SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

5
votes
0answers
33 views

Forward proxy for webservices with SSL client certs

I have lots of servers which access various external webservices, most of which use SSL, some of which require client certificates. I would like to centralize the configuration of client certs and ...
4
votes
0answers
700 views

500 OOPS: SSL: cannot load RSA private key vsftpd

Im configuring vsfptd on debian 7.3, Im trying to use ssl. I generate de certficates using this command: openssl req -x509 -nodes -days 1925 -newkey rsa:2048 -keyout /etc/vsftpd/private/vsftpd2.key ...
3
votes
0answers
141 views

How to enable certain SSL cipher while having disabled the group?

I would like to enable the SSL cipher EDH-DSS-DES-CBC3-SHA (also known as TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA) in my nginx SSL environment to support IE8 on Windows XP. The base SSL ciphers for nginx ...
3
votes
0answers
2k views

SSL verification error with git (on github) on Ubuntu 14.04

I'm trying to clone the atom repository that just went fully open-source and I've run into some trouble. Attempting to git clone the repository is producing an SSL error: wug@wugputer:/src/test$ git ...
3
votes
0answers
263 views

Intermediate SSL Certificates on Azure Websites

I have successfully configured an Extended-Validation Certificate on an Azure Website following this article: ...
3
votes
0answers
156 views

How do I clear cached SSL state data from schannel?

I'm trying to clear SSL state data for a normal TLS session (no client certs are involved) for Outlook when connecting to a SSL based CAS server. How do I clear the SSL state of SChannel? Does the ...
3
votes
0answers
1k views

OpenSSL SHA256 testing

I'm having an issue testing a hardened SSL configuration for pound. One of the requirements is for the inclusion of AES[128|256]-SHA256 ciphers, along with strict ordering of preference. I've ...
3
votes
0answers
483 views

IIS 6.0 SSL handshake error

Hi all I installed a trusted certificate in an IIS 6.0 server. I have the port 443 opened in the firewall and I verified the server is listening on that port. However when verifying using openssl I ...
3
votes
0answers
2k views

Apache/SSL: (70014)End of file found: SSL input filter read failed

Figured upgrading on a long weekend was a smart move... Now I'm stuck. The server is spitting out this error (loglevel info): "(70014)End of file found: SSL input filter read failed" when using the ...
2
votes
0answers
31 views

Certificate can only be used by network service account

Issues : Our service is using one certification for partner service call. It worked well in IIS site which is running as network service account. But when we run test the code as administrator ...
2
votes
0answers
40 views

Apache reverse proxy location based access control not working

I'm running a small web server with Ubuntu 12.05.5 LTS and Apache 2.2.22 and ran into this problem recently: For an IIS server on a virtual machine I have the following reverse proxy config: ...
2
votes
0answers
92 views

“invalid security certificate” (ssl_error_bad_cert_domain) after PFX uploaded to Azure

My SSL certificate (purchased on godaddy) on Azure stopped working all of a sudden. I am running a standard Azure website and I previously uploaded a .pfx file and bound my custom domain to it. ...
2
votes
0answers
827 views

I'm having issues with the SSL versions used by curl and by python ssl lib

TL;DR I'm trying to reach an URI which only takes SSLv3. If I try to access it with curl or Python requests (which uses the ssl module) it doesn't work (different errors). Some longer explanation ...
2
votes
0answers
60 views

Should load balancers ever use TLS session ID to direct traffic?

One of my vendors caused an outage today by using TLS SessionID (sent by the browser) as a way to determine which host to direct traffic to. Since SessionID can leak privacy details, and more ...
2
votes
0answers
101 views

replay decrypted ssl traffic with tcpreplay

I have an pcap format from some https traffic from one of my web-servers. So I can use the key from my webserver to decrypt the traffic in wireshark. The problem I'm now facing is that I can't get an ...
2
votes
0answers
402 views

Maven - resolving “java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors”

I am attempting to build/install this project on an Ubuntu 12.04 box: https://bitbucket.org/petermr/pdf2svg However: mvn clean install Fails to build due to getting errors like this: ...
2
votes
0answers
290 views

Internet Explorer SSL use causes segfault - Apache httpd SIGSEGV in apr_uri_parse

