SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
1answer
19 views

Root certificate invalid on a WHM site [on hold]

I am a newbie in SSL certificates and was given the task on troubleshooting a site's WHM page that uses https but it displays an red "x" on the https section of the URL. On Google Chrome, details of ...
0
votes
1answer
22 views

upstream prematurely closed connection while reading response header from upstream

I am having issues setting up SSL for my Jenkins CI server. I use Jenkins behind nginx for a reverse proxy. I am getting these upstream prematurely closed connection while reading response header from ...
0
votes
1answer
14 views

Unable to set up 123-reg SSL's intermediate certificate on WHM?

I recently had an SSL certificate set for a domain on my VPS. Later I found out that it required an intermediate certificate to function properly on all devices. The SSL in question is 123-reg's ...
1
vote
1answer
51 views

phpldapadmin not being able to connect to LDAP server using ldaps

Update I have been able to reproduce the problem in a smaller scale using a simple php script that attempts an LDAP bind. From that script I got more debug output which lets me identify the actual ...
0
votes
1answer
39 views

Nginx Reverse Proxy: servername.domain.com reverse to http://ip.add.res.s/location/App

I need a little help sorting out how to configure a reverse proxying load balancer in nginx. Basically, I have two web applications that live under subdirectories on Apache servers, /flavors/Chocolate ...
0
votes
1answer
42 views

Nginx Server Block Config

I'm having a problem with my nginx configuration. I have several virtual hosts on the same server. However, I'm attempting to add another virtual host, this one being an SSL website. The website ...
1
vote
0answers
9 views

“invalid security certificate” (ssl_error_bad_cert_domain) after PFX uploaded to Azure

My SSL certificate (purchased on godaddy) on Azure stopped working all of a sudden. I am running a standard Azure website and I previously uploaded a .pfx file and bound my custom domain to it. ...
-1
votes
1answer
40 views

CName and A type sites hosted with and without SSL [on hold]

Ok, I have a bit of a complicated set up that works for the most part, but recently I've had to migrate a couple sites to my server and I can't seem to get things working the way I want. I have 5 ...
0
votes
0answers
17 views

apache is redirecting all to SSL but still getting non-ssl log

I've just moved to ssl on apache, so i added this directive to my default conf Redirect 301 / https://the-checkout-tech.com/ with a log file called access.log Added a new ssl conf file with all ...
0
votes
1answer
23 views

SSL no longer working after Ubuntu 14.01.1 LTS upgrade

I upgraded my server to Ubuntu 14.04.1 LTS and now I can not seem to get my SSL certificate to work correctly. After the upgrade I had received an error when attempting to start Apache: AH00526: ...
0
votes
0answers
13 views

Is there a way to tell IIS to not require SSL, but require client certificates if the client uses SSL?

I'd like to set up IIS to listen on 127.0.0:80, and on *:443, so http connections are allowed from localhost only, while anyone from the net will have to use SSL. (This part is no problem). Also, i ...
-3
votes
0answers
12 views

SSL sec_error_unknown_issuer

Our network is getting an error of sec_error_unknown_issuer for HTTPS websites. Suggest how to track the loopholes or man in middle attack in our network or it is some other problem?
0
votes
0answers
41 views

Postfix email ssl/tls error “[postfix/smtpd] SSL_accept error from”

I created my own CA certificate then used it to create a server cert for postfix, this has been working for sending and receiving email from gmail/google and i thought everything was working fine, ...
0
votes
1answer
19 views

MySQL via SSL on VPC private subnet

Is an SSL connection recommended when connecting to a MySQL database server via a private subnet? SSL provides encryption but SSL causes a performance hit. The MySQL database server only serves ...
1
vote
1answer
15 views

Getting `HTTP/1.1 505 HTTP Version Not Supported` when using `openssl s_client`

I'm trying to use openssl s_client to send a raw HTTPS request. I type this: $ openssl s_client -connect homebrew.herokuapp.com:443 After it finishes the SSL pleasantries, I type this: POST ...
0
votes
0answers
33 views

Configuring NGINX with SSL and Node.js on CENTOS 6 in EC2

I'm trying to deploy a Node.js web-app on a Centos EC2 instance with an elastic IP. The SSL certificate is already setup and properly configured. I would like to allow only https connection to my app, ...
0
votes
0answers
7 views

