SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
0answers
9 views
+50

Galera Rsync SST Secured via SSL/SSH

Is it possible to secure Galera Cluster SST via rsync with SSL/SSH? This page suggests it is not, specifically the following quote: Unlike rsync, xtrabackup includes support for SSL encryption ...
0
votes
4answers
869 views

Can't add SSL listener, Server Certificate not found for the key

I'm am trying to set up SSL on my load balancer with a certificate I purchased from GoDaddy. When trying to upload the certificate in the console I got an error Failed to create load balancer: ...
-2
votes
2answers
36 views

redirect https://www.example.com to https://example.com in nginx

I have SSL issued for domain.com. Now these url works fine: http://www.example.com -> https://example.com http://example.com -> https://example.com https://example.com But when accessed with ...
13
votes
8answers
8k views

How to view all ssl certificates in a bundle?

I have a certificate bundle .crt file. doing openssl x509 -in bundle.crt -text -noout only shows the root certificate. how do i see all the other certificates?
0
votes
2answers
8 views

Creating local self-signed Certificate for user 'tomcat'

When I installed Tomcat 8 on my Ubuntu 15.04 I used the following command to create the user "tomcat": sudo adduser \ --system \ --shell /bin/bash \ --gecos 'Tomcat Java Servlet and JSP engine' ...
1
vote
1answer
2k views

Weblogic Mitigate POODLE vulnerability after upgrade and still use CBC ciphers

I recently upgraded my Weblogic server to 10.3.6 with java 7. So with that I have TLS1.0 - TLS 1.2 enabled via the setEnv.sh. Some of the ciphers I am using to make sure that they are compatible ...
2
votes
2answers
144 views

RHEL Nginx SSL versus non SSL performance huge difference.

I'm in the process of setting up an Nginx 1.8 reverse proxy. In short - Serving HTML content HTTP traffic is up to 50x faster than HTTPS. Serving ProxyPass HTTP traffic is up to 7x faster than ...
1
vote
1answer
1k views

Install SSL Certificate on Azure Cloud Service (VM)

I have an SSL certificate for domain example.com and I want to access my Azure Cloud Service exampleserver.cloudapp.net as https://server.example.com. I am using Virtual Machine to access this Cloud ...
3
votes
1answer
1k views

Problems with disabled ssl version 2 in ubuntu server. Can I also disable ssl version 3 to solve problems?

I recently set up a Ubuntu 12.10 server for a service which I used to run on a 12.04 machine. Since Ubuntu 10.10 SSLv2 seems to be disabled because of known security reasons. If i run curl against ...
3
votes
1answer
24 views

Bluehost claiming that an SSL certificate needs to be a wildcard certificate to cover a single subdomain?

I am new to SSL certification, and have just purchased a standard SSL certificate for a single sub-domain; however, when my server administrator installed it using cPanel on the main domain, HTTPS ...
24
votes
3answers
25k views

SSL Certificate Location on UNIX/Linux

Is there any standard or convention for where SSL certificates and associated private keys should go on the UNIX/Linux filesystem? Thanks.
3
votes
1answer
7k views

Handshake violation when trying to access one website

I have a TZ 190 Wireless Enhanced with SonicOS Enhanced 4.2.1.0-20e. Yesterday, people could access without any problems a bank website wich uses HTTPS. Today, it is imposible to access only that ...
0
votes
1answer
27 views

Apache configuration using SNI and mix of SSL certs

Up to this point I've been using SNI in my ssl.conf file with Apache 2.2.31 I'm serving up different sites all in the same document root. For example: NameVirtualHost *:443 <VirtualHost *:443> ...
2
votes
1answer
98 views

What would be a less-known SSL certificate attribute to look out for?

I'm looking for a simple domain SSL certificate for our company's website and I'm a little confused. A lot of them seems to offer the exact same features, yet at price ranges going from 5$ / year to ...
0
votes
0answers
16 views

Set up IIS as forward proxy for HTTPS requests

Is it possible to set up IIS as a forward proxy for HTTPS requests? My use case is this: I have some process running locally on the IIS machine which is able to make HTTP calls, but not HTTPS calls. ...
0
votes
0answers
12 views

SSL in aws ec2 windows running node js

I have a domain via namecheap (say example.com) and server is a aws ec2 windows instance. There's a node js server listening at 443 , with following code require('https').createServer({ key: ...
0
votes
0answers
11 views

