SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

4
votes
3answers
580 views

View the SSL certificate of a page that immediately redirects to another

So I've googled quite a bit for this but it appears that my google-fu fails me - apologies if this is a trivial and already answered question, I could not find anything about this I'm trying to ...
2
votes
1answer
2k views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.name.org port 636 with the ssl checkbox. This is on the local server itself. ...
0
votes
1answer
51 views

What would be a less-known SSL certificate attribute to look out for? [closed]

I'm looking for a simple domain SSL certificate for our company's website and I'm a little confused. A lot of them seems to offer the exact same features, yet at price ranges going from 5$ / year to ...
-3
votes
1answer
22 views

which port is used on nagios check_nrpe, is the ssh connection is must between nagios master and client server

I have configured the nagios master server and nagios client servers, still after lot of debugging i couldn't achieve the communication btwn these two :( i am getting this generic error CHECK_NRPE: ...
3
votes
1answer
368 views

sendmail rejecting some connections with handshake failure: SSL alert number 40

My sendmail server on CentOS 5 started to reject some connections with the following message logged: error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:s3_pkt.c:1092:SSL alert ...
12
votes
2answers
26k views

How to enable TLS 1.1, 1.2 in IIS 7.5

We want to support web browsers utilizing TLS 1.1 and 1.2, which has been apparently implemented by Microsoft, but is turned off by default. So I went searching on Google and discovered some pages ...
1
vote
1answer
16 views

SSL configuration for Intranet/VPN site

We've got a web site in development, that is to be used internally within our intranet, but also used externally by one client that will be accessing it via VPN. As far as Certificates go, what's the ...
1
vote
1answer
1k views

Apache: redirect to https before AUTH for server-status

I want to force https and basic auth for server-status output (mod_status). If I enable auth and user asks for http://site/server-status apache first asks for pass, then redirects to httpS, then asks ...
3
votes
2answers
303 views

Why does Chrome complain about “obsolete cryptography”?

I am hosting an ASP.NET website with wildcard ssl certificate on IIS / Windows 2008R2. While Chrome works fine with my website and shows a green lock the https connection, the https details mention ...
0
votes
1answer
1k views

what if I lost the keystore which generate the CSR

Sorry I am a beginner about ssl cert. according to http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html#Create_a_local_Certificate_Signing_Request_(CSR) it will gen a keystore and CSR. we ...
0
votes
2answers
1k views

can't install SSL certificate in IIs 7

I tried to install SSL certificate in IIS 7 server (windows server 2008). installation of intermediate certificate in windows mmc console was a success, but when I tried to install the certificate in ...
1
vote
2answers
94 views

SSL will not work on Android mobile

I bought Comodo SSL from Namecheap. Now, the SSL works fine on desktop, I am getting a "This Connection is not private" on mobile phone.. on my chrome on Android Here is my virtual host file: server ...
-1
votes
4answers
91 views

Why are many mail servers using subdomains like mail.example.com?

I'm just setting up dovecat and postfix for the first time and wondering why so many companies are using subdomains for IMAP and SMTP like smtp.mail.example.com and imap.mail.example.com? What are ...
0
votes
1answer
25 views

Apache VirtualHost Multiple Wildcard Domains / SSL

I'm trying to figure out the configuration for the following: Multiple Domains - (example1.com, example2.com, example3.com) Single Virtual Host Wildcard Subdomains (*.example1.com, *example2.com, ...
1
vote
1answer
520 views

HAproxy 1.5 Trusted CAs

I'm trying to get HAproxy 1.5.x to trust any certificate authority already in the trust store of the machine (/etc/ssl/certs) without having to explicitly specify the individual ca-file root authority ...
0
votes
1answer
1k views

ssl_crtd helpers are crashing too rapidly in squid

I am using the sslBump and Dynamic SSL Certificate Generation features of squid, below is my configuration for the sslBump sslcrtd_program /usr/lib64/squid/ssl_crtd -s ...
1
vote
2answers
2k views

Disabled SSLv3 to combat Poodle now cannot connect to SQL “Connection forcibly closed by remote host”

I have disabled SSL3 on my web server to combat the Poodle Vulnerability and now I am unable to connect to my SQL server using SQL Authentication. I just get "Connection forcibly closed by remote ...
0
votes
1answer
24 views

