0
votes
1answer
35 views

Download root CA certificate in browser

I have a Apache server installed on CentOS 6. I have created a trusted self sign certificate. For that I had created root CA certificate and using it I have signed my self signed certificate. Now I ...
0
votes
1answer
74 views

nginx config fails with SSL key/pem (unique case)

I am trying to install SSL on my nginx reverse proxy with certified ssl keys but i get this message when i try to restart server: Restarting nginx: [emerg]: ...
1
vote
2answers
201 views

Why is SPDY breaking 'Vary: Accept-Encoding' in Nginx 1.4.3?

I've compiled Nginx 1.4.3 from source with the SPDY module. However when SPDY is enabled, it seems to break my 'Vary: Accept-Encoding' header. My Nginx Configuration: ./configure ...
2
votes
2answers
69 views

Configuring Nginx SSL alongside non-ssl

I'm trying to enable SSL on my current Nginx configuration, which works fine. However I'm wondering if it's possible to do this alongside HTTP, so that i do not need another server{} section which ...
1
vote
1answer
57 views

What are the effects of having the TLS certificate and private key in same file?

I have noticed that a number of different web and mail server software allow or require you to provide the TLS certificate (including server certificate, CA intermediate certificate, and CA root ...
0
votes
2answers
87 views

SSL certificates with passphrase and service restart

Today, I'll gonna ask for something far less technical than usually. Indeed, it's more or less a rhetorical question, but I would love to read your advices on this topic. On my daily job, I have to ...
8
votes
2answers
305 views

Why store Apache SSL certificate and private key in separate files?

The Apache mod_ssl documentation for the SSLCertificateFile and SSLCertificateKeyFile directives states that it is 'strongly discouraged' to store a private key and an SSL certificate in the same ...
-2
votes
1answer
142 views

How to add SSL support to web browser? [closed]

Please suggest me how can I add SSL support to thttpd. Or if I can put it straight, how to make my web server have SSL support?
1
vote
0answers
68 views

Apache 2.2.3 SSLProxyVerifyDepth picky with certificates

I am trying to setup an Apache Proxy for HTTPS web requests. The proxy is configured the following: <VirtualHost <IP>:8081> RewriteEngine On RewriteCond %{HTTP:targetPort} ^3443$ ...
1
vote
1answer
63 views

SSL with authentication without encryption

Is it possible to setup lighttpd server and curl client so that both the client and the server verify each other's self-signed SSL certificate but the file is downloaded without SSL encryption? How ...
-1
votes
1answer
92 views

nginx and SSL config [closed]

Can nginx be used with SSL?I am using http://nginxcp.com/ for my CPanel server and here are my config file setups server { error_log /var/log/nginx/vhost-error_log warn; listen ...
0
votes
2answers
50 views

SSL certificate on cluster server

could you please advice how to apply SSL certs on web servers behind a load balance server. Do we need to apply SSL certs on all the web servers or apply it to the load balancer only. scenario: if we ...
1
vote
0answers
105 views

Apache alternatives with per-directory SSLVerifyClient

My application requires per-directory verification of SSL client certificates (i.e. when user requests /foo we require they have a client certificate and verify it, but when they request /bar we don't ...
4
votes
3answers
171 views

Is there a downside to enforcing 128bit SSL for a website

On Windows Server 2008 R2 I can enforce 128bit SSL for a website by executing: appcmd set config "Default Web Site" -section:access -sslFlags:Ssl,Ssl128 -commit:apphost Is there a downside to that? ...
2
votes
1answer
351 views

ScriptAlias makes requests match too many Location blocks. What is going on?

