and added the original one as ...
-4
votes
1answer
49 views

How to open Port 443 on External Firewall? [on hold]

I've been trying to configure SSL on my server for last 4 days now, with absolutely no success. I've generated a CSR file and uploaded the certificate and configured a Vhost, but nothing seems to ...
1
vote
2answers
30 views

How to set up TLS on hMailServer?

Complete noob here. Please be gentle :) I have a Windows 2008 server, running hMailServer. Right now all my communication is unencrypted. I want to start using TLS. So now I've got myself a SSL ...
2
votes
1answer
38 views

NginX dropping session data when acting as an SSL reverse proxy for a sinatra application

I'm pretty much stuck at this point. I've got a website, served up on Mizuno (A Jetty variant, I think) using Padrino (A sinatra variant), on port 8080, with Nginx listening at 80/443 to allow for SSL ...
1
vote
0answers
19 views

Nginx user uploaded SSL Certificates

I'm wondering what's the best way to let users upload their SSL certificates. I have a multitenant application based on rails/passenger/nginx and I need each user to use his own domain with his SSL ...
0
votes
1answer
24 views

SMTP doesn't work on distinct machine [on hold]

I'm trying to setup TLS e-mail on remote machine, but it doesn't work. Trying to send e-mail on my local machine (Windows 7 x64 locale ru-ru): 16:33:18 CONNECT : Looking up host name ...
-2
votes
2answers
25 views

Creating a self signed certificate for demonstration purposes on Centos 7 server

I have setup my default tomcat website (tomcat 8.0.3) on a server inside my company LAN. From my work computer if I try to access the website by typing it into google chrome it is not working. The IP ...
0
votes
1answer
87 views

apache ssl configuration - ssllabs how to get A+

I have this configuration SSLCipherSuite AES128+EECDH:AES128+EDH SSLProtocol All -SSLv2 -SSLv3 for apache 2.4.6, openssl 1.0.2a and on ssllabs' ssltest I get A, it suggests (warns) that I have ...
1
vote
1answer
27 views

Enabling LDAPS: Cannot get to open port 636

I have a domain controller, which has Active Directory (AD). I want to turn on LDAPS on this AD, so that I could access the AD via secure connection. I have followed the following guide: ...
1
vote
0answers
29 views

curl error 51 - of multiple requesting machines, only one has the issue

I have an SSL cURL request that fails from a single machine with the following error: curl: (51) SSL peer certificate or SSH remote key was not OK This error seems to have popped up overnight, and ...
0
votes
2answers
37 views

Redirect loop when forcing HTTPS

I am using the following to force HTTPS on my main website. ### Force SSL RewriteCond %{HTTPS} !=on RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301] If you want to view the full htaccess ...
0
votes
1answer
24 views

Reverse proxy Apache rewrite rule doesn't work

I've an apache reverse proxy and i try to make a rules for redirects few urls of example2 to example1 but my rewrite rules doesn't work. I've try this in the vhost of example2 : ProxyPass / ...
8
votes
1answer
164 views

Why is Internet Explorer 11 unable to connect to HTTPS sites when TLS 1.2 is enabled?

Normally I don't use Internet Explorer at all. I use it only in design time for interface tests (development machine and with unencrypted http). Every week I run the SSL Labs server test which says ...
-2
votes
0answers
17 views

Certificate chain, middle certificate error

I want to save time so I go straight in to it. I have generated a root certificate by this guide, www.akadia.com/services/ssh_test_certificate.html then I have generated more certificates and signed ...
0
votes
1answer
19 views

Which L1K entrust certificates should be kept private?