IIS routes to wrong https site

We are running a Microsoft Server 2008 R2 with 2 IP addresses: .1 .2 and IIS 7.5 as the webserver. On this server there is a website configures to use the domain A.Company.com on port 80 with IP ...
-1
votes
0answers
10 views

IIS Localhost Website and Webmaster Email [closed]

I am running IIS 8.5 on Windows 8.1 ProWMC (not Server 2012) and I have successfully set up IIS (I have enabled ALL Windows Features from Control Panel), so that http://localhost:80/ displays my ...
1
vote
1answer
54 views

OS X Not Trusting Thawte Primary Root CA - G3

We recently renewed our Nginx webserver's Thawte SSL certificate. Previously we'd been using SHA1 as the signing algorithm, but this time used SHA256 which leads to a new root certificate known as ...
0
votes
1answer
36 views

Avoid the need of CAfile on client

I am trying to configure my apache that it is delivering all certificates files to get always a positive validation. To be clear there is no issue with any browsers, I am talking about openssl ...
2
votes
1answer
52 views

Specify a SHA-1 or SHA-2 cert depending on client abilities

With SHA1 certs being deprecated by major browsers it seems wise to get a SHA2 signed cert. But in doing so you will be locking out IE6 users. While for most people this won't be an issue in some ...
0
votes
1answer
25 views

Unable to use https on Amazon loadbalancer

I have a wild card certificate for a domain and have configured it on a load balancer. The load balancer has an EC2 instance assigned. I am using the domain name to point to the load balancer through ...
0
votes
0answers
8 views

How to set up an Apache ssl proxy for multiple sites using mod_rewrite or proxypass

(I asked this at stack overflow but no one even commented ;( perhaps it's better suited here I hope?) Some background: I wish to access some https sites on a separate VLAN to what my laptop is via a ...
0
votes
1answer
24 views

Exchange TLS Receive Connector Cert

We are using Securence incoming filtering in front of our Exchange 2010 server. It's basically a spam filter. I'm trying to get TLS communication between Securence and our server on incoming ...
-2
votes
0answers
41 views

Blank page Code 200 on seafile web under apache https with ssl and fastcgi, no LOG [closed]

First of all, because i have less than 10 reputation on serverfault (i am more a stackoverflow user), i can only post two links so here there are, just for setting them has constant for this post ...
1
vote
2answers
59 views

nginx + varnish, optimize caching urls for ssl and not

I have a working varnish cache for my websites, with the undesired side effect that requests for a domain with http are cached with a certain url, and requests for https with another url. That way I ...
0
votes
1answer
12 views

pg_createcluster ssl cert behaviour different for 9.1 and 9.3 on Debian Squeeze

I think i found a bug in pg_createcluster when creating a 9.3 cluster. At first, my configuration: Debian Squeeze with PostgreSQL 9.1 from squeeze-backports and PostgreSQL 9.3 from apt.postgresql.org ...
0
votes
1answer
19 views

Intermediate certificate not sent to clients? [duplicate]

I have installed intermediate certificate on server according to all tutorials for IIS, that is: "Certificates MMC snap-in, you choose computer store, you'll have the option to place the intermediate ...
0
votes
0answers
20 views

Foreman-Installer failed to install - puppet cert --generate FQDN returned 23 instead of one of [0] - Ubuntu 14.04

I tried to install Foreman serveral times at my Ubuntu 14.04 Server. Foreman 1.5 and 1.6 always fail at the same time with following error : /usr/bin/puppet cert --generate ubuntutest.domain.com ...
0
votes
1answer
25 views

Can Subject Alternative Name(SAN) Certificate install on different Web Server or OS? [closed]

Let say: application.house.com apache tomcat : physical server email.house.com apache tomcat : virtual finance.house.com Oracle Wallet Manager : physical server ...
-4
votes
2answers
35 views

Security certificate only displays with HTTPS and not HTTP [closed]

I have a security certificate installed on my Ubuntu server, running Apache. When I visit my site using the HTTPS protocol, the green certificate appears at the start of the URL. However, when I use ...
0
votes
0answers
6 views

Generate .pb7 or .p12 certs from .pem

I'm trying to enable SSL for Boomi webservices. I've followed the instructions on their documentation to generate the CSR and sent it to CA for signing. I've received the signed certificate in .pem ...
0
votes
1answer
69 views

Nginx load balancer is hanging on SSL

I'm trying to get nginx to do load balancing across my web servers, while terminating SSL at the load balancer level. The nginx.conf file I'm using is based on all the guides for doing this exact ...
0
votes
1answer
21 views

