SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
0answers
7 views

How can one force Open Directory server to provide its full certificate chain to connecting clients?

The Problem We've created an Open Directory master on OSX 10.10 Yosemite + Server.app v4: $ sudo slapconfig -createldapmasterandadmin admin Administrator 1000 Which generates a root CA, an ...
0
votes
0answers
6 views

Correct Apache reverse proxy config with SSL for Jenkins and Sonar

I am running two services behind an Apache server: Jenkins (Port 8080) and SonarQube (Port 9000). My apache config looks like this: <VirtualHost *:80> ServerName server Redirect permanent ...
0
votes
0answers
14 views

Nginx Session-Binding-Proxy

I've been trying to harden a website against attacks involving Session Hijacking. The site runs with Nginx in front of an node.js app. As one of the countermeasures, the goal is to configure Nginx to ...
2
votes
1answer
46 views

I can't get https://sendsonar.com working but sendsonar.com and https://www.sendsonar.com work just fine

I'm trying to get our domain - https://sendsonar.com - to go to https://www.sendsonar.com but for some reason this is failing. Here's the curl output: yo@ubuntu-i386:~/Sonar$ curl -kvI ...
0
votes
1answer
27 views

Implementing TCP Sticky Sessions With HAProxy to Handle SSL Pass-through Traffic

How can we implement session stickiness in HAProxy when SSL must terminate on the backend servers? We need the stickiness because backends cannot share sessions. I have this config which results in a ...
1
vote
0answers
15 views

Request doesn't hit port 80 on HAproxy

I'm configuring HAProxy to redirect http to https, but it doesn't seem to work. The configuration I use is: /etc/hosts content 127.0.0.1 example.com Haproxy configuration frontend http mode ...
1
vote
2answers
25 views

Iptables: Filtering string encrypted by ssl

I need to filter (send to BANRULES set) incoming http/https packets with a certain string (matchword). I do it easy when ssl is not in use (port 80): iptables -A INPUT -p tcp -m tcp --dport 80 -m ...
-2
votes
2answers
47 views

nginx force ssl exception

I am using Ubuntu 14.04 with nginx installed and SSL installed on main domain, which works fine. I have even parked 5-6 other domains with main domain. If I go to any of those domains, I get an SSL ...
-2
votes
1answer
30 views

Are connections on a private network secure enough to not use HTTPS? [on hold]

I have (for example) 2 digital ocean droplets that can talk through their local network. I can use the local ip and not the public ip. If I need to pass sensitive info between those two servers can I ...
1
vote
1answer
13 views

Client certificate doesn't work on 1 windows 7 machine but works fine from others

The clients are windows 7 sp1 64 bit on all the machines. The install of the certificate went fine except for one machine. It just says the web page cannot be displayed in ie(with friendly errors ...
0
votes
1answer
21 views

SSL page only loading in private network

I have got a activated virtual hosts config for ssl like this: <VirtualHost vidanalysis.com:443> ServerName vidanalysis.com SSLEngine on SSLCertificateFile /etc/apache2/ssl/ssl.crt ...
0
votes
0answers
20 views

VirtualHost for httpd SSL reverse proxy server for tomcat on CentOS 7

A CentOS 7 web server on the web will be configured to only accept SSL connections from a small number of known users. The server has one ip and only one domain name. As part of that configuration, ...
-4
votes
2answers
26 views

Do I use subdomain or domain in SSL cert? [on hold]

I have a domain called @desk.com . My imap points to mail.desk.com . As I wont afford subdomain certification, should I buy desk.com or mail.desk.com ?
0
votes
1answer
30 views

Trouble installing SSL on AWS elb

I'm trying to set up a Gandi SSL certificate but can't get it right from firefox point of view. I installed it on my load balancer (ELB) by converting my certificated to the pem format using the ...
3
votes
0answers
28 views

How to enable certain SSL cipher while having disabled the group?

