SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
0answers
16 views

Nginx not looking for ssl cert in location specified in nginx.conf

nginx conf looks like this: server { ssl_certificate /etc/nginx/ssl/nginx.crt; ssl_certificate_key /etc/nginx/ssl/4096_SSL.key; systemctl status nginx.service shows ...
1
vote
1answer
37 views

The site is using outdated security settings that may prevent future versions of Chrome from being able to safely access it

We're using an AWS ELB to do SSL termination and are having an issue where Chrome is displaying "https" in red with a strikethrough. It says "The site is using outdated security settings that may ...
0
votes
0answers
12 views

Can I use a domain name for a TCP process hosted in IIS?

I'm trying to set up a WCF service hosted in IIS 7.5, with TCP bindings. I also need to use a SSL certificate for security. From what I have read, I can add net.tcp as a binding type. However when I ...
0
votes
1answer
28 views

nginx: Why SSL config on one domain enables the others?

Say I have app1.domain.com and app2.domain.com, and its basic config files app1.conf and app2.conf, inside vhosts.d folder. SSL config files should contain the path of the app, and the path of the ...
1
vote
0answers
37 views

Chrome & IE not accepting client certificate

I have two websites on different hosts protected by the same SSL certificate, one Apache2, one JBOSS. My process: Created a private CA. Created a new certificate and signed it with the CA. ...
-1
votes
0answers
18 views

CURL Error: 35 - error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure [on hold]

I'm getting below error when connecting to quantumgateway.com CURL Error: 35 - error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure Using Apache 2.4. PS. The SSLV2 and SSLV3 ...
0
votes
0answers
17 views

PHP cURL call returning error 56 with NSS error -12195

I have an internal server (internal to my network) to which I make a REST API call from my external server. I don't know if it helps but the external server is running php 5.3.6 with cURL 7.19.7. To ...
0
votes
0answers
13 views

Gray triangle on firefox over HTTPS [on hold]

I've been searching on the net for a while now but don't really seem to find the solution. I have an TLS connection to app.spiderdoc.co that works on Chrome and Safari but I have a minor issue on ...
3
votes
0answers
10 views

OCSP stapling with nginx

I'm having trouble with OCSP stapling in nginx. So I start up the openssl ocsp daemon, and then I visit my site. Then it says Invalid request. I am using a private PKI and CA. SSL key: 8192bit DH key ...
-1
votes
1answer
14 views

https connection can't established behind a gre tunnel

I have a network topological graph like this: Local box GateWay box +---------------+ +--------------------------+ |192.168.1.200 | -> |192.168.1.2 10.2.10.2 | ...
1
vote
0answers
11 views

SVN merge with HTTPS hangs on FreeBSD

I was asked to post it on here instead (original here) I setup SVN and Apache, and when I do a checkout it executes normally, but whenever I try to run svn merge for some reason it just hangs. Here ...
0
votes
0answers
12 views

How to use Apache2 to proxy a service from a subdirectory URL to another port on the same server, while enabling SSL?

I'm running Ubuntu Server 14.10 which has an apache2 install hosting a couple of websites. I also have some other web services installed which are accessible on other ports. Here's a layout (sorry I ...
1
vote
0answers
25 views

SHA-2 issues with Verisign root on OS 10.9 Mavericks?

I'm using a Secure Site Pro with EV certificate from Verisign/Symantec, with a full SHA-2 root chain. Everything is great - except for Mac OS 10.9 (Mavericks), that complains the certificate is ...
0
votes
1answer
21 views

Setup SSL keys when using roles-profiles pattern with Puppet

Here is a scenario. I have two web applications (lets call them webapp1 and webapp2) that needs apache, php (with some modules), and the web app's code it self. This is how I set this I set this up ...
0
votes
1answer
21 views

How to make apache, node.js, beego and https work nicely together?

I have a server who I want to serve up two different sites: a.example.com should be directed to node.js listening on 8081/8443 b.example.com should be directed to beego listening on 8081/8444 I ...
1
vote
1answer
34 views

SSL not working with subdomains

I have an issue here, I am new on this, I've been watching some tutorials and I see that everything is OK in my configuration but I can not access to my page with the subdomains. Here is the report ...
0
votes
1answer
30 views

Configure Zenoss login screen for SSL URL

I'm trying to configure Zenoss 4.2.X to use an SSL-enabled URL in the login form. I have nginx as an SSL reverse-proxy sending requests to Zenoss listening on port 8080. This works. However, the ...
1
vote
0answers
22 views

WinRM HTTPS Connection to Windows 8 Systems

I have a couple virtual Windows 8 clients that I will be using to run some tests against a server. I set up WinRM so I can easily pull the data back from all the clients for analysis but the data ...
0
votes
1answer
38 views

Can I configure IIS 7.5 Forward Secrecy to redirect for unsupported browsers (I.E.)?

