SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

-5
votes
2answers
35 views

should I buy the SSL certificate with the same domain seller

I bought a domain from godaddy. If I want to buy SSL certificate should I have to buy the SSL from godaddy ? Or I can buy the SSL certificate from any seller then applied it to the domain that I ...
1
vote
1answer
8 views

Where is the TLS key after using certreq for CSR generation on Windows 10?

I tried to follow the website below for instructions on how to generate the CSR for my web server: http://www.entrust.net/knowledge-base/technote.cfm?tn=8649 However, it only generates the CSR. ...
0
votes
0answers
26 views

Change Self Signed SSL to Commercial SSL on Apache 2.4

I installed Godaddy UCC SSL to replace self signed SSL on Ubuntu 12 Apache 2.4. I have updated default-ssl.conf file in etc/apache2/sites-available: <IfModule mod_ssl.c> <VirtualHost ...
3
votes
2answers
22 views

StartSSL cert doesn't work with Dovecot/OpenSMTPD

I've an issue with my StartSSL certificate. When I try to use it to activate SSL encryption on Dovecot, I get the following error in my log when a client attempt a connection to the imap server : ...
-3
votes
1answer
29 views

redirect ssl http to https issue in apache

i am a newbie with apache. need some advise regarding redirecting http to https. It looks like everything in the ssl.conf is copasetic, once i logged on to ssl environment, every links i clicked seem ...
-1
votes
0answers
23 views

Cant access HTTPS on Ubuntu 12

I'm trying to install GoDaddy SSL on Ubuntu 12 Apache 2.2. I received 2 file from godaddy: 31b937c67be4ccaa.crt (renamed mydomain.org.my) gd_bundle-g2-g1.crt wget localhost:443 received response. ...
0
votes
1answer
32 views

Nginx proxying http to https with client certificate

We have an application that is not client-certificate aware and must consume a client-certificate authenticated web-service. To fix this, we're trying to use Nginx to reverse proxy a local (http) url ...
-1
votes
3answers
32 views

Chrome on Android random red HTTPS

When I'm using Chrome on my desktop, the address bar is always green. However, on my Android phone the address bar is usually green, but sometimes red. It says that I'm using a certificate signed ...
0
votes
2answers
21 views

Failed to start stunnel4 on Ubuntu 15.04

I get the following error starting stunnel4 service on Ubuntu 15.04: root@scw-d91ec7:~# service stunnel4 start Job for stunnel4.service failed. See "systemctl status stunnel4.service" and "journalctl ...
0
votes
0answers
40 views

KeepAlive in Apache 2.4 interfering with form submissions

I have just upgraded a server to Debian Jessie, which includes Apache 2.4.10 (was 2.2), and PHP 5.6. Now, SSL sites won't submit forms in some circumstances on IE11 and iPad Safari (not sure about ...
0
votes
1answer
18 views

SSLVerifyClient require in Cloudflare DNS

I've done setup my new domain name on Cloudflare but I have a problem while I'm setting up SSL certificate. In detail, I want ask visitors who are want to see my website content a valid certificate. ...
-1
votes
0answers
7 views

GCE SSL https apache2 scripts install GoDaddy [closed]

I dont get it. Please teach me how to install ssl on my Google cloud vm server. A step by step walk through would be much appreciated. Thank you before hand.
-1
votes
2answers
18 views

How to generate .key and .crt file from JKS file for httpd apache server

I have the mycert.jks file only. Now i need to extract and generate .key and .crt file and use it in apache httpd server. SSLCertificateFile /usr/local/apache2/conf/ssl.crt/server.crt ...
0
votes
0answers
21 views

Windows 2012 with nginx

I'm planning on upgrading my server to windows 2012. One thing I'm trying to wrap my head around is how to get things working together with nginx. Question: I'm planning on making use of both vpn ...
0
votes
1answer
9 views

HAProxy: Unable to set chipper list - possible bug?

