SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

-1
votes
0answers
9 views

self signed certificate with openssl for server at home and no domain name [migrated]

All of the articles I read online talk about creating a self-signed certificate for a domain you own. I have Apache2 set up on an Ubuntu 16.04 server at home. My ISP gives me a dynamic IP so I use ...
2
votes
0answers
21 views

Installing apache2 ssl - ubuntu

I need to install a ssl in my apache2 ubuntu, and do not know what I'm wrong, but the fact is that I do not get ... I have the relevant files: one .key file and two .crt files. At first, when editing ...
0
votes
1answer
28 views

Problems with using NGINX on an SSL-only site

I've configured a website to be 100% SSL, and its on a cPanel server with NGINX. I'm able to get the SSL part to work fine, but the IP address reported for site visitors is the IP address of the ...
-2
votes
0answers
10 views

Will loading passive content in secure Iframe will show up on all browsers?

Hey we would like to move our site to HTTPS, but the main question is will our passive content that hosted on 3rd party website shown in secure iframe, Example: The page on website is using HTTPS ...
1
vote
0answers
29 views

AWS ELB with SSL backend adds proxy protocol inside SSL stream

Note, this has been also posted in http://thread.gmane.org/gmane.comp.web.haproxy/27737 we are trying to configure this architecture: ELB terminating SSL, using preconfigured certificates. ...
0
votes
1answer
35 views

Installing SSL Certificate

I am trying to install an SSL certificate on my Apache server that's hosted on an EC2 instance from AWS. I originally intended to go with AWS Certificate Manager and put the SSL on a Load Balancer but ...
1
vote
0answers
28 views

Https: not working but :443/ work?

I don't understand (on debian) why I can access to my website using http://www.myserver.com:443/ but not directly with https://... I'm using LetsEncrypt, all my cert' are generates and works. Here my ...
0
votes
2answers
26 views

Linux: where to store Java trusted CAs

I need an advice regarding the best practice of storing organisational CA on Linux servers for Java. Basically, JRE installation contains a list of trusted CAs in cacerts file, which is used by ...
0
votes
2answers
45 views

nginx wordpress ssl mixed content

I have a wocommerce site for which I am trying to setup an SSL certificate for checkout pages. The HTTP version of the site is working file. Prior to switching to nginx SSL on apache worked fine. ...
2
votes
2answers
62 views

Renew Letsencrypt certificate

I am trying to renew my letsencrypt certificate by the next command: ./letsencrype-auto renew but I receive this error message: configuration file /etc/letsencrypt/renewal/domain.conf produced ...
0
votes
1answer
39 views

http(s) non-www to www redirect nginx

This is my config: server { listen 80; server_name domain.com www.domain.com; return 301 https://www.domain.com$request_uri; } #server { # listen 443 ssl; ...
0
votes
1answer
12 views

SSL offloading from Apache to Tomcat get overwritten somewhere

I was asked to upgrade a server running Apache and Tomcat-6 on Debian Wheezy from HTTP to HTTPS. I have successfully obtained and install SSL certificates on the Apache part and checked that they work ...
0
votes
1answer
17 views

How to create a *.crt file out of keystore? (SSL / Tomcat)

to use https (ssl) with tomcat i build a keystore with this commands: $JAVA_HOME/bin/keytool -genkey -alias [youralias] -keyalg RSA -keystore [/preferred/keystore/path] $JAVA_HOME/bin/keytool ...
1
vote
1answer
30 views

Apache2 redirect www to non-www (with SSL)

Wise people, I am trying to accomplish the following: Redirect these: http://www.veluwsvuurbarneveld.nl http://veluwsvuurbarneveld.nl https://www.veluwsvuurbarneveld.nl To ...
1
vote
2answers
32 views

Do web Servers send the certificate chain to the Web Client?

If my web server (latest Apache) has a valid (not expired or revoked) Verisign certificate chain (root -> intermediate -> leaf/my server), then does the server send the entire(?) chain to the client? ...
0
votes
0answers
17 views

Google App Engine The SSL certificate provided could not be inserted. xn- domain

I try installing Comodo Certificate that I ordered in SSLs.com on Google App Engine Custom Domain. But I have error: The SSL certificate provided could not be inserted. I checked that my key is ...
0
votes
0answers
18 views

WHM/cPanel presenting root SSL certificate even when accessed from another domain [closed]

I believe the title says it all. I'm having ush1.forty2.ae that is having a certificate installed for the same domain, and it just works perfectly. However, when i try to access cPanel from another ...
1
vote
0answers
15 views

Plesk 12.5 Nginx proxy pass SSL to Node app on different port [closed]

Preface: tried installing JXCore's Node Extension for Plesk, and I can't get it to work. Gives me some error, and their support is not answering emails...... [IP ADDRESS] = real IP, example.com = ...
0
votes
1answer
40 views

How to get a perfect score from SSLLabs?

