SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
0answers
6 views

Setting up a CA-signed certificate with Nginx

I need to use Nginx as a SSL-enabled reverse proxy. I have an existing JKS file from our Tomcat servers. It contains the certificate authorities used by our servers and by our client certificates. I ...
0
votes
1answer
111 views

SSL isn't working with Apache

I was trying to install a SSL certificate on my VPS. I Generated the CSR, and Got the Certificate and Intermediate CA. I am working on apache 2 on ubuntu server 13.10. So I used the Default SSL ...
0
votes
0answers
17 views

Which browsers and OSes supports ECC based SSL certificates?

We are evaluating whether to buy a RSA based certificate or a ECC based certificate. RSA is older and is supported by all browsers. ECC is newer, they state it is faster due requiring smaller key ...
-2
votes
1answer
25 views

nginx SSL not working (404 error)

On a CentOS 6.6 box I have nginx set to serve two virtual hosts. One for SSL and one for basic HTTP. /etc/nginx/default.conf: server { listen 80 default_server; server_name _; #charset ...
2
votes
3answers
48 views

Where did this wildcard SSL certificate come from?

My company is hosting example.com and sub.example.com on the same server, using a wildcard SSL certificate for *.example.com. Now it's time to renew our certificate, and we're not sure how we got that ...
1
vote
1answer
2k views

Unknown SSL protocol error in connection to rubygems.org:443 from Ubuntu

I ran into this problem on two Ubuntu 12.04 instances using kernel 3.2.0-54 after upgrading to the latest OpenSSL with the Heartbleed fix. Connections to some servers over HTTPS that never timed out ...
-2
votes
1answer
38 views

Apache fails to start, ssl issue

For some reason Apache does not start. I tried rebooting the server but to no avail. It's about 2am and my brain is fried. Here is the apache log. I did not touch any configs, certs, or keys to cause ...
0
votes
0answers
32 views

How to use ssl everywhere except an endpoint

I have a Web site where I want all requests to be done with HTTPS except for requests to urls with paths that start with /out/. nginx is configured as proxy to serve gunicorn/django content from ...
-1
votes
3answers
2k views

ISPConfig 3 SSL automatic rewrite [on hold]

I was wondering how you could get apache2 to redirect http://server.com:8080 to https://server.com:8080 - I have an ISPConfig 3 setup and the http://server.com:8080 virtual host currently prints a 400 ...
0
votes
1answer
255 views

Disable SSL on one domain [on hold]

I have a server with ISPconfig and nginx, where there are two domains set up. I have an SSL cert on one domain, and I have SSL disabled on the other one, however domain2 can still be accessed by https ...
1
vote
2answers
1k views

LDAPS being redirected to 389

We're trying to perform an LDAPS bind to a server which blocks 389 with a firewall so all traffic must travel over 636. In our test lab we're connecting to a test ldap (located on the same server) ...
1
vote
5answers
1k views

Cost effective way to handle high SSL traffic?

Some time in the future, I may need to build a dedicated SSL farm (as described in Making applications scalable with Load Balancing) or something similar to handle lots of SSL traffic. While it's not ...
2
votes
2answers
1k views

stunnel version 4.53 says SSL server needs a certificate on Windows 7

I have been using stunnel previous versions just fine. It didn't apparently have the feature of a certificate in SSL server mode. That's alright but not necessary for us as we're simply running a ...
0
votes
2answers
1k views

Installing SSL certificate on JBoss

I have a server that runs JBoss. When I type bad URL to that server it gives me version like this: JBossWeb/2.0.1.GA - what version of JBoss that would be? A SSL certificate will be bought and ...
0
votes
0answers
21 views

secure cookie in Apache => php session resets on every page load

I have set secure cookie in Apache based on this tutorial. But php session resets on every page load. for example this sample code: <?php session_start(); echo session_id(); ?> displays ...
0
votes
0answers
12 views

How can I disable/fix the SSL BEAST issue on windows 2008 SP2 (not R2)

Does anyone know how I can disable/fix the SSL BEAST attack issue on windows 2008 SP2 (not R2)? I'm using IIS-7.0 I found the issue by running a www.ssllabs.com scan. Thanks!
1
vote
1answer
2k views

Squid SSL bump with parent proxy

Does SSL bumping work with parent proxy? squid and pf are set up like this: squid.conf: http_port 3128 intercept https_port 3129 intercept ssl-bump generate-host-certificates=on ...
0
votes
0answers
14 views

Port forwarding to internal IP [closed]

I just installed the apache2 webserver on my raspberry pi, and tried to forward port 80 & 443 to it. It has the internal IP 10.0.0.11 . The pi is behind two routers. (router-IP 192.168.1.13, or ...
1
vote
1answer
86 views

Which SSL certificate would I need for external AND internal domain names?

