SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
1answer
951 views

CentOS Apache + Tomcat SSL using mod_jk

I have Apache + Tomcat (using mod_jk) working correctly on a CentOS 6.3 machine. I am trying to set up SSL with Apache. When I browse to the site I get the following output: Forbidden You don't ...
1
vote
1answer
18 views

In nginx error log: “SSL_BYTES_TO_CIPHER_LIST:inappropriate fallback”

We recently changed our nginx config to support TLSv1.2 as well as a number of more secure ciphers. Since the change, our nginx error logs have been filled with the following errors: 2015/01/28 ...
1
vote
2answers
1k views

LDAPS being redirected to 389

We're trying to perform an LDAPS bind to a server which blocks 389 with a firewall so all traffic must travel over 636. In our test lab we're connecting to a test ldap (located on the same server) ...
-1
votes
1answer
59 views

ssl address mismatch on purchased ssl cert [closed]

i've bought a "Protect 1 Website" ssl from godaddy http://www.godaddy.com/ssl/ssl-certificates.aspx , and requested and downloaded a cert for domain "example.com", but when i access dev.example.com, ...
0
votes
0answers
3 views

ACL at HAProxy shows NOSRV

I have 3 backends in HAProxy 1.5.10: "WEB", "API", and "SSL" for web and api. For SSL termination I'm using ACL with SNI. Here is my config: frontend ssl mode tcp bind 0.0.0.0:443 ssl crt ...
0
votes
0answers
18 views

Send apache ssl access log to syslog

I'm having an issue piping apache ssl access logs to my syslog server. I've added the following line to my apache config: CustomLog "|/usr/bin/nc -u <syslogserver> 514" "<134>%{%b %d ...
5
votes
3answers
390 views

SSL cert invalid in Chrome

For the website scirra.com (click for SSL Labs Server Test Results) Chrome reports the following icon: It's an EV SSL, seems to work fine in Firefox and IE, but not Chrome. Anyone know the reason ...
0
votes
1answer
33 views

IMAP Dovecot cannot connect

I am trying to set up my own mail server (for 'fun'). I followed this tutorial to the bone. But I get this error message: imap-login: Disconnected (auth failed, 2 attempts in 9 secs): ...
1
vote
3answers
40 views

Does SSL need to be configured at the external load balancer if you are using one?

Using Elastic Load Balancer, it is easy enough to set up SSL at the external load balancer, and serve requests up as http to the applicaion. When running a single server, it is also possible to ...
2
votes
1answer
24 views

NginX + WordPress + SSL + non-www + W3TC vhost config file questions

I have the following questions about my server block(s) for a WordPress site running solely on https, with nginx and W3TC browser caching. Environment: Ubuntu - 14.04LTS nginx - 1.4.6 ...
-1
votes
0answers
18 views

Nginx webserver stop working after 5 minutes [on hold]

I have a digitalocean droplet running ubuntu 14.04 and nginx. Everything was working fine until yesterday when I decided to activate my ssl certificate from comodo. I had a hard time getting the ...
1
vote
0answers
25 views

HAProxy with SNI and different SSL Settings

I have HAProxy for my two sites, one of them public and one private. www.mysite.com private.mysite.com Atm, I'm using haproxy like this: frontend mysite_https bind *.443 ssl crt /etc/mycert.pem ...
0
votes
1answer
1k views

nginx unknown directive ssl_protocols

I've compiled NGINX 1.4.1 with ssl support and wanted to secure my configuation with these lines: ssl_prefer_server_ciphers on; ssl_protocols        SSLv3 TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers          ...
1
vote
0answers
14 views

jrun ssl peer not authenticated

Before I start, I should say that I've already posted this question at Code Ranch, and have not yet gotten an answer. I'll make sure both this site and Code Ranch receive the answer should I find ...
0
votes
2answers
1k views

Installing SSL certificate on JBoss

I have a server that runs JBoss. When I type bad URL to that server it gives me version like this: JBossWeb/2.0.1.GA - what version of JBoss that would be? A SSL certificate will be bought and ...
3
votes
3answers
3k views

How to fix RDP on windows server 2012?

