SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

11
votes
3answers
43k views

Clearning Chrome SSL cache?

I have a haproxy / stunnel server that handles SSL for our sites on AWS. During testing I created a self signed cert on this server and hit it from my desktop using Chrome to test that stunnel was ...
4
votes
0answers
856 views

500 OOPS: SSL: cannot load RSA private key vsftpd

I'm configuring vsfptd on debian 7.3, I'm trying to use ssl. I generate the certficates using this command: openssl req -x509 -nodes -days 1925 -newkey rsa:2048 -keyout ...
2
votes
1answer
14 views

Command line to set up SNI on IIS for Windows 2012

I'm trying to complete the automated build script of my web server, which runs Windows 2012 and has two SSL websites, each with its own digital certificate. I am using SNI, which works fine when I ...
0
votes
1answer
22 views

How to setup non SSL (listen on port 80) and SSL (listen on port 443) with Apache for same Virtual Host in Centos

I'm having troubles setting up and putting to work a non SSL and SSL environment with Apache (httpd 2.2.15) in CentOS 6.6 locally for testing purposes. I'm following this guide, apparently CentOS ...
0
votes
0answers
19 views

SSL Working on 8888 but not 443

I have Apache set up to server HTTPS traffic. If all I change in the 000-default.conf is <VirtualHost *:443> to <VirtualHost *:8888>, I am able to hit the page externally on port 8888. ...
6
votes
4answers
8k views

How to Disable SSLv2 for Apache httpd

I just tested my site on https://www.ssllabs.com/ and it said SSLv2 is insecure and I should disable that along with weak Cipher Suites. How can I disable that? I tried the following but it isn’t ...
0
votes
1answer
26 views

How to check if clients connect to IMAP/POP via TLS or SSL?

I am willing to disable SSL on my dovecot servers (Debian GNU/Linux), leaving TLS as the only option. Before doing so, I would like to know who is still connecting via SSL with older or misconfigured ...
2
votes
1answer
107 views

Azure public endpoint SSL termination

In Azure, is there any way to set up an HTTPS endpoint directly on the public VIP, as opposed to joining each VM to a load balanced set, so that I can associate this endpoint with the SSL certificate ...
10
votes
8answers
64k views

SSL Error - unable to read server certificate from file

I've been setting up SSL for my domain today, and have struck another issue - I was hoping someone could shed some light on.. I keep receiving the following error messages: [error] Init: Unable to ...
1
vote
2answers
1k views

LDAPS being redirected to 389

We're trying to perform an LDAPS bind to a server which blocks 389 with a firewall so all traffic must travel over 636. In our test lab we're connecting to a test ldap (located on the same server) ...
0
votes
1answer
25 views

Why I have set HTTP_X_FORWARDED_PROTO and unset HTTPS on Apache 2.4? [on hold]

Recently I updated my website: CMS (Drupal), it's OS (Ubuntu 14.04) and Apache (2.4.7). The situation is that when surfing on https://example.com/whatever PHP can't detect HTTPS. $_SERVER['HTTPS'] is ...
-1
votes
1answer
28 views

Which kinds of SSL certs there are?

When I visit eg. https://www.google.com, my web browser (IceWeasel) shows just a (grey) lock icon next to the URL. However, when I visit eg. https://www.cia.gov, a green lock and "Central Intelligence ...
1
vote
1answer
911 views

SSL Connection Error

I have purchased a comodo ssl cert and have submitted the Certificate Signing Request (CSR) generated by my server to the ssl management site. With the 3 files it returned me with, - ...
0
votes
1answer
1k views

NGINX SSL Connection Error

I've added an SSL certificate to my server. (Nginx running passenger & Rails). I created a CSR, uploaded to GoDaddy, downloaded the keys. Inside /srv/ssl I have www.mydomain.com.crt ...
13
votes
3answers
4k views

How to decide where to purchase a wildcard SSL certificate?

