SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
2answers
277 views

Apache HTTP Not Working When SSL Enabled

I've got a very bizarre problem in that after enabling SSL support in Apache I'm only able to access my site via SSL and not through http as well. I can confirm that Apache is definitely listening on ...
1
vote
2answers
288 views

OwnCloud RSA certificate configured for SERVER- ISSUE, webpage has a redirect loop [closed]

I had Owncloud running on a server that had died, I remember installing being easy, I have migrated server and Owncloud is one of the last apps to install. Ok Just downloaded and installed the newest ...
2
votes
1answer
6k views

Dovecot: no auth attempts in 0 secs (IMAP protocol)

I'm having a lot of problems configuring dovecot ony vps. I'm already able to send email using port 110 and to receive email using port 25, but I can't connect using port 993 and 995. I'm using ...
0
votes
0answers
287 views

Nginx proxy with SSL Authentication

My proxy needs to be mutually authenticated, and the forwarded-to server (in another cluster) needs to be mutually authenticated. Therefore, the proxy needs to forward the request to that server using ...
2
votes
2answers
126 views

How to prevent https:// being accessible from domains without a certificate?

I have this setup Server version: Apache/2.2.22 (Ubuntu) OpenSSL 1.0.1c 10 May 2012 One IP with multiple domains connected to it. For example1.com I have a signed SSL certificate, and thus ...
2
votes
1answer
1k views

Self-signed EV SSL certificate [closed]

I have a ton of testing projects going on in my localhost apache server. I have SSL installed on my localhost. Call me a freak (and I wouldn't mind it because this is totally pointless), but I would ...
1
vote
3answers
1k views

Cannot connect to HTTPS port on Ubuntu

I've installed a new SSL certificate and set up Nginx to use it. But requests time out when trying to hit HTTPS on the site. When I telnet to my domain on port 80 it connects, but times out on port ...
0
votes
1answer
63 views

Share one ssl certificate between multiples vhost

I have a setup like this: <VirtualHost 192.168.1.104:80> ServerName domain1 DocumentRoot /home/domain/public_html ... </VirtualHost> <VirtualHost 192.168.1.104:80> ...
1
vote
2answers
313 views

LDAP over SSL with an EFI Fiery printer

I've got a printer with a Fiery running 8e Release 2. I can authenticate users against AD using the LDAP configuration, but I can only get it to work if I don't use SSL/TLS, and only if I use SIMPLE ...
-2
votes
1answer
93 views

Virtual host, port 443 and ssl issue [closed]

I have a centos server, but I am having some issue regarding port 443 and ssl. my problem is that all domain on my server are accessible from HTTPS port. like when I visit a domain on my server from ...
-1
votes
1answer
28 views

Hosting two HTTPS sites on different ports

I'm trying to host two HTTPS sites. They are the same hostname, but different ports and different certificates. With config like this Apache starts but they both serve the certificate for the first ...
2
votes
1answer
815 views

Installing SSL certs with nginx on Amazon EC2

I finally got a cert from an authority and am struggling to get things working. I've created the appropriate combined certificate (personal + intermediate + root) and nginx is pointing to it. I got ...
1
vote
1answer
92 views

Multi domain server with dedicated SSL's HA

I am hosting a server with 150 domain names (websites), each of the ssl's requere dedicated IP address. So server windows 2008, with 150 IP addressees and 150 websites. I need to have high ...
1
vote
1answer
1k views

SSL Connection Error

I have purchased a comodo ssl cert and have submitted the Certificate Signing Request (CSR) generated by my server to the ssl management site. With the 3 files it returned me with, - ...
5
votes
0answers
2k views

The OCSP server has no status for the certificate. (Error code: sec_error_ocsp_unknown_cert)

Just set up a website (Apache/Centos) with SSL where the free cert came from startssl. I've used startssl before, and never had any problems. I have no problems accessing the site from IE and ...
0
votes
3answers
626 views

Enabling spdy in nginx fails spdycheck.org

I'm trying to enable spdy with nginx 1.6.0 but spdycheck.org is giving me two complaints: And My nginx configuration file is as such: server { listen 80; listen 443 ssl spdy; ...
27
votes
4answers
6k views

How to decide where to purchase a wildcard SSL certificate?

