SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
1answer
3 views

Creating local self-signed Certificate for user 'tomcat'

When I installed Tomcat 8 on my Ubuntu 15.04 I used the following command to create the user "tomcat": sudo adduser \ --system \ --shell /bin/bash \ --gecos 'Tomcat Java Servlet and JSP engine' ...
3
votes
1answer
23 views

Bluehost claiming that an SSL certificate needs to be a wildcard certificate to cover a single subdomain?

I am new to SSL certification, and have just purchased a standard SSL certificate for a single sub-domain; however, when my server administrator installed it using cPanel on the main domain, HTTPS ...
2
votes
2answers
141 views

RHEL Nginx SSL versus non SSL performance huge difference.

I'm in the process of setting up an Nginx 1.8 reverse proxy. In short - Serving HTML content HTTP traffic is up to 50x faster than HTTPS. Serving ProxyPass HTTP traffic is up to 7x faster than ...
0
votes
0answers
12 views

Set up IIS as forward proxy for HTTPS requests

Is it possible to set up IIS as a forward proxy for HTTPS requests? My use case is this: I have some process running locally on the IIS machine which is able to make HTTP calls, but not HTTPS calls. ...
0
votes
0answers
12 views

SSL in aws ec2 windows running node js

I have a domain via namecheap (say example.com) and server is a aws ec2 windows instance. There's a node js server listening at 443 , with following code require('https').createServer({ key: ...
0
votes
0answers
11 views

Adding SSL to Virtual Host takes down all sites [on hold]

First question on here. Not fantastic with server side stuff but I have had to take it over at work. One of our servers has site that needs an SSL certificate. Now I have gone through all the ...
-1
votes
2answers
39 views

Will CSR become invalid

I have a domain registered with namecheap and server instance is aws ec2 (windows machine running node js) , cname record pointing to ec2 instance's public ip. Now i want to configure ssl on it , I ...
1
vote
0answers
14 views

HTTP to HTTPS redirect not working!? - Tried multiple methods

I purchased a Standard UCC SSL Up to 100 pack from Godaddy. I have installed all the required files on my server, and going to https://www.example.com works fine, but http://www.example.com is NOT ...
0
votes
0answers
15 views

SSL's don't work on both www. and non www. when using SNI in IIS

I am trying to migrate some ASP websites from a Windows 2008 environment where each host using an SSL is on a separate IP. I would like to move these websites to a Windows 2012 environment where each ...
0
votes
1answer
18 views

Geotrust SSL certification issue

I have an issue with curl (Centos 6 env) does not recognize Geotrust intermediary certificate: * Trying 192.168.6.6... connected * Connected to composer.graymatter.co.uk (192.168.6.6) port 443 (#0) ...
0
votes
0answers
14 views

Running Hudson, Sonar and HA Proxy on the same server

I am running Hudson, Sonar and HA Proxy on the same server (Doing this for the sake of a POC so do not have access to multiple servers. I am Using HAProxy to enable SSL for both servers. I can ...
0
votes
0answers
12 views

OpenVPN with IPSec

OpenVPN with IPSec We are using OpenVPN to connect multiple devices. The customer requires using IPSec, but OpenVPN is SSL VPN. Their website says this OpenVPN's security model is based on using ...
-2
votes
1answer
26 views

aws windows apache24 multiple subdomain

i have two subdomains api.domain.com with A record xx.xx.xx.xx // elastic ip address user.domain.com with A record xx.xx.xx.xx // elastic ip address apache httpd-ssl.cnf Listen 443 ...
0
votes
0answers
34 views

ssl (https) for https://my.example.com resolves to https://example.com ip address

I have a server my.example.com with ip address 111.111.111.222 I have a server example.com with ip address 111.111.111.111 I created an ssl certificate with letsencrypt for my.example.com However, ...
0
votes
1answer
25 views

Apache configuration using SNI and mix of SSL certs

Up to this point I've been using SNI in my ssl.conf file with Apache 2.2.31 I'm serving up different sites all in the same document root. For example: NameVirtualHost *:443 <VirtualHost *:443> ...
0
votes
1answer
14 views

WSREP: Bad value for 'socket.ssl_key'

I am attempting to initialize a new MariaDB Galera cluster with SSL-encrypted replication. I have followed this guide to the letter, specified different details for CA, Server, and Client ...
0
votes
0answers
5 views

