SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
0answers
9 views

Disable SSL3 on tomcat4

I have a very old web application that uses tomcat4. B/c of the poodle vulnerability I need to disable SSL3 and disable a bunch of weak ciphers. My connector looks like this, but apparently ...
0
votes
0answers
29 views

Why my server responds with outdated ssl certificate, even after removing certificates?

I have a RackSpace VPS with nginx and a domain on GoDaddy. Previously I had ssl certificate from GoDaddy connected to my domain. Now, some time after the certificate expired, I have a new ssl ...
-1
votes
0answers
15 views

How to add SSL certificate to domain that is URL-frame redirected to AWS EC2 server

Currently running a node.js webapp with a NginX reverse proxy on an Amazon EC2 web server instance. Furthermore, I have a domain, call it example.com, which URL-frame redirects to this web server. ...
1
vote
0answers
12 views

IIS 8 SSL Stops working Windows 2012 Core

Is there any known bug or cause for an IIS server to just stop serving SSL overnight? The certificate has not been changed for some time and is still valid. Same certificate works on other identically ...
2
votes
0answers
11 views

Apache reverse proxy location based access control not working

I'm running a small web server with Ubuntu 12.05.5 LTS and Apache 2.2.22 and ran into this problem recently: For an IIS server on a virtual machine I have the following reverse proxy config: ...
2
votes
1answer
22 views

HAProxy 1.5 SSL and many website

Actually I'm hosting hundred website on Apache2 with some HTTP and some HTTPS, I'm preparing a new hosting infrastructure and I'm using HAProxy to loadbalance all my HTTP and HTTPS query on my ...
-1
votes
1answer
42 views

Nginx Enable HTTPS/SSL when forwarding to other URL

Currently, I'm working with an AWS Ubuntu EC2 instance, running a Node.js app on port 3000, that has an Nginx reverse proxy. I have been trying to enable HTTPS and add a SSL certificate and I've been ...
0
votes
1answer
17 views

AWS EC2 SSL Server certificate does not match the URL

After uploading the certificate to iam, when I visit https://www.mywebsite.com I get this error The identity of this website has not been verified. • Server's certificate does not match the URL. ...
1
vote
1answer
30 views

SSL proxying on nginx — different behavior in different clients

I'm running an SSL-required web service and planning to switch hosting providers. To avoid downtime for our users while DNS caches clear, I'm planning to proxy requests from our old server to the new ...
1
vote
1answer
40 views

Setting up SSL on nginx

I'm trying to set up SSL with Nginx, however I'm having a few problems. I received all the required files, and created the bundle as shown here, and added it to my site configuration as below: server ...
1
vote
0answers
5 views

Can OpenDirectory on OS X reasonably be configured to use an intermediate CA cert from an existing CA?

We're trying to set up OpenDirectory. It seems to want to create its own CA, and then an intermediate CA with a certificate signed by its own CA. I'd prefer to generate an intermediate CA certificate ...
0
votes
0answers
36 views

How to configure Coldfusion 10 CFLDAP to use TLS instead of SSL2

We are using CFLDAP to authenticate users from a remote system. The remote system has now shut down SSL 2 and 3 due to the POODLE issue. Is there a way to configure either Coldfusion or Tomcat to use ...
1
vote
1answer
15 views

How do I use a wildcard certificate with SSRS?

I am trying to setup SSRS access via SSL, and I have followed the instructions here; however, I do not receive a clickable url in the Configuration Manager to click on and test. The url shows as ...
6
votes
1answer
565 views

Why does my wildcard SSL certificate cause a domain mismatch error on a second level subdomain?

I have a server https://www.groups.example.com - in FireFox I get the "This Connection is Untrusted" message and the "technical details" say www.groups.example.com uses an invalid security ...
1
vote
1answer
36 views

Disabling weak ciphers

Does anyone have any experience disabling weak ciphers on Windows Registry? Server doesn't have IIS installed. Below is the results of my security scan but not 100% what registry entries should be ...
0
votes
0answers
5 views

com.sun.aas.jws.signing.alias Not working in Glassfish - still self signed

I found some articles like this one stating that in order to tell Glassfish to use a specific certificate to sign your Java Web Start code, you should set -Dcom.sun.aas.jws.signing.alias=myalias in ...
1
vote
1answer
30 views

SSL - create private.key from private-key.pem for Apache

I followed this tutorial to generate a private-key.pem and csr.pem for my AWS SSL Loadbalancer. Everything went well but now I need to setup Apache and need 3 files. SSLCertificateFile ...
-2
votes
1answer
30 views

