1
vote
3answers
803 views

Why is it considered bad practice to only protect one page with SSL instead of whole website

I know that protecting all pages with SSL will slow down the website and add overhead to the server resources. I also see many other websites only protecting their login and registration page, which ...
1
vote
1answer
222 views

List of SSL Cipher Support by Browser

Not really sure if this is the appropriate SE to post this to, but here it is: Is there some online reference for what SSL ciphers are supported by the various browsers? Basically, I'm interested in ...
0
votes
1answer
719 views

Associate SSL certificate for SQL Server which does not use the FQDN

We would like to connect securely to SQL 2008 R2 over the internet for reporting purposes. Speed is not a huge concern for these smaller data sets, and users are going to be using simple reporting ...
5
votes
2answers
3k views

Is STARTTLS more safe than TLS/SSL?

In Thunderbird (and I assume in many other clients, too) I have the option to choose between "SSL/TLS" and "STARTTLS". As far as I understand it, "STARTTLS" means in simple words "encrypt if both ...
-3
votes
2answers
1k views

How can system admins track employees Gmail chat [closed]

I am in a company where i have been warned about using chats. I spoke with one of the admin and he said every chat is being Monitored; ok i agree it can be if we use plain text but what if we use ...
8
votes
1answer
4k views

How does the ssh-keygen .pub format work with .pem files?

The ssh-keygen command generates .pub files which it describes as "public key files", but they are a totally different format to most "public key files" I've usually seen, which are in PEM format. ...
3
votes
1answer
1k views

Configured MySQL for SSL , but SSL is still DISABLED..!

I configured SSL for MySQL using the following script. #!/bin/bash # mkdir -p /root/abc/ssl_certs cd /root/abc/ssl_certs # echo "--> 1. Create CA cert, private key" openssl genrsa 2048 > ...
2
votes
3answers
489 views

Is there a way to make encrypted DNS resolutions? [closed]

Is there a way to make encrypted DNS resolutions, so that a packet sniffer in the same network still can't guess what DNS has been requested? Maybe, just thinking, by tunneling DNS requests through ...
1
vote
2answers
2k views

Disable all but RC4 in apache

Our PCI compliance vendor requires that we disable all but RC4 encryption on our web server. Currently our apache config file looks like this: SSLHonorCipherOrder On SSLCipherSuite ...
1
vote
2answers
2k views

RC4_128 to avoid BEAST?

I'm using a Verisign Extended SSL cert which is piped downstream by nginx running the default cipher suite config. This results in a 256 bit encrypted connection. However, since it's a CBC method, ...
0
votes
1answer
472 views

Wildcard certificate with SAN

I am attempting to create a wildcard SSL cert with a Subject Alternative Name (SAN) for use in IIS 7.5 and I'm having some issues. Because I need to include a SAN, I am using the Custom Certificate ...
1
vote
1answer
345 views

Configure Apache2.2 as http to https encrypter/converter

I am using Apache 2.2 on SUSE 10 with mod_ssl. My problem: I want to connect a client(supporting only http) to a Server(supporting only HTTPS). So I thought of deploying Apache as a proxy to convert ...
1
vote
3answers
226 views

Is there a way to have all virtual servers use the same SSL certificate without having multiple IPs?

Is there a way to have all virtual servers,in Apache, use the same SSL certificate without having multiple IPs? I know that you can use a certificate on one site, per port and per IP, but can I make ...
0
votes
2answers
1k views

HTTPS Proxy which answers CONNECT with own certificate

I'm configuring a DMZ which has the following Scheme: Internet - Server A - Security Appliance - Server B - Intranet In this DMZ I need a Proxy server for http(s) connections from the Intranet to ...
2
votes
2answers
88 views

ssl communication handshake question

During SSL communication, the server sends its certificate to the client for authentication. Optionally, the client could send its certificate too, for client authentication. My question is, does the ...
0
votes
2answers
549 views

Apache SSL unencrypted RSA private key readable by php scripts?

For reference, this question is related to the following ones; but they do not provide the answer: Storing RSA Private Key un-encrypted ...
1
vote
2answers
189 views

Storing RSA Private Key un-encrypted

We have our infrastructure on amazon ec2. Because we are growing we are setting up a basic Web Server AMI image that we will use to launch new servers as we need them. The main problem is that when ...
0
votes
2answers
441 views

Disabling weak ciphers on Windows 2003

For PCI-DSS compliance you have to disable weak ciphers. PCI-DSS permits a minimum cipher size of 128 bits. However for the highest score (0 I believe) you should only accept 168 bit ciphers but you ...
0
votes
3answers
461 views

How simple TSL/SSL encryption works

I read from Wiki about TSL/SSL but there is something it seems a bit confusing for me In order to generate the session keys used for the secure connection, the client encrypts a random number ...
4
votes
1answer
145 views

Should I encrypt an SSL Certificate Request before emailing it?