One of our client has made an update to his SSL certificate and he did send us a procedure to update the certificate on our side. They also provided the L1Kchain.txt (that should be converted to a ...
0
votes
0answers
44 views

nginx config - pass all to https apart from one folder

I've been banging my head on this for 3 days day and I'm getting nowhere. I transferred the whole site over to ssl and that change over didn't go too bad and the site was only down for about 30 min. ...
0
votes
1answer
14 views

Apache Reverse Proxy with SSL handling

I am trying to use apache as a reverse proxy, and to off load SSL processing from the underlying Node Js application. I have the configuration defined but it doesn't look as though the system is ...
2
votes
1answer
40 views

logging SSLv3-handshaking failure on nginx

I have website server by Nginx in FreeBSD. Last week we decided to drop support for SSLv3 connection for our site. However I wondering if nginx has logs of all client who can't do SSL-handshake ...
1
vote
0answers
35 views

nginx: Redirection from http://*.example.com to https://example.com showing strange behaviour

I have an SSL certificate being only valid for example.com (not valid for subdomains) and therefore want to redirect both http://example.com and http://www.example.com to https://example.com using ...
0
votes
0answers
22 views

Server returning 404 for only Baiduspider

I recently updated my website to enforce HTTPS for all requests. Everything appears to be working well after this change but Baidu's web crawler (Baiduspider) is receiving a 404 for all requests. ...
0
votes
1answer
14 views

Signed SSL certificates on Zyxel USG60 web interface?

I know that you can add SSH certificates for client/server authentication for the web interface and SSL VPN, but is there a way to change the SSL cert that the web interface sends to the browser just ...
-2
votes
0answers
13 views

Using ssl on open vpn server

So I'm getting crazy annoyed with the following problem. I have a Ubuntu 14.04 Server with OpenVPN acces server running on sub.domein.com . Now I can request different folders from the server with ...
1
vote
2answers
41 views

SSL Issue Only For Some Clients (Linode Server)

Leadup: Set up a wordpress linode. Imported a wordpress site. Everything worked. Added an ssl certificate from godaddy. It looks like the SSL certificate is installed correctly: ...
0
votes
2answers
39 views

Certificate Chain with AWS ELB & GoDaddy Certs

I'm trying to setup SSL on my AWS ELB, but I am thus far unable to figure out what goes into the "Certificate Chain" field. I receive the following error: Unable to validate certificate chain. The ...
8
votes
2answers
424 views

Is this SSL certificate chain broken and how to fix it?

For the SSL cert on the domain example.com, some tests tell me that the chain is incomplete and since Firefox keeps its own certificate store, it might fail on Mozilla (1, 2, 3). Others tell me it is ...
-2
votes
1answer
25 views

Connect to IPython via HTTPS, got SSL error

This question is migrated from here. I have a server running Ubuntu 12.04. I have installed IPython on it. Now, I would like to access IPython via HTTPS. I have done the following steps: Creating ...
0
votes
0answers
25 views

Random error code: ssl_error_rx_record_too_long for certain clients

I have an apache2 web server that's been working for a couple of years without issue. Last week, a two of our users began randomly getting Error code: ssl_error_rx_record_too_long when trying to ...
0
votes
1answer
20 views

Jboss SSL connection persistent

I have a Client code relying on Jboss 5.1 which uses self signed certificates for connecting to credit card servers over HTTPS. Certificate expired on 03-13-2015 9:55 AM and it got replaced the ...
0
votes
1answer
26 views

How to health check hosts over HTTPS behind the load-balancer?

I have NGINX serving my site over HTTPS on EC2 hosts behind Elastic Load Balancer. I need to set up a proper health-check in ELB. However, I cannot use https://www.example.com because I need to ...
1
vote
2answers
43 views

Wildcard certificates with shortnames?

I'm trying to generate a certificate with the following sub_alt_names: hostname *.hostname hostname.mydomain.local *.hostname.mydomain.local I generate the CSR via OpenSSL and then get the ...
0
votes
1answer
23 views

Is return traffic for SSL-enabled HAProxy secured also?