Adding SSL to Virtual Host takes down all sites [on hold]

First question on here. Not fantastic with server side stuff but I have had to take it over at work. One of our servers has site that needs an SSL certificate. Now I have gone through all the ...
-1
votes
2answers
40 views

Will CSR become invalid

I have a domain registered with namecheap and server instance is aws ec2 (windows machine running node js) , cname record pointing to ec2 instance's public ip. Now i want to configure ssl on it , I ...
1
vote
1answer
2k views

ssl_crtd helpers are crashing too rapidly in squid

I am using the sslBump and Dynamic SSL Certificate Generation features of squid, below is my configuration for the sslBump sslcrtd_program /usr/lib64/squid/ssl_crtd -s ...
8
votes
3answers
6k views

Oops, no RSA or DSA server certificate found for 'server.host.name:0'?

I'm setting up a new web server that hosts a dozen virtual hosts on Ubuntu 12.4 using Apache 2.2.22 with one config file per site. I created all the configuration files all at once and ran a2ensite * ...
0
votes
1answer
1k views

Apache forward proxy HTTP requests to arbitrary AWS S3 buckets over HTTPS

This is a rewrite of my original post. I still banging my head trying to figure out how to get a custom client (Windows service that only speaks HTTP, does not support HTTPS) to upload files to Amazon ...
1
vote
0answers
15 views

HTTP to HTTPS redirect not working!? - Tried multiple methods

I purchased a Standard UCC SSL Up to 100 pack from Godaddy. I have installed all the required files on my server, and going to https://www.example.com works fine, but http://www.example.com is NOT ...
2
votes
1answer
1k views

Nginx SSL redirect for one specific page only

I read and followed this question in order to configure nginx to force SSL for one page (admin.php for XenForo), and it is working well for a few of the site administrators but is not for myself. I ...
0
votes
0answers
16 views

SSL's don't work on both www. and non www. when using SNI in IIS

I am trying to migrate some ASP websites from a Windows 2008 environment where each host using an SSL is on a separate IP. I would like to move these websites to a Windows 2012 environment where each ...
0
votes
1answer
22 views

Geotrust SSL certification issue

I have an issue with curl (Centos 6 env) does not recognize Geotrust intermediary certificate: * Trying 192.168.6.6... connected * Connected to composer.graymatter.co.uk (192.168.6.6) port 443 (#0) ...
1
vote
2answers
3k views

Exchange 2010 POP3/IMAP4/Transport services complaining that they can't find SSL certificate after blue screen

We have a single-server Exchange 2010 setup. In the early hours of this morning the server had a blue screen and rebooted. After coming back up the POP3/IMAP4 and Transport services are complaining ...
0
votes
0answers
14 views

Running Hudson, Sonar and HA Proxy on the same server

I am running Hudson, Sonar and HA Proxy on the same server (Doing this for the sake of a POC so do not have access to multiple servers. I am Using HAProxy to enable SSL for both servers. I can ...
0
votes
0answers
13 views

OpenVPN with IPSec

OpenVPN with IPSec We are using OpenVPN to connect multiple devices. The customer requires using IPSec, but OpenVPN is SSL VPN. Their website says this OpenVPN's security model is based on using ...
0
votes
1answer
15 views

WSREP: Bad value for 'socket.ssl_key'

I am attempting to initialize a new MariaDB Galera cluster with SSL-encrypted replication. I have followed this guide to the letter, specified different details for CA, Server, and Client ...
1
vote
1answer
1k views

Exchange TLS Receive Connector Cert

We are using Securence incoming filtering in front of our Exchange 2010 server. It's basically a spam filter. I'm trying to get TLS communication between Securence and our server on incoming ...
-2
votes
1answer
27 views

aws windows apache24 multiple subdomain

i have two subdomains api.domain.com with A record xx.xx.xx.xx // elastic ip address user.domain.com with A record xx.xx.xx.xx // elastic ip address apache httpd-ssl.cnf Listen 443 ...
0
votes
0answers
34 views

ssl (https) for https://my.example.com resolves to https://example.com ip address

I have a server my.example.com with ip address 111.111.111.222 I have a server example.com with ip address 111.111.111.111 I created an ssl certificate with letsencrypt for my.example.com However, ...
0
votes
1answer
1k views

Nginx: Disable gzip-compression for http only

Because of the BREACH vulnerability I'd like to disable gzip compression for TLS traffic, but not for regular HTTP traffic. I could split up every Nginx server section into two separate TLS- and ...
9
votes
5answers
4k views