I have two machines running with similar configuration. Both have an HAProxy installed. Now I want to enable native SSL Termination. This works perfectly on Server one. Now on Server 2 I cant get it ...
1
vote
1answer
20 views

Changing SSL Certificate

We are currently deploying a security solution for one of our clients and we require their SSL cert in PEM / PKCS12 format. However, they told us that they have "Lost" their CSR and wouldn't be able ...
2
votes
0answers
17 views

SSL - Apache and Node.js on the same Amazon EC2 instance

I hosted my website on an EC2 instance, using Apache. SSL was also set up properly, running on HTTPS, port 443. Currently, I just added a chat application to the website using Node.js + socket.io. ...
0
votes
0answers
21 views

IIS ARR UrlRewrite - Preserve original protocol and port of incoming requests

I'm trying to setup a reverse proxy using IIS with ARR and url rewrite modules. The destination web server host has a website that has multiple bindings for different sites: VM 1 site A - https:443 ...
0
votes
0answers
11 views

Mutual Authentication - Allow from IP range without client certificate

Is it possible to set SSLVerifyClient: Require but, also allow IP range for users who do not have the client cert? Possibly to use: Order deny,allow Deny from all Allow from xxx.xxx.xxx.xxx ...
2
votes
0answers
81 views

HaProxy giving - 503 Service Unavailable

I am using below configuring for performing loadbalancing for two Tomcat servers. And I configured HAProxy to perform SSL/TLS bridging/re-encryption. ...
0
votes
0answers
7 views

Do I Have To Restart The Entire Cell After Adding A Signer Cert To The CellDefaultTrustStore

I need to add a new signer cert to a bunch of WebSphere 8.5 instances in the CellDefaultTrustStore. After adding the cert do I need to restart the entire cell or just the application servers that are ...
-1
votes
0answers
29 views

Centos 5.11 SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

I am trying to resove a problem with a PHP5.6 application that uses curl to connect to a SSL based service I have added the certificate I think to ca-bundle.crt but I am still getting error ...
-1
votes
1answer
48 views

SSL Certificate - Self-Signed Certificate

I'm trying to get PCI compliant and the PCI scanning company is showing below Fail scan report SL Certificate - Self-Signed Certificate SSL Certificate - Self-Signed Certificate port 25/tcp over ...
2
votes
1answer
52 views

How secure is this Nginx Config? What else can I do to optimize it further? [closed]

So I recently setup a personal GitLab server and I am using the following config with full SSL. I tried my best but what else can be done to make it better? I mostly learned what I know about ...
-1
votes
1answer
30 views

How to debug where an SSL connection is getting lost?

The big picture is I'm trying to setup an SSL connection for a subdomain, if I go to currently if I go to the non-secure url the website works, but if requeset https://sub.domain.com there is no ...
0
votes
0answers
25 views

Nginx Reverse Proxy Via SSL SSL Handshake Failed

I am running an nginx reverse proxy to an HTTPS server via ssl but I also run many other domains on the same machine. I want to block all SSL connection that don't meet the criteria of a defined ...
1
vote
1answer
44 views

HaProxy - 502 Bad Gateway : HTTP spoken on HTTPS port

I'll try to explain my issue. I'm working on HaProxy 1.5.8 / apache 2.2, and I try to do some SSL configuration, but I fail, and fail, and fail. Let's see some logs: Haproxy Logs Aug 13 17:00:28 ...
0
votes
0answers
35 views

Tomcat two way SSL with APR loses client certificate after a few requests

I found that when accessing a web application that uses client certificate authentication run on Tomcat/APR (on Windows) with Firefox or Chrome, the client cert is "lost" after a short while. To the ...
1
vote
0answers
42 views

Squid authentication helpers

I set up squid with authentication helper following along the line the guide here http://www.freesoftwaremagazine.com/articles/authentication_with_squid the only difference is that my users together ...
0
votes
0answers
19 views

Cisco ASA SYN timeout due to SSL errors?

One of our clients is attempting to connect to our AWS hosted websites through their websense proxy and ASA firewall (some use Palo Alto firewall instead). While we and others can access the sites ...
0
votes
2answers
39 views

automate generation of SSL certificates

How I can automate the generation of self signed certificates when I know the domain name ? This works, but it asks me on the command line prompt certain questions. How I should change it to ignore ...
0
votes
1answer
58 views

SSL: Issued SSL for www.domain.com but only works for https://domain.com

Last week about an SSL Certificate issued by RapidSSL and my hosting MediaTemple, you can see the order details at RapidSSL here: http://i.imgur.com/s5XHcPH.jpg And SSL details on my panel at ...
1
vote
1answer
41 views

How to Install SSL on Apache2/Ubuntu 14.04

I am sorry if my question title seems like others / repost, but i already find same question and found no solutions. I just buy GeoTrust QuickSSL and I want to setup SSL on my Amazon EC2 Instance. ...
1
vote
1answer
83 views

