SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

4
votes
1answer
4k views

IIS7 SSL Cert replaced, still sending old expired cert to browser

Previously I had a SSL Cert from another company. It expired last night. I purchased a new one this morning, deleted the first one from the server under "Server Certificates" and created a new ...
3
votes
1answer
2k views

Trying to install SSL: Private key does not match certificate

I am trying to reinstall SSL on a domain where the previous certificate expired. I have removed the old certificate and I am attempting to install the new certificate I purchased from NameCheap in Web ...
1
vote
0answers
51 views

Disable SSL3 on tomcat4

I have a very old web application that uses tomcat4. B/c of the poodle vulnerability I need to disable SSL3 and disable a bunch of weak ciphers. My connector looks like this, but apparently ...
1
vote
2answers
2k views

Exchange 2010 POP3/IMAP4/Transport services complaining that they can't find SSL certificate after blue screen

We have a single-server Exchange 2010 setup. In the early hours of this morning the server had a blue screen and rebooted. After coming back up the POP3/IMAP4 and Transport services are complaining ...
0
votes
2answers
185 views

google recaptcha V2 on apache shared server: How to get it to work with SSL

I implemented google's reCAPTCHA V2 on non-https apache shared server and it worked 100%. I then changed the protocol to my shared server with SSL using the same script as the non-SSL script. The ...
0
votes
1answer
43 views

Dovecot configuration

I was setting up a mail server on Amazon EC2 using postfix and dovcot and I seem to be stack on starting up dovecot service. Here is the message i got when I run Service dovecot status dovecot ...
3
votes
2answers
87 views

One WebSite, Two IP Addresses, One SSL EV cert per IP

I have a website in IIS and two different IP addresses on that server. I want to be able to assign a separate SSL certificate to the same site on IIS with the other IP address. Something like this: ...
0
votes
0answers
18 views

how to check which forward secrecy cipher is enabled in tomcat 6.0.28 while I use TLSv1.0 protocol?

I am using tomcat 6.0.28 and using TLSv1.0 ssl protocol only. I have configured ciphers as ...
1
vote
2answers
34 views

What apache VirtualHost configuration will serve one and only one domain over SSL?

I have multiple domains (example1.com, example2.com, ...) hosted on the same IP. One of these domains (example3.com) has an SSL certificate and I want to serve it over HTTPS, while keeping all the ...
1
vote
1answer
55 views

Nginx Server Blocks: https, non-www, & non-ssl subdomain

Here's my scenario: Two sites: https://example.com http://dev.example.com Site 1 has a ssl certificate. Site two does not. (In other words, I don't have a wildcard ssl certificate.) With ...
2
votes
1answer
1k views

Connection problem between redmine and svn

I have server controlled by Debian 6.0. I installed and configured redmine some time ago, and now configured svn server. Now i'm trying to configure redmine to be able to view svn repository. URL ...
8
votes
2answers
18k views

Replace old SSL certificate in IIS6

I have to update my SSL certificate for IIS6 on Windows 2003 Server. The vendor (Thawte) tells me that my Certificate Signing Request is non-resignable, which I take to mean that I need to generate a ...
0
votes
0answers
8 views

WL-Proxy-SSL / X-Forwarded-Proto in WebLogic

How do I configure my WebLogic server or WebLogic application to use this header coming from a proxy, when requesting the base URL from a class using JAX-RS? I prefer not to have my application have ...
1
vote
2answers
101 views

Apache2 has errors while starting after reinstalling SSL Certificate?

I recently purchased and set up a VPS, and one of the first steps I took was to purchase and install an SSL Certificate. I had issues getting everything set up, but after quite a bit of research and ...
0
votes
2answers
901 views

SSL Setup Apache Centos

When i add SSLEngine on into my vhost setup apache wont start... Any help would be great. I am doing the following the following to setup SSL on my server: yum install mod_ssl openssl ...
0
votes
3answers
775 views

SSL chain verification problems

I've installed a new SSL certificate using SHA2 hashing instead of SHA1. My chain checks out using these online verifiers: http://www.sslshopper.com/ssl-checker.html http://www.digicert.com/help/ ...
0
votes
1answer
103 views

