SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

2
votes
3answers
528 views

Multiple wildcard certificates for same common name on different servers

We've recently ventured into the cloud for hosting a number of websites. On our on-premise hosting we're using a wildcard certificate for a number of websites, and we want to do the same for our ...
0
votes
1answer
187 views

Can't set up https access on apache 2 (ssl_error_rx_record_too_long)

I've already looked at a number of how to guides and other posts on server fault but nothing seems to work and in Firefox I always get that same error (ssl_error_rx_record_too_long). I purchased an ...
1
vote
1answer
287 views

Can't remove forced HTTPS redirect from Nginx?

I had originally setup my Nginx configuration to automatically redirect HTTP to HTTPS. Due to my work security policy and Cloudflare integration, HTTPS will not resolve inside my network. I'd simply ...
0
votes
1answer
64 views

Nginx HTTPS config issue for non-wws

I need to configure nginx for one of my rails application to route some pages through SSL but facing problem with configuration. I've a SSL certificate where common name is example.com and my site is ...
2
votes
1answer
216 views

HTTP Strict Transport Security (HSTS), Azure and HTTP Strict Transport Security IIS Module

Question: How do you properly install and configure HTTP Strict Transport Security (HSTS) in an Azure website? Apparently for IIS the method to use is to install this module: http://hstsiis.codeplex....
0
votes
0answers
32 views

Does my SSL cert have anything to do with or say about the symmetric session key?

The answer found on this server fault thread is my jumping off point for this general topic: http://serverfault.com/a/313558 ... and this question can be thought of as a follow-up to that answer. ...
1
vote
1answer
82 views

Certificate common name invalid

I have a webserver and its domain name is foo.com, if I access the site in https://foo.com I will receive the warning from Chomre browser. NET::ERR_CERT_COMMON_NAME_INVALID I searched the web and ...
0
votes
1answer
15 views

IIS 7.5 Redirct from HTTPS

I have multiple websites on my IIS 7.5 with one IP address and a wildcard SSL Certificates installed. Now i want to change the wildcard certificate but i want if the user browse the old https web ...
-2
votes
1answer
321 views

SSL certificate(s) for one domain and one subdomain

I want to add https to my site. I only need domain validation and I want the cheapest possible option. I have: Server 1 - example.com (IP 1.1.1.1) Server 2 - files.example.com (IP 2.2.2.2) Users ...
2
votes
1answer
250 views

Gandi SSL certificate, X509 private key values mismatch

I recently regenerated my SSL certificate, which I purchased from Gandi, using the following command: openssl req -nodes -newkey rsa:2048 -sha256 -keyout server.key -out server.csr This generates 2 ...
1
vote
1answer
86 views

WIldcard SSL Subdomain Not Pointing at Correct DocumentRoot 3

I have the same problem than: WIldcard SSL Subdomain Not Pointing at Correct DocumentRoot but the answer does not help me. I have a Wildcard SSL installed on my Apache server. With HTTP : www....
0
votes
1answer
198 views

Disable cipher suite or change priority in apache based on IP address

I have run into an issue where I need to disable DH cipher suites or change the cipher suite priority only to certain IP addresses in Apache 2.4.7. Reason being is that a system running on JDK7 needs ...
0
votes
2answers
89 views

How to count number of bytes used to by HTTPS handshake

Our application sends relatively large number of small requests (responses < 50 bytes) via HTTPS. I would like to reduce the server bandwidth usage. I want to tell how many bytes is used to ...
0
votes
1answer
175 views

handshake_failure from cloudflare ssl

I'm using FastSpring payment, the problem is when I'm making payment in FastSpring and returning to my website, it's giving me Http notification issue: -- Error -- javax.net.ssl....
1
vote
1answer
215 views

How to mitigate STARTTLS MITM (downgrading and forged certificates) between email servers?

