SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
0answers
14 views

nginx: How to log TLS error (if unsupported ciphers / protocol)

I'm in the progress of switching to 100% https. Server is running nginx+libressl. Before going https:100% I'm interested in seeing which clients would no longer be able to connect to my site. E.g. ...
0
votes
1answer
35 views

Best way to manage multiple domain with SSL in single droplet?

Firts of sorry about my poor english, but I'll do my best. Currently I manage 2 domain on my $5 DigitalOcean droplet and have use Cloudflare as my DNS manager with Flexible SSL configuration, ...
0
votes
1answer
13 views

Nginx forward ssl to ISPConfig lxc container

I am having issues with https connexions to the ISPConfig admin panel (port 8080). My setup is relatively standard. I own a physical host, which routes all traffic on common ports to an LXC container ...
0
votes
0answers
8 views

haproxy get ssl interrupt error, how haproxy tell server to close ssl or tcp?

I use haproxy 1.5 and a windows server build site. my site work under the https protocol, so for haproxy I use tcp mode since I think the ssl can not work on http mode. my problem is the ssl ...
0
votes
1answer
27 views

SSL connection to server ip address

I have a server which equipment at remote locations on private networks connect to via the internet using SSL. An SSL Certificate for the domain name of the server is installed. I have a number of ...
0
votes
0answers
31 views

Machine cannot connect to SSL website [migrated]

I have two machines that I use to submit data to a secure HTTPS website using a C# program. One of them has no trouble, but the other one fails handshake. I've noticed that the working machine sends a ...
0
votes
0answers
17 views

SChannel errors after enabling SSL on a Windows Server 2012 R2

I have a Windows Server 2012 R2 instance on Azure. For a new website I have ordered a certificate by GlobalSign. After getting the certificates from them I have completed the certificate request in ...
0
votes
3answers
31 views

Server setup for SSL for sending and receiving emails?

I managed to setup one physical server using postfix, dovecot with mysql server. I do plan to use virtual domains and users. Current setup to send and receive emails. SENDING smtp.example.com ...
0
votes
1answer
25 views

openldap SSL/TLS Cert: Get a 'real' one or use Self Signed?

I'm setting up SSL/TLS on OpenLDAP and wondering why the Debian Handbook has the user create a self-signed cert? Wouldn't one signed by a 'real' CA be more secure?
-1
votes
0answers
12 views

How to issue a Client Certificate with the Client's hostname using openssl?

I recently went through the process of securing a communication between two servers, one internal to my network, the other external. In order to accomplish this, I used openssl and went through the ...
1
vote
0answers
24 views

Outlook/Exchange certificate errors after setting clientaccessserver, etc… properties

After updating exchange 2010 using the commands for Set-ActiveSyncVirtualDirectory, Set-ClientAccessServer, Set-ECPVirtualDirectory, Set-OABVirtualDirectory, Set-OWAVirtualDirectory, & ...
0
votes
0answers
7 views

Non-domain log forwarding certificate types

I'm trying to set up a source initiated subscription (Log forwarding) where the event source server is not in the same domain as the event collector server. I'm following these steps. It states that ...
0
votes
2answers
26 views

HAProxy backend with TLS stopped working

I'm having trouble with one of our HAProxy-Servers that uses a backend with TLS. When starting HAProxy the backend will report all servers as down: Server web_remote/apache_rem_1 is DOWN, reason: ...
0
votes
3answers
128 views

Why does Chrome on 1 computer say my certificate is invalid/insecure? [duplicate]

I have a wildcard domain certificate from StartSSL for a site (https://later.webblocks.nl/). When I check it in any browser on my home PC, it's all good. (Green lock in Chrome.) When I check it in ...
0
votes
1answer
27 views

Weblogic Mitigate POODLE vulnerability after upgrade and still use CBC ciphers

I recently upgraded my Weblogic server to 10.3.6 with java 7. So with that I have TLS1.0 - TLS 1.2 enabled via the setEnv.sh. Some of the ciphers I am using to make sure that they are compatible ...
0
votes
0answers
40 views

Nginx TLS renegotiation

Our webserver has recently failed a PCI compliance test due to existence of "TLS Session Renegotiation Vulnerability" (CVE-2009-3555) However I'm not sure whether those results are right. We're using ...
2
votes
1answer
27 views

Apache cipher configuration of my website makes Google Chrome complain

My website, here, is on my server (Debian Wheezy, Apache 2.4.10 on the testing repos). I configured Apache myself and blocked all attackable ciphers after reading many websites discussing those ...
1
vote
1answer
36 views

the same certificates are sold at different prices?

