Tagged Questions
-3
votes
2answers
172 views
How can system admins track employees Gmail chat [closed]
I am in a company where i have been warned about using chats.
I spoke with one of the admin and he said every chat is being Monitored;
ok i agree it can be if we use plain text but what if we use ...
3
votes
1answer
819 views
How does the ssh-keygen .pub format work with .pem files?
The ssh-keygen command generates .pub files which it describes as "public key files", but they are a totally different format to most "public key files" I've usually seen, which are in PEM format. ...
1
vote
1answer
176 views
Configured MySQL for SSL , but SSL is still DISABLED..!
I configured SSL for MySQL using the following script.
#!/bin/bash
#
mkdir -p /root/abc/ssl_certs
cd /root/abc/ssl_certs
#
echo "--> 1. Create CA cert, private key"
openssl genrsa 2048 > ...
0
votes
1answer
34 views
Issue with Security Exception SSL [closed]
I was wondering if anybody knew any way of verifying yourself for SSL, without paying for it? I just want rid of the terrible looking message that prompts users when they join my site to add a ...
2
votes
3answers
329 views
Is there a way to make encrypted DNS resolutions? [closed]
Is there a way to make encrypted DNS resolutions, so that a packet sniffer in the same network still can't guess what DNS has been requested?
Maybe, just thinking, by tunneling DNS requests through ...
1
vote
2answers
657 views
Disable all but RC4 in apache
Our PCI compliance vendor requires that we disable all but RC4 encryption on our web server. Currently our apache config file looks like this:
SSLHonorCipherOrder On
SSLCipherSuite ...
0
votes
2answers
1k views
RC4_128 to avoid BEAST?
I'm using a Verisign Extended SSL cert which is piped downstream by nginx running the default cipher suite config.
This results in a 256 bit encrypted connection.
However, since it's a CBC method, ...
0
votes
1answer
293 views
Wildcard certificate with SAN
I am attempting to create a wildcard SSL cert with a Subject Alternative Name (SAN) for use in IIS 7.5 and I'm having some issues. Because I need to include a SAN, I am using the Custom Certificate ...
1
vote
1answer
209 views
Configure Apache2.2 as http to https encrypter/converter
I am using Apache 2.2 on SUSE 10 with mod_ssl.
My problem:
I want to connect a client(supporting only http) to a Server(supporting only HTTPS).
So I thought of deploying Apache as a proxy to convert ...
1
vote
3answers
188 views
Is there a way to have all virtual servers use the same SSL certificate without having multiple IPs?
Is there a way to have all virtual servers,in Apache, use the same SSL certificate without having multiple IPs? I know that you can use a certificate on one site, per port and per IP, but can I make ...
0
votes
3answers
742 views
HTTPS Proxy which answers CONNECT with own certificate
I'm configuring a DMZ which has the following Scheme:
Internet - Server A - Security Appliance - Server B - Intranet
In this DMZ I need a Proxy server for http(s) connections from the Intranet to ...
2
votes
2answers
77 views
ssl communication handshake question
During SSL communication, the server sends its certificate to the client for authentication.
Optionally, the client could send its certificate too, for client authentication.
My question is, does the ...
0
votes
2answers
417 views
Apache SSL unencrypted RSA private key readable by php scripts?
For reference, this question is related to the following ones; but they do not provide the answer:
Storing RSA Private Key un-encrypted
...
1
vote
2answers
163 views
Storing RSA Private Key un-encrypted
We have our infrastructure on amazon ec2. Because we are growing we are setting up a basic Web Server AMI image that we will use to launch new servers as we need them.
The main problem is that when ...
0
votes
2answers
301 views
Disabling weak ciphers on Windows 2003
For PCI-DSS compliance you have to disable weak ciphers. PCI-DSS permits a minimum cipher size of 128 bits.
However for the highest score (0 I believe) you should only accept 168 bit ciphers but you ...
0
votes
3answers
356 views
How simple TSL/SSL encryption works
I read from Wiki about TSL/SSL but there is something it seems a bit confusing for me
In order to generate the session keys
used for the secure connection, the
client encrypts a random number ...
4
votes
1answer
133 views
Should I encrypt an SSL Certificate Request before emailing it?
I need to send a client an SSL Certificate Request (from IIS 6.0)
They have requested that it ONLY be sent encrypted using an app like Winzip.
My question is. Is this actually an issue?
My very ...
0
votes
1answer
487 views
SSL Encryption with SQL Server 2005 Express not working as desired. No TLS/SSL protocol packets found
I'm trying to get SSL encryption working on SQL Server 2005 Express edition Svc Pk 3.
I've tried everything (worked the whole weekend), but I dont see TLS or SSL packets when I look at traffic using ...