Squid, WCCP and Transparent HTTPS

Sorry if this has been answered but i just can't get it to work for me. We would like to log all HTTPS & HTTP requests but not to use Squid-in-the-middle. We would like the proxy to connect the ...
-1
votes
0answers
37 views

openssl: How to build the right bundle for godaddy certificate

I can use open ssl and the steps here: http://serverfault.com/a/648367/13716 to: Create a "cacerts.crt" of the godaddy root, intermediate, etc certs (one text file w multiple certs) Build a single ...
3
votes
2answers
78 views

IIS 8 SSL Stops working Windows 2012 Core

Is there any known bug or cause for an IIS server to just stop serving SSL overnight? The certificate has not been changed for some time and is still valid. Same certificate works on other identically ...
-1
votes
1answer
23 views

Apache SSL configuration does not take effect

I configured a site to be served via SSL on my server but it's not available at all. $ nmap localhost PORT STATE SERVICE 22/tcp open ssh 25/tcp open smtp 80/tcp open http My firewall ...
1
vote
1answer
1k views

What kind of SSL certificate do I need for Exchange 2013?

We're running a single domain on a single Exchange 2013 server. I'm currently trying to determine what kind of SSL cert I need. Right now I'm unsure why I need a UC (Unified Communications) ...
0
votes
1answer
26 views

To serve SSL, does the web server need outbound internet access?

I am having a problem with intermediate certificates, and wonder: Could the problem be (that clients report an intermediate cert is missing), be the result of my web server having zero outbound inet ...
-3
votes
0answers
43 views

Start Apache with Passphrase [duplicate]

How can I start my apache2 service with SSL key? I want a single line command for the same,like sudo service apache2 start --passphrase="--my_passphrase_" Are there any suggestion?
2
votes
1answer
2k views

FortiClient (Windows 7 32 bit) shows 'connected' for an SSL VPN connection but can't ping the remote server

I am trying to connect to a remote server through FortiClient for an SSL VPN connection. When I connect through the FortiClient (version 4.3.5.472) on my windows 7 32-bit system, it shows connected. ...
0
votes
1answer
42 views

Client Cert Auth

I would like to setup Client Certificate Auth with my tomcat. I've configured the webapp for this auth and this is my tomcat config. I'm using Windows PKI for my certificates so I have pfx files. The ...
7
votes
3answers
6k views

Is STARTTLS more safe than TLS/SSL?

In Thunderbird (and I assume in many other clients, too) I have the option to choose between "SSL/TLS" and "STARTTLS". As far as I understand it, "STARTTLS" means in simple words "encrypt if both ...
1
vote
1answer
2k views

Unknown SSL protocol error in connection to rubygems.org:443 from Ubuntu

I ran into this problem on two Ubuntu 12.04 instances using kernel 3.2.0-54 after upgrading to the latest OpenSSL with the Heartbleed fix. Connections to some servers over HTTPS that never timed out ...
2
votes
1answer
34 views

How to add an existing key to the certutil key database

I have created an SSL keypair with OpenSSL. I uploaded the Certificate Signing Request to my SSL Certificate provider and got my certificate files. I added my certificate and the required CA ...
2
votes
3answers
1k views

SSL URL gives a 404

I have recently created an SSL cert on my server *.key and a *csr file. I then created the *crt and the *.ca-bundle with Comodo. I have 2 current vhosts: vhost for - http://www.example.com ...
-3
votes
0answers
45 views

How to install a SSL certificate on Ubuntu Server?

I need to make the connection between my origin server and CDN (Akamai) secured. I generated and installed a self signed certificate at my origin server (which hosts www.something.com.au) using the ...
0
votes
0answers
19 views

Site functionality diminished over VPN/company network

We currently experience a diminished with one of our customers at our main production site. All subpages and resources seem to be affected as well. The customer reports a completely broken ...
0
votes
2answers
66 views

RapidSSL: domain name does not match the certificate common name or SAN

I'm installing SSL certifcate (RapidSSL) on Amazon AWS (Load balancer). Installation was already completed, but when I test it I get: Wrong certificate installed. The domain name does not match the ...
0
votes
0answers
57 views

Allow Google apps and block consumer Google accounts using squid proxy

In my organisation, I am trying to allow the Google apps account and block consumer Google accounts using squid proxy. According to this link, Google says we can do it using following steps: 1. ...
1
vote
2answers
178 views

LDAP over SSL with an EFI Fiery printer

I've got a printer with a Fiery running 8e Release 2. I can authenticate users against AD using the LDAP configuration, but I can only get it to work if I don't use SSL/TLS, and only if I use SIMPLE ...
2
votes
1answer
2k views

Clearing Java certificates cache (force reload certificates)

A simple question here. One application gave me this exception when trying to access a website with a expired certificate: java.security.cert.CertificateExpiredException So, I renewed the ...
0
votes
0answers
290 views

How to enable Forward Secrecy with mod_nss in apache2?