We wish to restrict access on our development server to those users who have a valid SSL Client certificate. We are running Apache 2.2.16 on Debian 6. However, for some sections (mainly git-http, ...
1
vote
0answers
99 views

ISA SSL Could not create SSL/TLS secure channel

I'm working on solution that uploads large amount of data through web service to the server. Between Client and Web Service implemented ISA server. Client use certificate to authenticate on ISA ...
0
votes
0answers
46 views

One HTTPS website per IP? [duplicate]

Possible Duplicate: Multiple SSL domains on the same IP address and same port? I don't understand this notion that only one https website can be run on one IP address (talking v4, if that ...
1
vote
1answer
184 views

SSL with hosted multi-tenant apps

I have a website that lets users create a subdomain app like this: https://subdomain.mydomain.com I want them to be able to have the app appear as if it's on their site, like this: ...
0
votes
1answer
95 views

One IP Address two websites and SSL

I think this question isn't that hard for proefssionals but i'm not the best into web servers. I have the following scenario: one apache web server on RedHat Linux one Homepage (normal HTTP) one ...
0
votes
3answers
353 views

New SSL Certificate Installation Errors on

We replaced an old SSL certificate with a new wildcard SSL certificate from GoDaddy. We switched out this certificate last week and have been receiving calls from customers trying to register ever ...
1
vote
3answers
214 views

Is there a way to have all virtual servers use the same SSL certificate without having multiple IPs?

Is there a way to have all virtual servers,in Apache, use the same SSL certificate without having multiple IPs? I know that you can use a certificate on one site, per port and per IP, but can I make ...
1
vote
2answers
2k views

How to configure Apache to act as an SSL proxy to an application server?

I have one physical server that runs: an Apache (httpd) server another web server (let's say Tomcat for sake of argument) on port 1234 Can I configure the Apache server to act as a proxy for SSL ...
0
votes
1answer
36 views

Connection to site times out unless file recently uploaded

This problem has be stumped beyond belief. I have a website, hosted on CentOS, served from Apache. It has an SSL certificate installed, but the behavior exists for the SSL as well as the non-SSL side ...
3
votes
2answers
155 views

DNS CNAMEs — Is the client actually redirected or not?

I believe this is a simple question, I thank you in advance for clearing it up for me. Using this example: foo.domain.com CNAME bar.example.com bar.example.com A 192.168.1.19 ...
0
votes
1answer
546 views

How to add SSL Binding in IIS 7.5

I had the Default Web Site running on localhost port 80 smoothly. I wanted to enable SSL on it so I first created a Self Signed Certificate in Server Certificates section of IIS Management Console. ...
0
votes
1answer
279 views

How can I test HTTPS configuration in a LAN?

I'm developing a website that should be used with HTTPS. I am developing the site on my Windows machine and I have a Linux machine on the same LAN where I test my websites. I don't have a DNS-server ...
0
votes
1answer
52 views

Will this situaton generate a warning from the browser?

I need to set up a domain/server/page with a ssl certificate. let's call it https://page.domain1.com this will contain in an iframe content from https://page2.domain2.com Will this situation ...
4
votes
2answers
2k views

Issues with setting up SSL on Glassfish v3

I am currently setting up SSL on glassfish and having some issues connecting to the server. http://javadude.wordpress.com/2010/04/06/getting-started-with-glassfish-v3-and-ssl/ I have followed this ...
1
vote
1answer
98 views

subversion: enforce TLS

I am running subversion on a Debian Squeeze system with Apache2 and mod_dav for viewing the contents with a webbrowser. I want to enforce the usage of TLS, so that the login data and the SVN contents ...
0
votes
0answers
115 views

What techniques are recommended to prevent a MITM attack when using a public/private key pairs (RSA)?

I currently have a group of web-services exposing interfaces to a variety of different client types and roles. Authentication is handled through a public/private key pairs (RSA) only to verify the URL ...
0
votes
1answer
503 views

When was the SSL 2048 bit key length introduced on webservers?

