SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
2answers
111 views

How to redirect from FR to COM when using HTTPS [duplicate]

I have two domains : my-domain.com and my-domain.fr I want to redirect traffic as followed : my-domain.com:80 -> my-domain.com:443 my-domain.fr:80 -> my-domain.com:443 my-domain.fr:443 -> ...
1
vote
1answer
647 views

Turning on ssl_verify_client in Nginx causes Gitlab user identification to fail

We have a private Gitlab instance that we plan on exposing externally, in order to ensure that only employees can connect to the website I have rolled out a small internal CA with user certs in order ...
1
vote
1answer
716 views

Why Nginx reverse proxy shows http location?

I need help with my nginx configuration. In this config I've got /svn location, that comes to apache http. Apache is password protected (Basic Auth) When accessing https://my.server.com/svn it shows ...
2
votes
2answers
199 views

Specify nginx's ssl_certificate in location{} block

For a web service we have two certificates: myservice.com and api.myservice.com. Both have the same application (document root) but are serverd over HTTPS with different certificates. Unfortunately, ...
0
votes
1answer
140 views

Download root CA certificate in browser

I have a Apache server installed on CentOS 6. I have created a trusted self sign certificate. For that I had created root CA certificate and using it I have signed my self signed certificate. Now I ...
1
vote
2answers
81 views

Which operating systems ship with StartCom_Certification_Authority.pem

I purchased some (cheap) HTTPS certificates from StartSSL. They work great on all browsers I tested. According to this post they are even recognized in IE 7 and 8, which good enough for me. However, ...
1
vote
1answer
976 views

How to create ssl certificate for multiple domains which requires the CA root key in Linux

I have mail server. There are may domains hosted on it. I am deploying ssl certificate on it. I want that when user access there mail account using https browser should show that certificate is ...
0
votes
1answer
633 views

nginx and SNI: is it possible to automatically resolve SSL certificate by domain name

I need to setup a server that will server same content over SSL using different domain names. The problem is that I need an ability to add new domain names as easily as possible. Assuming that all ...
0
votes
1answer
1k views

OpenSSL connection Error called stream_socket_enable_crypto()

in my php coding i have following line which uses by SWIFT MAILER Class if(!stream_socket_enable_crypto($this->smtp_conn, true, STREAM_CRYPTO_METHOD_TLS_CLIENT)) { return false; } however ...
1
vote
2answers
110 views

How can I implement custom domains with SSL support for my SaaS product?

I have a SaaS project that needs to support custom SSL domains. I've looked into SNI which looks perfect. If I decide to (or need to) support Windows XP. What other techniques can I use? I know that ...
1
vote
1answer
519 views

NGINX SSL termination slow

I am using NGINX as a reverse web proxy to an upstream IIS webserver. I am proxy_pass'ing to an https binding on the IIS server so I understand SSL is being encrypted/decrypted twice- but it shouldn't ...
0
votes
3answers
92 views

How to Redirect FROM https TO http [closed]

I have a site that does not need https. We do not collect any information at all, nor do we have any forms. This being so we did not set up an SSL certificate. However, when I go to ...
0
votes
1answer
1k views

IIS URL Rewrite and Reverse Proxy

I have a reverse proxy rule that forwards all requests to a specific subdomain to an internal server and everything works great. <rule name="cloud.domain.com" enabled="true" ...
1
vote
1answer
185 views

Apache with self signed certificate, www subdomain hanging when requesting from browser

I created a staging site with a self signed certificate using: mkdir /etc/ssl/wildcard.yourdomain.com cd /etc/ssl/wildcard.yourdomain.com/ openssl genrsa 2048 > host.key openssl req -new -x509 ...
2
votes
1answer
96 views

How to authenticate a user through certificate exchange?