Recently I needed to purchase a wildcard SSL certificate (because I need to secure a number of subdomains), and when I first searched for where to buy one I was overwhelmed with the number of choices, ...
1
vote
1answer
5k views

Handshake violation when trying to access one website

I have a TZ 190 Wireless Enhanced with SonicOS Enhanced 4.2.1.0-20e. Yesterday, people could access without any problems a bank website wich uses HTTPS. Today, it is imposible to access only that ...
0
votes
1answer
23 views

Nginx SSL cant connect to site

I just bought a SSL certicate for my website and tried to get it working with my nginx install, but uppon connection the browser refuses the connection with the website. Here is the relevant part of ...
0
votes
1answer
22 views

Apache SSL Errors every 30 seconds

I have three load-balanced Apache 2.4.6 servers running on fresh installs of CentOS 7. The load-balancer is a Barracuda 340. I know its old, but it's more than capable of handling the traffic, and ...
0
votes
1answer
39 views

Job for httpd.service failed

after following this tutorial :https://www.digitalocean.com/community/tutorials/how-to-create-an-ssl-certificate-on-apache-for-centos-7 I have tried everything I possibly can to fix the error I have ...
3
votes
2answers
3k views

proxy:error AH00898: Error during SSL Handshake with remote server

I have a server that acts as a front-end for a cPanel mailserver in a network. The apache proxy on the front-end server ran for 152 days without fault then suddenly I now get 500/502 errors when using ...
3
votes
1answer
1k views

Trouble passing Trustwave PCI Scan due to BEAST vulnerability

I'm at my wits end with this one! I am not a CI/networking person to begin with, and so I apologize if I am asking the wrong question/giving the wrong information. I am working on trying to get a ...
3
votes
1answer
2k views

Squid SSL transparent proxy - SSL_connect:error in SSLv2/v3 read server hello A

I am trying to setup a SSL proxy for one of my internal servers to visit https://www.googleapis.com using Squid, to make my Rails application on that server to reach googleapis.com via the proxy. I ...
0
votes
4answers
57 views

How can I move certificates from 1 server to another

I'm using StartSSL which , after you proove who you say you are, provides a certificate which I can install to authenticate myself. I have some SSL certificates associated with this account. I've ...
2
votes
2answers
29 views

AD server not using cert for Active Directory LDAP + SSL

I'm trying to enable SSL for Active Directory in our domain. The problem I'm running into is that the server is failing to recognize the certificate I've made for it. Whenever I try to query the ...
0
votes
1answer
1k views

nginx unknown directive ssl_protocols

I've compiled NGINX 1.4.1 with ssl support and wanted to secure my configuation with these lines: ssl_prefer_server_ciphers on; ssl_protocols        SSLv3 TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers          ...
3
votes
3answers
40 views

What subdomains does an Exchange 2013 SSL certificate require?

I need to order a SSL certificate for an Exchange 2013 server. I am going to order an UC Certificate from Comodo Group Inc. I understand that I need to specify the below subdomains whilst ordering: ...
0
votes
0answers
12 views

Dynamics CRM 2015 Outlook Client not connect

My Outlook CRM client don't connect to the crm 2015 server, not in the LAN nor the Internet. The error is: Authentication failed. The network is a test environment with virtual machines, installed ...
2
votes
1answer
25 views

configuring ssl on nginx - is this ciphers list up to date?

I have bought a certificate from Comodo and I'm following an article on their site on how to configure the certificate on my nginx. The question is, is this configuration, mainly the ciphers list, up ...
0
votes
2answers
748 views

how to redirect from “https://www.example.com” to be “https://example.com”?

I want to know: How to redirect from .. https://www.example.com to be https://example.com via .htaccess or CPanel? As the SSL only installed on the one without "www", and when I visit the ...
0
votes
1answer
17 views

ELB Https with HTTP on backend using Tomcat without nginx or haproxy

I want to setup ELB to terminate SSL at load balancer and communicate with backend instances over HTTP. I have uploaded valid certificate on ELB. When I set up following configuration ELB - HTTPS ...
-2
votes
3answers
351 views

Accidently removed localhost.crt SSL in Centos 6 - what can i do?

So I just got my certificate issued from Digicert, and since there was other unused/old files in /etc/ssl/ i marked and removed, and accidently also removed localhost.crt. Now I cannot start my web ...
0
votes
1answer
5k views

upstream prematurely closed connection while reading response header from upstream

I am having issues setting up SSL for my Jenkins CI server. I use Jenkins behind nginx for a reverse proxy. I am getting these upstream prematurely closed connection while reading response header from ...
6
votes
2answers
5k views

How to check HTTP response code of a secured website with Nagios?