I would like to enable the SSL cipher EDH-DSS-DES-CBC3-SHA (also known as TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA) in my nginx SSL environment to support IE8 on Windows XP. The base SSL ciphers for nginx ...
-1
votes
1answer
35 views

Can't login to dovecot using gmail as an email client

I've used this installation configure-email-server-using-postfix-dovecot When I try to use gmail as the email client (connecting to my server through port 993) I get this error Unable to establish ...
0
votes
1answer
12 views

How to secure webapps on local domains

How do I ensure that a web app atexample.local has the same level of protection as example.com, that is authenticity of the host and encryption of traffic? How do I set this up in a Linux server and ...
2
votes
1answer
17 views

Red Hat 6.6, OpenLDAP, ldaps not responding

I'm having a hard time migrating our openldap installation from Debian to RedHat. Two instances of openldap are running, they have the same configuration, except that one handles ldap: requests, and ...
0
votes
0answers
11 views

How to get connected over IPP using SSL via AddPrinter() call?

I had three printers in my network. All of these three are using self-signed certificate. Only for one printer, I am getting error GetLastError() – 1797 – Printer Driver Unknown I had compared ...
1
vote
1answer
47 views

How would you set up multiple SSL terminating Haproxy instances, which are themselves load balanced?

I've been doing a great deal of research and experimentation on this, and I'm really running into a wall: I'm trying to set up HAProxy as the reverse proxy for a high-availability environment. All ...
-1
votes
0answers
19 views

PHP cURL “Unknown SSL protocol error in connection to” [migrated]

When I try to run my script using cURL on my computer via XAMPP, everything works perfectly: http://i.stack.imgur.com/jlerA.png When I move it onto my server (Ubuntu 14.04 x64), it stops working and ...
6
votes
1answer
498 views

Get an SSL certificate without revealing my clients postal address?

My client runs a blog site where he is an author with many published books and blogging is now his full time job. The issue is he blogs about a lot of political topics, mainly things to do with ...
0
votes
1answer
27 views

Jenkins under Apache httpd sometimes switches from SSL to plain HTTP

I have Jenkins and Apache httpd with reverse proxy installed. They are installed on the same PC. I can access Jenkins directly and it is ok. E.g. following link works fine: ...
1
vote
1answer
24 views

Squid: how to enable verification for SSL self-signed certificates

I'm using Squid 3.4.8 as a reverse proxy which is forwarding request to a specific server. The communication between Squid and the server is in HTTPS. The certificate used by the server is ...
11
votes
3answers
1k views

How do I keep the ssl key for our website confidential?

I want to keep our SSL key for our website confidential. It's stored on 2 USB sticks, one in a safe deposit box and one I keep secure. And then I'm the only one who applies it to the web server so ...
3
votes
1answer
45 views

Wildcard cert for local SSL Certificate Authority?

This seems like it should work, but PKI is complicated and I'd like to ask people who can give an authoritative answer. BACKGROUND: I am the network engineer for a company; for sake of argument ...
1
vote
1answer
40 views

squid3 ssl bumping server-first with signed certificate

I'm trying to get Squid3.4 to do SSL Bumping with the server-first method. I followed this guide in alpinelinux. I'm working in explicit mode (browser configurer to Go to the proxy) and that works ...
1
vote
1answer
68 views

Block website with HTTPS?

I hope my question is on topic on Server Fault. If not, please excuse me and point me into the right direction. Is it possible to block a site with HTTPS? I have a website that I would like to make ...
0
votes
1answer
32 views

Apache won't start with new certificate

Hi I'm trying to renew my SSL certificate and Apache refuses to start when I change the paths to the new certificate file. I'm running Apache 2.2 on CentOS 6.6. When I try to start Apache this is in ...
0
votes
0answers
29 views

setup SSL with CA for multiple local sites in Apache and authenticate in a specific location (Error code: ssl_error_handshake_failure_alert) Ubuntu

i'm trying to implement SSL (HTTPs) on my local web-server to protect specified directories on Apache's websites where a user log's-in, combining SSL and HTTP Authentication Basic. I have follow ...
3
votes
1answer
40 views

ssllabs keeps saying sslv3 enabled when it isn't

https://www.ssllabs.com/ssltest/analyze.html?d=cablework.co I can't figure out why it keeps saying "C". I have disabled SSLv3. this is my config file server { listen 80; listen 443 ssl ...
-1
votes
0answers
31 views

What file to add to nginx certificate [migrated]

I got a RaspberryPi on which I want to host Owncloud. So I followed this tutorial and it works well except the SSL part. I don't want to use self signed. I set my own subdomain and it works without ...
0
votes
1answer
27 views

How should a wildcard certificate be used?

