SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

2
votes
2answers
2k views

LDAPS being redirected to 389

We're trying to perform an LDAPS bind to a server which blocks 389 with a firewall so all traffic must travel over 636. In our test lab we're connecting to a test ldap (located on the same server) ...
2
votes
1answer
21 views

Installing SSL certificate for Application hosted on Virtualised Windows IIS

I am currently running Ubuntu 14.04 that has WebMin installed and running Apache. I am also running Virt Manager to have a virtualised Windows Server. I am wanting to setup an SSL certificate for an ...
-1
votes
0answers
11 views

SSL certificate(on SHARED HOSTING) sometimes causes redirections? [duplicate]

my Hosting company (support person) told me, that I can install a SSL on my single domain (In my package I have many domains), but if i wont purchase DEDICATED IP, then sometimes(because of Server has ...
1
vote
4answers
5k views

Creating a single .pem file for web server SSL

To use SSL, the web server that I am using requires the location of a single .pem file (-ssl_cert xyz.pem) I have a certificate issued by GoDaddy. They gave me the file: banana.crt The ...
3
votes
1answer
2k views

Squid SSL transparent proxy - SSL_connect:error in SSLv2/v3 read server hello A

I am trying to setup a SSL proxy for one of my internal servers to visit https://www.googleapis.com using Squid, to make my Rails application on that server to reach googleapis.com via the proxy. I ...
0
votes
0answers
6 views

Multiple Client Certificates in SSLProxyMachineCertificateFile

Here is my use case. I want to learn how to setup Apache, so this is just for learning. Feel free to suggest better alternatives. I'm using Apache 2.4 in RHEL5. I want to use a ProxyPassMatch to ...
0
votes
3answers
934 views

Apache redirect multiple domain names from https

My server distribute two main websites, says : www.google.com & www.facebook.com (yeah I know :p) I want them to be distributed via https. Using Apache, I defined a vhost file in ...
2
votes
1answer
24 views

Do not use Client Cert Auth when on local network apache2

I'm hoping someone could help me with this question... I am running an Apache 2.4.7 server on my Ubuntu 14.04 box with some public facing sites. For some of those sites I've implemented a Client Cert ...
0
votes
1answer
2k views

NGINX SSL Connection Error

I've added an SSL certificate to my server. (Nginx running passenger & Rails). I created a CSR, uploaded to GoDaddy, downloaded the keys. Inside /srv/ssl I have www.mydomain.com.crt ...
0
votes
1answer
3k views

Error code: ssl_error_rx_record_too_long on nginx ubuntu server

I have a site which was perfectly running with apache on some old ubuntu server and also has https for it. But now for some reasons i need to move to different(new ubuntu server with high ...
1
vote
1answer
24 views

SSL handshake with CentOS, curl and ECDHE

Since I limited my Ciphers to ECDHE because of the Logjam vulnerabilities, I am not able to do a curl from a Centos machine anymore. (works from Ubuntu) $ curl -v https://mysite.mydomain.com * ...
0
votes
2answers
44 views

Windows Server 2012 unable to access specific SSL page

This problem really boggles the mind. I have a standard Windows 2012 server with windows firewall enabled. Using Chrome, I am unable to access a certain HTTPS website while other HTTPS websites can ...
5
votes
1answer
2k views

How to define which SSL certificate nginx sends first with SNI?

I use nginx 1.2.7 with OpenSSL 0.9.8o on Debian Squeeze for about 30 domains. On two of them I enabled SSL which works fine on both. The SSL config is use for both domains: listen 443 ssl; ...
1
vote
1answer
20 views

LDAP Client Search with SSL - CentOS7

Has anybody got SSL client authentication working with OpenLDAP (on CentOS7 - which is using moznss)? I've search for the last 2 days trying to get this to work, both with a certutil database and ...
0
votes
2answers
1k views

Why isn't tomcat serving the correct SSL certificate

I configured tomcat with SSL successfully and was using a self-signed certificate. Recently an issue arose where just having the client "Accept/trust" our certificate wasn't easy. We ended up ...
1
vote
2answers
2k views

Problem with apache + ssl: length mismatch error and ocasional bad request

we migrated a server from slicehost to linode recently, we copied the config from one server to the other. Everything works perfectly except that we get: Occasional errors with "Bad Request", this ...
2
votes
2answers
40 views

