SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
2answers
24 views

Load Balancer, EC2 - HTTPS Connection

Ok this might be a rookie question but here's my scenario. I have a loadbalancer managing a single EC2 instance at the moment. I have an application running on that EC2 instance. What I like to ...
-1
votes
1answer
44 views

What type of SSL certificate I need to create CA? [duplicate]

I've a task to create Certificate Authority for company use. Preferably using "valid" ( not self-signed) certificate. The goal is to issue individual certificates for subdomains, instead of wildcard, ...
0
votes
1answer
9 views

Export specific certificate from JKS using keytool

We're trying to configure Apache HTTPd to use an SSL cert from a JKS keystore file we have. Since we want only one of the certs out of the JKS (www.MySite.com) and not the others (such as ...
0
votes
0answers
24 views

Is there a standard for where to place SSL keys and certificates? [duplicate]

There's a few 'standards' for where to place website source code - /var/www/, /var/www/html/, /srv/www/ etc. Is there a similar 'standard' or 'common practice' for SSL keys and certificates? If I am ...
0
votes
1answer
16 views

How to selectively enable or disable SSL for some URLs in Tomcat 7

I am using SSL in Tomcat 7, create a keystore and configure server.xml, and also config in web.xml as below <security-constraint> <!-- SSL enforced --> ...
1
vote
1answer
28 views

SSL VirtualHost not using DocumentRoot

I'm trying to set up a self-signed SSL certificate between my own VPS and Cloudflare (next to Full SSL). I'm using the following VirtualHosts for this: <VirtualHost *:80> ServerName ...
2
votes
1answer
28 views

W2012 R2 AD certificate Services sha algorithm

So shortly after configuring an offline root CA and online AD subordiante CA with SHA512 for future proofing. We discovered a thin client vender (teradici zero client with View 6) only supports SHA1 ...
0
votes
1answer
26 views

Transparently proxy an HTTP request using HTTPS

I have been trying to figure out how to transparently forward proxy an HTTP request to a destination with the proxy transparently sending the request over HTTPS. To give an example for clarity, client ...
0
votes
0answers
12 views

stuck on getting ssl to work on vps with centos 6 and plesk

I ordered an ssl certicate and installed it via plesk on the vps. the private key and certificate are in txt format which i pasted in the fields in plesk. I've 2 domains hosted on the vps on 1 ip, i ...
1
vote
1answer
59 views

In nginx error log: “SSL_BYTES_TO_CIPHER_LIST:inappropriate fallback”

We recently changed our nginx config to support TLSv1.2 as well as a number of more secure ciphers. Since the change, our nginx error logs have been filled with the following errors: 2015/01/28 ...
0
votes
0answers
8 views

ACL at HAProxy shows NOSRV

I have 3 backends in HAProxy 1.5.10: "WEB", "API", and "SSL" for web and api. For SSL termination I'm using ACL with SNI. Here is my config: frontend ssl mode tcp bind 0.0.0.0:443 ssl crt ...
0
votes
0answers
24 views

Send apache ssl access log to syslog

I'm having an issue piping apache ssl access logs to my syslog server. I've added the following line to my apache config: CustomLog "|/usr/bin/nc -u <syslogserver> 514" "<134>%{%b %d ...
6
votes
3answers
449 views

SSL certificate invalid in Chrome

For the website scirra.com (click for SSL Labs Server Test Results) Google Chrome reports the following icon: It's an EV SSL, and it seems to work fine in Firefox and Internet Explorer, but ...
0
votes
0answers
37 views

IMAP Dovecot cannot connect [migrated]

I am trying to set up my own mail server (for 'fun'). I followed this tutorial to the bone. But I get this error message: imap-login: Disconnected (auth failed, 2 attempts in 9 secs): ...
3
votes
1answer
32 views

NginX + WordPress + SSL + non-www + W3TC vhost config file questions

I have the following questions about my server block(s) for a WordPress site running solely on https, with nginx and W3TC browser caching. Environment: Ubuntu - 14.04LTS nginx - 1.4.6 ...
1
vote
3answers
41 views

Does SSL need to be configured at the external load balancer if you are using one?