I have a wildcard certificate (pfx file) and I have doubts on how to use that. Should I install that on all of my application servers or alternatively create a new certificate and sign it with the ...
3
votes
2answers
87 views

One WebSite, Two IP Addresses, One SSL EV cert per IP

I have a website in IIS and two different IP addresses on that server. I want to be able to assign a separate SSL certificate to the same site on IIS with the other IP address. Something like this: ...
0
votes
1answer
43 views

Dovecot configuration

I was setting up a mail server on Amazon EC2 using postfix and dovcot and I seem to be stack on starting up dovecot service. Here is the message i got when I run Service dovecot status dovecot ...
0
votes
0answers
18 views

how to check which forward secrecy cipher is enabled in tomcat 6.0.28 while I use TLSv1.0 protocol?

I am using tomcat 6.0.28 and using TLSv1.0 ssl protocol only. I have configured ciphers as ...
1
vote
1answer
55 views

Nginx Server Blocks: https, non-www, & non-ssl subdomain

Here's my scenario: Two sites: https://example.com http://dev.example.com Site 1 has a ssl certificate. Site two does not. (In other words, I don't have a wildcard ssl certificate.) With ...
0
votes
0answers
8 views

WL-Proxy-SSL / X-Forwarded-Proto in WebLogic

How do I configure my WebLogic server or WebLogic application to use this header coming from a proxy, when requesting the base URL from a class using JAX-RS? I prefer not to have my application have ...
1
vote
2answers
34 views

What apache VirtualHost configuration will serve one and only one domain over SSL?

I have multiple domains (example1.com, example2.com, ...) hosted on the same IP. One of these domains (example3.com) has an SSL certificate and I want to serve it over HTTPS, while keeping all the ...
-1
votes
0answers
37 views

openssl: How to build the right bundle for godaddy certificate

I can use open ssl and the steps here: http://serverfault.com/a/648367/13716 to: Create a "cacerts.crt" of the godaddy root, intermediate, etc certs (one text file w multiple certs) Build a single ...
0
votes
1answer
26 views

To serve SSL, does the web server need outbound internet access?

I am having a problem with intermediate certificates, and wonder: Could the problem be (that clients report an intermediate cert is missing), be the result of my web server having zero outbound inet ...
-1
votes
1answer
23 views

Apache SSL configuration does not take effect

I configured a site to be served via SSL on my server but it's not available at all. $ nmap localhost PORT STATE SERVICE 22/tcp open ssh 25/tcp open smtp 80/tcp open http My firewall ...
-3
votes
2answers
60 views

Accidently removed localhost.crt SSL in Centos 6 - what can i do?

So I just got my certificate issued from Digicert, and since there was other unused/old files in /etc/ssl/ i marked and removed, and accidently also removed localhost.crt. Now I cannot start my web ...
-3
votes
0answers
43 views

Start Apache with Passphrase [duplicate]

How can I start my apache2 service with SSL key? I want a single line command for the same,like sudo service apache2 start --passphrase="--my_passphrase_" Are there any suggestion?
0
votes
1answer
42 views

Client Cert Auth

I would like to setup Client Certificate Auth with my tomcat. I've configured the webapp for this auth and this is my tomcat config. I'm using Windows PKI for my certificates so I have pfx files. The ...
0
votes
0answers
19 views

Site functionality diminished over VPN/company network

We currently experience a diminished with one of our customers at our main production site. All subpages and resources seem to be affected as well. The customer reports a completely broken ...
-3
votes
0answers
45 views

How to install a SSL certificate on Ubuntu Server?

I need to make the connection between my origin server and CDN (Akamai) secured. I generated and installed a self signed certificate at my origin server (which hosts www.something.com.au) using the ...
0
votes
2answers
186 views

google recaptcha V2 on apache shared server: How to get it to work with SSL

I implemented google's reCAPTCHA V2 on non-https apache shared server and it worked 100%. I then changed the protocol to my shared server with SSL using the same script as the non-SSL script. The ...
0
votes
0answers
57 views

Allow Google apps and block consumer Google accounts using squid proxy

In my organisation, I am trying to allow the Google apps account and block consumer Google accounts using squid proxy. According to this link, Google says we can do it using following steps: 1. ...
2
votes
1answer
34 views

How to add an existing key to the certutil key database

I have created an SSL keypair with OpenSSL. I uploaded the Certificate Signing Request to my SSL Certificate provider and got my certificate files. I added my certificate and the required CA ...