This is a school-network. Official (outside reachable domain name) is bgschwechat.ac.at (www.bgschwechat..., mail.bgschwechat... and ftp.bgschwechat..) Internally the windows domain is named ...
0
votes
2answers
31 views

Cannot set up https on microsoft azure VM

For over a week now I am trying to set up https to work with my owncloud hosted on a Microsoft Azure virtual machine (ubuntu server 14.04). I am using apache2. I have gone through every single ...
1
vote
1answer
30 views

How to Disable TLSv1.0 and TLSv1.1 in Nginx

I'm trying to figure out how to disable TLSv1 and 1.1 Nginx and ONLY allow connections on 1.2. This is for testing reasons more than in production use and for the life of me cannot figure out why ...
0
votes
2answers
27 views

SNI for multi tenant load balancing in 2015

We're a multi-tenant service and terminate our SSL at our load balancers (HAProxy + Apache for SSL termination), this has caused growing pains due to dedicated IP requirements. But times have changed ...
-1
votes
0answers
5 views

Disabling SSL on Openshift PHP Gear

Is it possible to disable SSL on my Openshift server? If so, How? I am using openshift with my own domain, so when I connect, it uses the existing certificate for *.rhcloud.com which is incorrect ...
9
votes
3answers
11k views

How do I disable SSLv3 support in Apache Tomcat?

I am trying to reconfigure my Apache Tomcat server to only use TLSv1. However, it is still falling back to SSLv3 using certain browsers. I setup the <connector> tag with the following settings: ...
1
vote
0answers
24 views

Disabled SSLv3 in Tomcat, but Still Showing POODLE Vulnerability

I have a Windows 2008 server with Tomcat 7.0.59 & Java 8u31 & I am trying to ensure that SSLv3 is disabled. Looking at the changelog for Java, SSL3 should no longer be supported and the Java ...
0
votes
0answers
22 views

Apache Tomcat for Windows - cannot get https to work

Environment: Windows 2003 Server 64-bit Running on VMWare ESX 5.5 8GB of Ram Apache Tomcat 6.0.36 Server D:\Program Files\Java\jdk1.6.0_26\jre\bin\server\jvm.dll JDK 1.6 update: 26 Have been able ...
0
votes
1answer
1k views

nginx unknown directive ssl_protocols

I've compiled NGINX 1.4.1 with ssl support and wanted to secure my configuation with these lines: ssl_prefer_server_ciphers on; ssl_protocols        SSLv3 TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers          ...
1
vote
1answer
5k views

Handshake violation when trying to access one website

I have a TZ 190 Wireless Enhanced with SonicOS Enhanced 4.2.1.0-20e. Yesterday, people could access without any problems a bank website wich uses HTTPS. Today, it is imposible to access only that ...
-2
votes
0answers
15 views

SSL give page not available whe we roll out to production [duplicate]

We configured HTTPS in one of our servers running apache XAMPP (on windows server 2008 platform). Everything looks good when we run SSL checker tool we get an A Qualification, so we switched it to ...
-2
votes
1answer
16 views

how many SSL certificate can be listed in SSLServercert?

I wanted to list more than one certificate in SSLServercert, so that websites can use either one of these certificates. i will use "SSLServercert label1 label2" in httpd.conf file. label1 has IP based ...
0
votes
1answer
2k views

Redirect non-www to www over SSL with Nginx

I'm having an error when trying to redirect https://example.com to https://www.example.com. When I go to https://example.com, it doesn't redirect and returns the page/200 status. I don't want this, ...
1
vote
2answers
976 views

Disabled SSLv3 to combat Poodle now cannot connect to SQL “Connection forcibly closed by remote host”

I have disabled SSL3 on my web server to combat the Poodle Vulnerability and now I am unable to connect to my SQL server using SQL Authentication. I just get "Connection forcibly closed by remote ...
1
vote
1answer
31 views

If a non-SSL-enabled domain is requested via https will Apache serve a different, SSL-enabled domain on the same server?