Recently I needed to purchase a wildcard SSL certificate (because I need to secure a number of subdomains), and when I first searched for where to buy one I was overwhelmed with the number of choices, ...
0
votes
1answer
71 views

SSL certificates that work out of the box server side [closed]

I have a GoDaddy SSL certificate and certain other server side scripts are hitting the endpoints. We're stumbling unto the problems fixed by this https://github.com/coolaj86/node-ssl-root-cas, where ...
1
vote
0answers
52 views

Can I pass_proxy over https?

Is it possible to have something like this in my local nginx.conf? pass_proxy https://mybackend.com:443; If not, how do I make my local nginx request and return my remote backend API over SSL?
1
vote
1answer
113 views

Both example.com and www.example.com with SSL

I obtained a free CA certificate from https://www.startssl.com/. I added the domain name example.com, and in the control panel, it shows www.example.com under SSL/TLS Server, and example.com under ...
1
vote
2answers
3k views

Postfix enable SSL 465 failed

I have installed the Postfix and enabled SSL/TLS, just tested, I can sent email from port 25, 578, but cannot sent email from port 465, the log is: May 26 17:24:06 mail postfix/smtpd[28721]: ...
2
votes
0answers
312 views

Clarification of Godaddy UCC SSL on multiple servers [closed]

After reading UCC SSL certificate across multiple machines and IPs I have follow up questions. The first server is running with a GoDaddy UCC SSL. www.exampleA.com I would like to use for ...
2
votes
1answer
200 views

Multiple SSL certs for wildcard domain

I would like to set up an EV SSL certifcate for a few subdomains like blog.domain.com and www.domain.com. I also need to set up a wildcard PositiveSSl cert for *.domain.com, excluding blog.domain.com ...
2
votes
1answer
5k views

FortiClient (Windows 7 32 bit) shows 'connected' for an SSL VPN connection but can't ping the remote server

I am trying to connect to a remote server through FortiClient for an SSL VPN connection. When I connect through the FortiClient (version 4.3.5.472) on my windows 7 32-bit system, it shows connected. ...
0
votes
3answers
310 views

Strict SNI matching for Apache

I have multiple SSL vhosts and non-SSL vhosts served from a single server. If one of the non-ssl vhosts is accessed using "https", the first SSL directive is used. Is there some setting to make it so ...
1
vote
2answers
1k views

nginx as ssl reverse proxy for wildfly

I am trying to setup nginx to be reverse proxy for wildfly 8.0.0.Final. Part of my configuration file for HTTPS redirect: location /console { include conf.d/proxy.conf; proxy_pass ...
0
votes
1answer
82 views

NGINX SPDY client differentiation/determination

I'm having a question about determining if a client is capable of SPDY or just SSL. I'm having a setup of a NGINX load balancer and a few Apache backend servers and I'd like to redirect SPDY capable ...
4
votes
1answer
2k views

Having problems setting up SSL with Nginx

I'm trying to setup SSL(0.9.8e) using Nginx(1.2.3) on a Windows 7 machine. I've generated a self-signed certificate that is needed, so I have a key and a certificate file. When trying to start Nginx ...
4
votes
1answer
787 views

Renew an IIS 8 SSL certificate when it is in the “Web Hosting” store

I have a working IIS 8.0 server (on Windows Server 2012) that has a working SSL installation. The certificate is due to expire in a few days, so I am trying to renew it. When I try to create a ...
0
votes
0answers
65 views

SSL warning appears only to some devices

I have godaddy ssl certificate for domain.There wasn't any problems with my SSL certificate and visiting my domain(Haven't receiveed any errors), but couple times(two weeks ago) when I visited site ...
3
votes
2answers
2k views

SSL Certificate errors in Captive Portals

Situation: Hotel guests attempting internet access via our captive portal. Problem: Google, Yahoo and now more and more sites redirecting all home pages to HTTPS so guest gets a Certificate error when ...
0
votes
0answers
25 views

Should I completely rebuild my server due to Heartbleed? [duplicate]

I have a CentOS 6.5 VPS server... $ uname -a Linux mary 3.14.4-x86_64-linode40 #1 SMP Tue May 13 12:25:05 EDT 2014 \ x86_64 x86_64 x86_64 GNU/Linux When the news about the Heartbleed ...
1
vote
0answers
563 views

SSL Returning Blank Page, No Catalina Errors

This is my second, maybe third, time configuring SSL with Tomcat. Earlier I had created a self signed, which worked, and now using my signed is proving fruitless. I am using Tomcat, operating from ...
1
vote
2answers
1k views