Using Elastic Load Balancer, it is easy enough to set up SSL at the external load balancer, and serve requests up as http to the applicaion. When running a single server, it is also possible to ...
-2
votes
0answers
20 views

Nginx webserver stop working after 5 minutes [on hold]

I have a digitalocean droplet running ubuntu 14.04 and nginx. Everything was working fine until yesterday when I decided to activate my ssl certificate from comodo. I had a hard time getting the ...
1
vote
1answer
33 views

HAProxy with SNI and different SSL Settings

I have HAProxy for my two sites, one of them public and one private. www.mysite.com private.mysite.com Atm, I'm using haproxy like this: frontend mysite_https bind *.443 ssl crt /etc/mycert.pem ...
1
vote
0answers
17 views

jrun ssl peer not authenticated

Before I start, I should say that I've already posted this question at Code Ranch, and have not yet gotten an answer. I'll make sure both this site and Code Ranch receive the answer should I find ...
0
votes
0answers
20 views

SSL certificate for sql-server on ec2

I have an ec2 node provisioned to host mssql server. I'm trying to request and install an ssl certificate for this node so I can securely connect to it but I can't get the certificate to appear in the ...
4
votes
3answers
124 views

Displaying a remote SSL certificate details using CLI tools

In Chrome, clicking on the green HTTPS lock icon opens a window with the certificate details: When I tried the same with cURL, I got only some of the information: $ curl -vvI https://gnupg.org * ...
0
votes
1answer
28 views

OpenSSL PositiveSSL certificate untrusted connection

I bought a SSL certificate and I cannot get it to function. I get a This Connection is Untrusted error in Firefox. I do believe it's due to my .crt file being incomplete/wrong all together. My .crt ...
0
votes
2answers
25 views

vsftpd does not give a valid certificate using CA cert.

When setting up vsftpd we have problems with it not providing a trusted connection us a basic pem certificate container using just our private key and certificate. We created our pem file with the ...
0
votes
0answers
15 views

haproxy client certificate authentication signed by 'common' CA

I am setting up haproxy as an SSL terminator/load balancer in front of an API that we need to expose over the internet to a customer. The plan was to use mutual (2-way) SSL/HTTPS to verify that both ...
0
votes
2answers
59 views

intermittent ssl_error_no_cypher_overlap

For the past week, clients have been randomly getting intermittent ssl_error_no_cypher_overlap errors when using Firefox. Connection issues have also occurred in Safari and Chrome. I can't find any ...
-1
votes
1answer
60 views

How to disable SSLv1/SSLv2/SSLv3 protocols to block Poodle to Apache 2.4.9 on Windows Server 2008 R2?

How can I disable SSLv1, SSLv2 and SSLv3 protocols on Apache 2.4.9 installed on a Windows Server 2008 R2 as a service? (I am not using IIS.) I still want to have TLSv1.2 protocol on my server. Here ...
1
vote
0answers
15 views

Risks of letting ZNC have my private SSL key

I have a single VPS running a few websites and also my ZNC IRC bouncer. I purchased a wildcard SSL certificate for all my subdomains (this was silly; it would've been much cheaper just to purchase ...
3
votes
2answers
113 views
+100

Should I need to provide a root certificate when setting SSL cert on nginx

In Qualys SSL test always warn me that the root certificate is an extra download and can be safely removed. However, from Comodo website, their guide on installing cert on nginx is NGINX Needed for ...
1
vote
3answers
72 views

Is there a way to set up SSL for a domain and all subdomains?

So, I have a domain with many subdomains. Let's say example.com, a.example.com, b.example.com, c.example.com, etc. I want to host them from the same server with the same IP address. I have my ...
0
votes
1answer
32 views

Nodejs: server doesn't close TCP connections

Facing a problem in the production server running debian (7.0) with nodejs (v0.10.x) cluster where it doesn't close some TCP connections to the clients. This leads to connection drops when connection ...
1
vote
1answer
32 views

nginx - no ssl for crawlers / bots

In a server directive for port 80 in nginx I want to redirect all requests to https if the user agent is not a bot. I tried using this: ... location / { if ($http_user_agent !~* ...
1
vote
1answer
67 views

Problems configuring SSL certificate on Apache VirtualHosts

I am attempting to run multiple SSL connections off a single IP server running RHEL6. I have successfully configured one domain on SSL, however when I attempt to add a second, Apache fails to ...
0
votes
1answer
53 views

Setting up basic proxy from https to http via Apache

I need to proxy some remote api https://example.com/api/ to be accessible locally as http://localhost/api/ I tried putting this line in httpd.conf: ProxyPass /api/ https://example.com/api/ ...
0
votes
0answers
8 views