Recently I've had quite a large influx of the error below in the error_log. I've found out that it happens when someone browses my site using SSL https: and Internet Explorer, all other browsers are ...
2
votes
0answers
157 views

Accessing ActiveMQ's JMX via SSL

I'm trying to get SSL-enabled JMX access to ActiveMQ (5.8.0 or 5.9.0 running under java 1.6.0) but I'm not having any luck. I've dealt with SSL-enabled JMX access in the past, so I'm quite familiar ...
2
votes
0answers
128 views

How do I obtain the ssh public key from my VSphere ESXi 5.1 host hypervisor residing in vcenter with puppet-enterprise cloudprovisioner

I am using the learn puppet 3.1 vm and trying to connect to a host hypervisor. I followed the instructions to create a .fog file under root which includes a yaml hash, and I read that the yaml hash ...
2
votes
0answers
157 views

Forefront UAG with SSL/X509 auth for REST API

I'm not a network engeneer, but a software engeneer, so this theme is quite unfamiliar for me. We develop a solution, that consists of a server-side web application (with a rest api), working on java ...
2
votes
0answers
677 views

How to alias a ssl certificate common name?

I have a server, which has a self signed certificate, which I am trying to securely access. I've got the certificate by looking at the output from openssl s_client -connect <ip>, and copied it ...
2
votes
0answers
722 views

Redirect user on SSL authentication failure

I configured a VirtualHost with SSL enabled and SSL client authentication, all of that on apache2 2.2.8 (ubuntu server 8.04). All SSL certificates (CA, Server certificate, Client certificate, CRL) ...
2
votes
0answers
119 views

SSLv2 required on TLS-only site?

This problem has been driving me crazy for a very long time. We have three web servers, serving East, West and Central offices. We built the Central server first, imaged it, and copied the image to ...
2
votes
0answers
424 views

large javascript file not being served properly by nginx

I'm having trouble serving a large (376kb) javascript file via nginx over ssl with gzip enabled. The file is served without issue over plain old http. The file in question is ckeditor.js and is ...
2
votes
0answers
186 views

Apache alternatives with per-directory SSLVerifyClient

My application requires per-directory verification of SSL client certificates (i.e. when user requests /foo we require they have a client certificate and verify it, but when they request /bar we don't ...
2
votes
0answers
448 views

SSL connection alert hanshake failure

I'm having problem establishing the connection between the client and the Server .I'm using my own signed certificate on client and on server. I'm using the SSL ciphers SSLCipherSuite ...
2
votes
0answers
325 views

(35) Unknown SSL protocol error in connection to localhost:8443

I've followed some instructions at: http://docs.codehaus.org/display/JETTY/How+to+configure+SSL I can serve requests over http (http://localhost:8080/ping), but I can't hit (https://locahost:8443). I ...
2
votes
0answers
207 views

Debugging incorrect certificate with SNI for some clients

I have a number of domains with SSL certificates served by Haproxy (using Haproxy 1.5's support for SSL). For the most part the correct certificates are being served, but a particular user is ...
2
votes
0answers
2k views

The timeout specified has expired: SSL input filter read failed. - is this an error?

We have apache log level on debug as we are hunting a bug on our magento site ...
2
votes
0answers
497 views

FTP proxy with SSL support

I have a bunch of LXC containers with vsftpd daemon installed on each. I would like to forward/proxy traffic from dom0 server port 21 to particular containers based on ftp user name e.g. ...
2
votes
0answers
2k views

ProFTPd/FTPS issue: unable to accept TLS connection: received EOF that violates protocol

It took some time while I tried to find solution over the net. Nothing helped. The story: I have Ubuntu 10.10 (Amazon EC2 instance). ProFTPD Version 1.3.2e (latest via apt-get). I changed nothing on ...
2
votes
0answers
2k views

Enabling SSL for Remote Desktop

Ok so I'm trying to remove a number of my systems from our Nessus scan from having this medium vulnerability. http://www.nessus.org/plugins/index.php?view=single&id=18405 I set the following GPO ...
2
votes
0answers
245 views

How to add SSL for localhost in RAILS

I want to test my application which needs to work both with and without SSL. If it is possible to set up SSL for a local application (http://localhost:3000), please let me know some suggestions, my OS ...
2
votes
0answers
354 views

