SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
0answers
10 views

jrun ssl peer not authenticated

Before I start, I should say that I've already posted this question at Code Ranch, and have not yet gotten an answer. I'll make sure both this site and Code Ranch receive the answer should I find ...
0
votes
0answers
18 views

SSL certificate for sql-server on ec2

I have an ec2 node provisioned to host mssql server. I'm trying to request and install an ssl certificate for this node so I can securely connect to it but I can't get the certificate to appear in the ...
4
votes
3answers
116 views

Displaying a remote SSL certificate details using CLI tools

In Chrome, clicking on the green HTTPS lock icon opens a window with the certificate details: When I tried the same with cURL, I got only some of the information: $ curl -vvI https://gnupg.org * ...
0
votes
1answer
17 views

OpenSSL PositiveSSL certificate untrusted connection

I bought a SSL certificate and I cannot get it to function. I get a This Connection is Untrusted error in Firefox. I do believe it's due to my .crt file being incomplete/wrong all together. My .crt ...
0
votes
2answers
19 views

vsftpd does not give a valid certificate using CA cert.

When setting up vsftpd we have problems with it not providing a trusted connection us a basic pem certificate container using just our private key and certificate. We created our pem file with the ...
0
votes
0answers
11 views

haproxy client certificate authentication signed by 'common' CA

I am setting up haproxy as an SSL terminator/load balancer in front of an API that we need to expose over the internet to a customer. The plan was to use mutual (2-way) SSL/HTTPS to verify that both ...
-2
votes
0answers
15 views

how to set up email security setting with ssl/tls in centos 6 [on hold]

I am really new to vps hosting. I bought a hosting service and thought they will support whatever I asked them but they said they only support sever side. My question is ** I bought a certificate ...
0
votes
2answers
32 views

intermittent ssl_error_no_cypher_overlap

For the past week, clients have been randomly getting intermittent ssl_error_no_cypher_overlap errors when using Firefox. Connection issues have also occurred in Safari and Chrome. I can't find any ...
-1
votes
1answer
39 views

How to disable SSLv1/SSLv2/SSLv3 protocols to block Poodle to Apache 2.4.9 on Windows Server 2008 R2?

How can I disable SSLv1, SSLv2 and SSLv3 protocols on Apache 2.4.9 installed on a Windows Server 2008 R2 as a service? (I am not using IIS.) I still want to have TLSv1.2 protocol on my server. Here ...
1
vote
0answers
15 views

Risks of letting ZNC have my private SSL key

I have a single VPS running a few websites and also my ZNC IRC bouncer. I purchased a wildcard SSL certificate for all my subdomains (this was silly; it would've been much cheaper just to purchase ...
1
vote
2answers
77 views
+50

Should I need to provide a root certificate when setting SSL cert on nginx

In Qualys SSL test always warn me that the root certificate is an extra download and can be safely removed. However, from Comodo website, their guide on installing cert on nginx is NGINX Needed for ...
1
vote
3answers
70 views

Is there a way to set up SSL for a domain and all subdomains?

So, I have a domain with many subdomains. Let's say example.com, a.example.com, b.example.com, c.example.com, etc. I want to host them from the same server with the same IP address. I have my ...
0
votes
1answer
26 views

Nodejs: server doesn't close TCP connections

Facing a problem in the production server running debian (7.0) with nodejs (v0.10.x) cluster where it doesn't close some TCP connections to the clients. This leads to connection drops when connection ...
1
vote
1answer
30 views

nginx - no ssl for crawlers / bots

In a server directive for port 80 in nginx I want to redirect all requests to https if the user agent is not a bot. I tried using this: ... location / { if ($http_user_agent !~* ...
1
vote
1answer
62 views

Problems configuring SSL certificate on Apache VirtualHosts

I am attempting to run multiple SSL connections off a single IP server running RHEL6. I have successfully configured one domain on SSL, however when I attempt to add a second, Apache fails to ...
0
votes
1answer
44 views

Setting up basic proxy from https to http via Apache

I need to proxy some remote api https://example.com/api/ to be accessible locally as http://localhost/api/ I tried putting this line in httpd.conf: ProxyPass /api/ https://example.com/api/ ...
0
votes
0answers
8 views