As you can see at: https://www.ssllabs.com/ssltest/analyze.html?d=www.notfriendly.xyz&hideResults=on&clearCache=on my forum does have an A+ score but is lacking in Key Exchange and Chipher ...
0
votes
1answer
26 views

Adding a second SSL for a second domain on a server - second domain is still using the first SSL Cert

I need to add an ssl cert to a second domain on my server (AWS Amazon Linux) I thought I enabled SNI correctly? although probably not... domain1 already has a functioning SSL cert. First attempt I ...
0
votes
1answer
28 views

NGINX / PHP-FPM + SSL very slow

My application is served on an Amazon EC2 t2.small instance. When using the ab command to test performance. ab -n 3000 -c 100 mydomain.com HTTP Finished 3000 requests Server Software: ...
1
vote
1answer
20 views

Dockerized Apache + SSL behind NGINX as reverse proxy

I have two containers, one of which is running NGINX as a reverse proxy for serveral other containers. One of the other containers is running Apache with SSL enabled and configured. I have seen ...
0
votes
0answers
13 views

Apache2 on Ubuntu running SSL returns data after time-out reached

I am working with a server that I recently inherited from a departed developer. The server returns XML documents via a RESTful interface over an SSL port. For small documents, the data is returned ...
0
votes
1answer
23 views

Exchange 2010/Outlook certificate errors

We are running Exchange 2010 on SBS 2011. About a year ago, I renewed the certificate for the mail server, however, ever since that time, we receive certificate errors on OWA, and internally, we ...
0
votes
1answer
18 views

Can I use Cloudflare CDN/HTTP proxy for SSL-enabled web-site?

I want to use Cloudflare CDN/HTTP proxy for my web-site that already has HTTPS through LetsEncrypt certificate. I don't want to use Cloudflare's Free SSL certificate as it doesn't work on WindowsXP ...
1
vote
0answers
17 views

Rails + Nginx + SSL - Allow no-SSL on some routes

I have a rails app being served by nginx. I have ssl enabled on all routes with this conf: server { listen [::]:80; listen 80; server_name domain.com; access_log ...
1
vote
1answer
47 views
+50

Secure Email Settings for Email Clients & for PHPMailer

I'm trying to work out how to make my outgoing/incoming email's as secure as I can possibly make them. First of all, my domain has Wildcard OV SSL Certificates, I have copies of the .csr, .crt and ...
0
votes
1answer
37 views

Let's Encrypt SSL Certificate File Not Found Error, but still working

I'm running SSL Certificates from Let's Encrypt. I've got them installed on my Ubuntu machine running Apache. The setup works fine and I can launch the website, see the green padlock and even got an ...
0
votes
0answers
14 views

WireShark tcpdump showing RST,ACK. Trying to figure out why?

Frame 5: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) on interface 0 Interface id: 0 (\Device\NPF_{49FD2502-47B9-4506-A052-F603251179ED}) Encapsulation type: Ethernet (1) ...
0
votes
0answers
13 views

stunnel keeps stopping with WSAECONNREFUSED given

Right so bit of background to start with I've got 2 stunnel installs on 2 different servers and basically using ensemble and stunnel to bounce a message around with ssl cert. Here is the flow. Where ...
0
votes
1answer
15 views

Is it possible to obtain a list of https hosts that users have visited from a Sonicwall before DPI-SSL is implemented?

The reason I ask is that if one could do this, is because one could use the logs to find a list of https sites to white list by counting the number of visits prior to implementation. But something ...
1
vote
1answer
29 views

Running an application on a second server with a dynamic IP. Do I need two SSL certificates when using Apache ProxyPass?