SQL 2012 IPSec or SSL

I have a requirement to secure connections to SQL server. (at transit that is) - TDE will be used for encryption at rest. SQL provides two options which are either certificate based SSL or Windows ...
2
votes
1answer
49 views

Getting SSL certificate chain from jabber server

trying to connect my jabber client (pidgin) to a jabber server with self signed certificate, I am getting an "unable to validate certificate" error. As it is not possible to tell the client not to ...
0
votes
1answer
16 views

Why tomcat on linux needs to build APR and not download

I am trying to install APR on Ubuntu Linux. I found that tomcat provides a downloadable APR package for windows but i cannot find a downloadable version for Linux. The tomcat site gives instructions ...
0
votes
0answers
27 views

In nginx logs: SSL3_GET_CLIENT_HELLO:required cipher missing

We disabled SSLv3 several months ago, and on Sunday I noticed this filling our nginx logs. It's been continuing ever since and users are emailing us saying they cannot connect to our site. 2015/01/13 ...
0
votes
0answers
28 views

Apache not forwarding to HAProxy

Scenario: I have a mobile application that needs to talk to a service hosted by an IBM Datapower appliance. However, the Datapower appliance requires bi-directional SSL and that will not work for ...
4
votes
1answer
261 views

Have I referenced my website's SSL certificate chain correctly?

The SSL certificate chain for one of my websites is incomplete, and I learned that I should reference the intermediate certificate in the virtual hosts file. Comodo sent me two intermediate ...
0
votes
1answer
35 views

Capturing LDAPS traffic with tcpdump

I have an app server that authenticates against Active Directory using LDAPS. I am connecting to the AD server over port 636. I'm trying to troubleshoot/debug some performance issues and am beginning ...
0
votes
3answers
55 views

Redirect Naked Domain to SSL

I have a wildcard SSL certificate and I want to redirect all http requests to their equivalent https. My server is a Debian (wheezy) and I am running Apache 2.2.22 I have added the following at the ...
0
votes
2answers
49 views

CAs in different child domains

I am trying to achieve the following; Environment is a Single Forest with a Root Domain and x2 child domains as follows; root.net child1.root.net child2.root.net There will be no logical or ...
-1
votes
2answers
49 views

Can one domain have 2 or more SSL certificates?

I have googled and found this post: http://security.stackexchange.com/questions/46988/is-it-technically-possible-to-configure-two-different-ssl-certificates-for-the-s If it actually is possible, then ...
1
vote
1answer
24 views

Force https before authentification - no access to vhost

I am a beginner when it comes to servers and I have a problem similar to this one. When accessing the desired webpage, .htpasswd prompts me for an authentification before I am redirected to https. ...
0
votes
1answer
46 views

Outlook SSL error when connecting to new exchange 2013 installation

I've just installed Outlook 2013 and have all the clients connecting to it, however, whenever a client connects via outlook they are prompted with an invalid SSL message for myserver.mydomain.local. I ...
1
vote
1answer
8 views

gnutls-cli hangs when testing an ssl connection

I'm running the command gnutls-cli -s facebook.com -p 443 --x509cafile /etc/ssl/certs/ca-certificates.crt -d 999 and the output is |<2>| p11: loaded provider 'p11-kit-trust' |<2>| p11: ...
2
votes
2answers
27 views

Is it possible to have IIS require SSL and redirect HTTP at the same time?

Our application currently has a HTTP-redirect to HTTPS. Now we want to completely remove this HTTP-binding because of security reasons, and have our users only use HTTPS by configuring "Require SSL" ...
3
votes
1answer
66 views

cURL is failing for normal users but not root

Have a strange issue on a RHEL box. To keep the editor from complaining about posting more than 2 site links, kindly mentally replace [google site] with https://www.google.com when reading the curl ...
1
vote
0answers
52 views

SSL error, unable to find valid certification path to requested target

I'm new to ssl so forgive me. I set up a site with ssl and all the online checks (eg. https://ssltools.websecurity.symantec.com/checker/views/certCheck.jsp) show that it is set up correctly and the ...
0
votes
1answer
197 views

IMAP TLS connection to Dovecot fails

Original title: IMAP connection to Dovecot fails only from Thunderbird I have set up Dovecot with SSL (TLS) on port 993. I can connect with Outlook, PHP SMTP and Android Mail, however Thunderbird ...