October 1 2013 all SSLs will be required to have 2048 bit key lengths. This means that October 1 2010 there should be no more 3 year renewals for the 1024 key length as those will exceed that date. ...
3
votes
2answers
3k views

Access keystore on Sun ONE Webserver 6.1 for 2048 bit key length SSL

We want to get 2048 bit key length CSR requests. The browser based GUI provides us with a 1024 bit CSR and I don't know how to change that. It seems that 1024 bit key lengths will no longer ...
0
votes
1answer
2k views

Is it possible to convert a 1024 CSR to a 2048 CSR? (Sun ONE Webserver 6.1)

For a 2004 software combination (which means a 2004 webserver) it is letting out a CSR with a 1024 key length. The company we have been purchasing the SSLs from requires a 2048 bit key length. It it ...
2
votes
3answers
532 views

revers proxy http -> https?

We have HTTPS test server with a self-signed SSL certificate. Is there any reverse proxy that will enable us to visit the page in HTTP, so our program can send HTTP request and not an HTTPS request??
0
votes
1answer
64 views

mod_rewrite and Apache questions

We have an interesting situation in relation to some help desk software that we are trying to setup. This is a web based software application that allows customers and staff to log into it and access ...
0
votes
1answer
76 views

Redirecting URLs with mod_rewrite

I am trying to setup a website where we would like to redirect the URL for a couple of different cases. The cases are below: If port 80 then force port 443 If URL = support.example.com then force ...
0
votes
3answers
361 views

ssl “works” with both www and no subdomain, but not correctly

So I have a website (I'm using nginx). I can connect to https://example.com just fine. But if I connect to https://www.example.com then it says something about the connection is encrypted but there is ...
2
votes
4answers
7k views

How to trust my own self-signed SSL cert?

I have a domain that I want to have webmail on, and I want it to be secure. I'm the only one who uses this site, yet I still want it to be secure. I can't afford, and I don't think it makes sense to ...
0
votes
1answer
1k views

Internal and External IP Addresses with an SSL Certificate

I'm setting up a web server that has an internal IP address and an external IP address. e.g. Browsers on the network request mysite.example.com and get 192.168.200 Browsers outside the network ...
0
votes
2answers
177 views

SSL not working on symlinked files

I have a virtual (CentOS) webserver running Apache. I have multiple websites running. Two websites share the same set of core files and have a common database. The files are "shared" via symlinks. ...
2
votes
2answers
498 views

Recommendation for a non-standard SSL port

On our server I have a single IP, and need to host 2 different SSL sites. Sites have different owners so have different SSL certificates, and can't share the same certificate with SAN. So as a last ...
8
votes
4answers
20k views

How can I see what version of SSL a web server is currently using?

I believe I have disabled SSL 2.0 on my web server (Windows Server 2003). To make sure that it is now using SSL 3.0, how can I check this? What is the correct way to disable 2.0 and enable 3.0 on a ...
0
votes
1answer
1k views

SSL Re-negotiation rejected by MS client when keepalives disabled in apache

One of our partners is using Microsoft Web Services 2.0 to connect to our webservices through Apache HTTPD 2.0 reverse-proxies. The resource they're POSTing to requires client (mutual) ssl ...
0
votes
1answer
424 views

UCC SSL with Cpanel/WHM

Is it possible to setup Cpanel/WHM with a UCC certificate? If so, how do I go about doing that?
0
votes
3answers
106 views

SSL Site Sudden Performance Issues

I have a linux box running an ecommerce store. Everything is fine until the user goes to checkout. Once the user clicks checkout the system moves the user to the https service. Images and page load ...
0
votes
3answers
4k views

Creating a single .pem file for web server SSL

To use SSL, the web server that I am using requires the location of a single .pem file (-ssl_cert xyz.pem) I have a certificate issued by GoDaddy. They gave me the file: banana.crt The ...
2
votes
3answers
6k views

How should I setup a reverse proxy with SSL on Windows?

Two basic questions here: If I want to serve SSL content from 3 different servers (A, B, C) through a reverse proxy (P), where does the SSL magic happen? I'm guessing that each server will be ...