2
votes
3answers
682 views
What books will help me learn everything I can about SSL/PKI?
Since SSL is the backbone of the internet, (now technically called TLS), what are some good books I should read up on to understand all aspects of it.
I suppose I'll need to learn some math, some PKI ...
1
vote
3answers
3k views
How to direct Apache Basic authentication over SSL?
Our intranet use mod_ldap to authenticate users to our internal Active Directory server as follows:
<Location /***/>
AuthType Basic
AuthName "***"
AuthBasicProvider ldap
...
3
votes
5answers
724 views
Is there any point in running SSL and encryption for email?
Sorry if this is a stupid question, I'm curious what the difference between the two is if any. Is there any point in running SSL and encryption for email? Or, is one method of security good enough?
0
votes
1answer
118 views
How to see if data is encrypted
Is there an easy way to tell if I am successfully encrypting transfers between me and my database? Can I look at the network monitor or something that will tell me?
NOTE: I am new to any sort of ...
6
votes
2answers
3k views
Certificates in SQL Server 2008
I need to implement SSL for transmissions between my application and Sql Server 2008.
I am using Windows 7, Sql Server 2008, Sql Server Management Studio, and my application is written in c#.
I was ...
3
votes
2answers
475 views
Encrypt connection between apache web server and mysql server
I'm setting up a local webapp. I have a CentOS-5 box that will be the webserver (Apache 2.2). I have another box (RHEL5) that will be used only for MySQL.
The data will be encrypted on the webserver ...
3
votes
2answers
129 views
Can I have a SSL certificate for direct IP access?
Is it possible to have a SSL certificate for access directly to an IP, and not through a hostname? Eg, can I purchase an SSL certificate to make https://1.2.3.4/ work without giving a security ...
1
vote
1answer
4k views
SqlServer 2008 How to correctly install/configure SSL certificate to require encrypted connections
SqlServer 2008 instance is installed on Windows Server 2008 and is running under this identity: NT AUTHORITY\NETWORK SERVICE
SSL cert from third-party CA has been installed in Local Computer\Personal ...
4
votes
2answers
213 views
Two SSL certificates with same key
If I generate two SSL certificates using the same key, am I diluting the strength of the certificates? (does it open the door for cryptanalysis or a possibility of compromising data across that ...
3
votes
3answers
13k views
'Certificate types are not available' When creating computer certificate?
Environment
Windows Server 2008 sp1
Xeon CPU E5430 @ 2.66 GHz
16.0 GB Ram
64-bit Operating System
1TB Disk Space
Server Role: SQL Server
Other Information: Joint to domain, Logged in user domain ...
10
votes
1answer
6k views
Is POST data encrypted over an SSL connection?
I've set up my web server to use SSL (I'm using WAMP for my staging scenario before I move it on up to public servers). The purpose of the site at hand has succeeded and I am able to use the site from ...
5
votes
4answers
12k views
How can I see what version of SSL a web server is currently using?
I believe I have disabled SSL 2.0 on my web server (Windows Server 2003). To make sure that it is now using SSL 3.0, how can I check this?
What is the correct way to disable 2.0 and enable 3.0 on a ...
4
votes
4answers
25k views
convert .p7b key to a .pfx
I have an SSL certificate in .p7b format that I need to convert to .pfx. If I try this through the windows certificate managment the option to expert as a .pfx is disabled.
Trying with openssl I ...
3
votes
3answers
5k views
How do I limit SSL/TLS connections to at least 128-bit encryption?
When I'm ordering an SSL cert for my public web server, how can I be sure that the web server (IIS 6 in my case) will only allow SSL/TLS client connections supporting our corporate standard of at ...
0
votes
1answer
2k views
IPP over SSL/TLS in Windows Vista: Can it be done?
I'm trying to connect a Windows Vista client to a Lanier LD445c (scanner/copier/printer) using IPP over SSL/TLS in order to provide an encrypted channel for printing. The LD445c that I setup for ...
1
vote
4answers
2k views
How do I setup a SSL mail server?
For a beginner, can anyone recommend a good method of setting up a encrypted IMAP server (on port 993) or at least TLS POP3 email ? There are plenty of examples of opportunistic client side email ...
1
vote
1answer
381 views
Windows 2008 SSL Certificate
I have a Windows Server 2008 machine hosting sites from IIS 7.
I have bought certs from trusted authorities before and installed on IIS 6, but I just want to make my own certificate to encrypt the ...
3
votes
7answers
539 views
Why do https connections take longer to establish than straight http connections?
Why is it that Secured HTTP Connection (https) is Slower then than typical HTTP (http)?
Just interested in knowing only.
Thanks.
