SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
1answer
4k views

Page can't be displayed with IIS and SSL

I have a single site hosted in IIS 8. I have two site bindings. One is for HTTP, the other is for HTTPS. HTTP is on port 80 with All Unassigned addresses, I left host name blank. HTTPS is on port 443 ...
0
votes
0answers
7 views

Disabling TLS1.0 in mod_proxy

We are using apache http server 2.2.29 and jboss 6.4. We are using Mod proxy for communication between web server and jboss application server. We are planning to disable TLSv1.0 in mod proxy ...
1
vote
1answer
2k views

Weblogic Mitigate POODLE vulnerability after upgrade and still use CBC ciphers

I recently upgraded my Weblogic server to 10.3.6 with java 7. So with that I have TLS1.0 - TLS 1.2 enabled via the setEnv.sh. Some of the ciphers I am using to make sure that they are compatible (...
0
votes
1answer
26 views

[SOLVED]: HTTPS access to phpmyadmin DOWNLOADS INDEX.php instead of opening phpmyadmin

When I open phpmyadmin without encription, everything goes fine. however, if I switch to https, the browser downloads the index file. apache 000-default.conf as <VirtualHost *:80> ...
4
votes
2answers
4k views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.example.org port 636 with the ssl checkbox. This is on the local server itself. ...
12
votes
2answers
40k views

what is .crt and .key and how can I generate them?

SSLEngine on SSLCertificateFile /etc/httpd/conf/login.domain.com.crt SSLCertificateKeyFile /etc/httpd/conf/login.domain.com.key SSLCipherSuite ALL:-ADH:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP
0
votes
1answer
13 views

Composer is having ssl issues with private repository on osx

there are many similar questions but nothing that helps my cas. We are using a custom self hosted composer repo, for internal libraries. It all worked perfectly fine untill we updated the SSL ...
0
votes
1answer
59 views

Enabling SSL in MySQL when using Windows as a server and client

I wanted to enable SSL on the connections to my MySQL server that I installed in a Windows machine, so I googled "use ssl mysql windows". The first result is this simple and straightforward guide. ...
3
votes
1answer
5k views

Add SSL certificate after curl error: “unable to get local issuer certificate”

I'm trying to access a partners SOAP API, for that goal I made a CSR and received a CRT. I've made a PEM file with my key and the CRT: cat mycert.crt mykey.key > mycertandkey.pem When I try to ...
1
vote
1answer
412 views

IIS bindings keep being removed

I'm having a problem where the security certificate for a site is being periodically unbound from port 443 and replaced with another certificate which is sitting on the server. So whenever a user ...
0
votes
0answers
18 views

Is Apache Basic Auth w/ SSL “good enough” from a security standpoint?

Is using Apache Basic Auth with enforced SSL good enough to secure internal-only sites that must be publicly accessible? I know that there are more advanced Apache authentication protocols such as ...
2
votes
1answer
4k views

Unknown SSL protocol error in connection to rubygems.org:443 from Ubuntu

I ran into this problem on two Ubuntu 12.04 instances using kernel 3.2.0-54 after upgrading to the latest OpenSSL with the Heartbleed fix. Connections to some servers over HTTPS that never timed out ...
0
votes
1answer
23 views

How can i resolve this SSL report score?

Report: The server is vulnerable to the POODLE attack. If possible, disable SSL 3 to mitigate. The server supports only older protocols, but not the current best TLS 1.2. The server accepts RC4 ...
1
vote
2answers
37 views

Scalable way to install SSL certificates without downtime

We have a SaaS application that allows customers to use their own domain – pretty typical. At its core, the architecture has a simple catch-all virtual host (apache) and the software does the work of ...
3
votes
2answers
533 views

How to use/debug Debian preseed with SSL using Startssl Certs

preseeding work perfect for me using: auto url=http://mydomain.com/preseed.cfg but as soon as i use a https connection, it doesn't work any more. auto url=https://mydomain.com/preseed.cfg with ...
0
votes
1answer
68 views

How to redirect two domains, with/without https, to one https site?

