Tagged Questions

SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
1answer
14 views

AWS EC2 SSL Server certificate does not match the URL

After uploading the certificate to iam, when I visit https://www.mywebsite.com I get this error The identity of this website has not been verified. • Server's certificate does not match the URL. ...
1
vote
1answer
22 views

SSL proxying on nginx — different behavior in different clients

I'm running an SSL-required web service and planning to switch hosting providers. To avoid downtime for our users while DNS caches clear, I'm planning to proxy requests from our old server to the new ...
1
vote
1answer
37 views

Setting up SSL on nginx

I'm trying to set up SSL with Nginx, however I'm having a few problems. I received all the required files, and created the bundle as shown here, and added it to my site configuration as below: server ...
1
vote
0answers
5 views

Can OpenDirectory on OS X reasonably be configured to use an intermediate CA cert from an existing CA?

We're trying to set up OpenDirectory. It seems to want to create its own CA, and then an intermediate CA with a certificate signed by its own CA. I'd prefer to generate an intermediate CA certificate ...
0
votes
0answers
30 views

How to configure Coldfusion 10 CFLDAP to use TLS instead of SSL2

We are using CFLDAP to authenticate users from a remote system. The remote system has now shut down SSL 2 and 3 due to the POODLE issue. Is there a way to configure either Coldfusion or Tomcat to use ...
1
vote
1answer
15 views

How do I use a wildcard certificate with SSRS?

I am trying to setup SSRS access via SSL, and I have followed the instructions here; however, I do not receive a clickable url in the Configuration Manager to click on and test. The url shows as ...
6
votes
1answer
541 views

Why does my wildcard SSL certificate cause a domain mismatch error on a second level subdomain?

I have a server https://www.groups.example.com - in FireFox I get the "This Connection is Untrusted" message and the "technical details" say www.groups.example.com uses an invalid security ...
1
vote
1answer
34 views

Disabling weak ciphers

Does anyone have any experience disabling weak ciphers on Windows Registry? Server doesn't have IIS installed. Below is the results of my security scan but not 100% what registry entries should be ...
0
votes
0answers
5 views

com.sun.aas.jws.signing.alias Not working in Glassfish - still self signed

I found some articles like this one stating that in order to tell Glassfish to use a specific certificate to sign your Java Web Start code, you should set -Dcom.sun.aas.jws.signing.alias=myalias in ...
1
vote
1answer
28 views

SSL - create private.key from private-key.pem for Apache

I followed this tutorial to generate a private-key.pem and csr.pem for my AWS SSL Loadbalancer. Everything went well but now I need to setup Apache and need 3 files. SSLCertificateFile ...
-1
votes
1answer
36 views

The certificate is not trusted because it is self-signed [closed]

I followed the instructions here to add the certificate to the Trusted Root Certification Authorities Even though I don't get any of the other errors anymore, I still get the following error: The ...
-2
votes
1answer
28 views

SSL Certificate on CNAME

I have been reviewing the other posts regarding the issue, but having some trouble understanding since I've tried implementing it but still not able to figure it out. I have 2 servers. The main ...
1
vote
2answers
68 views

Setting up SSL with a redundant connection

My situation: We have two servers, Server A and Server B. Server A has a proxy configured, which serves data (over SSL) from Server B. Server B is reachable via 1.1.1.1 (one.server.example.com) and ...
1
vote
1answer
14 views

How can I log the negotiated SSL Cipher in Windows 2008 R2

I have a web server running IIS 7.0, on Windows Server 2008 R2. The web application is written in C# .Net 4.0. The web application receives web requests, and sometimes makes outbound https requests to ...
1
vote
2answers
111 views

Disabled SSLv3 to combat Poodle now cannot connect to SQL “Connection forcibly closed by remote host”

I have disabled SSL3 on my web server to combat the Poodle Vulnerability and now I am unable to connect to my SQL server using SQL Authentication. I just get "Connection forcibly closed by remote ...
1
vote
2answers
49 views

Is it possible to set SSL/TLS version HTTP header with Apache which an backend application can use?

There is one service on a virtual machine with a dedicated IP that required to be accessible via SSLv3 (WinXP with IE6 clients). I moved that service several several years ago to a that virtual ...
1
vote
1answer
31 views

SSL_accept error when mail client connect to postfix

I've managed to set up postfix and dovecot with self-signed certificate on my server. I can send and receive email using telnet command there. Now I want to connect to my mail server from a ...
1
vote
1answer
49 views

Connection to URL using OpenSSL client works, but curl fails

I have a CentOS 5.9 server, from which I need to make SSL connections to another server. The remote server has a certificate ultimately signed by the GeoTrust Global CA. At the time of writing, this ...
2
votes
1answer
25 views

Possible to Mix SNI and Dedicated IP SSL on Apache?

