SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
0answers
19 views

Change of Server (IP Address) Affects Access to the server from Domain SSL Certificated by LetsEncrypt

According to many answers the Certificate is not bound to the IP address but bound to the domain. But still I can not reach the application by using the domain. Is there a way to notify the DNS that ...
0
votes
2answers
28 views

SSL wildcard pattern not working when prefixing URL with “www.”

If I have a certificate which is issued to *.abc.dk, I can get to the site with for example vm.abc.dk fine (changes automatically to https://www.vm.abc.dk) but when I try to write www.vm.abc.dk I get ...
0
votes
0answers
11 views

When is start to use a reverse proxy server my ssl certificate gets invalid,do i need a second ssl certificate for the reverse proxy? [on hold]

my site is protected by cloudflare,i have a ssl certificate from comodo ca. I have a server and from now a proxy server but when i switch my proxy on than cloudflar shows me error 523 what meen my ...
-1
votes
1answer
28 views

Force use of new SSL certificate?

I recently let an ssl certificate expire. I then purchased and installed a new certificate (didn't renew the old one do to the cost of renewing an ev cert vs a new basic cert). Everything works fine, ...
0
votes
0answers
24 views

tunnelblick - Chrome doesn't open HTTPS sites in office network [on hold]

I use Tunnelblick VPN client to connect to Office network. When my mac connects to mobile 3G hotspot, VPN connection works just fine. I can access HTTPS & HTTP web sites in office network. When ...
1
vote
1answer
31 views

Signing OpenVPN server and clients certificates by Samba4 DC auto-signed CA.pem

I installed Samba4 and configured it to be domain controller, and it auto generated ca.pem, cert.pem, key.pem. And now I want to use the same CA of samba to sign the new certificates (maybe generated ...
-1
votes
2answers
11 views

Apache SSL not working in Centos 6.5

I have a simple LAMP stack with httpd/Apache installed on Centos 6.5. I've set my vhost up in /etc/httpd/sites-available/acute.conf like so: <VirtualHost *:80> ServerName acutemedical.co ...
0
votes
0answers
9 views

3 apache config files after SSL cert install. Rewrite won't work

I used EFF Certbot to install a free SSL certificate. Now I have three config files for my website. 000-default.conf 000-default-le-ssl.conf default-ssl.conf Additionally I have some other config ...
0
votes
0answers
11 views

Utilizing SSL on Multi-domain, Autoscaling Elastic Beanstalk Setup

We are creating a Content Management System for our company. It is important that this CMS support dynamic domain names on a dynamic number of servers. After many hours of research we felt that Amazon'...
0
votes
1answer
35 views

https not working with www and DNS redirect isn't helping

Not sure why this site is killing me as I've configured SSL on domains before without a problem - but the combination of DNS management and server configuration is hurting my head - so I'm asking for ...
-3
votes
0answers
25 views

Website responds slow after change to HTTPS [on hold]

My website used to be run without SSL security, but after changing to HTTPS, my server reacts slow. Every page change takes a few seconds to go, but works fine... Have i mis-set a setting? CentOS ...
2
votes
1answer
31 views

MySQL SSL Connection

I'm trying set ssl connection with MySQL Server. I've read this and many more articles https://dev.mysql.com/doc/refman/5.7/en/using-secure-connections.html There is one thing i still don't know, ...
0
votes
0answers
11 views

OWA Issue after installation of rollup- Firefox and Chrome cannot load page, potential SSL issue

My company is using Microsoft Exchange 2010 on a 2008 Server virtual machine. It fell quite behind on regularly updates because of potential downtime conflicts, but this weekend we patched it ...
0
votes
2answers
43 views

How to enable HTTPS for the public DNS route of an Ec2 instance instance?

I am working on a Facebook bot app and one of their requirements is to setup a webbook on my webserver that is returning a token, to validate my account. I quickly spin up a micro instance (Ubuntu) ...
-1
votes
1answer
32 views

What permissions should I give to CA Bundle file? [duplicate]

Hi I setup an ssl certificate using godaddy and read the following article: Best location for SSL certificate and private keys on Ubuntu. I am trying to protect an aws ubuntu gitlab instance that uses ...
-1
votes
0answers
17 views

Create a certificate request failed in domino server

I had a problem when I was setting up a Domino CA so that we can use IBM verse by SSL. I referred to the IBM redbook about domino certification authority and SSL Certificate and followed it step by ...
0
votes
0answers
30 views

