SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
0answers
9 views

Optimizing HAProxy SSL Termination (with Nginx backend on Ubuntu)

How can I optimize HAProxy with SSL Termination to Nginx backends on Ubuntu? The setup works fine and routes properly. However, when I perform SSL Termination with HAProxy, theres a huge performance ...
0
votes
1answer
49 views

How to submit IIS created CSR to StartSSL certificate provider?

I'm in process of setting IIS server up with free SSL certitificate from StartSSL. I'm new in this domain. StartSSL seems to be legit to me. My question is regarding point 7 on their website The ...
0
votes
1answer
23 views

Unable to turn off SSLv3 on Apache 2.4.9 without losing TLS 1.1 and 1.2

I have an interesting problem with two Linux servers with Apache 2.4.9: i'm trying to disable SSL v3 and RC4 in order to block POODLE and keep SSL Labs happy. However, whenever i turn off SSL v3, i ...
3
votes
2answers
40 views

Configuring SSL on Nginx Reverse Proxy for GitLab

I am having a small issue in my personal gitlab setup. I wanted to redirect all traffic that comes from http://gitlab.example.com to https://gitlab.example.com. SSL is indeed working on ...
1
vote
1answer
24 views

For DNS and SSL do I need a separate certificate for every (DNS RR) A record?

So our firm wants to separate out our cloud servers into separate environments, so www.foo.com, test.foo.com and dev.foo.com. [We may even want to break our subdomains into further sub-domains.] My ...
1
vote
0answers
18 views

Social networks and Cloudflare free SSL

Let me expose my setup and problems. Maybe some of you will have ideas for me to test. Setup On Digital Ocean : I have one web server running a web site with NGINX in the front (Ruby on Rails ...
0
votes
1answer
12 views

Client certificate authentication with no access to private keys

We are trying to set up client certificate authentication for VPN users on Cisco ASA. User certificate store is being used to complete the authentication. The problem we are running into is that the ...
1
vote
1answer
19 views

HA Proxy and Websockets

I'm setting up my first HAProxy reverse proxy server. It's going to be a proxy for an HTML5 app running on tomcat from a different server. I was able to get it to proxy out via HTTP, redirect all ...
0
votes
1answer
15 views

Apache 2.2 + SSL large file upload fail

I'm using apache 2.2 + ssl + wordpress. I can easily upload files up to 1GB without using SSL, but when I enable SSL I can only upload files up to ~250 MB. Error logs shows nothing. Am I missing ...
0
votes
1answer
17 views

HAProxy HTTPS Redirect to different domain

Currently I have a HAProxy configuration which redirects all HTTP traffic to HTTPS. frontend http-in bind *:80 redirect scheme https code 301 I then have various HTTPS domains configured, ...
0
votes
1answer
20 views

Signing wildcard cert for a subdomain

I want to use my issued wildcard certificate to generate an SSL cert for a subdomain E.g. *.bar.com -> foo.bar.com Reason being I want to attempt to prevent some XSS weaknesses caused by multiple ...
-1
votes
1answer
15 views

how should I 301 redirect https address to http address?

I have recently moved my website to a new domain. The previous domain had SSL installed and it was https://example.com. My new domain is http://newexample.com and It doesn't have SSL on it. I used ...
0
votes
1answer
65 views

IE and Chrome: ERR_SSL_VERSION_OR_CIPHER_MISMATCH

Hello i have this error with IE and Google chrome in Windows XP but my website work with Windows Seven (all browser) and Firefox (windows XP too) I learn in internet the problem its caused by ECDSA ...
0
votes
1answer
29 views

Nginx conflicting server name for subdomain

I currently have a vhost running on Nginx for foo.domain.com and everything works great. I created a new file for a new sub-domain I want to add called bar.domain.com. I use the same settings for ...
0
votes
1answer
34 views

SSL off for a specific URL Nginx

This configuration was working before, and now it is not. I should mention this is Django,Gunicorn, and Nginx. We are trying to make https://toontowninfinite.com/rpc/ use http, not SSL. and the rest ...
0
votes
1answer
36 views

Nginx randomly refuses SSL connections

I am running the website https://telerandom.com (NodeJS server, port 9576) behind an Nginx reverse-proxy. It usually works, but on occasion, it begins to refuse all SSL connections from certain users ...
0
votes
1answer
60 views

RapidSSL - Do I really need to include the Root CA's?

