SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
1answer
1k views

Verify client certificate CN in Tomcat(APR)

I'm running a tomcat installation with the APR libraries installed (with the OpenSSL HTTPS stack that comes with it). What I'm trying to do is to lock a specific HTTPS connector down to users of a ...
0
votes
0answers
9 views

Plesk 12.5 Nginx proxy pass SSL to Node app on different port

Preface: tried installing JXCore's Node Extension for Plesk, and I can't get it to work. Gives me some error, and their support is not answering emails...... [IP ADDRESS] = real IP, example.com = ...
0
votes
1answer
32 views

How to get a perfect score from SSLLabs?

As you can see at: https://www.ssllabs.com/ssltest/analyze.html?d=www.notfriendly.xyz&hideResults=on&clearCache=on my forum does have an A+ score but is lacking in Key Exchange and Chipher ...
0
votes
1answer
21 views

Adding a second SSL for a second domain on a server - second domain is still using the first SSL Cert

I need to add an ssl cert to a second domain on my server (AWS Amazon Linux) I thought I enabled SNI correctly? although probably not... domain1 already has a functioning SSL cert. First attempt I ...
0
votes
1answer
19 views

NGINX / PHP-FPM + SSL very slow

My application is served on an Amazon EC2 t2.small instance. When using the ab command to test performance. ab -n 3000 -c 100 mydomain.com HTTP Finished 3000 requests Server Software: ...
1
vote
2answers
12k views

nginx config fails with SSL key/pem (unique case)

I am trying to install SSL on my nginx reverse proxy with certified ssl keys but i get this message when i try to restart server: Restarting nginx: [emerg]: ...
0
votes
1answer
24 views

Let's Encrypt SSL Certificate File Not Found Error, but still working

I'm running SSL Certificates from Let's Encrypt. I've got them installed on my Ubuntu machine running Apache. The setup works fine and I can launch the website, see the green padlock and even got an ...
1
vote
1answer
15 views

Dockerized Apache + SSL behind NGINX as reverse proxy

I have two containers, one of which is running NGINX as a reverse proxy for serveral other containers. One of the other containers is running Apache with SSL enabled and configured. I have seen ...
0
votes
1answer
17 views

Exchange 2010/Outlook certificate errors

We are running Exchange 2010 on SBS 2011. About a year ago, I renewed the certificate for the mail server, however, ever since that time, we receive certificate errors on OWA, and internally, we ...
0
votes
0answers
12 views

Apache2 on Ubuntu running SSL returns data after time-out reached

I am working with a server that I recently inherited from a departed developer. The server returns XML documents via a RESTful interface over an SSL port. For small documents, the data is returned ...
0
votes
1answer
17 views

Can I use Cloudflare CDN/HTTP proxy for SSL-enabled web-site?

I want to use Cloudflare CDN/HTTP proxy for my web-site that already has HTTPS through LetsEncrypt certificate. I don't want to use Cloudflare's Free SSL certificate as it doesn't work on WindowsXP ...
2
votes
5answers
3k views

Can't add SSL listener, Server Certificate not found for the key

I'm am trying to set up SSL on my load balancer with a certificate I purchased from GoDaddy. When trying to upload the certificate in the console I got an error Failed to create load balancer: ...
0
votes
1answer
15 views

How do I configure a whitelist of SSL/TLS protocols in uWSGI?

I can specify a list of ciphers using https = =0,x.crt,x.key,<ciphers>. Documentation for that is here: http://uwsgi-docs.readthedocs.org/en/latest/HTTPS.html#setting-ssl-tls-ciphers But is ...
1
vote
0answers
14 views

Rails + Nginx + SSL - Allow no-SSL on some routes

I have a rails app being served by nginx. I have ssl enabled on all routes with this conf: server { listen [::]:80; listen 80; server_name domain.com; access_log ...
4
votes
1answer
2k views

Enabling SSL for Remote Desktop

Ok so I'm trying to remove a number of my systems from our Nessus scan from having this medium vulnerability. Microsoft Windows Remote Desktop Protocol Server Man-in-the-Middle Weakness I set the ...
4
votes
1answer
1k views

How to enable certain SSL cipher while having disabled the group?