Do I need wildcard SSL for the www subdomain

I own example.com, example.net, and example.biz. I use Apache to rewrite example.net and example.biz to example.com. Based on this rewriting, it is my understanding that I would only need a ...
0
votes
1answer
74 views

CGI scripts are not working on lighttpd with SSL

CGI scripts worked perfectly, while I was using HTTP. Then I set redirecting for all traffic through https and now CGI doesn't work at all (404 - not found). I use lighttpd server. Here is the part ...
0
votes
1answer
149 views

PCI compliance and SSL certificates on a CentOS VPS [closed]

looking for a bit of advice please. We've been battling with a PCI compliancy project for the last couple of days and we've managed to eliminate most of security warnings. What we're left with now is ...
0
votes
1answer
78 views

ssl address mismatch on purchased ssl cert [closed]

i've bought a "Protect 1 Website" ssl from godaddy http://www.godaddy.com/ssl/ssl-certificates.aspx , and requested and downloaded a cert for domain "example.com", but when i access dev.example.com, ...
3
votes
1answer
1k views

SNI error over SSL on some Android devices

I am getting an SNI error: Hostname X provided via SNI, but no hostname provided in HTTP request On some Android phones when making SSL requests to my domain. This is despite ensuring that the Host ...
2
votes
1answer
576 views

Nginx, setup https

I'm trying to setup https on my ubuntu server with NGINX ver 1.4.7 and Phusion Passenger 4.0.41. I created .key and .csr using these two commands sudo openssl genrsa -des3 -out server.key 2048 sudo ...
1
vote
1answer
336 views

Issuer Subject Policy in Self-Signed CA Certificate

When I build a self-signed certificate for an internal CA, should I make the issuer DN match the DN in the request, should they be different, or is there no convention for one or the other?
0
votes
2answers
56 views

Best Practices for migrating SSL web applications to a different server

Migrating some Tomcat/Apache applications from Mac OS X to Linux (RHEL 6), and was wondering what the best practices are for using the existing SSL certs. This migration is not a one to one, meaning ...
0
votes
0answers
2k views

Encrypted Alert Error 21 Wireshark SSL 3.0 error

I continue to receive schannel errors in the event log on an exchange server using outlook web access (OWA). From the capture I took during one of these schannel errors I see IP address 65.55.53.190 ...
1
vote
0answers
486 views

Configure custom SSL certificate for RDP on Windows Server 2012?

I have been trying to get an installation of Remote Desktop Services deployed using Server 2012. I have now run into a problem where I need to use a certificate other than the self-signed cert from ...
4
votes
0answers
3k views

SSL verification error with git (on github) on Ubuntu 14.04

I'm trying to clone the atom repository that just went fully open-source and I've run into some trouble. Attempting to git clone the repository is producing an SSL error: wug@wugputer:/src/test$ git ...
1
vote
4answers
128 views

Preventing SSL access to an Nginx Server

I have a server that runs multiple virtual hosts. Some of those sites have SSL components and others don't. Today I noticed that if I try to access one of the non-SSL sites via https, Nginx just finds ...
0
votes
1answer
108 views

Why do we need to list our CAS servers as SANs in Exchange 2010's UCC certificate?

We currently have a few CAS/Hub servers behind a hardware balancer. We were told by Microsoft and Digicert that we may not need them listed as SANs in our UCC cert since we do not publicize their ...
11
votes
1answer
187 views

Find out how many browsers reject SSL certificate

I'd like to find out how many browsers reject our SSL certificate when making HTTP requests to our webserver. We're using a free CA which now seems to be recognised by most modern browsers, but I'd ...
1
vote
1answer
44 views

there is no certificate installed on this server

I want to secure a remote desktop connection using ssl. I provided a CA server, created a self-signed certificate, and then I installed that in remote server. When I tried to assign a certificate to ...
2
votes
1answer
122 views

What determines how long an SSL session is valid

HTTP(S) is stateless, right? But if I go to some site via HTTPS, I assume I don't need an SSL handshake for every single page request. Is it a combination of SSL session cache and cookies?
0
votes
2answers
346 views

How can I make Nginx drop SSL requests from wrong domain?

So I've got a server with a single IP and a lot of websites, all hosted under nginx. Here's a very simplified reduction of my actual setup: server { listen 80; listen 443 ssl; server_name ...