SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
0answers
5 views

Mail Securing with cPanel [on hold]

I want to setup a dedicated domain through which my clients can access their mail. Currently all clients use mail.domain.com (where domain.com is their own domain) which gives them a lovely SSL ...
0
votes
0answers
24 views

Wildcard SSL on 2 Servers

I'm helping an SEO client install an SSL certificate and have run into some issues. I'll try to simplify it. He has 2 servers: 1. SERVER A: Internal server running IIS that contains chat and support ...
0
votes
0answers
7 views

Does coreos' cloud-init have something similar to ansible's vault?

I'm trying to setup ssl keys and certs onto a coreos machine, on the previous ubuntu machine I was using, I had ansible's vault encrypt the key and cert for source control and decrypt it when adding ...
-1
votes
1answer
20 views

TLS 1.0 handshake fails in Windows Server 2012 R2

I am using Windows Server 2012 R2 to contact AWS services, namely https://elasticbeanstalk.eu-central-1.amazonaws.com/. However, the AWS toolkit for Visual Studio as well as Internet Explorer 11 fail ...
3
votes
0answers
53 views

What would be involved in moving a site like stackoverflow to https?

I've seen a lot of requests in the SO Meta asking for StackOverflow to be moved over completely to https. I've never run a site as large as Stack Overflow, so enabling SSL/TLS has always just meant ...
0
votes
1answer
19 views

facebook app giving Security error when click on a shared link to my site

I have built a site and users are sharing it on facebook, but when one of their friends click on the link it give them this error. Security error There are problems with the security ...
-1
votes
0answers
8 views

SSL23_GET_SERVER_HELLO:sslv3 alert handshaje failure gitlab

I installed latest version of gitlab and now git bash / command line is not working, all are getting SSL23_GET_SERVER_HELLO:sslv3 alert handshake error. How do we resolve this issue ? ssh is working ...
0
votes
0answers
13 views

Apache Redirect to https except for localhost requests [duplicate]

I want that external requests on my Apache will be redirected to https - RedirectMatch ^/$ https://example.com but when the request comes from localhost the Redirect should point to ...
1
vote
1answer
35 views

Unexpected File Download Slowness After Enabled SPDY on Nginx

A simple WordPress static site run entirely on https. Nginx conf here: http://pastebin.com/BrP0LThT Only difference before / after is: listen 443 ssl; listen 443 ssl spdy; Nginx ...
0
votes
0answers
10 views

Cross Domain LDAPS

I have a bit of an issues I am running in to. We have two domains: domain1.com domain2.com Our Enterprise and Subordinate CA Resides on domain1, let's call it subca.domain1.com. I am trying to ...
1
vote
2answers
41 views

Windows XP invalid certificate on Nginx

I migrated my SSL websites and certificates from Apache to Nginx and from that moment all Windows XP clients does not recognize the SSL certificate (it is a wildcard certificate issued by Trustico). ...
0
votes
0answers
17 views

Nginx Redirect - Too many stops an issue?

I've been researching this issue for a while now and come up with quite a few conflicted results. Basically when entering our webpage we want you taken to https for seo and security purposes. I'm ...
2
votes
1answer
19 views

Sendmail down on Ubuntu 12.04 after update, SSL related?

I posted this on askubuntu.com yesterday but haven't gotten any responses. We run a production Ubuntu server that serves thousands of people per day. Sendmail is currently not working on this server. ...
2
votes
0answers
19 views

Do not use Client Cert Auth when on local network apache2

I'm hoping someone could help me with this question... I am running an Apache 2.4.7 server on my Ubuntu 14.04 box with some public facing sites. For some of those sites I've implemented a Client Cert ...
0
votes
2answers
26 views

How to redirect a client whose browser fails the handshake because it can't accept TLS1.1 or 1.2?

Our servers are no longer using SSL3.0 or TLS1.0. When an older browser tries to connect and the request is made with https, they get a "Page cannot be displayed" message. I want to redirect them to ...
1
vote
0answers
28 views

Problems installing Homebrew on a new OS X installation (SSL error)

Have a fresh OS X installation here (new VM), and when trying to install Homebrew I just get an SSL error. fatal: unable to access 'https://github.com/Homebrew/homebrew/': Unknown SSL protocol error ...
-5
votes
1answer
12 views

DB Server and Fully Qualified Domain Name

I have a hosted virtual server (Windows Server 2012 R2) that exists solely to host a few SQL databases. I need to purchase a SSL certificate to encrypt data but purchasing a certificate requires that ...
1
vote
2answers
15 views

check_nrpe ssl couldnt complete handshake, in both master and client server it works fine individually