Disabling TLS 1.0 prevents Client HELLO packet

We have an application that we are trying to get to communicate to Paypal. We noticed that communication failures were occurring, so we routed everything through Charles as a proxy. When we routed ...
1
vote
1answer
29 views

Security of SSL certs on AWS ELBs / SSL offloading

I have some concerns about security and am wondering how AWS will store an SSL certificate deployed to an ELB. I have a wildcard SSL cert for my domain that I want to make sure doesn't persist ...
2
votes
1answer
62 views

DL380 G6 iLO2: Upgrade SSL connection

I've got a HP DL380 G6 with ILO 2.29 installed. Now after upgrading the certificates to a AD-signed one (to get rid of the pesky warnings) we're stuck with one last one, only showing up on Google ...
1
vote
0answers
23 views

Internal EV SSL From A Windows Server 2012 R2 Root CA Shows Up As A Normal Certificate

I am trying to setup an internal ev ssl server for all of my internal applications giving ie the little green bar and chrome displaying my company name. It works fine in IE displaying the green bar as ...
0
votes
0answers
7 views

Disabling TLS1.0 in mod_proxy

We are using apache http server 2.2.29 and jboss 6.4. We are using Mod proxy for communication between web server and jboss application server. We are planning to disable TLSv1.0 in mod proxy ...
0
votes
1answer
102 views

SSL initial connection painfully slow in Chrome

Our customer has a PrestaShop based Webshop (https://www.hoerschiff.at) and now his hoster installed a SSL Cert. We updated the configuration of PrestaShop, so all pages are forced to be delivered via ...
0
votes
1answer
26 views

[SOLVED]: HTTPS access to phpmyadmin DOWNLOADS INDEX.php instead of opening phpmyadmin

When I open phpmyadmin without encription, everything goes fine. however, if I switch to https, the browser downloads the index file. apache 000-default.conf as <VirtualHost *:80> ...
0
votes
1answer
22 views

ldapsearch can't connect to ldaps

I am using a Centos 6.6 and i'm trying to use ldapsearch to connect to my windows ad server and i can't connect using port 636. I exported the CA root certificate of my ad server in base64 and added ...
0
votes
1answer
13 views

Composer is having ssl issues with private repository on osx

there are many similar questions but nothing that helps my cas. We are using a custom self hosted composer repo, for internal libraries. It all worked perfectly fine untill we updated the SSL ...
0
votes
0answers
18 views

Is Apache Basic Auth w/ SSL “good enough” from a security standpoint?

Is using Apache Basic Auth with enforced SSL good enough to secure internal-only sites that must be publicly accessible? I know that there are more advanced Apache authentication protocols such as ...
0
votes
1answer
23 views

How can i resolve this SSL report score?

Report: The server is vulnerable to the POODLE attack. If possible, disable SSL 3 to mitigate. The server supports only older protocols, but not the current best TLS 1.2. The server accepts RC4 ...
0
votes
1answer
63 views

How to redirect two domains, with/without https, to one https site?

I'd like to do the following: using Apache, redirect all of the following URLs: http://example.com http://www.example.com http://beta.example.com https://example.com https://www.example.com https://...
0
votes
0answers
15 views

HAproxy ssl re-encryption and http header modification

I want to use my Haproxy 1.6.5 as Https load balancer before my https servers but I stuck with a problem of misunderstanding . I want this behaviour: haproxy is available as https://example.com but ...
0
votes
0answers
19 views

DELLs iDRAC integrated VNC Server not working with encryption enabled

since I allready posted on two GitHub Communitys about this issue, I will try to keep this as short as possible. The GitHub Postings are added for reference at the end of the post. Im trying to ...
1
vote
2answers
37 views

Scalable way to install SSL certificates without downtime

We have a SaaS application that allows customers to use their own domain – pretty typical. At its core, the architecture has a simple catch-all virtual host (apache) and the software does the work of ...
0
votes
1answer
54 views

Enabling SSL in MySQL when using Windows as a server and client

I wanted to enable SSL on the connections to my MySQL server that I installed in a Windows machine, so I googled "use ssl mysql windows". The first result is this simple and straightforward guide. ...
2
votes
1answer
23 views

It´s possible to use a wildcard SSL certificate in SFTP/SSH connection?

