SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
0answers
9 views

sending email using gmail smtp is working when running my project inside visual studio only

I am working on an asp.net mvc5 web application and I have the following action method to send emails using gmail smtp :- [HttpPost] public ActionResult Contact(Contact c) { ...
0
votes
1answer
45 views

Apache2 crash after SSL install

I'm trying to install ssl on my apache2 ubuntu 14.04. After I install all my credentials and restart my apache I get caught SIGTERM shutdown There is no more error or explanation. I created a ...
1
vote
2answers
94 views

Re-create SSL cert from key

So I have my own CA for self-signing SSL certs, but I lost my root certificate. I have a few dependent certs that list the subject info of my root cert. I have my CA's private key and the password to ...
1
vote
0answers
21 views

Public Key Pinning and subdomains [on hold]

Shortly I have intend to install new webserver and I'd like to secure users a little bit more. I already have domain, (virtual) server and everything else that matters when configuring a server. ...
0
votes
1answer
23 views

NGINX + SSL certificate securing the connection in some browsers only

I've been strugling with this issue and I seem to be running into a dead end here without knowing what to do next... I've taken a task left by another worker who left on vacation. He was trying to ...
0
votes
1answer
15 views

How to redirect one domain to the other with SSL?

I have two domains (example.com and example.co.uk). The .com one is the "head" and has servers behind him. What I want to do is redirect all traffic from the .co.uk to the .com domain. I looked at ...
2
votes
1answer
25 views

Dovecot SSL: “unknown state”

Two weeks ago I set up a Mailserver using Dovecot and Postfix. It's a server for a organization with about 5000 mails per day. Everything works fine, but today I enabled verbose_ssl in ...
-3
votes
2answers
36 views

Modifiying a server securely [on hold]

I wanted to purchase a dedicated server to host my site. I am a newcomer to this and wanted to know if I hired someone to secure the server and SSH for me, will that put me at risk? Or is there an ...
2
votes
3answers
42 views

Apache httpd reverse proxy delegate SSL to backend

Usually using Apache as reverse proxy is done to do SSL offloading and so Apache handles all the SSL stuff and the backend server just manage plain http. But is it possible to do the opposite ? I'm ...
0
votes
0answers
11 views

CloudFront alias for https site

Our website is completely configured on SSL and all links of images and others are coming via https://www.example.com/.. This is one of the requirement of site Now, if I need to setup the CloudFront ...
0
votes
0answers
16 views

Nginx, SSL and websockets on different port

I user Nginx as a server proxy and use it with SSL connections for whole website. All is fine, except I do not know how I can add for this websockets. I found some info on internet and with it ...
-6
votes
2answers
38 views

should I buy the SSL certificate with the same domain seller [closed]

I bought a domain from godaddy. If I want to buy SSL certificate should I have to buy the SSL from godaddy ? Or I can buy the SSL certificate from any seller then applied it to the domain that I ...
2
votes
1answer
13 views

Where is the TLS key after using certreq for CSR generation on Windows 10?

I tried to follow the website below for instructions on how to generate the CSR for my web server: http://www.entrust.net/knowledge-base/technote.cfm?tn=8649 However, it only generates the CSR. ...
3
votes
2answers
32 views

StartSSL cert doesn't work with Dovecot/OpenSMTPD

I've an issue with my StartSSL certificate. When I try to use it to activate SSL encryption on Dovecot, I get the following error in my log when a client attempt a connection to the imap server : ...
-3
votes
1answer
33 views

redirect ssl http to https issue in apache

i am a newbie with apache. need some advise regarding redirecting http to https. It looks like everything in the ssl.conf is copasetic, once i logged on to ssl environment, every links i clicked seem ...
0
votes
1answer
35 views

Nginx proxying http to https with client certificate

We have an application that is not client-certificate aware and must consume a client-certificate authenticated web-service. To fix this, we're trying to use Nginx to reverse proxy a local (http) url ...
-1
votes
3answers
42 views

Chrome on Android random red HTTPS

When I'm using Chrome on my desktop, the address bar is always green. However, on my Android phone the address bar is usually green, but sometimes red. It says that I'm using a certificate signed ...
0
votes
2answers
38 views