SSL Certificate on CNAME

I have been reviewing the other posts regarding the issue, but having some trouble understanding since I've tried implementing it but still not able to figure it out. I have 2 servers. The main ...
1
vote
2answers
68 views

Setting up SSL with a redundant connection

My situation: We have two servers, Server A and Server B. Server A has a proxy configured, which serves data (over SSL) from Server B. Server B is reachable via 1.1.1.1 (one.server.example.com) and ...
1
vote
1answer
14 views

How can I log the negotiated SSL Cipher in Windows 2008 R2

I have a web server running IIS 7.0, on Windows Server 2008 R2. The web application is written in C# .Net 4.0. The web application receives web requests, and sometimes makes outbound https requests to ...
1
vote
2answers
140 views

Disabled SSLv3 to combat Poodle now cannot connect to SQL “Connection forcibly closed by remote host”

I have disabled SSL3 on my web server to combat the Poodle Vulnerability and now I am unable to connect to my SQL server using SQL Authentication. I just get "Connection forcibly closed by remote ...
1
vote
2answers
53 views

Is it possible to set SSL/TLS version HTTP header with Apache which an backend application can use?

There is one service on a virtual machine with a dedicated IP that required to be accessible via SSLv3 (WinXP with IE6 clients). I moved that service several several years ago to a that virtual ...
1
vote
1answer
36 views

SSL_accept error when mail client connect to postfix

I've managed to set up postfix and dovecot with self-signed certificate on my server. I can send and receive email using telnet command there. Now I want to connect to my mail server from a ...
1
vote
1answer
58 views

Connection to URL using OpenSSL client works, but curl fails

I have a CentOS 5.9 server, from which I need to make SSL connections to another server. The remote server has a certificate ultimately signed by the GeoTrust Global CA. At the time of writing, this ...
2
votes
1answer
27 views

Possible to Mix SNI and Dedicated IP SSL on Apache?

I've reached the limit of available IP addresses on my Apache web server but increasingly need sites to run under SSL. I'd be comfortable with some of the sites running under SNI but a few of them ...
0
votes
1answer
34 views

Domino SSL 301 redirect with www and non www

With reference to this question How to do a 301 redirect from http to https in a domino server? My redirects are failing. (gaps between protocol and : are because i dont have the rep to post multiple ...
0
votes
0answers
16 views

Windows SSL Cipher Suite Policy

I'm looking to customise the cipher suite priorities for my Windows Server 2008 R2 and 2012 R2 servers via Group Policy. Am I able to create one policy for both systems? Windows Server 2012 R2 ...
-3
votes
0answers
20 views

SSL Cert expired, need to redirect to non-ssl, but can't do it early enough in the connection process [duplicate]

I've got an expired SSL certificate which we don't plan to renew, as things have changed and we don't need it any more, or certainly not right now anyway. So I need to redirect all https traffic to ...
-1
votes
1answer
47 views

Nginx rewrite HTTP to HTTPS says redirect loop? [on hold]

I am trying to redirect all HTTP traffic to HTTPS,so when i got to www.domain.com it goes to https://www.domain.com. This is my current .conf file - server { listen 80; #listen [::]:80; ...
0
votes
0answers
4 views

Apache OpenSSL httpd-ssl.conf config stops Apache, no error except when httpd-ssl.conf include disabled [migrated]

I followed directions to setup SSL on my custom WAPP stack (Windows/Apach/PHP/PostgreSQL) here... http://www.tehuber.com/article.php?story=20110315153800545 After back-tracking I discovered when ...
0
votes
0answers
21 views

How to Flush NginX's SSL buffer mid-request for Server Push

I'm writing an app that uses long polling to push messages to clients. It doesn't end the request when it finishes sending a message though: it just flushes. It works fine, even when I proxy it ...
0
votes
0answers
7 views

Can we use open SSL on our customers websites? [migrated]

We have more then 100 customers and we need to set there website a SSL. Do we have to buy them an SSL from one of the companies (Godddy and etc) or we can use OpenSSL for free? Thanks
0
votes
0answers
6 views

How to set SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS in Ubuntu 14 SSL Settings [duplicate]

I believe I'm having this problem: https://www.daniweb.com/hardware-and-software/microsoft-windows/threads/50765/why-i-cant-access-the-web-pages-by-ie-https-with-des-cbc-sha Their solution is this ...
0
votes
1answer
29 views

Multiple SSL Certificates Deployment For Multiple Domains at Single Server Ubuntu 12.04 [closed]