I'd like to do the following: using Apache, redirect all of the following URLs: http://example.com http://www.example.com http://beta.example.com https://example.com https://www.example.com https://...
0
votes
0answers
19 views

DELLs iDRAC integrated VNC Server not working with encryption enabled

since I allready posted on two GitHub Communitys about this issue, I will try to keep this as short as possible. The GitHub Postings are added for reference at the end of the post. Im trying to ...
0
votes
0answers
18 views

HAproxy ssl re-encryption and http header modification

I want to use my Haproxy 1.6.5 as Https load balancer before my https servers but I stuck with a problem of misunderstanding . I want this behaviour: haproxy is available as https://example.com but ...
17
votes
9answers
40k views

How do I disable SSLv3 support in Apache Tomcat?

I am trying to reconfigure my Apache Tomcat server to only use TLSv1. However, it is still falling back to SSLv3 using certain browsers. I setup the <connector> tag with the following settings: ...
2
votes
1answer
23 views

It´s possible to use a wildcard SSL certificate in SFTP/SSH connection?

I have a wildcard SSL certificate, *.mydomain.com, private, public Keys, pem/key file, certificate, etc. I have a SFTP/SSH Server based on MySecureShell to share and get some data using FTPS with ...
1
vote
2answers
1k views

NGINX SSL Certificate Not Working

I've been working on SSL stuff and getting nowhere from like 4 tutorials... I've bought an SSL for pingrglobe.com, and now trying to apply it to my servers. Here's my nginx code: http { ...
1
vote
0answers
44 views

haproxy with SSL in front of apache for local development

I work on a web app that regularly makes AJAX calls to a REST server that (in production) is accessed via the same domain. While developing locally, I have been redirecting REST calls to a dev server ...
3
votes
1answer
8k views

Handshake violation when trying to access one website

I have a TZ 190 Wireless Enhanced with SonicOS Enhanced 4.2.1.0-20e. Yesterday, people could access without any problems a bank website wich uses HTTPS. Today, it is imposible to access only that ...
0
votes
1answer
14 views

Are nodejs apps with proxy that has SSL certificate still secure?

I wrote a node.js app to deal with processing forms on a business's website. These forms can contain sensitive information so I knew it needed an SSL certificate. Since I didn't want to serve my node ...
1
vote
2answers
2k views

Unable to configure haproxy with ssl

I want to make my server ssl protected, it has two parts one for website and another for application. to balance them we have used haproxy. Now we want to secure this haproxy. I have installed the ...
15
votes
3answers
14k views

Best location for SSL certificate and private keys on Ubuntu

On Ubuntu, it looks like the best place for a private key used to sign a certificate (for use by nginx) is in /etc/ssl/private/ This answer adds that the certificate should go in /etc/ssl/certs/ but ...
1
vote
1answer
31 views

Using wireshark to determine which RSA PRIVATE KEY SSL conversation?

Situation I have a client VM and server VM communicating using SSL. The client VM runs wireshark capture using CLI Wireshark GUI is running locally on a different machine. Steps As USER on the ...
1
vote
1answer
2k views

ssl_crtd helpers are crashing too rapidly in squid

I am using the sslBump and Dynamic SSL Certificate Generation features of squid, below is my configuration for the sslBump sslcrtd_program /usr/lib64/squid/ssl_crtd -s /usr/local/squid/var/lib/...
1
vote
1answer
2k views

Install SSL Certificate on Azure Cloud Service (VM)

I have an SSL certificate for domain example.com and I want to access my Azure Cloud Service exampleserver.cloudapp.net as https://server.example.com. I am using Virtual Machine to access this Cloud ...
0
votes
3answers
1k views

Issues with SSL key on CentOS

When trying to install a SSL key on my centos server, apache refuses to restart and I see the following errors in my log. [Tue Mar 16 22:32:58 2010] [error] Init: Private key not found [Tue Mar 16 22:...
0
votes
1answer
33 views

Error during openssl s_client connection, SSL alert number 48

I am attempting to connect to a third party via CURL/PHP mainly, but since it doesn't work, am resorting to more verbose tools to diagnose the problem. If I try the following, on Ubuntu 14.04 LTS: ...
2
votes
1answer
1k views

Nginx SSL redirect for one specific page only

I read and followed this question in order to configure nginx to force SSL for one page (admin.php for XenForo), and it is working well for a few of the site administrators but is not for myself. I ...
1
vote
3answers
6k views

How to use SSL certificate on my web-site?