I've got a HAProxy in front of a number of Webservers. Connection from clients to HAProxy is SSL secured. But it is terminated at HAProxy and traffic from HAProxy to the underlying Webservers are in ...
-1
votes
1answer
30 views

URL on SSL certificate is not the website I am on [closed]

When I go to https://www.virgintrainseastcoast.com/ I get repeatedly get asked by Chrome to "Select a certificate". The certificate in the popup is usually either an Apple or Facebook URL. Any ideas ...
3
votes
2answers
281 views

Fastest SSL cipher implementation for Nginx if strength is NOT needed?

I have a use case that is the inverse of most: I'd like to implement very weak SSL ciphers in the name of performance, with the option to fall back to stronger ciphers if the client requests it. ...
-1
votes
1answer
30 views

MySQL gives error “SSL connection error: Unable to get private key”

I keep getting the errors "SSL connection error: Unable to get private key" when using mysql client. In order to get it to work, I have change the permission 444. However, I would like to lock it ...
-1
votes
2answers
21 views

HTTPS only on subdomain

I have a Jenkins install at ci.example.com, and a static site at example.com. The Jenkins install is configured to use HTTPS exclusively. I'm a cheapskate, so I only have a certificate for the ...
1
vote
1answer
69 views

How to make wget trust my self signed certificate (without using --no-check-certificate)? [duplicate]

Ubuntu 12.04 OpenSSL 1.0.1 14 Wget 1.13.4 My setup: create our own CA (our_own_ca.crt) generate a certificate which is signed with the above CA (graphite.local.crt) Concatenate that cert and the ...
-1
votes
0answers
25 views

Wireshark capture SSL only [migrated]

I would like to capture SSL or HTTPS traffic only in Wireshark, this is not something that can be filtered after due to the length of the time I would be recording the data after and the size of the ...
0
votes
0answers
14 views

Set IIS to Require SSL + Require Client Certificate on requests from localhost?

So, This is my scenario: I have a WCF service application which is invoked by the cruel and mean outside world, and it is hosted in IIS to REQUIRE both SSL and client certificate. I.e. no ...
1
vote
1answer
30 views

Cannot disable SSL in courier-imap

I cannot disable SSLv2\v3 in courier-imap. In imapd-ssl config I have following: TLS_CIPHER_LIST="ALL:!SSLv2:!SSLv3:!ADH:!NULL:!EXPORT:!DES:!LOW:@STRENGTH" According, to openssl - SSL is disabled ...
3
votes
3answers
49 views

Why is Android / IE using 3DES when AES is available?

I have a Zimbra installation and want to harden the cipher suites. I disabled some and am quite OK with what is left. The problem now is that the Qualys SSL test shows a lot of clients will use 3DES, ...
2
votes
0answers
30 views

Can IE be considered a reasonable website access test for the .Net framework

We are currently updating our SSL cipher settings in order to improve our SSL rating. The changes included the removal of SSL3 and RC4 ciphers. However this appears to have caused problems with some ...
-1
votes
0answers
9 views

Setting up a CA-signed certificate with Nginx

I need to use Nginx as a SSL-enabled reverse proxy. I have an existing JKS file from our Tomcat servers. It contains the certificate authorities used by our servers and by our client certificates. I ...
0
votes
0answers
27 views

Which browsers and OSes supports ECC based SSL certificates?

We are evaluating whether to buy a RSA based certificate or a ECC based certificate. RSA is older and is supported by all browsers. ECC is newer, they state it is faster due requiring smaller key ...
-2
votes
1answer
54 views

nginx SSL not working (404 error)

On a CentOS 6.6 box I have nginx set to serve two virtual hosts. One for SSL and one for basic HTTP. /etc/nginx/default.conf: server { listen 80 default_server; server_name _; #charset ...
2
votes
3answers
60 views

Where did this wildcard SSL certificate come from?

My company is hosting example.com and sub.example.com on the same server, using a wildcard SSL certificate for *.example.com. Now it's time to renew our certificate, and we're not sure how we got that ...