I have a wildcard SSL certificate, *.mydomain.com, private, public Keys, pem/key file, certificate, etc. I have a SFTP/SSH Server based on MySecureShell to share and get some data using FTPS with ...
1
vote
0answers
43 views

haproxy with SSL in front of apache for local development

I work on a web app that regularly makes AJAX calls to a REST server that (in production) is accessed via the same domain. While developing locally, I have been redirecting REST calls to a dev server ...
0
votes
1answer
14 views

Are nodejs apps with proxy that has SSL certificate still secure?

I wrote a node.js app to deal with processing forms on a business's website. These forms can contain sensitive information so I knew it needed an SSL certificate. Since I didn't want to serve my node ...
1
vote
1answer
31 views

Using wireshark to determine which RSA PRIVATE KEY SSL conversation?

Situation I have a client VM and server VM communicating using SSL. The client VM runs wireshark capture using CLI Wireshark GUI is running locally on a different machine. Steps As USER on the ...
0
votes
1answer
28 views

Error during openssl s_client connection, SSL alert number 48

I am attempting to connect to a third party via CURL/PHP mainly, but since it doesn't work, am resorting to more verbose tools to diagnose the problem. If I try the following, on Ubuntu 14.04 LTS: ...
0
votes
1answer
34 views

SSL on some virtualhosts complains about wrong domain name

So I recently ran into this problem and want to describe the issue and the solution here: I have several virtualhosts on a httpd server and started to install letsencrypt SSL certificates on it via ...
2
votes
0answers
40 views

How can I let my clients use their own SSL on my SaaS

We run a service that lets our clients run their own CMS. Our clients want to use their own SSL Certificate, wether it's self signed, or signed by another company. Our application runs PHP. I was ...
0
votes
1answer
20 views

Disabled RC4 and SSL v3 with existing cert from letsencrypt

I can renew a cert like this: certbot-auto renew --apache but what parameters do I pass when I want to disable the less secure RC4 and SSL v3? I would assume the information I need is here, but I ...
2
votes
1answer
28 views

What version(s) of SSL/TLS does Active Directory support?

I'm running a pair of 2012R2 RODCs behind a load balancer for authentication for certain applications (mostly on Linux). LDP.exe works fine for lookups, but we're having an issue with Postgres where ...
-1
votes
0answers
31 views

How to connect to Softether via VPN over SSL?

I've configured a softether vpn server to listen on port 443 & I need to connect to it via VPS over SSL in android, but I could not find any suitable application for this purpose. In addition, ...
0
votes
0answers
20 views

Right way to configure ejabberd ssl

I have XMPP server on ejabberd. Ejabberd works well for a long time. Now I trying to add SSL support to ejabberd. My domain is like "sub.domain.org". DNS configured to link XMPP to host "jab.sub....
0
votes
0answers
19 views

Tomcat6 Client Authentication

I configured a Tomcat6 webserver on CentOS with SSL, and it works fine. Now I want to configure Client Authentication on it too: The server and the clients have their own certs signed by a local ...
1
vote
0answers
20 views

httping generates message “error shutting down ssl” with F5 HTTP endpoint

There is no failed request, but I don't know what the message error shutting down ssl means. Any idea? # httping https://ds31s3.swisscom.com PING ds31s3.swisscom.com:443 (https://ds31s3.swisscom.com):...
0
votes
0answers
32 views

How install SSL on two sites running on port 80 in IIS 7

I have a website running a simple PHP page in IIS and I have another program installed in windows. This other program is installed as a service and also runs on port 80 and can also be accessed using ...
0
votes
0answers
25 views

Using Multiple SSL Certs on the same port with OWIN Self-Hosting?

I have an application that is being hosted on an Azure Cloud Service - Worker Role. On start up, the application creates multiple new instances of OWIN SelfHosted Apps. Each app has it's own domain ...
0
votes
1answer
18 views

openssl tool cannot get certificate from CloudFront, does anyone know why?

Im writing a script to check the SSL expiry dates of all my domains. This works for my normal sites: echo | openssl s_client -connect $domain:443 2> /dev/null | openssl x509 -noout -enddate ...
2
votes
1answer
23 views

SSL handshake across multiple devices

A fairly basic SSL question, if you don't mind: Lets say I have traffic flow from a client to a web server as follows: [client] --> [public SLB:80] --> [reverse proxy:80] --> [internal SLB:80] --> [...
0
votes
1answer
53 views

Nginx upstream block nondefault port

experts. I am trying to configure nginx/1.10.0 for upstream to 2 https web servers on non standart port with ssl termination. Here is my current website setup in sites-available/ upstream backend {...