I'm new to SSL, but my php web-site will contain secret information from users. I hear that ssl (https) can establish a solid security level. But, how to use it? How to implement it to my html files? ...
1
vote
2answers
4k views

Exchange 2010 POP3/IMAP4/Transport services complaining that they can't find SSL certificate after blue screen

We have a single-server Exchange 2010 setup. In the early hours of this morning the server had a blue screen and rebooted. After coming back up the POP3/IMAP4 and Transport services are complaining ...
20
votes
3answers
28k views

SSL routines:SSL23_WRITE:ssl handshake failure

I'm trying to use OpenSSL to connect to an SSL server. When I run: openssl s_client -connect myhost.com:443 The following SSL client configurations work just fine: Windows (OpenSSL 0.9.83e 23 ...
15
votes
6answers
35k views

php - error: Cannot find OpenSSL's <evp.h>

Im trying to recompile PHP, but ./configure fails at : configure: error: Cannot find OpenSSL's <evp.h> I have LibSSL 1.0.0, LibSSL 0.9.8, LibSSL-Dev, OpenSSL installed. --with-openssl=/usr/...
0
votes
1answer
35 views

SSL on some virtualhosts complains about wrong domain name

So I recently ran into this problem and want to describe the issue and the solution here: I have several virtualhosts on a httpd server and started to install letsencrypt SSL certificates on it via ...
0
votes
1answer
1k views

Nginx: Disable gzip-compression for http only

Because of the BREACH vulnerability I'd like to disable gzip compression for TLS traffic, but not for regular HTTP traffic. I could split up every Nginx server section into two separate TLS- and non-...
0
votes
2answers
82 views

Need SOCKS Solution

I need a SOCKS/Proxy server that is capable of using SSL certs. Additionally, I want it to ONLY be able to connect to 2 domains. User authentication is not mandatory.
0
votes
1answer
22 views

Disabled RC4 and SSL v3 with existing cert from letsencrypt

I can renew a cert like this: certbot-auto renew --apache but what parameters do I pass when I want to disable the less secure RC4 and SSL v3? I would assume the information I need is here, but I ...
2
votes
1answer
29 views

What version(s) of SSL/TLS does Active Directory support?

I'm running a pair of 2012R2 RODCs behind a load balancer for authentication for certain applications (mostly on Linux). LDP.exe works fine for lookups, but we're having an issue with Postgres where ...
0
votes
1answer
28 views

Kafka acl without kerberos

I'm trying to set up a single kafka server with certificate authentication and access controls based on those certificates without the bother of setting up a kerberos service. Setting upp the ...
0
votes
1answer
53 views

Nginx upstream block nondefault port

experts. I am trying to configure nginx/1.10.0 for upstream to 2 https web servers on non standart port with ssl termination. Here is my current website setup in sites-available/ upstream backend {...
1
vote
1answer
1k views

Exchange TLS Receive Connector Cert

We are using Securence incoming filtering in front of our Exchange 2010 server. It's basically a spam filter. I'm trying to get TLS communication between Securence and our server on incoming ...
-1
votes
0answers
31 views

How to connect to Softether via VPN over SSL?

I've configured a softether vpn server to listen on port 443 & I need to connect to it via VPS over SSL in android, but I could not find any suitable application for this purpose. In addition, ...
3
votes
1answer
1k views

Specify a SHA-1 or SHA-2 cert depending on client abilities

With SHA1 certs being deprecated by major browsers it seems wise to get a SHA2 signed cert. But in doing so you will be locking out IE6 users. While for most people this won't be an issue in some ...
1
vote
1answer
15k views

SChannel errors after enabling SSL on a Windows Server 2012 R2

I have a Windows Server 2012 R2 instance on Azure. For a new website I have ordered a certificate by GlobalSign. After getting the certificates from them I have completed the certificate request in ...
1
vote
1answer
2k views

Configuring client certificates on IIS8 - Error 403.16

I am trying to implement client certificate authentication on IIS 8. I have deployed my configuration on a development machine and verified it working as expected there. However after setting up on ...
0
votes
0answers
22 views

Right way to configure ejabberd ssl

I have XMPP server on ejabberd. Ejabberd works well for a long time. Now I trying to add SSL support to ejabberd. My domain is like "sub.domain.org". DNS configured to link XMPP to host "jab.sub....
0
votes
1answer
145 views

Apache SSL reverse proxy with two name virtual host

I have an Apache reverse proxy that correctly proxies an https internal server. It is configured to use a wildcard self signed certificate and to be a name-based virtual host with ServerName directive....