I've encountered so many times with this situation. For example everybody know if I buy a Positive SSL for a year from a reseller, its price is about $5.95 . If I buy the certificate from CA ...
0
votes
0answers
16 views

Multiple static IPs Amazon EC2

I want to have multiple sites with SSL on IIS (Windows 2008 R2 on Amazon AWS). I've read this other question and the documentation in Amazon where it explains how to add another IP. My question is, ...
0
votes
0answers
33 views

Nginx not looking for ssl cert in location specified in nginx.conf

nginx conf looks like this: server { ssl_certificate /etc/nginx/ssl/nginx.crt; ssl_certificate_key /etc/nginx/ssl/4096_SSL.key; systemctl status nginx.service shows ...
1
vote
1answer
301 views

The site is using outdated security settings that may prevent future versions of Chrome from being able to safely access it

We're using an AWS ELB to do SSL termination and are having an issue where Chrome is displaying "https" in red with a strikethrough. It says "The site is using outdated security settings that may ...
0
votes
0answers
19 views

Can I use a domain name for a TCP process hosted in IIS?

I'm trying to set up a WCF service hosted in IIS 7.5, with TCP bindings. I also need to use a SSL certificate for security. From what I have read, I can add net.tcp as a binding type. However when I ...
0
votes
1answer
32 views

nginx: Why SSL config on one domain enables the others?

Say I have app1.domain.com and app2.domain.com, and its basic config files app1.conf and app2.conf, inside vhosts.d folder. SSL config files should contain the path of the app, and the path of the ...
1
vote
0answers
52 views

Chrome & IE not accepting client certificate

I have two websites on different hosts protected by the same SSL certificate, one Apache2, one JBOSS. My process: Created a private CA. Created a new certificate and signed it with the CA. ...
-1
votes
0answers
30 views

CURL Error: 35 - error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure [closed]

I'm getting below error when connecting to quantumgateway.com CURL Error: 35 - error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure Using Apache 2.4. PS. The SSLV2 and SSLV3 ...
0
votes
0answers
34 views

PHP cURL call returning error 56 with NSS error -12195

I have an internal server (internal to my network) to which I make a REST API call from my external server. I don't know if it helps but the external server is running php 5.3.6 with cURL 7.19.7. To ...
3
votes
0answers
21 views

OCSP stapling with nginx

I'm having trouble with OCSP stapling in nginx. So I start up the openssl ocsp daemon, and then I visit my site. Then it says Invalid request. I am using a private PKI and CA. SSL key: 8192bit DH key ...
-1
votes
1answer
23 views

https connection can't established behind a gre tunnel

I have a network topological graph like this: Local box GateWay box +---------------+ +--------------------------+ |192.168.1.200 | -> |192.168.1.2 10.2.10.2 | ...
1
vote
0answers
19 views

SVN merge with HTTPS hangs on FreeBSD

I was asked to post it on here instead (original here) I setup SVN and Apache, and when I do a checkout it executes normally, but whenever I try to run svn merge for some reason it just hangs. Here ...
0
votes
0answers
17 views

How to use Apache2 to proxy a service from a subdirectory URL to another port on the same server, while enabling SSL?

I'm running Ubuntu Server 14.10 which has an apache2 install hosting a couple of websites. I also have some other web services installed which are accessible on other ports. Here's a layout (sorry I ...
1
vote
0answers
31 views

SHA-2 issues with Verisign root on OS 10.9 Mavericks?

I'm using a Secure Site Pro with EV certificate from Verisign/Symantec, with a full SHA-2 root chain. Everything is great - except for Mac OS 10.9 (Mavericks), that complains the certificate is ...
0
votes
1answer
24 views

Setup SSL keys when using roles-profiles pattern with Puppet

Here is a scenario. I have two web applications (lets call them webapp1 and webapp2) that needs apache, php (with some modules), and the web app's code it self. This is how I set this I set this up ...
0
votes
1answer
33 views

How to make apache, node.js, beego and https work nicely together?