Terms example.com: The domain that points to the static server. static server: This server has a static IP address and has Apache ProxyPass pointing to dynamic server. dynamic server: This server ...
0
votes
1answer
16 views

importing self signed certificates mysql/mariadb and tomcat how to?

trying to use certs for securing connections between Tomcat 8.x and mysql/mariadb. I'm going to use a self-signed cert. What follows is what i think i should be going and appreciate you to jump in and ...
1
vote
0answers
17 views

Setup nginx proxy_pass to follow correct according to protocol used

I have the below config location / { proxy_pass http://backend; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For ...
3
votes
0answers
24 views

What process on a SonicWall Security Appliance Checks the DPI-SSL Client Inspection?

I'm interested in determining if there is high CPU usage on a SonicWall Security Appliance, but I don't know which process to check for high CPU usage. There are various options for this in the UI ...
1
vote
3answers
85 views

To SSL or to not SSL

Currently I have a website that serves a lot of mixed content I have the whole website under ssl. example.com All static content such as css js and a small amount of my own images such as logos ect ...
0
votes
1answer
34 views

421 Misdirected Request using HTTP/2 and SAN SSL

I'm running Apache 2.4.20 on Ubuntu and I have SSL configured. I have a SAN SSL Certificate and www.example.com and www2.example.com are sharing the same certificate. I'm getting a 421 Misdirected ...
0
votes
0answers
15 views

nginx - cannot get my subdomain running fine

I have a server "emberhub.me" with one subdomain "test.emberhub.me" I want to use SSL on all ... emberhub.me and www.emberhub.me requests should display the 'standard' Nginx welcome page ( ...
0
votes
0answers
21 views

Scan Ciphers on FTPS port

I'm trying to remove RC4 ciphers per BEAST, but I'm having trouble verifying that there are ciphers available on my FTPS ports. NMAP returns the cert on the port, but doesn't say anything about the ...
1
vote
1answer
29 views

gitlab SSL configuration / certificate verification failed

I have my own gitlab server, now secured with an letsencrypt SSL certificate. Now, I want to publish some packages via packagist. But when I enter the git repository url in packagist, I got the ...
-1
votes
1answer
51 views

Using SSL certificate issued by Godaddy for localhost website

I have a Godaddy SSL certificate that i want to use on localhost, however the certificate is issued to example.com and if i use that it definitely gives a certificate mismatch error. Is there any ...
0
votes
0answers
15 views

Accessing self signed SSL website in iis remotely shows error in ie

I have created a self signed SSL in IIS for the default website. I have used the solution here to get rid of certificate error while accessing the site locally however the requirement is that the ...
0
votes
0answers
38 views

FTP protocol Extremely slow on Windows 10. What could be causing this?

I am running 2 different devices (A pc and a laptop) both on the same network, both Windows 10. The laptop has standard transfering speeds on the FTP protocol. The PC has extremely slow transfer speed ...
0
votes
0answers
33 views

SSL Error when pressing CTRL+F5 (overwriting cache) in Firefox

I have an nginx server which fails to correctly delive ssl, when a user presses ctrl+shift+r or ctrl+F5. These shortcuts reload the page and bypass the browser cache. It seems to work in Chrome and ...
2
votes
3answers
44 views

Apache SSL without Private Key

We are currently working with a client who needs SAML authentication to setup their QA site on our servers. They have sent us the CRT file for the SSL to install, however they are not sending the key. ...
0
votes
0answers
30 views

SSLv3 seems to be not disabled even after tomcat 6 server xml changes TLSv1

Even after setting in server.xml as sslProtocol="TLSv1" when we do vulnerability check, the below are the details of output.. # /usr/sfw/bin/ > openssl s_client -connect ipaddress:portNo -ssl3 ...
0
votes
2answers
46 views

nginx SSL redirect fails

I've got a site I'm serving with nginx. I want it to default to https, so I set up a redirect and also HSTS. If you visit http://getsumbits.com, the request times out. If you visit the https version, ...
2
votes
2answers
66 views

Postfix: SSL_accept:error in SSLv2/v3 read client hello A

A couple weeks ago, I noticed the following lines in my logs after moving to a new server with up-to-date software (which, among others, allowed me to finally disable deprecated SSL/TLS versions): ...
0
votes
1answer
18 views

Move website to a new domain

At the moment, the client website (an ASP.NET app) is accessible via, let's say, www.domain1.com. The client has then purchased a new domain himself, e.g. www.domain2.com, and is wanting to switch to ...
1
vote
0answers
7 views

Create an ssl tunnel to allow old device using ssl3 to connect to current server

I am having an issue with some devices not being able to connect to vmware horizon after SSLv3 was disabled on the last upgrade. At the moment there are no firmware upgrades to fix the device so it ...