Galera Rsync SST Secured via SSL/SSH

Is it possible to secure Galera Cluster SST via rsync with SSL/SSH? This page suggests it is not, specifically the following quote: Unlike rsync, xtrabackup includes support for SSL encryption ...
0
votes
1answer
19 views

Preloading Strict Transport Security (HSTS)

I configured my webserver to use Strict Transport Security (HSTS). I more or less used a configuration as in this manual. But I get the following in my SSL-report if I run a test on Qualys SSL LABS: ...
0
votes
0answers
16 views

Windows Server 2008 R2 with IIS7 - RC4/SSL3 disabled, but still flagged for having them

According to IIS Crypto, my RC4 and SSL3 items are disabled; however, ssllabs still rings up the site as failing. SSLLabs result IIS Crypto results: IIS Crypto results Same settings on server and ...
-1
votes
2answers
39 views

SSL encryption with CNAME redirect

Here is my current architecture: I have a simple site hosted in the cloud that needs to be served from my company. Thus, mysite.com has a CNAME redirect to 1234.cloud.com. I understand that the SSL ...
0
votes
0answers
16 views

Register SSL cerificate for domain that redirects to DiskStation via dynDNS [closed]

Is it possible to activate SSL (not self-signed!*) for a domain that only redirects? Background: I can't activate an SSL certificate* for the domain example.com*, because I'm asked to put a code in ...
0
votes
0answers
10 views

Single certificate for postfix/dovecot mail server with multiple domains

I have a single IP-address and thus one mail server (postfix+dovecot on CentOS 7). I have one main domain name and each client has their own domain name on which they want to receive mail. All A and ...
0
votes
0answers
16 views

Custom Error Page doesn´t work with SSL

I have a custom 404 error page but unfortunatly when I install the HTTPS on my server and set everthing up so that https works the error page doesn´t work. When I enter a wrong url I just get a ...
0
votes
0answers
15 views

Squid3 + HTTPS Authentication issue

I've successfully setup Squid3 to work as a transparent proxy for HTTP and HTTPS, installed the CA on the machines. Everything works OK, but there is this corporation site I work for where Squid does ...
0
votes
0answers
16 views

Analyzing SSL Encryption Alerts

I have captured the traffic between my machine and my server using Wireshark, trying to find why some SSL requests fail. I've read this and this post about debugging SSL entries, and I'm able to find ...
0
votes
1answer
12 views

How to properly set up SSL proxy in Apache?

I'm trying to set up an SSL proxy to access a local web-app externally. I get a 500 error when accessing the page. The log says: [proxy:error] [pid 17153] (502)Unknown error 502: [client ...
0
votes
1answer
24 views

URL incorrectly redirecting to other site hosted on same server (nginx)

I have an Ubuntu VM running nginx that I'm part way through configuring for SSL. I've defined some custom local domains that I use for development, stored in my hosts file (on the host machine, which ...
0
votes
0answers
31 views

LetsEncrypt adding new Cert without killing Service

I use Let's Encrypt for my HTTPS certificates and every time I add a new cert or update a existing one I must stop my HTTP server on port 80 and start the Let's Encrypt script. I want to add new ...
1
vote
1answer
16 views

How do I get apache HTTP server to log the SSL Protocol for requests

I am planning on disabling TLSV1 on an apache 2.4 server running on Ubuntu 14.04. Before doing this I thought it would be good to analyse how many users this would impact. I've read through the apache ...
0
votes
0answers
19 views

HTTPS Content Filtering without de-crypting traffic using squid?

I am attempting to terminate https traffic based on ACLs using ssl_bumping WITHOUT de-crypting the traffic in intercept/transparent mode. Has anyone got this to work before? I have copied my ...
0
votes
1answer
37 views

Haproxy Problems url context and SSL

I have a question about a acls with path_beg in https frontend . My enviroment : haproxy ==> acl 1 /web1 ===> https://app/web1 haproxy ==> acl 2 /web2 ==> https://app/web2 Config: frontend ...
0
votes
1answer
22 views

Generating SSL key for Dovecot and Postfix

Following this tutorial: https://www.vultr.com/docs/simple-mailserver-postfix-dovecot-sieve-debian Trying to create a self-signed SSL certificate for testing purposes for my mail server, using code: ...
0
votes
0answers
21 views

How to setup YouTrack over SSL in Windows

I installed YouTrack 6.5 issue tracker as MSI distribution in Windows Server 2008 Virtual Machine hosted in Azure. It runs in 80 port well, but I cannot find how to apply SSL. I read YouTrack ...
0
votes
1answer
40 views