Sniff outgoing traffic on my server on a SSL channel

Im executing a CURL command on a php application running on my nginx server (centOS). The end point is a https address so the outgoing traffic is of course encrypted. I want to see the network ...
1
vote
1answer
1k views

SSL Connection Error

I have purchased a comodo ssl cert and have submitted the Certificate Signing Request (CSR) generated by my server to the ssl management site. With the 3 files it returned me with, - ...
1
vote
1answer
35 views

Add SSL certificate after curl error: “unable to get local issuer certificate”

I'm trying to access a partners SOAP API, for that goal I made a CSR and received a CRT. I've made a PEM file with my key and the CRT: cat mycert.crt mykey.key > mycertandkey.pem When I try to ...
1
vote
1answer
6k views

Handshake violation when trying to access one website

I have a TZ 190 Wireless Enhanced with SonicOS Enhanced 4.2.1.0-20e. Yesterday, people could access without any problems a bank website wich uses HTTPS. Today, it is imposible to access only that ...
1
vote
1answer
1k views

Unable to configure haproxy with ssl

I want to make my server ssl protected, it has two parts one for website and another for application. to balance them we have used haproxy. Now we want to secure this haproxy. I have installed the ...
10
votes
1answer
16k views

Configure Nginx as reverse proxy with upstream SSL

I try to configure an Nginx server as a reverse proxy so the https requests it receives from clients are forwarded to the upstream server via https as well. Here's the configuration that I use: http ...
0
votes
1answer
20 views

Apache Server does not update certificate for subdomains after restart

I have a server which has domain1.example.com and domain2.example.com. The server is using 2 certificates one for domain1.example.com and a UCC certificate for domaind.example.com. My ssl config is as ...
1
vote
1answer
1k views

squid3 ssl bumping server-first with signed certificate

I'm trying to get Squid3.4 to do SSL Bumping with the server-first method. I followed this guide in alpinelinux. I'm working in explicit mode (browser configurer to Go to the proxy) and that works ...
1
vote
1answer
651 views

Apache SSL redirect loop [duplicate]

We are trying to redirect our site from http to https only. Everything we have tried in .htaccess has resulted in a redirect loop. If we manually type the "https://" in front of the url, our page ...
0
votes
1answer
2k views

nginx unknown directive ssl_protocols

I've compiled NGINX 1.4.1 with ssl support and wanted to secure my configuation with these lines: ssl_prefer_server_ciphers on; ssl_protocols        SSLv3 TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers          ...
22
votes
1answer
24k views

Configure custom SSL certificate for RDP on Windows Server 2012 in Remote Administration mode?

So the release of Windows Server 2012 has removed a lot of the old Remote Desktop related configuration utilities. In particular, there is no more Remote Desktop Session Host Configuration utility ...
5
votes
2answers
2k views

nginx proxy + ssl +clr “400 bad request” error

Here's the situation - there's a trasnparent nginx proxy that handles SSL certificates and does it well until we decide to add a revocation list management, required for security reasons. This is when ...
0
votes
0answers
8 views

Mail Securing with cPanel [closed]

I want to setup a dedicated domain through which my clients can access their mail. Currently all clients use mail.domain.com (where domain.com is their own domain) which gives them a lovely SSL ...
3
votes
1answer
40 views

Sendmail down on Ubuntu 12.04 after update, SSL related?

I posted this on askubuntu.com yesterday but haven't gotten any responses. We run a production Ubuntu server that serves thousands of people per day. Sendmail is currently not working on this server. ...
0
votes
1answer
912 views

Two ssl certificates on same server with two different IP addresses

I have two Sharepoint web applications running on the same server. We want to use the following IP Address:port configurations: - first site: IP Address: x.x.x.22 port 443 - second site: IP Address: ...
2
votes
3answers
8k views

Apache SSL configuration - Invalid method in request \x16\x03\x01

I'm trying to set up https service on my VirtualBox guest instance running Debian Squeeze and Apache 2. When trying to load my virtual host's test page in a browser from my Win7 host machine, I'm ...
0
votes
0answers
33 views

Wildcard SSL on 2 Servers

I'm helping an SEO client install an SSL certificate and have run into some issues. I'll try to simplify it. He has 2 servers: 1. SERVER A: Internal server running IIS that contains chat and support ...
0
votes
1answer
978 views

Nagios - Could not complete SSL handshake

I'm trying to configure Nagios command for checking status of physical memory on a remote Windows host using NRPE plugin. I'm using Nagios v3.0.6 on Ubuntu Server v14.10, and latest stable version of ...
1
vote
2answers
48 views

Windows XP invalid certificate on Nginx

I migrated my SSL websites and certificates from Apache to Nginx and from that moment all Windows XP clients does not recognize the SSL certificate (it is a wildcard certificate issued by Trustico). ...
0
votes
0answers
11 views

Does coreos' cloud-init have something similar to ansible's vault?