I would like to host multiple domains at same VPS and need to configure SSL certificate for those. The server is Ubuntu 12.04. All domains have their own certificates. I need help regarding multiple ...
-3
votes
1answer
40 views

Where to optain my client key for SSL decryption? [closed]

example.pcap is a traffic capture I have made on my local Linux box of and now I would like to decrypt it. tshark -o "ssl.desegment_ssl_records: TRUE" -o "ssl.desegment_ssl_application_data: ...
0
votes
0answers
15 views

Error when trying to force Glassfish to use HTTPS instead of HTTP

I am developing a JavaEE applicaction using Glassfish as server. I would like to force http connections to https. I have added to following code to web.xml, but when I run the application I have a ...
1
vote
1answer
187 views

Internet Explorer 8 - TLS Fatal Error Close Notify - Oracle HTTP - Server Apache 2.2.22.0

I applied the POODLE fix for Apache via "SSLProtocol All -SSLv2 -SSLv3" in the ssl.conf file for our Apache server but am having issues with the CAC Client authentication via "SSLVerifyClient ...
0
votes
0answers
56 views

GitLab can not send email correctly through public SMTP server

I installed gitlab on ubuntu 14.04 server following official instruction. I want to send email to new users using public mail server, like gmail, 163, qq. However gitlab can't send email successfully ...
1
vote
1answer
33 views

Why layer 7 load balancer cannot pass through SSL termination?

I need to share ssl termination task among server farm or multiple processes. In this architecture, there should be a load balancer before this ssl termination task. After looking for an appropriate ...
1
vote
1answer
27 views

Determining if an SSL cert is affected by SHA-1 phase-out

Google chrome will start to warn users that their SSL connection is insecure under the following conditions: The cert uses the SHA1 hashing algorithm, and The cert expires on or after 2016-01-01 (or ...
0
votes
1answer
52 views

Spacewalk client OSAD service SSL error

I have some problems with my freshly Spacewalk setup. I have registered my test client, and installed osad service to avoid executing rhn_check. But when I start osad service, I get the following ...
0
votes
1answer
33 views

IIS 7 Still showing old certificate

I installed an SSL certificate in my IIS 7 (Windows Server 2008). I deleted the expired certificate but still showing when i access from any browser. I deleted the expired certificate. I Installed ...
0
votes
1answer
90 views

Nginx reverse proxy with multiple ssl domain

I have problem with Nginx when I need configure it as reverse proxy for multiple locations based on source server, but on one port. For example I have these servers: server1.domain.com ...
0
votes
0answers
99 views

Wordpress behind nginx reverse proxy doesnt work in https

I'm trying to run wordpress on a docker based cloud. The setup is: There is a server running a mysql array, which serves a container with Wordpress Running on Nginx. The setup is copied from this ...
1
vote
0answers
53 views

How to replace Zentyal CA certificates and key with an already existing CA

The context: we're using a CA which is deployed on all our client machines, and a lot of hosts and web servers. It seems that Zentyal CA module only allows to issue a new CA using the GUI, but not to ...
0
votes
1answer
63 views

TLS-intolerant sites suddenly not working

About 2 weeks ago users started reporting that they were unable to access two https-only sites. When I inspected these sites I found they were completely intolerant to TLS. In order to connect, SSL3 ...
0
votes
2answers
52 views

IP Based certificate for HTTPS - is it possible? [duplicate]

We are having multiple business sites hosted on Windows 2008 r2 server. We do own a static IP. We want to have all of the sites work under SSL. However it is kinda not possible to have separate ...
1
vote
1answer
58 views

Unable to disable SSL3.0 in IIS

I have tried to disable SSL3.0 on my Windows web server that is running Windows Server 2008R2 with IIS 7.5. I have entered the following registry keys: Windows Registry Editor Version 5.00 ...
0
votes
0answers
34 views

Using SSL to secure Solr with Tomcat - Admin Dash Fails to Load Properly

Tomcat: 7.0.56 / Java: 7 Upd: 71 / Webapp: Solr 4.10.1 / OS: Windows 2012 R2 Busy trying to secure Solr to compensate for the lack of security prevalent for a developer. We're having some difficulty ...
2
votes
2answers
91 views

SSL on IIS8.5 - Working with named URL, but localhost results in ERR_CERT_COMMON_NAME_INVALID

I have IIS8.5 running on Win Server 2K12 R2. I have a valid SSL certificate registered to server's name foo.domain.com: I have configured my website's bindings to use https with this certificate: ...