Failed to start stunnel4 on Ubuntu 15.04

I get the following error starting stunnel4 service on Ubuntu 15.04: root@scw-d91ec7:~# service stunnel4 start Job for stunnel4.service failed. See "systemctl status stunnel4.service" and "journalctl ...
0
votes
0answers
72 views

KeepAlive in Apache 2.4 interfering with form submissions

I have just upgraded a server to Debian Jessie, which includes Apache 2.4.10 (was 2.2), and PHP 5.6. Now, SSL sites won't submit forms in some circumstances on IE11 and iPad Safari (not sure about ...
0
votes
1answer
21 views

SSLVerifyClient require in Cloudflare DNS

I've done setup my new domain name on Cloudflare but I have a problem while I'm setting up SSL certificate. In detail, I want ask visitors who are want to see my website content a valid certificate. ...
-1
votes
2answers
26 views

How to generate .key and .crt file from JKS file for httpd apache server

I have the mycert.jks file only. Now i need to extract and generate .key and .crt file and use it in apache httpd server. SSLCertificateFile /usr/local/apache2/conf/ssl.crt/server.crt ...
0
votes
0answers
30 views

Windows 2012 with nginx

I'm planning on upgrading my server to windows 2012. One thing I'm trying to wrap my head around is how to get things working together with nginx. Question: I'm planning on making use of both vpn ...
0
votes
1answer
9 views

HAProxy: Unable to set chipper list - possible bug?

I have two machines running with similar configuration. Both have an HAProxy installed. Now I want to enable native SSL Termination. This works perfectly on Server one. Now on Server 2 I cant get it ...
1
vote
1answer
23 views

Changing SSL Certificate

We are currently deploying a security solution for one of our clients and we require their SSL cert in PEM / PKCS12 format. However, they told us that they have "Lost" their CSR and wouldn't be able ...
2
votes
0answers
24 views

SSL - Apache and Node.js on the same Amazon EC2 instance

I hosted my website on an EC2 instance, using Apache. SSL was also set up properly, running on HTTPS, port 443. Currently, I just added a chat application to the website using Node.js + socket.io. ...
0
votes
0answers
31 views

IIS ARR UrlRewrite - Preserve original protocol and port of incoming requests

I'm trying to setup a reverse proxy using IIS with ARR and url rewrite modules. The destination web server host has a website that has multiple bindings for different sites: VM 1 site A - https:443 ...
0
votes
0answers
12 views

Mutual Authentication - Allow from IP range without client certificate

Is it possible to set SSLVerifyClient: Require but, also allow IP range for users who do not have the client cert? Possibly to use: Order deny,allow Deny from all Allow from xxx.xxx.xxx.xxx ...
2
votes
0answers
86 views

HaProxy giving - 503 Service Unavailable

I am using below configuring for performing loadbalancing for two Tomcat servers. And I configured HAProxy to perform SSL/TLS bridging/re-encryption. ...
0
votes
0answers
7 views

Do I Have To Restart The Entire Cell After Adding A Signer Cert To The CellDefaultTrustStore

I need to add a new signer cert to a bunch of WebSphere 8.5 instances in the CellDefaultTrustStore. After adding the cert do I need to restart the entire cell or just the application servers that are ...
-1
votes
0answers
37 views

Centos 5.11 SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

I am trying to resove a problem with a PHP5.6 application that uses curl to connect to a SSL based service I have added the certificate I think to ca-bundle.crt but I am still getting error ...
-1
votes
1answer
55 views

SSL Certificate - Self-Signed Certificate

I'm trying to get PCI compliant and the PCI scanning company is showing below Fail scan report SL Certificate - Self-Signed Certificate SSL Certificate - Self-Signed Certificate port 25/tcp over ...
2
votes
1answer
59 views

How secure is this Nginx Config? What else can I do to optimize it further? [closed]

So I recently setup a personal GitLab server and I am using the following config with full SSL. I tried my best but what else can be done to make it better? I mostly learned what I know about ...
-1
votes
1answer
32 views

How to debug where an SSL connection is getting lost?