I've reached the limit of available IP addresses on my Apache web server but increasingly need sites to run under SSL. I'd be comfortable with some of the sites running under SNI but a few of them ...
0
votes
1answer
34 views

Domino SSL 301 redirect with www and non www

With reference to this question How to do a 301 redirect from http to https in a domino server? My redirects are failing. (gaps between protocol and : are because i dont have the rep to post multiple ...
0
votes
0answers
15 views

Windows SSL Cipher Suite Policy

I'm looking to customise the cipher suite priorities for my Windows Server 2008 R2 and 2012 R2 servers via Group Policy. Am I able to create one policy for both systems? Windows Server 2012 R2 ...
-3
votes
0answers
20 views

SSL Cert expired, need to redirect to non-ssl, but can't do it early enough in the connection process [duplicate]

I've got an expired SSL certificate which we don't plan to renew, as things have changed and we don't need it any more, or certainly not right now anyway. So I need to redirect all https traffic to ...
-1
votes
1answer
44 views

Nginx rewrite HTTP to HTTPS says redirect loop? [on hold]

I am trying to redirect all HTTP traffic to HTTPS,so when i got to www.domain.com it goes to https://www.domain.com. This is my current .conf file - server { listen 80; #listen [::]:80; ...
0
votes
0answers
4 views

Apache OpenSSL httpd-ssl.conf config stops Apache, no error except when httpd-ssl.conf include disabled [migrated]

I followed directions to setup SSL on my custom WAPP stack (Windows/Apach/PHP/PostgreSQL) here... http://www.tehuber.com/article.php?story=20110315153800545 After back-tracking I discovered when ...
0
votes
0answers
20 views

How to Flush NginX's SSL buffer mid-request for Server Push

I'm writing an app that uses long polling to push messages to clients. It doesn't end the request when it finishes sending a message though: it just flushes. It works fine, even when I proxy it ...
0
votes
0answers
7 views

Can we use open SSL on our customers websites? [migrated]

We have more then 100 customers and we need to set there website a SSL. Do we have to buy them an SSL from one of the companies (Godddy and etc) or we can use OpenSSL for free? Thanks
0
votes
0answers
6 views

How to set SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS in Ubuntu 14 SSL Settings [duplicate]

I believe I'm having this problem: https://www.daniweb.com/hardware-and-software/microsoft-windows/threads/50765/why-i-cant-access-the-web-pages-by-ie-https-with-des-cbc-sha Their solution is this ...
0
votes
1answer
29 views

Multiple SSL Certificates Deployment For Multiple Domains at Single Server Ubuntu 12.04 [closed]

I would like to host multiple domains at same VPS and need to configure SSL certificate for those. The server is Ubuntu 12.04. All domains have their own certificates. I need help regarding multiple ...
-3
votes
1answer
40 views

Where to optain my client key for SSL decryption? [closed]

example.pcap is a traffic capture I have made on my local Linux box of and now I would like to decrypt it. tshark -o "ssl.desegment_ssl_records: TRUE" -o "ssl.desegment_ssl_application_data: ...
0
votes
0answers
13 views

Error when trying to force Glassfish to use HTTPS instead of HTTP

I am developing a JavaEE applicaction using Glassfish as server. I would like to force http connections to https. I have added to following code to web.xml, but when I run the application I have a ...
1
vote
1answer
156 views

Internet Explorer 8 - TLS Fatal Error Close Notify - Oracle HTTP - Server Apache 2.2.22.0

I applied the POODLE fix for Apache via "SSLProtocol All -SSLv2 -SSLv3" in the ssl.conf file for our Apache server but am having issues with the CAC Client authentication via "SSLVerifyClient ...
0
votes
0answers
50 views

GitLab can not send email correctly through public SMTP server

I installed gitlab on ubuntu 14.04 server following official instruction. I want to send email to new users using public mail server, like gmail, 163, qq. However gitlab can't send email successfully ...
1
vote
1answer
32 views

Why layer 7 load balancer cannot pass through SSL termination?