I have a RapidSSL certificate and the instructions asks me to include : RapidSSL SHA256 CA - G3, GeoTrust Global CA root and the Equifax Secure Certificate Authority root in my chain. However, this ...
1
vote
0answers
51 views

chrome requests get stuck pending

Description of issue We have a web server that is serving static assets. We are experiencing a problem where after you browse around some of the http requests get stuck in the "pending" state. In the ...
1
vote
2answers
39 views

Transferring SSL certificate to new server

We're swicthing from an OSCommerce website to Magento and are also swicthing servers. The old server is on Apache and our new one is on NGINX. The SSL certificate we have seems to have been purchased ...
0
votes
1answer
36 views

Google.com SSL Ciphers - How to capture which ones they are using?

I would like to use the same SSL Ciphers Google.com uses - in order for maximum browser compatibility. I'm aware that ssllabs.com shows them, but I have no idea how to translate them for use in Nginx ...
-1
votes
0answers
34 views

NGINX ODOO 8 SSL

I have an Odoo 8 server install at xx.xx.xx.xx and the domain name example.com The DNS record for example.com: A record: @ to the IP xx.xx.xx.xx CNAME record: www to the example.com I want the ...
0
votes
0answers
29 views

Haproxy Layer 4 balancing with TLS

We have ssl3 turned off in favor of TLS. Most the tutorials on https for layer4 support with haproxy, ie ssl passthrough, uses check-ssl or ssl-hello-chk. In our setup this will fail because we have ...
0
votes
1answer
28 views

Installing Domain SSL is not working

I have a Linode Server running Debian 7.5 & Apache2 I have the following files stored in the /etc/ssl/localcerts/ directory: www.test-site.com.key www.test-site.com.csr www.test-site.com.crt ...
0
votes
2answers
29 views

Manipulate .conf file to rewrite https properly

I'm having a nginx server and a domain, example.com. Each customer has his own subdomain, like wsb.example.com etc. Their content changes via PHP, but all subdomains get redirected to the same folder ...
0
votes
1answer
44 views

Apache2 Server should be SSL-aware but has no certificate configured [Hint: SSLCertificateFile] for wild card SSL certificate

I am trying to configure Godaddy Wild Card Certificates on a Apache web server.I am getting the following error: [Thu Jul 23 02:32:42.499991 2015] [mpm_event:notice] [pid 12293:tid 140626762094464] ...
0
votes
2answers
34 views

Real trouble over an expired SSL certificate

I renewed my SSL certificate at a very well known company, who screwed up my order. After it was righted, I received several certificate files with no instructions: MY.SERVER.COM.crt ...
-1
votes
1answer
38 views

Link to http on a https page (without mixed content warning) [closed]

My whole site is HTTPS, and I have trouble linking to a tumblr blog. If I use a protocol agnostic link (href="//...") the browser tries to access the tumblr blog via https, which throws an error ...
0
votes
1answer
26 views

Single IP multiple domains SSL issue

I've just noticed a small problem with a self signed SSL I am using for a webmail subdomain on one of my domains. I was using https://webmail.website0.com just to secure it a bit but I've noticed ...
-1
votes
0answers
27 views

Securing Lan server

I am opening a socket connection on a port from my cloud server to a local server in my office. The local server is listening on a certain port number say (2255) My router forwards any incoming ...
0
votes
0answers
25 views

Self-signed cert with Subject Alternative Names

I'm attempting to create a self-signed cert with SANs using OpenSSL on Ubuntu 14.10. I have been about to successfully generate a CSR that includes the proper extensions. When I generate the ...
0
votes
1answer
29 views

Share SSL certificate between VM

I have a SSL certificate for example.com, and I want to protect with it: My home page (example.com) running on a VM in Azure My servlet (servlet.example.com) which is running on a different VM (but ...
0
votes
2answers
55 views

SSL VPN connection to SonicWall firewall using only the native Windows VPN client?