Certificate not trusted by only a single browser

We have a site that uses a signed cert from thwarte and we have an A rating for the cert across multiple checking tools. However, we have a user that complained that her browser does not trust the ...
0
votes
2answers
77 views

HTTP working HTTPS not working

I set up Comodo SSL on CentOS 6.7 and Apache/2.2.15 and we are running a CakePHP application on the server. When I go to http/domain its working but when I go to httpS/domain it says 404 Not Found ...
2
votes
1answer
106 views

The client and server cannot communicate, because they do not possess a common algorithm on Windows Server Web 2008

I am working on a ASP.Net WebForms application. We are using PayFort's Start API for the payment process. The application is running fine on our local machine (Windows 10) but it shows following error ...
1
vote
0answers
18 views

Dovecot Require Client Certificate for Remote Connections Only

After a bit of a struggle I've managed to configure Dovecot to require client certificates for users logging in, and it works well. However, I also want to setup a web-mail solution (Roundcube) which ...
-1
votes
2answers
36 views

nginx 1.8.0 ssl configuration root location behaving unexpectedly

I bump into this problem. I recently install nginx 1.8+ on a centos 6.7 along with PHP-FPM (5.3+). The installation was fine and setting up the virtual host was okay too but when I create a secure ...
-2
votes
1answer
29 views

SSL proxy nginx cannot reach server by domain name

I am having an odd issue. I configured a SSL proxy with Nginx serving a website in HTTP which is on 127.0.0.1:1195 (example.com is in my hosts pointing to 127.0.0.1). For some reason : ...
0
votes
0answers
12 views

How to use keystores and trust stores in linux & nginx

I am a newbie to implementing some of these concepts.I have a few questions to ask. I have read about keystores and trust stores using various links. The one that makes sense is this ...
1
vote
0answers
28 views

Which permissions should I set to dhparam.pem?

I am generating Diffie-Hellman parameters for the ssl_dhparam directive in the SSL configuration of nginx. The file dhparam.pem is created with the command openssl dhparam 2048 -check -out ...
0
votes
1answer
50 views

ssl nginx wrong path

i am trying to configure ssl on nginx server but it show me the wrong directory.. http on port 80 is ok, https on 443 no this is my formazioneturismo.com.vhost fastcgi_cache_path ...
0
votes
0answers
37 views

Windows server 2012 R2: Adding support on new cipher

Environment Description I have a VM (hosted in Azure) cluster (one of many identical machines) that I'm using for running my application. I have noticed that some webpages are cannot be loaded in ...
0
votes
2answers
32 views

Apache TLS (SSL) Performance

We are running a fairly powerful dedicated server with a Xeon CPU, 32GB RAM, and RAID SSDs running Centos 6. Yet, we are still seeing HTTPS add over 100ms to our page download time. Is there anything ...
1
vote
2answers
37 views

Unable to disable SSLv3 in Apache for POODLE

One of my client wanted me to upgrade openssl and Apache on his server because he want to receive an A from SSLLabs. I went ahead and upgraded to Apache 2.4.18 and openssl to version 1.0.2e. I then ...
0
votes
1answer
34 views

Without using mod_rewrite, what is the best way to redirect all subdomains to https? [duplicate]

I am currently using mod_rewrite to redirect all subdomains to https, but multiple sources have suggested that Using mod_rewrite to do this isn't the recommended behavior. See RedirectSSL The ...
0
votes
1answer
17 views

Allow active mixed content (iframes) with SSL and Content Security Policies

I've installed a SSL certificate on my server, and I've made it HTTPS. But I need to load existent iframes with embedded content, usually YouTube videos that were saved with HTTP url, but also other ...
0
votes
0answers
11 views

F5 SSL offloading custom 404 page

We have an F5 that we want to use for SSL termination in front of our JBoss servers with NetIQ auth, and we have the configuration working for all normal traffic. The problem is with our custom 404 ...
-2
votes
1answer
24 views

Use a Mac to create a CSR for another server

I have a website hosted on Bluemix. I want to set up an SSL certificate, I am following this guide: https://developer.ibm.com/bluemix/2014/09/28/ssl-certificates-bluemix-custom-domains/ I placed an ...
0
votes
2answers
35 views

SSL on apache; the requested URL was not found

I am setting up SSL on my Apache/2.4.6 RHEL server. In httpd.conf, have VirtualHosts as shown below... <VirtualHost *:80> ServerName foo.bar Redirect permanent / https://foo.bar ...