SQL 2012 IPSec or SSL

I have a requirement to secure connections to SQL server. (at transit that is) - TDE will be used for encryption at rest. SQL provides two options which are either certificate based SSL or Windows ...
2
votes
1answer
37 views

Getting SSL certificate chain from jabber server

trying to connect my jabber client (pidgin) to a jabber server with self signed certificate, I am getting an "unable to validate certificate" error. As it is not possible to tell the client not to ...
0
votes
1answer
15 views

Why tomcat on linux needs to build APR and not download

I am trying to install APR on Ubuntu Linux. I found that tomcat provides a downloadable APR package for windows but i cannot find a downloadable version for Linux. The tomcat site gives instructions ...
0
votes
0answers
19 views

In nginx logs: SSL3_GET_CLIENT_HELLO:required cipher missing

We disabled SSLv3 several months ago, and on Sunday I noticed this filling our nginx logs. It's been continuing ever since and users are emailing us saying they cannot connect to our site. 2015/01/13 ...
0
votes
0answers
25 views

Apache not forwarding to HAProxy

Scenario: I have a mobile application that needs to talk to a service hosted by an IBM Datapower appliance. However, the Datapower appliance requires bi-directional SSL and that will not work for ...
4
votes
1answer
257 views

Have I referenced my website's SSL certificate chain correctly?

The SSL certificate chain for one of my websites is incomplete, and I learned that I should reference the intermediate certificate in the virtual hosts file. Comodo sent me two intermediate ...
0
votes
1answer
35 views

Capturing LDAPS traffic with tcpdump

I have an app server that authenticates against Active Directory using LDAPS. I am connecting to the AD server over port 636. I'm trying to troubleshoot/debug some performance issues and am beginning ...
0
votes
3answers
53 views

Redirect Naked Domain to SSL

I have a wildcard SSL certificate and I want to redirect all http requests to their equivalent https. My server is a Debian (wheezy) and I am running Apache 2.2.22 I have added the following at the ...
0
votes
2answers
47 views

CAs in different child domains

I am trying to achieve the following; Environment is a Single Forest with a Root Domain and x2 child domains as follows; root.net child1.root.net child2.root.net There will be no logical or ...
-1
votes
2answers
47 views

Can one domain have 2 or more SSL certificates?

I have googled and found this post: http://security.stackexchange.com/questions/46988/is-it-technically-possible-to-configure-two-different-ssl-certificates-for-the-s If it actually is possible, then ...
1
vote
1answer
24 views

Force https before authentification - no access to vhost

I am a beginner when it comes to servers and I have a problem similar to this one. When accessing the desired webpage, .htpasswd prompts me for an authentification before I am redirected to https. ...
0
votes
1answer
42 views

Outlook SSL error when connecting to new exchange 2013 installation

I've just installed Outlook 2013 and have all the clients connecting to it, however, whenever a client connects via outlook they are prompted with an invalid SSL message for myserver.mydomain.local. I ...
1
vote
1answer
8 views

gnutls-cli hangs when testing an ssl connection

I'm running the command gnutls-cli -s facebook.com -p 443 --x509cafile /etc/ssl/certs/ca-certificates.crt -d 999 and the output is |<2>| p11: loaded provider 'p11-kit-trust' |<2>| p11: ...
2
votes
2answers
25 views

Is it possible to have IIS require SSL and redirect HTTP at the same time?

Our application currently has a HTTP-redirect to HTTPS. Now we want to completely remove this HTTP-binding because of security reasons, and have our users only use HTTPS by configuring "Require SSL" ...
3
votes
1answer
62 views

cURL is failing for normal users but not root

Have a strange issue on a RHEL box. To keep the editor from complaining about posting more than 2 site links, kindly mentally replace [google site] with https://www.google.com when reading the curl ...
1
vote
0answers
51 views

SSL error, unable to find valid certification path to requested target

I'm new to ssl so forgive me. I set up a site with ssl and all the online checks (eg. https://ssltools.websecurity.symantec.com/checker/views/certCheck.jsp) show that it is set up correctly and the ...
0
votes
1answer
162 views

IMAP TLS connection to Dovecot fails

Original title: IMAP connection to Dovecot fails only from Thunderbird I have set up Dovecot with SSL (TLS) on port 993. I can connect with Outlook, PHP SMTP and Android Mail, however Thunderbird ...
1
vote
1answer
38 views