I have successfully configured Windows Server 2008 R2 with IIS 7.5 serving my Asp.Net 4 application for forward secrecy utilizing the information from here I still have visitors/user with downlevel ...
2
votes
2answers
21 views

Having SSLCertificateFile/SSLCertificateKeyFile/SSLCertificateChainFile in ssl.conf vs. inside VirtualHost

I'm setting SSL up for a new server and going off of how I configured it on the previous server. I noticed that I have SSLCertificateFile, SSLCertificateKeyFile, and SSLCertificateChainFile specified ...
1
vote
1answer
112 views

Configuring Tomcat 7 to use TLS only

I have a Tomcat 7 server on Ubuntu 14.04 (Java OpenJDK 1.7) which has been working fine for over a year, with no problems. A few months ago it stopped being accessible wtih Chrome, I dealt with ...
0
votes
0answers
14 views

HTTPS Config for symfony2

I have followed this tutorial for setting up https on an ubuntu server: https://www.digitalocean.com/community/tutorials/how-to-create-a-ssl-certificate-on-apache-for-ubuntu-14-04 I have ended up ...
2
votes
0answers
28 views

rabbitmq-shovel amqps connection handshake failure

I fail to setup a rabbitmq shovel over amqps. The same shovel works fine over amqp. my (edited) uri: ...
-2
votes
0answers
9 views

nginx ssl server rewrite request to external url to be http

I have an nginx server configured as a reverse proxy with SSL offloading. The server name is example.com Everything works fine, but there is a form in the webpage that needs to post to an external ...
0
votes
1answer
26 views

Dedicated server issues with SSL and IPs, content showing on wrong site [closed]

We have a number of sites on this dedicated server. Pages from one site are showing up on another site. Example: clientsite1.com (right site, no SSL installed) clientsite2.com (forwards to SSL, ...
2
votes
0answers
20 views

Apache - Virtual Hosting Mass Client Configurable SSL, Reverse Proxy

My scenario is that we host multiple websites for clients and all of the clients sites run on SSL only. Currently we have a seperate virtual host file for each client for Apache. Each file is ...
0
votes
1answer
26 views

Configure a transparent Elastic Load Balancer

I want to create an Elastic Load Balancer in front of my SSL site which simply passes through ports 80 and 443. I do not want my Elastic Load Balancer to have an SSL certificate of its own, I just ...
-1
votes
2answers
113 views

What should I do to know if SSL is working? [closed]

I am working with NGINX, I just set up a domain and subdomain where I need to have SSL on both. Look at the server block for the subdomain server { listen 80; listen 443 ssl; server_name ...
0
votes
0answers
17 views

Extra certs issue with Nginx SSL config

It seems that I've set up my SSL wrong. SSL labs gives me the following: https://www.ssllabs.com/ssltest/analyze.html?d=pitot.io&hideResults=on The issue in question is "extra certs". This ...
0
votes
1answer
43 views

Proper method to generate a secure self-signed certificate

I have several websites on which I want to install a self-signed SSL certificate. I tried following various guides, such as this one (all provided more or less the exact same instructions). The given ...
-1
votes
1answer
41 views

If SSL certificate expired, will it get automatically deleted? [closed]

Our website is http://example.com is redirecting to https://example.com/cgi-sys/defaultwebpage.cgi So maybe our SSL certificate expired? I can't see the SSL cert. in the cPanel list of SSL ...
0
votes
0answers
18 views

Wiresharking access to AWS to debug permission problems

I have a plugin which pushes files to S3. It's not my plugin and auditing what exactly it does has proved difficult. I'm trying to enable access logging on the bucket to figure out what exactly is ...
1
vote
0answers
28 views

Debugging client certificate problems

I am trying to configure an Apache install to accept client certificates. When I work with self-signed certificate, unknown to Apache and using Firefox, it works when SSLVerifyClient set to ...
-4
votes
1answer
61 views

How to open Port 443 on External Firewall? [closed]

I've been trying to configure SSL on my server for last 4 days now, with absolutely no success. I've generated a CSR file and uploaded the certificate and configured a Vhost, but nothing seems to ...
2
votes
2answers
56 views

How to set up TLS on hMailServer?