I want to create a nagios check of my secure website. All the check needs to do is login to the site with login details that I pass the script. Does anyone know of a plugin or script that will allow ...
0
votes
0answers
31 views

CURL & SSL failing on a specific site [duplicate]

I can't get curl to download https://www.sicdm.caixa.gov.br/cadmut/login_internet_form.do on a CentOS 6.2 server. The command curl -v -k -3 ...
1
vote
2answers
1k views

SSL certificate causes VPN connection error

Everyone! My problem - when I create SSL certificate (using selfssl7 or IIS management console), my vpn connection (L2TP with certificate authentication) will not go up (I get error 789). I have to ...
1
vote
1answer
34 views

SSLRequire - file function

I'm having trouble with Apache 2.2 and the small documentation that I can find for the file function of SSLRequire. I'm trying to check the email property of the client certificate in a request using ...
1
vote
1answer
56 views

nginx: How to log TLS error (if unsupported ciphers / protocol)

I'm in the progress of switching to 100% https. Server is running nginx+libressl. Before going https:100% I'm interested in seeing which clients would no longer be able to connect to my site. E.g. ...
0
votes
2answers
1k views

How ssl is usually set up on shared hosting?

I am quite unclear on how ssl is usually set up on shared hosting. I have account with justhost.com and they provided me with public_html folder and (its sibling) ssl folder. When I create ssl ...
0
votes
2answers
2k views

Problem with apache + ssl: length mismatch error and ocasional bad request

we migrated a server from slicehost to linode recently, we copied the config from one server to the other. Everything works perfectly except that we get: Occasional errors with "Bad Request", this ...
0
votes
1answer
31 views

Apache refused to include TLS1.2

I was running openssl0.9.8 for a long time and suddenly my SSL gave me a red X. From the company that I purchased the ssl, they told me that i need to update my server config to include tls1.2 and ...
0
votes
0answers
18 views

Lync Server SSL Cert

I have a cert issued by the domain CA. The cert subject is the name of the server. The subject alternative name contains sip.domain sip.domain2 dialin, meet, admin, and the auto discover for ...
0
votes
1answer
61 views

PHP cURL call returning error 56 with NSS error -12195

I have an internal server (internal to my network) to which I make a REST API call from my external server. I don't know if it helps but the external server is running php 5.3.6 with cURL 7.19.7. To ...
0
votes
0answers
29 views

AWS cloudfront with SNI + ELB with 443 to 80 redirection to EC2 issue

I have configured web server front ending with AWS ELB and CloudFront. I have deployed SSL certificate on load balancer (ELB) for HTTPS connection. We have set up 2 listener protocols: Source -> 80 ...
3
votes
2answers
47 views

Firefox sec_error_unknown_issuer after renewing root CA certificate [closed]

For our corporate network we use an internal CA, which directly signs some intranet server certificates. Now the root certificate is about to expire. I tried to renew it with the following OpenSSL ...
2
votes
1answer
587 views

Node.js with SSL/TLS protocol v1.2

I would like to use TLS 1.2 on my node.js server. I'm currently using openssl 1.0.0e. If I upgrade to openssl 1.0.1, do I need to rebuild node.js to upgrade to TLS 1.2? Are there configuration or ...
0
votes
1answer
1k views

Zen Load Balancer HTTPS to HTTPS

I've been struggling with an issue that I am hoping someone can help with. Basically, I have setup a working Zen Load Balancer going from HTTPS to HTTP but I am struggling with getting it to work ...
0
votes
1answer
43 views

Best way to manage multiple domain with SSL in single droplet?

Firts of sorry about my poor english, but I'll do my best. Currently I manage 2 domain on my $5 DigitalOcean droplet and have use Cloudflare as my DNS manager with Flexible SSL configuration, ...
0
votes
1answer
17 views

Nginx forward ssl to ISPConfig lxc container

I am having issues with https connexions to the ISPConfig admin panel (port 8080). My setup is relatively standard. I own a physical host, which routes all traffic on common ports to an LXC container ...
0
votes
3answers
180 views

Why does Chrome on 1 computer say my certificate is invalid/insecure? [duplicate]

I have a wildcard domain certificate from StartSSL for a site (https://later.webblocks.nl/). When I check it in any browser on my home PC, it's all good. (Green lock in Chrome.) When I check it in ...
0
votes
0answers
21 views

haproxy get ssl interrupt error, how haproxy tell server to close ssl or tcp?

I use haproxy 1.5 and a windows server build site. my site work under the https protocol, so for haproxy I use tcp mode since I think the ssl can not work on http mode. my problem is the ssl ...