Free SSL Certificate authority I can trust

Can anyone point me to a free SSL Certificate authority I can trust?
2
votes
2answers
1k views

Apache: redirect to https before AUTH for server-status

I want to force https and basic auth for server-status output (mod_status). If I enable auth and user asks for http://site/server-status apache first asks for pass, then redirects to httpS, then asks ...
-1
votes
2answers
39 views

SSL encryption with CNAME redirect

Here is my current architecture: I have a simple site hosted in the cloud that needs to be served from my company. Thus, mysite.com has a CNAME redirect to 1234.cloud.com. I understand that the SSL ...
0
votes
1answer
19 views

Preloading Strict Transport Security (HSTS)

I configured my webserver to use Strict Transport Security (HSTS). I more or less used a configuration as in this manual. But I get the following in my SSL-report if I run a test on Qualys SSL LABS: ...
3
votes
4answers
15k views

curl succeeds on an https request, wget does not

When I run curl from the command line curl "https://example.com" It succeeds immediately, returning the result of the request. When I run the same wget command wget https://example.com It ...
91
votes
5answers
55k views

Multiple SSL domains on the same IP address and same port?

This is a Canonical Question about Hosting multiple SSL websites on the same IP. I was under the impression that each SSL Certificate required it's own unique IP Address/Port combination. But the ...
2
votes
2answers
1k views

Optimizing HAProxy SSL Termination (with Nginx backend on Ubuntu)

How can I optimize HAProxy with SSL Termination to Nginx backends on Ubuntu? The setup works fine and routes properly. However, when I perform SSL Termination with HAProxy, theres a huge performance ...
0
votes
0answers
16 views

Windows Server 2008 R2 with IIS7 - RC4/SSL3 disabled, but still flagged for having them

According to IIS Crypto, my RC4 and SSL3 items are disabled; however, ssllabs still rings up the site as failing. SSLLabs result IIS Crypto results: IIS Crypto results Same settings on server and ...
0
votes
1answer
37 views

Haproxy Problems url context and SSL

I have a question about a acls with path_beg in https frontend . My enviroment : haproxy ==> acl 1 /web1 ===> https://app/web1 haproxy ==> acl 2 /web2 ==> https://app/web2 Config: frontend ...
0
votes
1answer
12 views

How to properly set up SSL proxy in Apache?

I'm trying to set up an SSL proxy to access a local web-app externally. I get a 500 error when accessing the page. The log says: [proxy:error] [pid 17153] (502)Unknown error 502: [client ...
1
vote
2answers
1k views

How do I disable SSL 2.0 support on IIS?

I need to disable SSL 2.0 support on a Windows Server 2003 server (running IIS 6.0). Specifically, I'd like to be able to disable on a single website. Is this possible or do I have to disable it ...
5
votes
2answers
6k views

Correct Apache reverse proxy config with SSL for Jenkins and Sonar

I am running two services behind an Apache server: Jenkins (Port 8080) and SonarQube (Port 9000). My apache config looks like this: <VirtualHost *:80> ServerName server Redirect permanent ...
0
votes
0answers
16 views

Register SSL cerificate for domain that redirects to DiskStation via dynDNS [closed]

Is it possible to activate SSL (not self-signed!*) for a domain that only redirects? Background: I can't activate an SSL certificate* for the domain example.com*, because I'm asked to put a code in ...
0
votes
0answers
10 views

Single certificate for postfix/dovecot mail server with multiple domains

I have a single IP-address and thus one mail server (postfix+dovecot on CentOS 7). I have one main domain name and each client has their own domain name on which they want to receive mail. All A and ...
0
votes
0answers
16 views

Custom Error Page doesn´t work with SSL

I have a custom 404 error page but unfortunatly when I install the HTTPS on my server and set everthing up so that https works the error page doesn´t work. When I enter a wrong url I just get a ...
0
votes
0answers
15 views

Squid3 + HTTPS Authentication issue

I've successfully setup Squid3 to work as a transparent proxy for HTTP and HTTPS, installed the CA on the machines. Everything works OK, but there is this corporation site I work for where Squid does ...
0
votes
0answers
17 views

Analyzing SSL Encryption Alerts

I have captured the traffic between my machine and my server using Wireshark, trying to find why some SSL requests fail. I've read this and this post about debugging SSL entries, and I'm able to find ...