I'm not as technically inclined as most on this site so please keep that in mind. I wanted to learn more about email security so I did some research and everything is according to my understanding, ...
0
votes
1answer
48 views

SSL Architecture Advice Needed

We run a SaaS (software as a service) company where we allow multiple clients to create "sites" within our application. This typically results in the client having a site that is a subdomain of our ...
1
vote
1answer
1k views

SSL with Virtual Hosts Using SNI

I am using RHEL 6, httpd-2.4.10, openssl-1.0.2a and I have setup SNI as explained in http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI Everytime I restart apache I get following message: ...
1
vote
1answer
182 views

All LDAP traffic is being sent on TLSv1.1 not TLSv1.2

I have a kvm server, Centos 6.6 host with 6.6 guests. We run a php based web app that uses LDAP authentication for our clients. We just moved a client to this setup and they are reporting that all ...
0
votes
1answer
400 views

Can't stop www. from redirecting to HTTPS://

My SSL certificate expired recently and I have been trying to disable SSL temporarily until I can get it renewed however something keeps redirecting the subdomain www. to HTTPS:// It's not the ....
1
vote
1answer
315 views

SNI (SSL) support on Facebook built-in browser on Android [closed]

This issue in the Android bug tracker seems to suggest that SNI has been part of the Android OS now for some time so I'm surprised to find that visiting our CloudFlare Flexible-SSL enabled site throws ...
0
votes
1answer
534 views

Port 443 set up SSL on Nginx + Ubuntu + EC2

I've tried everything and I searched Google behind some solution, but can not configure SSL (https) in my Nginx server that is within a Ubuntu 14.04.2 LTS on Amazon EC2. My website works perfectly on ...
4
votes
1answer
839 views

When shoud I use ssl_session_cache paramter in nginx ssl settings

What do I benefit from ssl_session_cache set in nginx.conf when I using https? See here.
1
vote
2answers
549 views

Port 443 “listening” but “not open”

I am running Apache/2.2.15 on Centos 6.6. I have a Verizon router and checked the port forwarding and saw WorkstationName 192.168.1.6 HTTPS TCP Any -> 443 All Broadband Devices Active ...
1
vote
1answer
169 views

Redirect Subdomain That is Not on SSL

I have a SSL certificate that is installed on the server that only covers the domain, not subdomains All traffic is redirected using apache config file When I set up the subdomain to redirect a ...
1
vote
1answer
51 views

CISCO SSL VPN (multiple Sites) [closed]

I'm having a small issues and I'm sure it's NAT related. Our Users connect to SSL VPN in Ft. Worth. We also have a site up in Dallas. There is a current Site to Site connection there with full ...
0
votes
0answers
195 views

CentOS Postfix/Dovecot status deferred conversation with 127.0.0.1[127.0.0.1] timed out while receiving the initial server greeting

Linux Kernel: Linux 2.6.32-504.16.2.el6.i686 on i686 RAM: 6GB OS: CentOS 6.6 Postfix 2.6.6 Dovecot 2.0.9 Relay Host Verizon Stunnel through 127.0.0.1:2525 Webmin 1.750 Virtualmin 4.17.gpl Multiple ...
1
vote
1answer
164 views

Remove www from subdomains in Apache

I have a domain domain.org I am adding SSL, unforunately a lot of subdomain where created as "www.subdomain" and it is way more expensive to create certificate to multiple 3 level subdomains. Is it ...
-1
votes
2answers
72 views

Wildcard SSL cert warning of insecure content across sub domains [closed]

I have a wildcard SSL certificate installed on various servers for different sub-domains. When looking at any pages or other content directly all browsers are happy with the certificate. But if I ...
0
votes
1answer
160 views

Arguments not transfered when nginx rewrite the url to https

I have nginx frontend and tomcat backend. Now I need to encryt the specific url end with .do from client to nginx server using ssl. And js/css could be requsted with http. In order to avoid mixed ...
0
votes
0answers
223 views

Windows Home Server 2011 and SSL certificates

I am running a home server with Windows Home Server 2011 and have set up Remote Web Access and Remote Desktop. I also have a valid SSL certificate from PositiveSSL which is set up on IIS. But whenever ...
1
vote
0answers
453 views

SSL Configuration failed in Apache after moving keys/certs to another machine

I'm in the process of moving my website to another server, and after moving the SSL key and certs and recreating the same Apache config, I encounter the following in the error logs at the time of ...
0
votes
1answer
344 views

Generating a CSR with a Multi-Domain Wildcard SSL [duplicate]

I tried Googling and haven't been able to find anything reliable that shows me how to generate the CSR. I have multiple domains, that I'd like added so I can't use the usual OpenSSL wizard: *.domain1....
0
votes
2answers
128 views

Is it possible to get 'csr' info from SSL certificate in web browser? [closed]

When creating a csr you provide some information about Country,company, email, etc. Then when the certificate files are installed in i.e. apache , you browse to the url and see i.e. in chrome the ...
2
votes
1answer
683 views

How can the HSTS header be added to WebLogic?