I would like to enable the SSL cipher EDH-DSS-DES-CBC3-SHA (also known as TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA) in my nginx SSL environment to support IE8 on Windows XP. The base SSL ciphers for nginx ...
0
votes
0answers
15 views

Secure Email Settings for Email Clients & for PHPMailer

I'm trying to work out how to make my outgoing/incoming email's as secure as I can possibly make them. First of all, my domain has Wildcard OV SSL Certificates, I have copies of the .csr, .crt and ...
1
vote
1answer
26 views

Running an application on a second server with a dynamic IP. Do I need two SSL certificates when using Apache ProxyPass?

Terms example.com: The domain that points to the static server. static server: This server has a static IP address and has Apache ProxyPass pointing to dynamic server. dynamic server: This server ...
4
votes
3answers
16k views

HTTPS not working; binding set, certificate installed

I've installed the certificate and set up the HTTPS bindings. However, when I load the site on HTTPS it does not load. I've looked at all the settings but everything seems correct. I've restarted ...
0
votes
0answers
9 views

WireShark tcpdump showing RST,ACK. Trying to figure out why?

Frame 5: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) on interface 0 Interface id: 0 (\Device\NPF_{49FD2502-47B9-4506-A052-F603251179ED}) Encapsulation type: Ethernet (1) ...
0
votes
1answer
15 views

Is it possible to obtain a list of https hosts that users have visited from a Sonicwall before DPI-SSL is implemented?

The reason I ask is that if one could do this, is because one could use the logs to find a list of https sites to white list by counting the number of visits prior to implementation. But something ...
0
votes
0answers
12 views

stunnel keeps stopping with WSAECONNREFUSED given

Right so bit of background to start with I've got 2 stunnel installs on 2 different servers and basically using ensemble and stunnel to bounce a message around with ssl cert. Here is the flow. Where ...
3
votes
2answers
2k views

After setting up Elastic Load balancer my https doesn't work anymore. Nginx error

I have a regular instance that works fine when not behind a load balancer. I set up an ELB with 80 forwarding to 80 and 443 forwarding to 443 and sticky sessions. Afterward I receive this error when ...
0
votes
1answer
29 views

421 Misdirected Request using HTTP/2 and SAN SSL

I'm running Apache 2.4.20 on Ubuntu and I have SSL configured. I have a SAN SSL Certificate and www.example.com and www2.example.com are sharing the same certificate. I'm getting a 421 Misdirected ...
1
vote
3answers
83 views

To SSL or to not SSL

Currently I have a website that serves a lot of mixed content I have the whole website under ssl. example.com All static content such as css js and a small amount of my own images such as logos ect ...
0
votes
1answer
14 views

importing self signed certificates mysql/mariadb and tomcat how to?

trying to use certs for securing connections between Tomcat 8.x and mysql/mariadb. I'm going to use a self-signed cert. What follows is what i think i should be going and appreciate you to jump in and ...
8
votes
4answers
1k views

Is it possible to set an SSLProtocol in Apache for a single VirtualHost (poodle)?

I'm trying to test a patch for the poodle vulnerability that involves disabling SSLv3 on my web server. In order to test this on a non-production environment first, I'm setting the SSLProtocol on a ...
1
vote
0answers
17 views

Setup nginx proxy_pass to follow correct according to protocol used

I have the below config location / { proxy_pass http://backend; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For ...
4
votes
1answer
2k views

Squid SSL transparent proxy - SSL_connect:error in SSLv2/v3 read server hello A

I am trying to setup a SSL proxy for one of my internal servers to visit https://www.googleapis.com using Squid, to make my Rails application on that server to reach googleapis.com via the proxy. I ...
15
votes
4answers
48k views

How to enable TLS 1.1, 1.2 in IIS 7.5

We want to support web browsers utilizing TLS 1.1 and 1.2, which has been apparently implemented by Microsoft, but is turned off by default. So I went searching on Google and discovered some pages ...
3
votes
0answers
19 views

What process on a SonicWall Security Appliance Checks the DPI-SSL Client Inspection?