Routing all traffc though OpenVPN on Windows

I have problems with routing ALL windows traffic thorough OpenVPN tunnel and tried to solve this issue for hours. However, most advices about it did not help in my situation. I have OpenVPN ...
0
votes
1answer
35 views

Curl, lynx etc not accepting certificate locally but OK remotely

When I connect to my web server to view a site over HTTPS, I get the nice green EV thing in the address bar. When I use curl locally to connect, it complains about the certificate and dies. I'm aware ...
0
votes
0answers
18 views

Can't get ssl certificate to work apache2

I have a vps running debian with apache2, i’m trying to get a ssl certificate (which i ordered by comodo) of type PositiveSSL to work but apache2 gives me the following error message when i’m trying ...
0
votes
1answer
69 views

Why I cannot connect to my website in HTTP using curl?

I have a web site @ www.eshipp.com, all the domain is secured by SSL so any HTTP traffic is redirected by NGINX to HTTPS equivalent URL. However it seems that some users are not redirected and then ...
1
vote
1answer
24 views

Setting up Elastic Beanstalk application with HTTPS

I have a working application on Elastic Beanstalk and would like to make it accessible ONLY through HTTPS. Because I would like for the application to scale automatically, I need to configure HTTPS at ...
0
votes
1answer
31 views

RC4 not disabling

I'm running Apache 2.2.27 - CENTOS 6.7 x86_64 kvm and cannot disable RC4 on my VPS. SSL Labs is capping my grade at "C" because of this. Any ideas? I'm using... SSLCipherSuite "EECDH+ECDSA+AESGCM ...
0
votes
1answer
22 views

RewriteRule force SSL without WWW

How can i force SSL without WWW # SSL-FORCE RewriteCond %{SERVER_PORT} !443 RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R=301,L] Works but i can also open the site with www. Thanks in advance.
0
votes
1answer
12 views

OpenSSL get's the server SSL key instead of the website SSL key [duplicate]

If I navigate to my site, it shows in the browser that my ssl key is correct for my site hosted at WP Engine. It is showing and validating my certificate. However, if I connect with openssl, it get's ...
0
votes
1answer
19 views

HSTS header causes problems for CNAME records?

For a couple of years I have SSL on my personal domain: https://juriansluiman.nl. Now I was using subdomains to access my Google Apps: mail, calendar etc. All these subdomains are configured using ...
0
votes
1answer
20 views

What is the Difference Between An Immediate Signing Certificate and an Intermediate Certificate?

I am doing some work with AWS, and in the process of uploading my certificate to AWS, the certificate chain I am uploading is throwing an error that says, The certificate chain must start with ...
0
votes
1answer
45 views

CloudFront SSL issue

We have a wildcard certificate that works for several cloudfront hosts we use at work here (all or mostly all tied to an S3 bucket) but when accessing using SSL, my browser yields an ...
0
votes
0answers
13 views

How do you use CA signed certificate with DAVMail?

Ok, I've followed the directions here: http://davmail.sourceforge.net/sslsetup.html I've generated a csr and had it signed by my CA and have back the server.cer file. The problem is, this doesn't ...
1
vote
0answers
58 views

Optimizing HAProxy SSL Termination (with Nginx backend on Ubuntu)

How can I optimize HAProxy with SSL Termination to Nginx backends on Ubuntu? The setup works fine and routes properly. However, when I perform SSL Termination with HAProxy, theres a huge performance ...
0
votes
1answer
75 views

How to submit IIS created CSR to StartSSL certificate provider?

I'm in process of setting IIS server up with free SSL certitificate from StartSSL. I'm new in this domain. StartSSL seems to be legit to me. My question is regarding point 7 on their website The ...
2
votes
1answer
41 views

Unable to turn off SSLv3 on Apache 2.4.9 without losing TLS 1.1 and 1.2

I have an interesting problem with two Linux servers with Apache 2.4.9: i'm trying to disable SSL v3 and RC4 in order to block POODLE and keep SSL Labs happy. However, whenever i turn off SSL v3, i ...
3
votes
1answer
110 views

Configuring SSL on Nginx Reverse Proxy for GitLab

I am having a small issue in my personal gitlab setup. I wanted to redirect all traffic that comes from http://gitlab.example.com to https://gitlab.example.com. SSL is indeed working on ...
2
votes
1answer
36 views

For DNS and SSL do I need a separate certificate for every (DNS RR) A record?

So our firm wants to separate out our cloud servers into separate environments, so www.foo.com, test.foo.com and dev.foo.com. [We may even want to break our subdomains into further sub-domains.] My ...