Is there an implementation for using the Strict-Transport-Security header to WebLogic? I figure it would be using something in web.xml under <security-constraint> I know how to do this for an ...
2
votes
1answer
630 views

Puppet unable to send facts to Foreman - “tlsv1 alert unknown ca”

I recently updated Katello to 2.2 and Foreman now to 1.8.1, and it appears somewhere in the upgrade that Puppet now cannot contact Foreman: > [root@virt5 ~]# puppet agent --test info: > ...
0
votes
2answers
101 views

NGNIX, SSL Certificates and PC-DSSI 3.1

We are going to have to pass a PCI 3.1 audit for the web application we're currently developing. It's on Amazon EC2 running NGINX under Debian. We're in contact with Symantec for certificates and we'...
1
vote
2answers
4k views

the name of the security certificate is invalid or does not match the name of the site

Our Exchange server has been running with an internally signed certificate for a while. Today I bought a trusted SSL certificate (wilcard) and installed on the server. The certificate is issued to *....
1
vote
0answers
143 views

Not able to take secure LDAP connection using perl NET::LDAPS

I trying to take a secure connection of AD server ( w2k12 ) using perl Net::LDAPs. Steps: $ldaps = Net::LDAPS->new('AD.server.ip', port => '636', verify => 'none', capath => 'W2K12AD-0-...
2
votes
5answers
2k views

slow SSL apache server

I have a problem with a slow Apache server with SSL 256bit cert ab -n 500 https://example.com/ Time per request 29 ms ab -n 500 http://example.com/ Time per request 10 ms 52 Bytes is sent in both ...
2
votes
2answers
1k views

Fix logjam vulnerability in courier

The site weakdh.org explains how to fix postfix against the weak Diffie-Hellman attack called "logjam". But don't I have to fix courier too? Or do I have to migrate to dovecot to be logjam-safe?
2
votes
1answer
82 views

Key management for HAProxy instances in OpsWorks

I'm trying to use client certificate verification in an OpsWorks HAProxy instance. The question I'm running into, and it's probably a noob issue, is how am I supposed to deploy my ssl private key to ...
1
vote
3answers
2k views

After upgrade Wheezy to Jessie apache 2 SSL stops working

I upgraded server from Wheezy to Jessie, and Apache 2.4 stops working... Especially on port 443 there's no ssl .... telnet myhost 443 GET https://myhost <html><meta http-equiv='Content-...
2
votes
1answer
3k views

WARNING: None of the ciphers specified are supported by the SSL engine

I have a working web service running through Apache Tomcat 7 with the following connector element in server.xml: <Connector port="443" protocol="org.apache.coyote.http11.Http11Protocol" ...
2
votes
1answer
980 views

Is a reboot required for SSL V3 disable on Windows? - Poodle exploit

We are trying to disable SSL V3 on numerous windows servers; as a part of it , registries are being updated remotely via script. Problem is lots of reboots are required post registry change. Is there ...
48
votes
3answers
41k views

How to fix 'logjam' vulnerability in Apache (httpd)

Recently, a new vulnerability in Diffie-Hellman, informally referred to as 'logjam' has been published, for which this page has been put together suggesting how to counter the vulnerability: We ...
0
votes
1answer
3k views

Firefox users get sec_error_bad_signature over HTTPS

We've had a couple of users recently complain about not being able to connect to the HTTPS version of our website (served via Apache) from Firefox. They error they receive is: Secure Connection ...
0
votes
1answer
188 views

How to disable catch-all on a ssl virtual host

My virtual host looks like following: <VirtualHost example.com:443> SSLEngine on SSLCertificateFile /etc/apache2/ssl-keys/example/example.crt SSLCertificateKeyFile /etc/apache2/ssl-keys/...
2
votes
1answer
1k views

SSL broken encryption in Firefox

I have an SSL wildcard certificate installed on a number of servers, in Firefox the padlock is broken citing a issue with encryption. Broken Encryption (TLS_RSA_WITH_RC4_128_SHA, 128 bit keys, TLS 1....
0
votes
1answer
1k views

Connect to websocket server without specifying port

I'm trying to create a secure node.js server without a websocket server on the same port. The port is 8080. I can access the url in the browser and I can connect to websockets when I specify the port....
0
votes
1answer
204 views

FreeRADIUS 3 and Wildcard Certs

I am setting up a new FreeRADIUS server here on campus, jumping from v1 to v3 (I was not here when the original was setup). Things seem to be working fine, but I do not understand how the certificates ...