AWS ELB SSL and Health Check Issue

I'm getting very frustrated trying to sort this issue out. We have an AWS environment that uses SSL certificates at the load balancer. We also have a rewrite rule in httpd.conf that redirects all ...
17
votes
2answers
14k views

SSL Certificate Location on UNIX/Linux

Is there any standard or convention for where SSL certificates and associated private keys should go on the UNIX/Linux filesystem? Thanks.
-1
votes
3answers
25 views

HTTPS url Works - HTTP does not, broken with SSL install

I was recently just installing SSL onto my server / website. Once I finished all the steps, I went to check my website using the https://www.breakwatersurfcompany.com which worked great, however. My ...
0
votes
0answers
27 views

Error using SHA256 certificate for RADIUS server for use with Ubuntu Unifi/Wireless 802.1x 802.11 network

We have an established wifi network with Unifi, setup as wpa2-enterprise with a Windows Server 2008 R2 RADIUS host. Our CA server crashed, which didn't seem to cause any trouble with phones ...
4
votes
2answers
198 views

Google Chrome says my SSL uses outdated security settings but other site tests disagree [closed]

I installed StartSSL on my web server which is running Linux Apache on CentOS 6.5. shaaaaaaaaaaaaa.com said Nice. example.com has a verifiable certificate chain signed with SHA-2. However ...
0
votes
2answers
340 views

Can you install a wildcard SSL and single EV SSL together for the same domain?

I currently have a EV Premium SSL from godaddy.com for www.mydomain.com Is it possible to install a wildcard SSL together with a EV Premium SSL? www.mydomain.com is my main SSL as customers see it ...
1
vote
1answer
32 views

How to bind webmin to one specific domain/vhost? [closed]

I'm running a Virtual Private server with three specific domains. Let's say example1.com, example2.com, example3.com. I installed webmin on this VPS to peform some easy tasks and just to manage some ...
6
votes
1answer
364 views

Does SNI represent a privacy concern for my website visitors?

Firstly, I'm sorry for my bad English. I'm still learning it. Here it goes: When I host a single website per IP address, I can use "pure" SSL (without SNI), and the key exchange occurs before the ...
0
votes
0answers
18 views

Self signed certificates create problems on NGinx/PHP

I just upgraded my Debian 7, Nginx 1.6.2, PHP 5.4.39 to Debian 8, Nginx 1.6.2, PHP 5.6.9. There is a CRM running on that server where we used to send emails via PHP, EspoCRM and that's using ...
35
votes
2answers
14k views

How to fix 'logjam' vulnerability in Apache (httpd)

Recently, a new vulnerability in Diffie-Hellman, informally referred to as 'logjam' has been published, for which this page has been put together suggesting how to counter the vulnerability: We ...
1
vote
1answer
939 views

How add SSL/443 to Apache server without virtual host?

I have an apache server set up on CentOS. I am trying to add SSL. I was able to create the certificate and keys and then updated /etc/httpd/conf.d/ssl.conf to have the following configurations: ...
0
votes
0answers
31 views

Invalid certificate error with IE9 on Win7 and Nginx with multiple virtual hosts

We have an Nginx instance with multiple virtual hosts on the same IP address. nginx.conf has configuration similar to the following: server { listen 443 default_server ssl; server_name ...
1
vote
1answer
1k views

Export SSL Cert from IIS and import into GlassFish keystore

What I need: I have an existing SSL certificate installed on IIS 6. On the same machine, I have GlassFish installed and would like to share the same certificate since they both share the same ...
-1
votes
0answers
26 views

MySQL with Haproxy ssl termination

I have a MySQL server behind a Haproxy server. I want to use Haproxy as a SSL termination proxy. The SSL is correctly configured on Haproxy and the connection is OK. If I test with openssl s_client ...
1
vote
1answer
175 views

How to use SSL Name Based Vhosts without SNI

I need to host a handful of web applications over SSL using name based virtual hosting. Apache documentation indicates this is possible (https://wiki.apache.org/httpd/NameBasedSSLVHosts) if all sites ...
0
votes
1answer
1k views

CentOS Apache + Tomcat SSL using mod_jk

I have Apache + Tomcat (using mod_jk) working correctly on a CentOS 6.3 machine. I am trying to set up SSL with Apache. When I browse to the site I get the following output: Forbidden You don't ...
3
votes
1answer
2k views