Dovecot TLS Handshake not working

I have set up my mailserver using http://workaround.org/ispmail and it worked until today, where I can not access the server using IMAP. The error I see in dovecot.log is 2012-02-09 16:37:40 ...
2
votes
0answers
2k views

Tomcat fails to find a key entry in keystore

I am installing a SSL cert in my Tomcat server, but it fails to find the key entry in my keystore file. If I don't specify keyAlias="mykey" it shows me the following error message: ...
2
votes
0answers
263 views

Apache 2.2.12, SSL and VirtualHost

I used to have multiple VirtualHost listening and same ip and port with SSL enabled. Of course only one certificate is used for every SSL connexion but this is OK for me. I have a configuration that ...
1
vote
0answers
24 views

Disabled SSLv3 in Tomcat, but Still Showing POODLE Vulnerability

I have a Windows 2008 server with Tomcat 7.0.59 & Java 8u31 & I am trying to ensure that SSLv3 is disabled. Looking at the changelog for Java, SSL3 should no longer be supported and the Java ...
1
vote
0answers
8 views

IIS bindings keep being removed

I'm having a problem where the security certificate for a site is being periodically unbound from port 443 and replaced with another certificate which is sitting on the server. So whenever a user ...
1
vote
0answers
40 views

Nagios check_http gives 'HTTP/1.0 503 Service Unavailable' for HAProxy'd site

I asked this on stackoverflow, but I think it's better suited for here. Can't figure this one out! OS: CentOS 6.6 (Up-To-Date) I get the following 503 error when using my nagios check_http check ...
1
vote
0answers
9 views

IIS 7 set up web service on port 8080 with SSL

I'm trying to set up a web service on port 8080 with SSL on IIS 7. There is already a website set up on port 80 with SSL. I've tried a few things like adding a https binding with port 443 and a ...
1
vote
0answers
26 views

SSL Proxying with mutual authentication

I have a bunch of backend servers each them should make https-requests. I want all my https traffic inspected and controled by few number of machines (many times fewer than server farm) - that's why I ...
1
vote
0answers
58 views

How can I find out, what Chrome complains about in my certificate?

Chrome complains about one of my SSL servers/certificates: the site is using outdated security settings that may prevent future versions of chrome stackoverflow From what I learned, this message ...
1
vote
0answers
20 views

Can I use both RSA and ECC certificates in apache?

If I simply use "SSLCertificateFile" and "SSLCertificateKeyFile" twice, the certificate chain is broken for the first one. Can I use both RSA and ECC certificate which is issued from different ...
1
vote
0answers
37 views

Azure public endpoint SSL termination

In Azure, is there any way to set up an HTTPS endpoint directly on the public VIP, as opposed to joining each VM to a load balanced set, so that I can associate this endpoint with the SSL certificate ...
1
vote
0answers
26 views

jrun ssl peer not authenticated

Before I start, I should say that I've already posted this question at Code Ranch, and have not yet gotten an answer. I'll make sure both this site and Code Ranch receive the answer should I find ...
1
vote
0answers
30 views

SSL certificate for sql-server on ec2

I have an ec2 node provisioned to host mssql server. I'm trying to request and install an ssl certificate for this node so I can securely connect to it but I can't get the certificate to appear in the ...
1
vote
0answers
31 views

Risks of letting ZNC have my private SSL key

I have a single VPS running a few websites and also my ZNC IRC bouncer. I purchased a wildcard SSL certificate for all my subdomains (this was silly; it would've been much cheaper just to purchase ...
1
vote
0answers
77 views

SSL error, unable to find valid certification path to requested target

I'm new to ssl so forgive me. I set up a site with ssl and all the online checks (eg. https://ssltools.websecurity.symantec.com/checker/views/certCheck.jsp) show that it is set up correctly and the ...
1
vote
0answers
169 views

PuppetDB: unable to get local issuer certificate

I'm attempting to use puppetdb on but I'm running into some issues. I have a node called puppet. It is the master as well as where I've installed puppetdb. It's also a node that puppet manages. ...
1
vote
0answers
378 views

IIS Site breaks after disabling SSLv3

I am trying to disable SSLv3 on a 2008 R2 web server that runs IIS 7.5 but as soon as I disable SSLv3 and reboot, the website is no longer reachable. I ran a packet capture with SSLv3 still enabled ...