I'm interested in determining if there is high CPU usage on a SonicWall Security Appliance, but I don't know which process to check for high CPU usage. There are various options for this in the UI ...
0
votes
2answers
680 views

Apache ~ how to force SSL client auth for specific IP

Haven't been able to figure out how to easily manage access to my SSL website. I'm trying to allow access to a specific location based on client IP. If client IP = 192.168.x.x => bypass client ...
3
votes
2answers
4k views

SSL Re-negotiation handshake failed - slow page loads

I have a redhat 6 server running coldfusion on apache. I require SSL to access the site and smart card authentication. That works fine, it logs in based on the smart card, and denies access without ...
1
vote
1answer
4k views

Squid SSL bump with parent proxy

Does SSL bumping work with parent proxy? squid and pf are set up like this: squid.conf: http_port 3128 intercept https_port 3129 intercept ssl-bump generate-host-certificates=on ...
-1
votes
1answer
50 views

Using SSL certificate issued by Godaddy for localhost website

I have a Godaddy SSL certificate that i want to use on localhost, however the certificate is issued to example.com and if i use that it definitely gives a certificate mismatch error. Is there any ...
0
votes
0answers
14 views

nginx - cannot get my subdomain running fine

I have a server "emberhub.me" with one subdomain "test.emberhub.me" I want to use SSL on all ... emberhub.me and www.emberhub.me requests should display the 'standard' Nginx welcome page ( ...
1
vote
1answer
1k views

LDAP Client Search with SSL - CentOS7

Has anybody got SSL client authentication working with OpenLDAP (on CentOS7 - which is using moznss)? I've search for the last 2 days trying to get this to work, both with a certutil database and ...
1
vote
1answer
19 views

gitlab SSL configuration / certificate verification failed

I have my own gitlab server, now secured with an letsencrypt SSL certificate. Now, I want to publish some packages via packagist. But when I enter the git repository url in packagist, I got the ...
0
votes
0answers
19 views

Scan Ciphers on FTPS port

I'm trying to remove RC4 ciphers per BEAST, but I'm having trouble verifying that there are ciphers available on my FTPS ports. NMAP returns the cert on the port, but doesn't say anything about the ...
0
votes
0answers
15 views

Accessing self signed SSL website in iis remotely shows error in ie

I have created a self signed SSL in IIS for the default website. I have used the solution here to get rid of certificate error while accessing the site locally however the requirement is that the ...
0
votes
0answers
24 views

FTP protocol Extremely slow on Windows 10. What could be causing this?

I am running 2 different devices (A pc and a laptop) both on the same network, both Windows 10. The laptop has standard transfering speeds on the FTP protocol. The PC has extremely slow transfer speed ...
3
votes
1answer
1k views

Safari SSL certificate 403 forbidden

I have a web application deployed onto IIS 7 (Version 7.0.6000) on a Window 2008 Server using an SSL certificate (issued by Equifax). The web application is accessible over https using IE, Firefox and ...
4
votes
1answer
10k views

The OCSP response is not yet valid (contains a date in the future)

I'm getting this error when opening the site: Secure Connection Failed An error occurred during a connection to http://practiceti.me The OCSP response is not yet valid (contains a date in the ...
6
votes
2answers
1k views

How to configure IIS 7.5 SSL \ TLS to work with iOS 9 ATS

Problem: Our mobile app can no longer establish a secure connection to our web-service since iOS 9 now uses ATS. Background: iOS 9 introduces App Transport Security Server Setup: Windows Server 2008 ...
0
votes
2answers
2k views

Passed SSL checker, but browser doesn't show secure?

I've set up my SSL certificate following the instructions at http://splittingelectrons.wordpress.com/2012/02/24/how-to-configure-an-ssl-certificate-for-apache-on-amazon-ec2/ I've checked my website ...
19
votes
9answers
11k views

How to view all ssl certificates in a bundle?

I have a certificate bundle .crt file. doing openssl x509 -in bundle.crt -text -noout only shows the root certificate. how do i see all the other certificates?
1
vote
2answers
3k views

Problem with apache + ssl: length mismatch error and ocasional bad request

we migrated a server from slicehost to linode recently, we copied the config from one server to the other. Everything works perfectly except that we get: Occasional errors with "Bad Request", this ...
0
votes
0answers
28 views

SSL Error when pressing CTRL+F5 (overwriting cache) in Firefox

I have an nginx server which fails to correctly delive ssl, when a user presses ctrl+shift+r or ctrl+F5. These shortcuts reload the page and bypass the browser cache. It seems to work in Chrome and ...
2
votes
3answers
40 views

Apache SSL without Private Key

We are currently working with a client who needs SAML authentication to setup their QA site on our servers. They have sent us the CRT file for the SSL to install, however they are not sending the key. ...
1
vote
1answer
108 views

Unable to sync library on client with SSL on, stuck to “Connecting to server”

I had the job to configure SSL on our seafile server, I'm a beginner with linux/certificate. We have a wildcard certificate from GoDaddy and got to convert crt and key extensions, I configured the ...