Enabling SSL for Remote Desktop

Ok so I'm trying to remove a number of my systems from our Nessus scan from having this medium vulnerability. Microsoft Windows Remote Desktop Protocol Server Man-in-the-Middle Weakness I set the ...
0
votes
2answers
28 views

Redirect through server to https

I need to run a site over ssl. The domain is pointing to a certain shared IP of a hosting space. Let's pretend I don't have access to the DNS management. -If the original request is https, Can I ...
0
votes
2answers
2k views

Hostname and SSL (apache) issue on Debian

I have been trying to setup SSL virtual host ServerAdmin webmaster@mts.com ServerName moclm.tap.pt DocumentRoot /var/www/tapme/ <Directory /> Options ...
-1
votes
1answer
28 views

MYSQL replication - Security suggestions on replicate over the internet [closed]

I'm going to launch a new web service, but i have few funds to start this business. I was taking a look at OVH Dedicated Infrastructure servers, but such a service costs at least 250 $/month, too much ...
0
votes
1answer
18 views

SSL certificate, manage domain and subdomain with SAN

We've got a question on the certificate and the SAN part. Can i put as common name my domain name (eg: example.tld) and use the SAN part to protect my subdomaine (eg: www.example.tld) ? Actually ...
0
votes
0answers
19 views

Imported wildcard SSL Certificate on Windows Server 2008 R2 IIS7.5 ERR_CONNECTION_RESET

I've been battling this all day! I've exported our production SSL Certificate to a PFX file, copied this to our dev IIS server. Using MMC, added the certificate management, imported the PFX into the ...
1
vote
1answer
3k views

Squid SSL bump with parent proxy

Does SSL bumping work with parent proxy? squid and pf are set up like this: squid.conf: http_port 3128 intercept https_port 3129 intercept ssl-bump generate-host-certificates=on ...
2
votes
0answers
29 views

Nginx: SNI doesn't work for server_name with multiple arguments

With this Nginx config: server { listen 443 ssl; server_name www.x.nl x.nl; ssl_certificate /etc/nginx/ssl/x.nl.crtkeyca; ssl_certificate_key /etc/nginx/ssl/x.nl.crtkeyca; ...
0
votes
0answers
17 views

Tomcat : Multiple domain names redirect to one domain

I have a Webapp running on Apache tomcat on Debain wheezy, using a single domain name currently. The webapp uses SSL certification too. Now, the company which I am working for, bought similar domain ...
2
votes
1answer
960 views

Safari SSL certificate 403 forbidden

I have a web application deployed onto IIS 7 (Version 7.0.6000) on a Window 2008 Server using an SSL certificate (issued by Equifax). The web application is accessible over https using IE, Firefox and ...
2
votes
2answers
370 views

Is it possible to set an SSLProtocol in Apache for a single VirtualHost (poodle)?

I'm trying to test a patch for the poodle vulnerability that involves disabling SSLv3 on my web server. In order to test this on a non-production environment first, I'm setting the SSLProtocol on a ...
1
vote
1answer
60 views

How can the HSTS header be added to WebLogic?

Is there an implementation for using the Strict-Transport-Security header to WebLogic? I figure it would be using something in web.xml under <security-constraint> I know how to do this for an ...
1
vote
1answer
57 views

How to setup Nginx to use ssl/non-ssl for different urls on a single site, but always use ssl if user explicity types https in browser's address bar?

My current nginx.conf looks something like this: server { listen 80; server_name www.example.com; root /var/www/; location / { } location /users { rewrite ^ ...
4
votes
2answers
5k views

SSL setup: UCC or wildcard certificates?

I've scoured the web for a clear and concise answer to my SSL question, but to no avail. So here goes: I have a web-service requiring SSL support for authentication pages. The root-level domain ...
0
votes
2answers
1k views

how to install ssl on tomcat 7?

I know this question might sound too easy and I should had read all docs available on internet, the true is that I did, and I had no luck, its kinda confusing for me, I have installed many times this ...
2
votes
3answers
49 views

Multiple wildcard certificates for same common name on different servers

We've recently ventured into the cloud for hosting a number of websites. On our on-premise hosting we're using a wildcard certificate for a number of websites, and we want to do the same for our ...
2
votes
0answers
506 views

SSL connection alert hanshake failure

I'm having problem establishing the connection between the client and the Server .I'm using my own signed certificate on client and on server. I'm using the SSL ciphers SSLCipherSuite ...