Here is a snapshot of the RDP status. Looks good: When I go to connect from a remote machine I get an error: "This computer can't connect to the remote computer. Try connecting again. If the ...
1
vote
1answer
5k views

Handshake violation when trying to access one website

I have a TZ 190 Wireless Enhanced with SonicOS Enhanced 4.2.1.0-20e. Yesterday, people could access without any problems a bank website wich uses HTTPS. Today, it is imposible to access only that ...
0
votes
1answer
486 views

Opscenter 4.0.2 and Cassandra 2.0.4 with SSL and Auth : agent can't connect

I setup cassandra with inter-node SSL and client-to-server SSL and basic password auth. No problem using cqlsh or python to connect to cassandra with any certificate as certificate_validation is ...
3
votes
3answers
286 views

Setting up SSL on my server

I run a web server that hosts three different domains using named virtual hosts. What do I need to do to enable SSL connections (https) to these domains? EDIT: As Joel pointed out I forgot to state ...
0
votes
2answers
714 views

google recaptcha V2 on apache shared server: How to get it to work with SSL

I implemented google's reCAPTCHA V2 on non-https apache shared server and it worked 100%. I then changed the protocol to my shared server with SSL using the same script as the non-SSL script. The ...
0
votes
0answers
19 views

SSL certificate for sql-server on ec2

I have an ec2 node provisioned to host mssql server. I'm trying to request and install an ssl certificate for this node so I can securely connect to it but I can't get the certificate to appear in the ...
0
votes
2answers
23 views

vsftpd does not give a valid certificate using CA cert.

When setting up vsftpd we have problems with it not providing a trusted connection us a basic pem certificate container using just our private key and certificate. We created our pem file with the ...
4
votes
3answers
121 views

Displaying a remote SSL certificate details using CLI tools

In Chrome, clicking on the green HTTPS lock icon opens a window with the certificate details: When I tried the same with cURL, I got only some of the information: $ curl -vvI https://gnupg.org * ...
0
votes
1answer
2k views

nginx - 403 Forbidden

I've trouble to get aliases working correctly on nginx. When i try to access the aliases, /pma and /mba (see secure.example.com.conf), i get a 403 Forbidden but the base url works correctly. I read ...
0
votes
1answer
25 views

OpenSSL PositiveSSL certificate untrusted connection

I bought a SSL certificate and I cannot get it to function. I get a This Connection is Untrusted error in Firefox. I do believe it's due to my .crt file being incomplete/wrong all together. My .crt ...
0
votes
0answers
12 views

haproxy client certificate authentication signed by 'common' CA

I am setting up haproxy as an SSL terminator/load balancer in front of an API that we need to expose over the internet to a customer. The plan was to use mutual (2-way) SSL/HTTPS to verify that both ...
0
votes
3answers
107 views

SSL Site Sudden Performance Issues

I have a linux box running an ecommerce store. Everything is fine until the user goes to checkout. Once the user clicks checkout the system moves the user to the https service. Images and page load ...
0
votes
1answer
72 views

Domain changes required for SSL integration

Currently my site supports regular payment options (User is taken to Payment Gateway/PG website). Now I'm trying to implement "seamless" PG integration. I need SSL for this. I'm having a dedicated ...
2
votes
2answers
280 views

PCI Compliance for average e-commerce website in the cloud

I am creating an "average" e-commerce website (using drupal and ubercart if that matters). I've read about pci compliance in the past, and that's why I'm wondering how I can see what applies to my ...
5
votes
2answers
1k views

How to protect an SSL certificate (Apache/CentOS)

I currently use a server SSL certificate without a pass-phrase in order to allow Apache to start up unattended. There are signs from customers to require us to protect the SSL certificate more ...
-1
votes
2answers
47 views

Can one domain have 2 or more SSL certificates?

I have googled and found this post: http://security.stackexchange.com/questions/46988/is-it-technically-possible-to-configure-two-different-ssl-certificates-for-the-s If it actually is possible, then ...
28
votes
5answers
2k views

Is a Self Signed SSL Certificate a False Sense of Security?

Is a Self Signed SSL certificate a false sense of security? If you are being eavesdropped, the user will simply accept the certificate like he/she always does.
0
votes
1answer
856 views

NGINX SSL Connection Error

I've added an SSL certificate to my server. (Nginx running passenger & Rails). I created a CSR, uploaded to GoDaddy, downloaded the keys. Inside /srv/ssl I have www.mydomain.com.crt ...
3
votes
3answers
7k views

How do I limit SSL/TLS connections to at least 128-bit encryption?