Validating SSL/TLS renegotiation flaw

Our vulnerability scanner (Saint-based) is claiming that a large number of devices and servers are susceptible to the SSL/TLS renegotiation flaw (CVE-2009-3555). Most of these servers and devices are ...
2
votes
1answer
281 views

Weird http -> https redirection although not configured

I am running Apache 2.2.15 (CentOS 6.6) with a HTTP-only domain demo.xml-director.info Using wget I can retrieve the content properly wget -S http://demo.xml-director.info --2015-01-05 13:31:41-- ...
0
votes
2answers
17 views

SSL Certificate issue on renewal in IIS 7

I have an SSL certificate that expires on Februray 15, 2015. What if I install new certificate on my server on Feb 10, 2015. Will my certificate work with new renewed certificate on Feb 10 as my old ...
0
votes
1answer
54 views

HAProxy SSL Handshake failure on one server but not the other

I've been searching the net extensively but I'm not able to find a solution to this problem. I have setup two servers behind KeepAlived and HAProxy. When both servers are up, I can see that both ...
2
votes
0answers
25 views

Certificate can only be used by network service account

Issues : Our service is using one certification for partner service call. It worked well in IIS site which is running as network service account. But when we run test the code as administrator ...
1
vote
3answers
53 views

If a sub domain is secure with a SSL certificate, will the sub-subdomain also be secure?

I have a standard SSL certificate I just purchased from Godaddy. Now it won't let me use a wild card for issuing the certificate for my domain. It says that the * wild card is not included in my ...
2
votes
1answer
41 views

Force SSL not working either with Joomla or htaccess

We have a multiple sites in Joomla. Following are the details. Hosted on domain mydomain.co.in, sub.mydomain.co.in. Amazon EC2 instance, behind load balancer. We have bought WildCard SSL certificate ...
1
vote
2answers
57 views

Nginx SSL certificate served for all server name resolving the server IP

Given I have 2 subdomains configured in the DNS (so pinging both reply for both with the IP address of my server) and for those subdomains I have 2 different TLS certificates. I have configured nginx ...
2
votes
1answer
70 views

wordpress nginx ssl redirect loop

So I'm setting up an nginx server and installed wordpress and SSL. The site is working perfectly on both http and https but when I try to redirect http to https via nginx's server block, both http ...
0
votes
1answer
69 views

Nginx reverse proxy without SSL termination

I'm trying to set up Microsoft Remote Desktop Web Services on a Windows 2k12 server. This is fully functional, however I would like (need to) put a reverse proxy (Nginx) in front of it. I only have ...
4
votes
1answer
191 views

Puppet: New server unable to fetch configuration from puppet, with some ssl error, what could be the reason?

3 machines in the production environment had some HW issue and were decommissioned. The infrastructure team has re-installed them and gave them the same hostnames and IP addresses. On the ...
2
votes
0answers
39 views

PuppetDB: unable to get local issuer certificate

I'm attempting to use puppetdb on but I'm running into some issues. I have a node called puppet. It is the master as well as where I've installed puppetdb. It's also a node that puppet manages. ...
2
votes
1answer
61 views

nginx domains using SSL cert listening but inaccessible

I have multiple domains and multiple domains using SSL certs running under nginx. All domains are basically using the exact same config, substituting for names of course, except for the HTTPS-enabled ...
2
votes
1answer
49 views

How to fight BEAST vulnerability and maintain PFS for old clients?

Correct me if I'm wrong but BEAST is because of CBC in TLSv1.0, right? So to eliminate the threat of BEAST all CBC cipher suites which are SSLv3 or lower have to be disabled, right? Lets jump into ...
2
votes
1answer
70 views

How to Enforce SSL in Varnish 4

I am aiming to redirect clients to a SSL-version of a site using Varnish. In Varnish 3 this could be done by the following in the VCL: sub vcl_recv { if ( (req.http.host ~ "^(?i)somesite.org" || ...
1
vote
1answer
42 views

How to secure only one page with SSL on Apache2?

My web server hosts many pages. However, I need to secure only one of them with SSL. I know how to create self-signed certificate and how to install it on Apache2. My problem is quite different: since ...
2
votes
2answers
262 views

What should I do about a mixed content warning on my website?

My server is configured to use HTTPS only; this works okay. But when I visit the website I get this message in Firefox (next to the URL bar): Firefox is blocking content on this page Most ...