I am getting this check_nrpe ssl couldnt complete handshake error in master server when I try executing the below command. /usr/local/nagios/libexec/check_nrpe -H 10.192.122.234 10.192.122.234 ...
1
vote
1answer
26 views

HAProxy redirect traffic to NGINX getting error “The plain HTTP request was sent to HTTPS port”

What we are trying to is to have HAProxy to listen for all incoming traffic from port 443 (HTTPS & WSS) Below is our HAProxy config: frontend wwws bind 0.0.0.0:443 ssl crt ...
0
votes
1answer
27 views

HTTPS to HTTPS reverse proxy with nginx

I have an Apache webserver configures with an SSL certificate. I have to put it behind a proxy, from some reasons. I'd like to configure the proxy (nginx?) to works as simple relay, from HTTPS to ...
0
votes
2answers
17 views

Multiple SSL on NGINX with shared settings?

I have an NGINX development server. I have a large number of configuration directives which drive various features of the server. I want to be able to access the server via SSL. The problem is that ...
0
votes
0answers
10 views

Enforcing RC4 cipher and testing enabled ciphers with openSSL

I am trying to enable and enforce RC4 cipher on apche 2.4 and I checked the http://httpd.apache.org/docs/trunk/ssl/ssl_howto.html It says RC4 cipher can be enabled in below 2 ways 1. SSLCipherSuite ...
1
vote
2answers
102 views

NGINX HTTPS Reverse Proxy - Fast TTFB but low concurrency

I've got an application that runs: NGINX (SSL) => VARNISH (CACHE) => APACHE/PHP. Running ab benchmark, I'm able to achieve 30k+ requests / second on varnish layer (via HTTP) via a EC2 t2.small ...
4
votes
3answers
580 views

View the SSL certificate of a page that immediately redirects to another

So I've googled quite a bit for this but it appears that my google-fu fails me - apologies if this is a trivial and already answered question, I could not find anything about this I'm trying to ...
3
votes
1answer
337 views

sendmail rejecting some connections with handshake failure: SSL alert number 40

My sendmail server on CentOS 5 started to reject some connections with the following message logged: error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:s3_pkt.c:1092:SSL alert ...
-3
votes
1answer
21 views

which port is used on nagios check_nrpe, is the ssh connection is must between nagios master and client server

I have configured the nagios master server and nagios client servers, still after lot of debugging i couldn't achieve the communication btwn these two :( i am getting this generic error CHECK_NRPE: ...
0
votes
1answer
77 views

Jetty 9 support for TLS_FALLBACK_SCSV

I've been trying to get that A+ on the SSL Server Test @ SSL Labs. However, I can't figure out how to pass the "downgrade attack prevention" test: I'm running Jetty 9.3.0.v20150612 alongside ...
0
votes
1answer
51 views

What would be a less-known SSL certificate attribute to look out for? [closed]

I'm looking for a simple domain SSL certificate for our company's website and I'm a little confused. A lot of them seems to offer the exact same features, yet at price ranges going from 5$ / year to ...
3
votes
2answers
297 views

Why does Chrome complain about “obsolete cryptography”?

I am hosting an ASP.NET website with wildcard ssl certificate on IIS / Windows 2008R2. While Chrome works fine with my website and shows a green lock the https connection, the https details mention ...
-1
votes
0answers
20 views

How to invoke stunnel from java? [closed]

I am designing a application where I need to connect from windows machine to SAMBA server. We have planned to use sTunnel to achieve http over SSL functionality. We have to develop a java client which ...
0
votes
1answer
25 views

Apache VirtualHost Multiple Wildcard Domains / SSL

I'm trying to figure out the configuration for the following: Multiple Domains - (example1.com, example2.com, example3.com) Single Virtual Host Wildcard Subdomains (*.example1.com, *example2.com, ...
-1
votes
4answers
90 views

Why are many mail servers using subdomains like mail.example.com?