I have an web application A where a user has to authenticate through a username/pass method (https://server.local/webappA). A secure connection is established (HTTPS) with the server A. Then, these ...
2
votes
1answer
471 views

SSL/TLS cert: Get alternative name to work with LAN IP

I have created my own CA and imported its root certificate on my devices. I use a signed SSL certificate to provide myself with remote access to my NAS. When I access my NAS over the proper URL (e.g. ...
1
vote
2answers
120 views

What Files Should I Set Up for Clean Apache Configuration [duplicate]

I am not new to Apache but nor am I an expert (by any means). I've run sveral versions of WAMP and XAMP server set-ups. Most of my Apache configurations are simple. I usually run a default master ...
0
votes
1answer
410 views

CACert.org certificate giving sec_error_unknown_issuer

I have used cacert.org to issue class 1 certificates for my website. I made sure that the subdomain name is correct and that the e-mail address is there, but yet I keep getting the certificate problem ...
0
votes
1answer
182 views

opendkim requires libcrypto [duplicate]

I am trying to install opendkim. For that, I used rpm to install epel, then did yum install opendkim. However, I get the following dependency errors: Error: Package: opendkim-2.9.0-2.el6.x86_64 ...
-5
votes
1answer
53 views

How to update SASS for the whole of a VPS automatically? [closed]

I have a VPS with SASS, and I have configured it correctly. I have multiple users on my server, and they don't have SSL access to the server. Some of them use SASS, and I don't want to have to ...
0
votes
1answer
173 views

SSL for secure.DOMAIN.com on port 443 and 2443, is it possible?

So I have a sub-domain that is secured using a godaddy ssl. what I would like to do is have the standard 443 port secured as well as port 2443 so when going to https://secure.domain.com its secured as ...
-1
votes
1answer
192 views

Windows azure vm refusing connection port 443

I am deploying my sailsjs app using forever in windows azure. And it is taking forever to get my server up and running. Initally it was working fine when it was http but I changed to SSL with self ...
0
votes
1answer
2k views

Dovecot handshake failure, on Postfix success

I am trying to setup a Dovecot/Postfix structure, relying on a MySQL backend. I came across a problem with SSL configuration, and it's really tearing my hair out... Situation Dovecot listens on port ...
1
vote
1answer
4k views

nginx config fails with SSL key/pem (unique case)

I am trying to install SSL on my nginx reverse proxy with certified ssl keys but i get this message when i try to restart server: Restarting nginx: [emerg]: ...
0
votes
0answers
84 views

Random Switch from HTTP to HTTPS

For quiet sometime I've been dealing with a random switch from HTTP to HTTPS, at times it vanishes after a few attempts to remove the https from the url, otherwise I have to clear my cache to be ...
0
votes
0answers
80 views

SSL error - certificate not identifying correct server

SO I have set up my SSL certificate on my ubuntu/nginx server. When I created the certificate the wizard on Gandi (the CA for the certificate) asked me to identify a subdomain for the certificate. I ...
3
votes
1answer
1k views

Problems installing SSL certificate on nginx with intermediate key

I am trying to install an SSL certificate on my Ubuntu server. I have purchased the certificate from my CA and have downloaded the certificate itself and an intermediate certificate. As so: my ...
1
vote
1answer
2k views

Server Performance (HAProxy, Nginx, SSL)

I've been struggling recently with try to identify where the performance on our environment is bottlenecking. Environment (each server is Linux VM, 8 Cores, 32 GB RAM): Load Balance: 50 Web Servers ...
-1
votes
1answer
127 views

Self-signed certificate is not “trusted” by default? [closed]

Self-signed certificate is not “trusted” by default? How can I make it trusted? I used this tutorial for generate my .crt and .key - ...
1
vote
1answer
723 views

Cannot Remote Desktop to Windows Small Business Server 2011

We have a server running Windows Small Business Server 2011 Essentials. It is the only server on the domain and runs Active Directory and is the Domain Controller. It also manages the firewall and ...
0
votes
0answers
256 views

Nginx rules for http and https routes

I use arch Linux and trying to use secure routes for a laravel(php framework) based blog. I am trying to get both "HTTP" and "HTTPS" routes for logged in areas work with nginx with Virtual Hosts ...
175
votes
11answers
44k views

Is it bad to redirect http to https?

I just installed an SSL Certificate on my server. I use a web hosting panel called ZPanel that is an open source project. It then set up a redirect for all traffic on my domain on Port 80 to ...
0
votes
1answer
199 views

How do I set up Apache HTTPD as a proxy service for HTTPS?