I'm trying to setup ssl keys and certs onto a coreos machine, on the previous ubuntu machine I was using, I had ansible's vault encrypt the key and cert for source control and decrypt it when adding ...
-1
votes
1answer
38 views

TLS 1.0 handshake fails in Windows Server 2012 R2

I am using Windows Server 2012 R2 to contact AWS services, namely https://elasticbeanstalk.eu-central-1.amazonaws.com/. However, the AWS toolkit for Visual Studio as well as Internet Explorer 11 fail ...
1
vote
1answer
1k views

Nginx SSL redirect for one specific page only

I read and followed this question in order to configure nginx to force SSL for one page (admin.php for XenForo), and it is working well for a few of the site administrators but is not for myself. I ...
1
vote
1answer
25 views

facebook app giving Security error when click on a shared link to my site [closed]

I have built a site and users are sharing it on facebook, but when one of their friends click on the link it give them this error. Security error There are problems with the security ...
2
votes
3answers
645 views

Apache SSL configuration - SSLLabs how to get A+

I have this configuration SSLCipherSuite AES128+EECDH:AES128+EDH SSLProtocol All -SSLv2 -SSLv3 for Apache 2.4.6, OpenSLL 1.0.2a and on SSLLab's SSLtest I get A, it suggests (warns) that I have ...
4
votes
0answers
63 views

What would be involved in moving a site like stackoverflow to https?

I've seen a lot of requests in the SO Meta asking for StackOverflow to be moved over completely to https. I've never run a site as large as Stack Overflow, so enabling SSL/TLS has always just meant ...
1
vote
1answer
43 views

Unexpected File Download Slowness After Enabled SPDY on Nginx

A simple WordPress static site run entirely on https. Nginx conf here: http://pastebin.com/BrP0LThT Only difference before / after is: listen 443 ssl; listen 443 ssl spdy; Nginx ...
-1
votes
0answers
12 views

SSL23_GET_SERVER_HELLO:sslv3 alert handshaje failure gitlab

I installed latest version of gitlab and now git bash / command line is not working, all are getting SSL23_GET_SERVER_HELLO:sslv3 alert handshake error. How do we resolve this issue ? ssh is working ...
0
votes
0answers
14 views

Apache Redirect to https except for localhost requests [duplicate]

I want that external requests on my Apache will be redirected to https - RedirectMatch ^/$ https://example.com but when the request comes from localhost the Redirect should point to ...
1
vote
2answers
1k views

SSL certificate causes VPN connection error

Everyone! My problem - when I create SSL certificate (using selfssl7 or IIS management console), my vpn connection (L2TP with certificate authentication) will not go up (I get error 789). I have to ...
7
votes
3answers
12k views

“Server should be SSL-aware but has no certificate configured [Hint: SSLCertificateFile]” error

After recently upgrading Apache2 to version 2.2.31 I found a strange behaviour in SSL VirtualHost setup. A few of the website I'm hosting were showing the certificate for the default host even if the ...
0
votes
1answer
2k views

Page can't be displayed with IIS and SSL

I have a single site hosted in IIS 8. I have two site bindings. One is for HTTP, the other is for HTTPS. HTTP is on port 80 with All Unassigned addresses, I left host name blank. HTTPS is on port 443 ...
0
votes
1answer
915 views

SSL Cert error after migrating to hosted exchange service

OLD SETUP SBS 2011 w/ Exchange and all clients running Office 2010 (using rpc/http as many were laptops) NEW SETUP All mailboxes and accounts moved to hosted Exchange. Local Exchange services ...
1
vote
1answer
1k views

Connection Reset error trying to set up HTTPS locally using VS and IIS Express

I'm trying to set up Facebook authentication on my application, so I tried following the steps at this page: ...
0
votes
0answers
10 views

Cross Domain LDAPS

I have a bit of an issues I am running in to. We have two domains: domain1.com domain2.com Our Enterprise and Subordinate CA Resides on domain1, let's call it subca.domain1.com. I am trying to ...