I have a server who I want to serve up two different sites: a.example.com should be directed to node.js listening on 8081/8443 b.example.com should be directed to beego listening on 8081/8444 I ...
1
vote
1answer
37 views

SSL not working with subdomains

I have an issue here, I am new on this, I've been watching some tutorials and I see that everything is OK in my configuration but I can not access to my page with the subdomains. Here is the report ...
0
votes
1answer
38 views

Configure Zenoss login screen for SSL URL

I'm trying to configure Zenoss 4.2.X to use an SSL-enabled URL in the login form. I have nginx as an SSL reverse-proxy sending requests to Zenoss listening on port 8080. This works. However, the ...
1
vote
0answers
24 views

WinRM HTTPS Connection to Windows 8 Systems

I have a couple virtual Windows 8 clients that I will be using to run some tests against a server. I set up WinRM so I can easily pull the data back from all the clients for analysis but the data ...
0
votes
1answer
47 views

Can I configure IIS 7.5 Forward Secrecy to redirect for unsupported browsers (I.E.)?

I have successfully configured Windows Server 2008 R2 with IIS 7.5 serving my Asp.Net 4 application for forward secrecy utilizing the information from here I still have visitors/user with downlevel ...
2
votes
2answers
27 views

Having SSLCertificateFile/SSLCertificateKeyFile/SSLCertificateChainFile in ssl.conf vs. inside VirtualHost

I'm setting SSL up for a new server and going off of how I configured it on the previous server. I noticed that I have SSLCertificateFile, SSLCertificateKeyFile, and SSLCertificateChainFile specified ...
1
vote
1answer
133 views

Configuring Tomcat 7 to use TLS only

I have a Tomcat 7 server on Ubuntu 14.04 (Java OpenJDK 1.7) which has been working fine for over a year, with no problems. A few months ago it stopped being accessible wtih Chrome, I dealt with ...
0
votes
0answers
19 views

HTTPS Config for symfony2

I have followed this tutorial for setting up https on an ubuntu server: https://www.digitalocean.com/community/tutorials/how-to-create-a-ssl-certificate-on-apache-for-ubuntu-14-04 I have ended up ...
2
votes
0answers
31 views

rabbitmq-shovel amqps connection handshake failure

I fail to setup a rabbitmq shovel over amqps. The same shovel works fine over amqp. my (edited) uri: ...
-2
votes
0answers
10 views

nginx ssl server rewrite request to external url to be http

I have an nginx server configured as a reverse proxy with SSL offloading. The server name is example.com Everything works fine, but there is a form in the webpage that needs to post to an external ...
0
votes
1answer
26 views

Dedicated server issues with SSL and IPs, content showing on wrong site [closed]

We have a number of sites on this dedicated server. Pages from one site are showing up on another site. Example: clientsite1.com (right site, no SSL installed) clientsite2.com (forwards to SSL, ...
2
votes
0answers
23 views

Apache - Virtual Hosting Mass Client Configurable SSL, Reverse Proxy

My scenario is that we host multiple websites for clients and all of the clients sites run on SSL only. Currently we have a seperate virtual host file for each client for Apache. Each file is ...
0
votes
1answer
27 views

Configure a transparent Elastic Load Balancer

I want to create an Elastic Load Balancer in front of my SSL site which simply passes through ports 80 and 443. I do not want my Elastic Load Balancer to have an SSL certificate of its own, I just ...
-1
votes
2answers
114 views

What should I do to know if SSL is working? [closed]

I am working with NGINX, I just set up a domain and subdomain where I need to have SSL on both. Look at the server block for the subdomain server { listen 80; listen 443 ssl; server_name ...
0
votes
0answers
18 views

Extra certs issue with Nginx SSL config

It seems that I've set up my SSL wrong. SSL labs gives me the following: https://www.ssllabs.com/ssltest/analyze.html?d=pitot.io&hideResults=on The issue in question is "extra certs". This ...
0
votes
1answer
46 views

Proper method to generate a secure self-signed certificate

I have several websites on which I want to install a self-signed SSL certificate. I tried following various guides, such as this one (all provided more or less the exact same instructions). The given ...
-1
votes
1answer
41 views

If SSL certificate expired, will it get automatically deleted? [closed]

Our website is http://example.com is redirecting to https://example.com/cgi-sys/defaultwebpage.cgi So maybe our SSL certificate expired? I can't see the SSL cert. in the cPanel list of SSL ...
0
votes
0answers
18 views

Wiresharking access to AWS to debug permission problems

I have a plugin which pushes files to S3. It's not my plugin and auditing what exactly it does has proved difficult. I'm trying to enable access logging on the bucket to figure out what exactly is ...