I am trying to set up a proxy service for a packaging service (npm and bower.io) and I’d like to cache the packages locally. My Apache configuration: Listen 127.0.0.1:10010 Listen 127.0.0.1:10011 ...
0
votes
1answer
580 views

Opscenter 4.0.2 and Cassandra 2.0.4 with SSL and Auth : agent can't connect

I setup cassandra with inter-node SSL and client-to-server SSL and basic password auth. No problem using cqlsh or python to connect to cassandra with any certificate as certificate_validation is ...
-6
votes
2answers
235 views

How to get public/private key from cacert.pem [closed]

i has download cacert.pem from internet, but how to get cacert.key ? How to get public/private key from cacert.pem ?
0
votes
2answers
87 views

Serving image content over https, must encryption strength match that of the main website?

Im looking at migrating my website to https throughout. I have a server responsible for the HTML/PHP, and 4 other servers which serve image content Now clearly all the image servers need to be https ...
5
votes
1answer
2k views

Jenkins won't serve with CA signed certificate

tl;dr Fixed I've been running a Jenkins instance for a while with a self signed certificate, which works fine except the hassle of having to create certificate validation exceptions in browsers. So ...
1
vote
2answers
496 views

Allow connection from localhost to the HTTPS/Port 443 Protocol

We've recently set up a new development server and have been experiencing problems when trying to connect to an API via an instance of SoapClient. I think I've narrowed down the issue to being the ...
1
vote
1answer
810 views

F5 Big-IP and WSS WebSockets

We have a F5 Big-IP load balancer that handles the SSL, so the servers behind it get HTTPS rather than HTTP (SSL off loading). I don't have version handy, but in the login page I can see "Copyright ...
0
votes
1answer
674 views

Apache Serving Wrong Document Root

I have installed SSL on a subdomain of my site. Everything works perfectly, except this strange behavior. If I point my browser at the following locations, these document roots are served: ...
0
votes
1answer
85 views

SSL on Subdomain Only

This should be a super simple setup! I am trying to enable SSL on only a single subdomain. However, when I do this, all of my subdomains and my primary domain end up pointing towards that ...
1
vote
1answer
45 views

How to log both HTTP and HTTPS requests to the same file

Using recent Apache on Linux. It's inconvenient to have the two different kinds of requests sent to two different log files since I like to watch the log file scroll by live via the shell. I also ...
0
votes
1answer
61 views

OpenSSL, PostiveSSL Root Authority

I seem to have a problem with my SSL Configuration and was wondering if anyone could help me. I've set everything up correctly (as far as I'm aware) But for some reason when I hit ...
1
vote
1answer
100 views

Configuration of root ssl certificates

I wanted to install an SSL certificate for a domain. So I googled up and did some R&D and found this link https://www.symantec.com/page.jsp?id=roots. It says we can download and use without any ...
-1
votes
1answer
162 views

Heroku Zerigo DNS Godaddy SSL

I have posted the question on stackoverflow. Someone was kind enough to down-vote and advised to post in here. I'm hoping i'm in the right place. I have followed instructions on the following 2 sites ...
0
votes
4answers
94 views

One SSL certificate for various subdomains

I have a SSL certificate setup for a domain e.g www.abc.com, this domain is customer facing. On the same server (linux) I want to setup a subdomain that is private for site admin, admin.abc.com. As ...
0
votes
1answer
196 views

Apache + Rails: How I change my SSL port from 443 to 8079?

I'm currently in the process of trying to change my Rails app to use port 8443 for SSL (or 8079 if 8443 is used) instead of 443. This is my ports.conf file: NameVirtualHost *:80 ...
1
vote
1answer
100 views

Redirect browsers that don't support SSL cipers\suites

I'd like to redirect clients that use old browsers to a page that instructs them to download a newer browser. by "old" browsers I mean - browsers that don't support certain ciper suites \ ssl ...
0
votes
1answer
27 views

How can I get HTTPS working with this particular site?

I am trying to make an SSL wrapper to a website (and eventually redirect all HTTP requests to the HTTPS domain), on a Saucy EC2 instance. Right now Apache restarts without reported error, and it ...
1
vote
1answer
155 views

IIS8 and ARR 3.0 using different SSL certificates

We would like to use our expensive company named SSL certificate on the ARR load balance server and rewrite URLs to the content (web)servers which will use a general wildcard SSL certificates. Is this ...