Apache HSTS only over HTTPS and exception for some virtual hosts

In the global config section for Apache 2.2.15, I have the following (per recommendation) <IfModule mod_headers.c> Header add Strict-Transport-Security "max-age=15768000;includeSubDomains" ...
0
votes
1answer
51 views

Nginx/Apache: set HSTS only if X-Forwarded-Proto is https

I got the following setup: Internet => nginx[public:80 +443, SSL termination) => Varnish[localhost:81] => Apache[localhost:82] Now some sites should only be reachable via HTTPS and a valid ...
0
votes
1answer
18 views

Solaris snoop on SSL headers

Is there a way to snoop (on Solaris) SSL headers ( I don't actually need to capture SSL data ) so that I can ensure SSL is not blocked by any firewalls before entering my server.
0
votes
0answers
15 views

Strict-Transport-Security on CloudFront with S3 origin?

My company's site has a static homepage for speed and cost reasons. We use S3 as the origin for CloudFront. Now, we would like to declare Strict-Transport-Security for the entire domain, but S3 seems ...
0
votes
1answer
49 views

Is it possible to restart a server without access to its SSL key?

I'm given a server (with root access) by a tech department to run a web-app app on some sub-domain. But the app requires authenification. So I requested the SSL key for the domain. The tech squad is ...
0
votes
0answers
11 views

Heroku won't recognize my intermediate cert

I have two subdomains: www.snipsalonsoftware.com and app.snipsalonsoftware.com. The www subdomain is pointed at a Rackspace Ubuntu server running apache and the app subdomain is pointed at Heroku. I ...
1
vote
1answer
33 views

Draytek SSL VPN connection incorrect subnet mask and gateway

I have remote machine connecting to our office lan through a draytek 2930 router in our office with a fixed IP (FW3.3.0). I have set it up to use SSL VPN with Draytek smartvpn client software on the ...
1
vote
0answers
34 views

SSL termination point for AWS EC2? ELB or NginX or..?

I have a number of stand alone java web applications that currently run on different ports and URLS. I would like to expose all these apps behind a single port(443) and map the different public URLs ...
-1
votes
2answers
37 views

How do I set up TLS-PSK with Tomcat [closed]

The Tomcat people won't help me, so I'm hoping someone here will come through. I can't figure out how to set up Tomcat to use pre-shared keys. All the SSL/TLS guides for it assume certificates. Please ...
0
votes
2answers
38 views

Redirect user from HTTP to HTTPS in IIS

I have a virtual machine with a Windows Server 2012 running in a Windows 8 host. The host redirects all http traffic to port 81 to port 80 of the server and there I have an IIS web server. What I'm ...
2
votes
5answers
146 views

SSL Issue on EC2 Ubuntu Server

I have an EC2 server with Ubuntu. Its running multiple websites and one of the websites uses a SSL certificate. The SSL is running fine but the issue is when you type in the url of one of the other ...
0
votes
0answers
9 views

OpenVPN and adding .p12 cert

Is there a way to add the .p12 type of cert to the openvpn config file? I've read and learned how to add the other files like so: <ca> -----BEGIN CERTIFICATE----- # insert base64 blob from ...
0
votes
1answer
31 views

Is there automatic SSL certificate renewal?

At the moment, I am replacing my SSL certificate every year, which means copying around keys and stuff. I could get a two-year certificate, then I would do this every two years. And having some ...
-2
votes
1answer
41 views

Need Help Forcing SSL for Remote Desktop

I have a standard windows 2008 R2 server (non-domain). I have a web service (non-IIS) I have a certificate issues from "GlobalSign" that came in a .pfx file. It's properties allow for Server ...
0
votes
0answers
12 views

Can I terminate an SSL Tunnel at the Load Balancer in Amazon VPC?

In other words, can the Amazon VPC load balancer be configured as an SSL Host? As a proof of concept, we've created this setup: Heroku Appserver <---> VPC Load Balancer <---> Ubuntu SSL ...
-1
votes
0answers
21 views

How do I check if a given *.pem file is for a particular *.cer file? [duplicate]

I have got a file myfile.cer and myfile-privkey.pem. How do I use ssh-keygen to check if the private key is the one for the given certificate?
1
vote
4answers
39 views

How do I know if *.pem is password protected using ssh-keygen?

I have got a file myfile-privkey.pem. How do I check if the private key file is password protected using ssh-keygen?