I am hosting several websites on an Apache server (e.g. http://www.example.com), only one of which has an SSL certificate (e.g. https://www.example.net). Is it possible to set up Apache so that an ...
1
vote
1answer
820 views

Apache: getting proxy, rewrite, and SSL to play nice

I'm having loads of trouble trying to integrate proxy, rewrite, and SSL altogether in Apache 2. A brief history, my application runs on port 8080 and before adding SSL, I used proxy to strip the 8080 ...
1
vote
1answer
24 views

Serving http with Apache on port 443 behind SSL terminator

Our network ops folks have set up SSL termination, then reverse-proxy the request to us. Their requirement is that, if they saw the input on port 443, we must serve the content on port 443, so we are ...
1
vote
0answers
8 views

IIS bindings keep being removed

I'm having a problem where the security certificate for a site is being periodically unbound from port 443 and replaced with another certificate which is sitting on the server. So whenever a user ...
0
votes
0answers
13 views

External clients get a certificate mismatch - but internal clients do not

I have a scenario where external clients are receiving a certificate that is different than the one that is bound to the IIS site. This is Win2008R2 / IIS, in the following configuration: ...
0
votes
0answers
10 views

How to make a client's pkcs12 bundle if only server pkcs12 bundle is present

I've got a linux box with openvpn installed on it, openvpn is configured to use pkcs12 certs: dh server.dh pkcs12 server.p12 crl-verify server.crl I'd like to add more vpn clients, but I ...
0
votes
1answer
1k views

NGINX SSL Connection Error

I've added an SSL certificate to my server. (Nginx running passenger & Rails). I created a CSR, uploaded to GoDaddy, downloaded the keys. Inside /srv/ssl I have www.mydomain.com.crt ...
1
vote
1answer
246 views

Plesk is delivering incorrect SSL certificate when accessed through OpenSSL cli, but correct in browser [closed]

I have a Plesk setup with several sites. When accessed in the browser, Plesk serves the proper SSl cert just fine. But then when I go to access it through openssl using openssl s_client -connect ...
3
votes
1answer
1k views

Squid SSL transparent proxy - SSL_connect:error in SSLv2/v3 read server hello A

I am trying to setup a SSL proxy for one of my internal servers to visit https://www.googleapis.com using Squid, to make my Rails application on that server to reach googleapis.com via the proxy. I ...
0
votes
1answer
128 views

PCI compliance and SSL certificates on a CentOS VPS [closed]

looking for a bit of advice please. We've been battling with a PCI compliancy project for the last couple of days and we've managed to eliminate most of security warnings. What we're left with now is ...
-2
votes
2answers
859 views

Wamp won't start after installing SSL [duplicate]

I installed SSL using this guide but after I finished, I was unable to start up WampServer. I made sure to follow everything correctly in that guide (replacing the paths given in the guide with the ...
1
vote
2answers
111 views

What Files Should I Set Up for Clean Apache Configuration [duplicate]

I am not new to Apache but nor am I an expert (by any means). I've run sveral versions of WAMP and XAMP server set-ups. Most of my Apache configurations are simple. I usually run a default master ...
0
votes
0answers
31 views

SSL stops working randomly and often with no changes made prior

Searched this site for a while and couldn't find anything the same as this. Most point to signet which I don't see. SSL site was working great for the last two years. All of a sudden it went down ...
0
votes
0answers
47 views

How to Flush NginX's SSL buffer mid-request for Server Push

I'm writing an app that uses long polling to push messages to clients. It doesn't end the request when it finishes sending a message though: it just flushes. It works fine, even when I proxy it ...
0
votes
1answer
15 views

How to exclude some path/page from client certification in Apache 2

I am trying to set up an Apache server with client certification enabled. So that the customers could access the content with a valid client certificate. Let's say, I have the server running as ...
0
votes
0answers
22 views

SHA1 cipher detection on Apache

I have a Windows Server 2008 R2 server running Apache 2.4 that acts as a proxy for all of our websites and we have a wildcard certificate installed. Right now the cipher used is SHA1 and the plan is ...
0
votes
0answers
72 views

setup SSL with CA for multiple local sites in Apache and authenticate in a specific location (Error code: ssl_error_handshake_failure_alert) Ubuntu

i'm trying to implement SSL (HTTPs) on my local web-server to protect specified directories on Apache's websites where a user log's-in, combining SSL and HTTP Authentication Basic. I have follow ...
0
votes
1answer
35 views

Two https virtualhosts on same server: same port, different subdomains

I've tried searching for this scenario, but can't seem to find exactly this setup. I want to have something along the lines of the following: I want to have two subdomains redirect to different ...