I'm in the process of replacing a ForeFront TMG 2010 firewall with a SonicWall NSA 3600; the current firewall provides VPN access to our network using SSTP, and it works like a charm with any recent ...
0
votes
1answer
60 views

Jenkins behind SSL, my case not going through

I used to use these statemets to put Jenkins behind reverse proxy for TLS in previous previous job. But somehow these are't working anymore. (Update: I'm keep on struggling but I realized that last ...
1
vote
1answer
47 views

Redirect to SSL for specific URLs only

I want to force SSL www by re-directing only for some URL patterns. for example, Force SSL www redirect: http://example.com/asia/fewf -> https://www.example/asia/fewfwe ...
0
votes
2answers
79 views

Setting Access-Control-Allow-Origin in .htaccess for Https protocol

I have a site with http and https. I set in the .htaccess the following line which runs for http. Header set Access-Control-Allow-Origin "*" But with https I get this error. No ...
-1
votes
1answer
63 views

Postfix + Dovecot fatal: no SASL authentication mechanisms

When I try to login via telnet I am getting kicked out immediately: telnet localhost 25 Trying ::1... Connected to localhost.localdomain. Escape character is '^]'. Connection closed by foreign host. ...
0
votes
1answer
25 views

non SSL site showing ssl warning IIS 7.5

I have two sites bound to a single IP address (10.10.0.1) on two different domains (xyz.example.com and abc.example.com). HTTPS is bound to port 443 using the certificate for the xyz.example.com ...
0
votes
2answers
50 views

Common Name does not match Server Name - SSL Certificate

I recently purchased an SSL certificate. I've got www.site.com.key, www.site.com.csr, intermedia.pem, www.site.com.crt all set up in my /etc/ssl/localcerts folder. When I open my browser I get the ...
1
vote
1answer
52 views

OpenVPN doesn't share port with nginx

I have OpenVPN configured to sent non-VPN traffic on port 443 to my nginx server on port 4433. When I go to https://domain.tld:4433 it works, although https://domain.tld (Where OpenVPN listens on port ...
1
vote
1answer
31 views

Can I import an SSL certificate that was created by the CA into my Java keystore?

I'm trying to import a CA-signed certificate into a Java keystore. All the instructions I can find for this tell me to first create a keystore and a signing request (CSR) using the Java keytool, then ...
1
vote
1answer
59 views

Tomcat solution on https://weakdh.org has typos?

Do the non-GCM ciphers listed for the Tomcat fix on https://weakdh.org/sysadmin.html have typos? Under "Apache Tomcat" heading and below the text "In the server.xml file (for JSSE)" there is the ...
-1
votes
1answer
31 views

1 error when downloading file over ssl in internet explorer

My employer's clients are trying to download a file from our internetbanking application over ssl. When downloading with internet explorer, in some cases it shows an error "-1 from url cannot be ...
1
vote
0answers
12 views

Apache/nginx: pinned client certificates and FastCGI

Is it possible to have Apache or nginx accept only pinned client certificates and pass knowledge about the client's certificate to a FastCGI response handler?
1
vote
1answer
9 views

Extract Certificate Information automatically

In my current setting I have 16 production servers and another 16 to 20 on Dev and QA servers. I also have a lot of certificates in them. We are trying to inventory everything so that we dont miss out ...
-1
votes
1answer
36 views

website uses an invalid security certificate

I have website on ubuntu with apache server. Domain is from godaddy. When I type example.com it's running file under SSL (with https). But, for www.example.com it's giving me below error. ...
4
votes
0answers
99 views

What's the best way to simulate being behind China's Great Firewall? [closed]

We're having issues with an iOS app of ours that uses in-app purchase to unlock downloadable content - but it seems only from China. We see many negative reviews from China for this reason. Our in ...
4
votes
3answers
498 views

Do I need a dedicated IP address for each SSL certificate?

I am hosting multiple domains on a single AWS instance. The domains all share the same underlying codebase, but we provide "white label" services on various domains. Each of the domains (foo.com, ...
7
votes
2answers
370 views

Creating sub certificates from a root certificate (SSL) [duplicate]

If I purchase a signed certificate for example.com, can I then produce sub-certificates for a.example.com and b.example.com? These sub-certificates would have PEM files whose privacy cannot be ...
0
votes
1answer
69 views

HTTP over port 443 vs HTTPS over port 80

What is the difference between http://serverfault.com:443 and https://serverfault.com:80 Which one is more secure theoretically?
1
vote
1answer
22 views

Hardening web server cyphers: which cypher list to choose, or how to map between Mozilla and Hynek

Until now I was only aware of Hynek Schlawack's blog post on hardening web server cyphers having a relatively short list of cyphers. But recently I found How to fix 'logjam' vulnerability in ...