The big picture is I'm trying to setup an SSL connection for a subdomain, if I go to currently if I go to the non-secure url the website works, but if requeset https://sub.domain.com there is no ...
0
votes
0answers
28 views

Nginx Reverse Proxy Via SSL SSL Handshake Failed

I am running an nginx reverse proxy to an HTTPS server via ssl but I also run many other domains on the same machine. I want to block all SSL connection that don't meet the criteria of a defined ...
1
vote
1answer
55 views

HaProxy - 502 Bad Gateway : HTTP spoken on HTTPS port

I'll try to explain my issue. I'm working on HaProxy 1.5.8 / apache 2.2, and I try to do some SSL configuration, but I fail, and fail, and fail. Let's see some logs: Haproxy Logs Aug 13 17:00:28 ...
0
votes
0answers
43 views

Tomcat two way SSL with APR loses client certificate after a few requests

I found that when accessing a web application that uses client certificate authentication run on Tomcat/APR (on Windows) with Firefox or Chrome, the client cert is "lost" after a short while. To the ...
1
vote
0answers
43 views

Squid authentication helpers

I set up squid with authentication helper following along the line the guide here http://www.freesoftwaremagazine.com/articles/authentication_with_squid the only difference is that my users together ...
0
votes
0answers
20 views

Cisco ASA SYN timeout due to SSL errors?

One of our clients is attempting to connect to our AWS hosted websites through their websense proxy and ASA firewall (some use Palo Alto firewall instead). While we and others can access the sites ...
0
votes
2answers
41 views

automate generation of SSL certificates

How I can automate the generation of self signed certificates when I know the domain name ? This works, but it asks me on the command line prompt certain questions. How I should change it to ignore ...
0
votes
1answer
62 views

SSL: Issued SSL for www.domain.com but only works for https://domain.com

Last week about an SSL Certificate issued by RapidSSL and my hosting MediaTemple, you can see the order details at RapidSSL here: http://i.imgur.com/s5XHcPH.jpg And SSL details on my panel at ...
1
vote
1answer
45 views

How to Install SSL on Apache2/Ubuntu 14.04

I am sorry if my question title seems like others / repost, but i already find same question and found no solutions. I just buy GeoTrust QuickSSL and I want to setup SSL on my Amazon EC2 Instance. ...
1
vote
1answer
90 views

Routing all traffc though OpenVPN on Windows

I have problems with routing ALL windows traffic thorough OpenVPN tunnel and tried to solve this issue for hours. However, most advices about it did not help in my situation. I have OpenVPN ...
0
votes
1answer
44 views

Curl, lynx etc not accepting certificate locally but OK remotely

When I connect to my web server to view a site over HTTPS, I get the nice green EV thing in the address bar. When I use curl locally to connect, it complains about the certificate and dies. I'm aware ...
0
votes
0answers
19 views

Can't get ssl certificate to work apache2

I have a vps running debian with apache2, i’m trying to get a ssl certificate (which i ordered by comodo) of type PositiveSSL to work but apache2 gives me the following error message when i’m trying ...
0
votes
1answer
81 views

Why I cannot connect to my website in HTTP using curl?

I have a web site @ www.eshipp.com, all the domain is secured by SSL so any HTTP traffic is redirected by NGINX to HTTPS equivalent URL. However it seems that some users are not redirected and then ...
1
vote
1answer
30 views

Setting up Elastic Beanstalk application with HTTPS

I have a working application on Elastic Beanstalk and would like to make it accessible ONLY through HTTPS. Because I would like for the application to scale automatically, I need to configure HTTPS at ...
0
votes
1answer
35 views

RC4 not disabling

I'm running Apache 2.2.27 - CENTOS 6.7 x86_64 kvm and cannot disable RC4 on my VPS. SSL Labs is capping my grade at "C" because of this. Any ideas? I'm using... SSLCipherSuite "EECDH+ECDSA+AESGCM ...
0
votes
1answer
24 views

RewriteRule force SSL without WWW

How can i force SSL without WWW # SSL-FORCE RewriteCond %{SERVER_PORT} !443 RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R=301,L] Works but i can also open the site with www. Thanks in advance.
0
votes
1answer
12 views

OpenSSL get's the server SSL key instead of the website SSL key [duplicate]

If I navigate to my site, it shows in the browser that my ssl key is correct for my site hosted at WP Engine. It is showing and validating my certificate. However, if I connect with openssl, it get's ...
0
votes
1answer
23 views

HSTS header causes problems for CNAME records?

For a couple of years I have SSL on my personal domain: https://juriansluiman.nl. Now I was using subdomains to access my Google Apps: mail, calendar etc. All these subdomains are configured using ...