Complete noob here. Please be gentle :) I have a Windows 2008 server, running hMailServer. Right now all my communication is unencrypted. I want to start using TLS. So now I've got myself a SSL ...
2
votes
1answer
48 views

NginX dropping session data when acting as an SSL reverse proxy for a sinatra application

I'm pretty much stuck at this point. I've got a website, served up on Mizuno (A Jetty variant, I think) using Padrino (A sinatra variant), on port 8080, with Nginx listening at 80/443 to allow for SSL ...
1
vote
0answers
21 views

Nginx user uploaded SSL Certificates

I'm wondering what's the best way to let users upload their SSL certificates. I have a multitenant application based on rails/passenger/nginx and I need each user to use his own domain with his SSL ...
0
votes
1answer
26 views

SMTP doesn't work on distinct machine [closed]

I'm trying to setup TLS e-mail on remote machine, but it doesn't work. Trying to send e-mail on my local machine (Windows 7 x64 locale ru-ru): 16:33:18 CONNECT : Looking up host name ...
-2
votes
2answers
30 views

Creating a self signed certificate for demonstration purposes on Centos 7 server

I have setup my default tomcat website (tomcat 8.0.3) on a server inside my company LAN. From my work computer if I try to access the website by typing it into google chrome it is not working. The IP ...
0
votes
3answers
189 views

apache ssl configuration - ssllabs how to get A+

I have this configuration SSLCipherSuite AES128+EECDH:AES128+EDH SSLProtocol All -SSLv2 -SSLv3 for apache 2.4.6, openssl 1.0.2a and on ssllabs' ssltest I get A, it suggests (warns) that I have ...
1
vote
1answer
33 views

Enabling LDAPS: Cannot get to open port 636

I have a domain controller, which has Active Directory (AD). I want to turn on LDAPS on this AD, so that I could access the AD via secure connection. I have followed the following guide: ...
1
vote
0answers
35 views

curl error 51 - of multiple requesting machines, only one has the issue

I have an SSL cURL request that fails from a single machine with the following error: curl: (51) SSL peer certificate or SSH remote key was not OK This error seems to have popped up overnight, and ...
0
votes
2answers
58 views

Redirect loop when forcing HTTPS

I am using the following to force HTTPS on my main website. ### Force SSL RewriteCond %{HTTPS} !=on RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301] If you want to view the full htaccess ...
0
votes
1answer
32 views

Reverse proxy Apache rewrite rule doesn't work

I've an apache reverse proxy and i try to make a rules for redirects few urls of example2 to example1 but my rewrite rules doesn't work. I've try this in the vhost of example2 : ProxyPass / ...
9
votes
1answer
273 views

Why is Internet Explorer 11 unable to connect to HTTPS sites when TLS 1.2 is enabled?

Normally I don't use Internet Explorer at all. I use it only in design time for interface tests (development machine and with unencrypted http). Every week I run the SSL Labs server test which says ...
-2
votes
0answers
21 views

Certificate chain, middle certificate error

I want to save time so I go straight in to it. I have generated a root certificate by this guide, www.akadia.com/services/ssh_test_certificate.html then I have generated more certificates and signed ...
0
votes
1answer
31 views

Which L1K entrust certificates should be kept private?

One of our client has made an update to his SSL certificate and he did send us a procedure to update the certificate on our side. They also provided the L1Kchain.txt (that should be converted to a ...
0
votes
0answers
45 views

nginx config - pass all to https apart from one folder [duplicate]

I've been banging my head on this for 3 days day and I'm getting nowhere. I transferred the whole site over to ssl and that change over didn't go too bad and the site was only down for about 30 min. ...
0
votes
1answer
22 views

Apache Reverse Proxy with SSL handling

I am trying to use apache as a reverse proxy, and to off load SSL processing from the underlying Node Js application. I have the configuration defined but it doesn't look as though the system is ...
2
votes
1answer
61 views

logging SSLv3-handshaking failure on nginx

I have website server by Nginx in FreeBSD. Last week we decided to drop support for SSLv3 connection for our site. However I wondering if nginx has logs of all client who can't do SSL-handshake ...