When I'm ordering an SSL cert for my public web server, how can I be sure that the web server (IIS 6 in my case) will only allow SSL/TLS client connections supporting our corporate standard of at ...
3
votes
1answer
1k views

IIS7 Not sending Intermediate SSL Certificate

We have a GlobalSign Domain certificate for our domain. I've installed the certificate into IIS and added the GlobalSign Domain Intermediate certificate to the Intermediate certification authorities ...
1
vote
2answers
127 views

Changing to a new certificate authority for existing website

We have a website certificate issued that will expire soon. The current certificate issuer is charging us too much and we would like to change to a new company. If we get a new certificate from ...
0
votes
3answers
54 views

Redirect Naked Domain to SSL

I have a wildcard SSL certificate and I want to redirect all http requests to their equivalent https. My server is a Debian (wheezy) and I am running Apache 2.2.22 I have added the following at the ...
0
votes
1answer
1k views

Page can't be displayed with IIS and SSL

I have a single site hosted in IIS 8. I have two site bindings. One is for HTTP, the other is for HTTPS. HTTP is on port 80 with All Unassigned addresses, I left host name blank. HTTPS is on port 443 ...
0
votes
2answers
2k views

Problem with apache + ssl: length mismatch error and ocasional bad request

we migrated a server from slicehost to linode recently, we copied the config from one server to the other. Everything works perfectly except that we get: Occasional errors with "Bad Request", this ...
-2
votes
0answers
18 views

how to set up email security setting with ssl/tls in centos 6 [closed]

I am really new to vps hosting. I bought a hosting service and thought they will support whatever I asked them but they said they only support sever side. My question is ** I bought a certificate ...
7
votes
2answers
605 views

Difference between SSL products

I'm looking into getting a few SSL certificates for domains to cover the following: autodiscover.example.com remote.example.com www.example.com Wildcard certificates are too expensive, so I'm ...
0
votes
3answers
4k views

WebSphere Plugin Keystore Unreadable by IHS - GSK_ERROR_BAD_KEYFILE_PASSWORD

Running WAS 6.1.xx in a network deployment. The IBM provided plugin keystore's "plugin-key.kdb" password expires on april 26th along with the personal cert inside it. So no problem right? Create new ...
0
votes
1answer
1k views

Zen Load Balancer HTTPS to HTTPS

I've been struggling with an issue that I am hoping someone can help with. Basically, I have setup a working Zen Load Balancer going from HTTPS to HTTP but I am struggling with getting it to work ...
0
votes
2answers
48 views

intermittent ssl_error_no_cypher_overlap

For the past week, clients have been randomly getting intermittent ssl_error_no_cypher_overlap errors when using Firefox. Connection issues have also occurred in Safari and Chrome. I can't find any ...
0
votes
1answer
30 views

Nodejs: server doesn't close TCP connections

Facing a problem in the production server running debian (7.0) with nodejs (v0.10.x) cluster where it doesn't close some TCP connections to the clients. This leads to connection drops when connection ...
1
vote
2answers
92 views

Should I need to provide a root certificate when setting SSL cert on nginx

In Qualys SSL test always warn me that the root certificate is an extra download and can be safely removed. However, from Comodo website, their guide on installing cert on nginx is NGINX Needed for ...
3
votes
1answer
3k views

The OCSP response is not yet valid (contains a date in the future)

I'm getting this error when opening the site. Secure Connection Failed An error occurred during a connection to http://practiceti.me The OCSP response is not yet valid (contains a date in the ...
65
votes
1answer
41k views

What is a challenge password?

I'm setting up SSL on an Ubuntu server. One of fields it asks for as part of setting up the CSR is a "challenge password". What is that? The default is blank. Do I need to enter one?
2
votes
1answer
1k views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.name.org port 636 with the ssl checkbox. This is on the local server itself. ...
8
votes
3answers
5k views

Can Https work without a certificate?

Recently our infrastructure team told our development team that you do not need a certificate for https. They mentioned that the only benefit of buying a certificate was to give the consumer peace of ...