I need to share ssl termination task among server farm or multiple processes. In this architecture, there should be a load balancer before this ssl termination task. After looking for an appropriate ...
1
vote
1answer
27 views

Determining if an SSL cert is affected by SHA-1 phase-out

Google chrome will start to warn users that their SSL connection is insecure under the following conditions: The cert uses the SHA1 hashing algorithm, and The cert expires on or after 2016-01-01 (or ...
0
votes
1answer
49 views

Spacewalk client OSAD service SSL error

I have some problems with my freshly Spacewalk setup. I have registered my test client, and installed osad service to avoid executing rhn_check. But when I start osad service, I get the following ...
0
votes
1answer
31 views

IIS 7 Still showing old certificate

I installed an SSL certificate in my IIS 7 (Windows Server 2008). I deleted the expired certificate but still showing when i access from any browser. I deleted the expired certificate. I Installed ...
0
votes
1answer
85 views

Nginx reverse proxy with multiple ssl domain

I have problem with Nginx when I need configure it as reverse proxy for multiple locations based on source server, but on one port. For example I have these servers: server1.domain.com ...
0
votes
0answers
85 views

Wordpress behind nginx reverse proxy doesnt work in https

I'm trying to run wordpress on a docker based cloud. The setup is: There is a server running a mysql array, which serves a container with Wordpress Running on Nginx. The setup is copied from this ...
1
vote
0answers
50 views

How to replace Zentyal CA certificates and key with an already existing CA

The context: we're using a CA which is deployed on all our client machines, and a lot of hosts and web servers. It seems that Zentyal CA module only allows to issue a new CA using the GUI, but not to ...
0
votes
1answer
61 views

TLS-intolerant sites suddenly not working

About 2 weeks ago users started reporting that they were unable to access two https-only sites. When I inspected these sites I found they were completely intolerant to TLS. In order to connect, SSL3 ...
0
votes
2answers
51 views

IP Based certificate for HTTPS - is it possible? [duplicate]

We are having multiple business sites hosted on Windows 2008 r2 server. We do own a static IP. We want to have all of the sites work under SSL. However it is kinda not possible to have separate ...
1
vote
1answer
52 views

Unable to disable SSL3.0 in IIS

I have tried to disable SSL3.0 on my Windows web server that is running Windows Server 2008R2 with IIS 7.5. I have entered the following registry keys: Windows Registry Editor Version 5.00 ...
0
votes
0answers
31 views

Using SSL to secure Solr with Tomcat - Admin Dash Fails to Load Properly

Tomcat: 7.0.56 / Java: 7 Upd: 71 / Webapp: Solr 4.10.1 / OS: Windows 2012 R2 Busy trying to secure Solr to compensate for the lack of security prevalent for a developer. We're having some difficulty ...
2
votes
2answers
78 views

SSL on IIS8.5 - Working with named URL, but localhost results in ERR_CERT_COMMON_NAME_INVALID

I have IIS8.5 running on Win Server 2K12 R2. I have a valid SSL certificate registered to server's name foo.domain.com: I have configured my website's bindings to use https with this certificate: ...
1
vote
0answers
20 views

Is using self-signed certificates an option for this m2m scenario [migrated]

Imagine having a couple of hundred of embedded devices in the field that need to be remotely managed over SSH or HTTPS. These embedded devices are exposed on the internet but are installed at secure ...
1
vote
1answer
28 views

What do I need to ldapsearch AD?

I'm attempting to test LDAP for Moodle auth, by using LDAP search. When I run $ ldapsearch -H ldaps://totally.legit.hostname "(uid=jldugger)" -b dc=example,dc=org memberOf I get back: ...
0
votes
1answer
55 views

nginx can't disable SSLv3 [duplicate]

I'm having an issue trying to disable SSLv3 on my nginx installation. HTTPS works fine, but I just can't seem to disable SSLv3 and it makes my site vulnerable to the POODLE attack. Also, for some ...
0
votes
2answers
83 views

Nginx sslv3 poodle disable

I tried setup SSL cert without SSLv3 in my nginx, but SSL Labs say, my server have SSLv3 how to disable it. My config: add_header Strict-Transport-Security max-age=31536000; add_header ...
1
vote
1answer
13 views

ftp alter server response in transit

I have a unique situation where one of my business partners runs a FTP server that is out of date and the client I need to use is slightly incompatible. The server I'm connecting to returns a 334 ...
0
votes
1answer
19 views

SSL Common Name Wildcard [duplicate]

I looked through the other questions and didn't really see anything specific to this. My boss bought a QNAP NAS server for our office and up until now it's been great to use. Up until I needed to ...