I use apache2 on a SLES box and have configured SSL via mod_nss (because the standard mod_ssl is not able to provide TLS 1.1/1.2 due an old and not up-gradable openssl <1.0 package in SLES). How ...
1
vote
1answer
2k views

Squid SSL bump with parent proxy

Does SSL bumping work with parent proxy? squid and pf are set up like this: squid.conf: http_port 3128 intercept https_port 3129 intercept ssl-bump generate-host-certificates=on ...
0
votes
2answers
419 views

Does LVS ldirectord Load Balancer support SSL termination / offloading?

I use a ldirectord setup for load balancing a couple of real servers and for the HTTPS conenctions I am considering using some offloading mechanism on the LB - is there some functionality already ...
0
votes
1answer
877 views

CentOS Apache + Tomcat SSL using mod_jk

I have Apache + Tomcat (using mod_jk) working correctly on a CentOS 6.3 machine. I am trying to set up SSL with Apache. When I browse to the site I get the following output: Forbidden You don't ...
2
votes
1answer
30 views

Dovecot SSL Certificate is not accepted

I have certificates issued from StartSSL, which is a trusted authority for certificates, and my websites work with its certificates with no problems and no complaints from all browsers about any trust ...
-2
votes
0answers
58 views

Why my server responds with outdated ssl certificate, even after removing certificates?

I have a RackSpace VPS with nginx and a domain on GoDaddy. Previously I had ssl certificate from GoDaddy connected to my domain. Now, some time after the certificate expired, I have a new ssl ...
1
vote
0answers
75 views

IIS Site breaks after disabling SSLv3

I am trying to disable SSLv3 on a 2008 R2 web server that runs IIS 7.5 but as soon as I disable SSLv3 and reboot, the website is no longer reachable. I ran a packet capture with SSLv3 still enabled ...
1
vote
2answers
1k views

LDAPS being redirected to 389

We're trying to perform an LDAPS bind to a server which blocks 389 with a firewall so all traffic must travel over 636. In our test lab we're connecting to a test ldap (located on the same server) ...
0
votes
2answers
993 views

Installing SSL certificate on JBoss

I have a server that runs JBoss. When I type bad URL to that server it gives me version like this: JBossWeb/2.0.1.GA - what version of JBoss that would be? A SSL certificate will be bought and ...
0
votes
1answer
30 views

Where do I find the SSL configuration for a tomcat 6 web server?

I've inherited a small secure web application that runs on a single Tomcat 6 web server on a machine running Amazon Linux. I need to disable the SSLv3 fallback, but I just can't find where the HTTPS ...
1
vote
1answer
30 views

nginx and SSL redirect

I have a nginx server which I use as a proxy. I want to have all requests forwarded as normal http requests, expect request to api.mydomain.org, those request I want to run with ssl/https. This works ...
-2
votes
0answers
31 views

Why is this SSLerror coming on sending request to any subdomain like sandbox.example.com? [migrated]

>>> import requests >>> requests.get("https://api.example.com/index.php") <Response [200]> >>> requests.get("https://sandbox.example.com/index.php") Traceback (most ...
-6
votes
1answer
36 views

Verify HASH value of certificate [closed]

How can I verify Hash value of a certificate I get from a website using openssl? Say for example or facebook.com.
-2
votes
1answer
25 views

EV Certificate on browser [closed]

How does the browser recognise that the presented certificate actually is an EV certi cate? I went through this article but I couldn't figure out any thing for sure.
1
vote
1answer
4k views

Handshake violation when trying to access one website

I have a TZ 190 Wireless Enhanced with SonicOS Enhanced 4.2.1.0-20e. Yesterday, people could access without any problems a bank website wich uses HTTPS. Today, it is imposible to access only that ...