I need to send a client an SSL Certificate Request (from IIS 6.0) They have requested that it ONLY be sent encrypted using an app like Winzip. My question is. Is this actually an issue? My very ...
0
votes
1answer
596 views

SSL Encryption with SQL Server 2005 Express not working as desired. No TLS/SSL protocol packets found

I'm trying to get SSL encryption working on SQL Server 2005 Express edition Svc Pk 3. I've tried everything (worked the whole weekend), but I dont see TLS or SSL packets when I look at traffic using ...
2
votes
3answers
1k views

What books will help me learn everything I can about SSL/PKI?

Since SSL is the backbone of the internet, (now technically called TLS), what are some good books I should read up on to understand all aspects of it. I suppose I'll need to learn some math, some PKI ...
1
vote
4answers
3k views

How to direct Apache Basic authentication over SSL?

Our intranet use mod_ldap to authenticate users to our internal Active Directory server as follows: <Location /***/> AuthType Basic AuthName "***" AuthBasicProvider ldap ...
4
votes
5answers
1k views

Is there any point in running SSL and encryption for email?

Sorry if this is a stupid question, I'm curious what the difference between the two is if any. Is there any point in running SSL and encryption for email? Or, is one method of security good enough?
0
votes
1answer
129 views

How to see if data is encrypted

Is there an easy way to tell if I am successfully encrypting transfers between me and my database? Can I look at the network monitor or something that will tell me? NOTE: I am new to any sort of ...
6
votes
2answers
4k views

Certificates in SQL Server 2008

I need to implement SSL for transmissions between my application and Sql Server 2008. I am using Windows 7, Sql Server 2008, Sql Server Management Studio, and my application is written in c#. I was ...
3
votes
2answers
531 views

Encrypt connection between apache web server and mysql server

I'm setting up a local webapp. I have a CentOS-5 box that will be the webserver (Apache 2.2). I have another box (RHEL5) that will be used only for MySQL. The data will be encrypted on the webserver ...
3
votes
2answers
137 views

Can I have a SSL certificate for direct IP access?

Is it possible to have a SSL certificate for access directly to an IP, and not through a hostname? Eg, can I purchase an SSL certificate to make https://1.2.3.4/ work without giving a security ...
1
vote
1answer
5k views

SqlServer 2008 How to correctly install/configure SSL certificate to require encrypted connections

SqlServer 2008 instance is installed on Windows Server 2008 and is running under this identity: NT AUTHORITY\NETWORK SERVICE SSL cert from third-party CA has been installed in Local Computer\Personal ...
4
votes
2answers
346 views

Two SSL certificates with same key

If I generate two SSL certificates using the same key, am I diluting the strength of the certificates? (does it open the door for cryptanalysis or a possibility of compromising data across that ...
3
votes
3answers
16k views

'Certificate types are not available' When creating computer certificate?

Environment Windows Server 2008 sp1 Xeon CPU E5430 @ 2.66 GHz 16.0 GB Ram 64-bit Operating System 1TB Disk Space Server Role: SQL Server Other Information: Joint to domain, Logged in user domain ...
10
votes
1answer
8k views

Is POST data encrypted over an SSL connection?

I've set up my web server to use SSL (I'm using WAMP for my staging scenario before I move it on up to public servers). The purpose of the site at hand has succeeded and I am able to use the site from ...
8
votes
4answers
23k views

How can I see what version of SSL a web server is currently using?

I believe I have disabled SSL 2.0 on my web server (Windows Server 2003). To make sure that it is now using SSL 3.0, how can I check this? What is the correct way to disable 2.0 and enable 3.0 on a ...
4
votes
5answers
33k views

convert .p7b key to a .pfx

I have an SSL certificate in .p7b format that I need to convert to .pfx. If I try this through the windows certificate managment the option to expert as a .pfx is disabled. Trying with openssl I ...
3
votes
3answers
6k views

How do I limit SSL/TLS connections to at least 128-bit encryption?

When I'm ordering an SSL cert for my public web server, how can I be sure that the web server (IIS 6 in my case) will only allow SSL/TLS client connections supporting our corporate standard of at ...
0
votes
1answer
2k views

IPP over SSL/TLS in Windows Vista: Can it be done?

I'm trying to connect a Windows Vista client to a Lanier LD445c (scanner/copier/printer) using IPP over SSL/TLS in order to provide an encrypted channel for printing. The LD445c that I setup for ...
1
vote
4answers
4k views

How do I setup a SSL mail server?

For a beginner, can anyone recommend a good method of setting up a encrypted IMAP server (on port 993) or at least TLS POP3 email ? There are plenty of examples of opportunistic client side email ...
1
vote
1answer
388 views

Windows 2008 SSL Certificate

I have a Windows Server 2008 machine hosting sites from IIS 7. I have bought certs from trusted authorities before and installed on IIS 6, but I just want to make my own certificate to encrypt the ...
3
votes
7answers
832 views

Why do https connections take longer to establish than straight http connections?

Why is it that Secured HTTP Connection (https) is Slower then than typical HTTP (http)? Just interested in knowing only. Thanks.