I'm just setting up dovecat and postfix for the first time and wondering why so many companies are using subdomains for IMAP and SMTP like smtp.mail.example.com and imap.mail.example.com? What are ...
-1
votes
3answers
25 views

HTTPS url Works - HTTP does not, broken with SSL install

I was recently just installing SSL onto my server / website. Once I finished all the steps, I went to check my website using the https://www.breakwatersurfcompany.com which worked great, however. My ...
0
votes
0answers
27 views

Error using SHA256 certificate for RADIUS server for use with Ubuntu Unifi/Wireless 802.1x 802.11 network

We have an established wifi network with Unifi, setup as wpa2-enterprise with a Windows Server 2008 R2 RADIUS host. Our CA server crashed, which didn't seem to cause any trouble with phones ...
1
vote
1answer
16 views

SSL configuration for Intranet/VPN site

We've got a web site in development, that is to be used internally within our intranet, but also used externally by one client that will be accessing it via VPN. As far as Certificates go, what's the ...
1
vote
2answers
92 views

SSL will not work on Android mobile

I bought Comodo SSL from Namecheap. Now, the SSL works fine on desktop, I am getting a "This Connection is not private" on mobile phone.. on my chrome on Android Here is my virtual host file: server ...
0
votes
0answers
18 views

Self signed certificates create problems on NGinx/PHP

I just upgraded my Debian 7, Nginx 1.6.2, PHP 5.4.39 to Debian 8, Nginx 1.6.2, PHP 5.6.9. There is a CRM running on that server where we used to send emails via PHP, EspoCRM and that's using ...
0
votes
1answer
24 views

AWS ELB SSL and Health Check Issue

I'm getting very frustrated trying to sort this issue out. We have an AWS environment that uses SSL certificates at the load balancer. We also have a rewrite rule in httpd.conf that redirects all ...
0
votes
0answers
31 views

Invalid certificate error with IE9 on Win7 and Nginx with multiple virtual hosts

We have an Nginx instance with multiple virtual hosts on the same IP address. nginx.conf has configuration similar to the following: server { listen 443 default_server ssl; server_name ...
0
votes
2answers
28 views

Redirect through server to https

I need to run a site over ssl. The domain is pointing to a certain shared IP of a hosting space. Let's pretend I don't have access to the DNS management. -If the original request is https, Can I ...
-1
votes
1answer
28 views

MYSQL replication - Security suggestions on replicate over the internet [closed]

I'm going to launch a new web service, but i have few funds to start this business. I was taking a look at OVH Dedicated Infrastructure servers, but such a service costs at least 250 $/month, too much ...
0
votes
1answer
18 views

SSL certificate, manage domain and subdomain with SAN

We've got a question on the certificate and the SAN part. Can i put as common name my domain name (eg: example.tld) and use the SAN part to protect my subdomaine (eg: www.example.tld) ? Actually ...
-1
votes
0answers
26 views

MySQL with Haproxy ssl termination

I have a MySQL server behind a Haproxy server. I want to use Haproxy as a SSL termination proxy. The SSL is correctly configured on Haproxy and the connection is OK. If I test with openssl s_client ...
0
votes
0answers
18 views

Imported wildcard SSL Certificate on Windows Server 2008 R2 IIS7.5 ERR_CONNECTION_RESET

I've been battling this all day! I've exported our production SSL Certificate to a PFX file, copied this to our dev IIS server. Using MMC, added the certificate management, imported the PFX into the ...
2
votes
0answers
29 views

Nginx: SNI doesn't work for server_name with multiple arguments

With this Nginx config: server { listen 443 ssl; server_name www.x.nl x.nl; ssl_certificate /etc/nginx/ssl/x.nl.crtkeyca; ssl_certificate_key /etc/nginx/ssl/x.nl.crtkeyca; ...
0
votes
0answers
17 views

Tomcat : Multiple domain names redirect to one domain

I have a Webapp running on Apache tomcat on Debain wheezy, using a single domain name currently. The webapp uses SSL certification too. Now, the company which I am working for, bought similar domain ...
4
votes
2answers
196 views

Google Chrome says my SSL uses outdated security settings but other site tests disagree [closed]

I installed StartSSL on my web server which is running Linux Apache on CentOS 6.5. shaaaaaaaaaaaaa.com said Nice. example.com has a verifiable certificate chain signed with SHA-2. However ...
1
vote
1answer
56 views

How to setup Nginx to use ssl/non-ssl for different urls on a single site, but always use ssl if user explicity types https in browser's address bar?

My current nginx.conf looks something like this: server { listen 80; server_name www.example.com; root /var/www/; location / { } location /users { rewrite ^ ...
1
vote
1answer
80 views

Can't connect to MySQL 5.5 with SSL

I am trying to get MySQL SSL replication setup for two brand new RHEL 6.6 x64 servers. I have replication working without SSL, but I can't get it set up with SSL, and can't connect directly using SSL ...
1
vote
0answers
14 views

When using HTTPS Index.html showing instead of ProxyPass reverse proxied site on Centos 7 Apache 2

The goal is that external users can connect via HTTPS, go through basic auth on Apache and then view a proxies tomcat site. I have set up a reverse proxy to a tomcat server running on the same ...