SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

5
votes
2answers
4k views

Apache - extremely slow initial handshake (SSL enabled)

I have a problem with Apache server. The initial SSL handshake takes about 5-7 seconds which is horrible. After that the response time is in miliseconds - but the messages must be sent right after the ...
4
votes
1answer
2k views

MongoDB SSL encryption and Spring's Driver

There is very limited information regarding MongoDB and SSL encryption for the transport between replica sets and drivers (java clients). Anyone have any experience setting this up? Looking to have ...
14
votes
5answers
12k views

What host name should the SSL certificate for an SMTP server contain?

I have a server foo.example.com at 192.0.2.1 It runs exim to receive e-mail for several of my domains. My domains each have an MX record pointing to mx.example.com, which resolves to 192.0.2.1 If I ...
9
votes
1answer
11k views

Windows 2008 R2 Standard server - how to disable RC4

I have just used www.ssllabs.com and ran a few tests - my server is capped to a B grade because my server accepts RC4 This server accepts the RC4 cipher, which is weak. Grade capped to B. I've ...
8
votes
2answers
5k views

using nginx with SNI

By now I've not used SNI with nginx yet. But as IP address pools are quite filled and commercial XP support is about to cease (finally) I'm thinking about converting a few sites to SNI. I'm aware of ...
4
votes
1answer
2k views

force https with apache before .htpasswd

I have this in my .htaccess file RewriteEngine On RewriteCond %{HTTPS} off RewriteRule ^(.*)$ https://www.myweb.com/phpmyadmin$1 [R,L] AuthUserFile /var/www/myweb/.htpasswd AuthGroupFile /dev/null ...
3
votes
1answer
9k views

What does “128 / 256 bit SSL and 2048 bit CSR encryption” mean in practical terms?

One of the SSL certificates mentioned here says "128 / 256 bit SSL and 2048 bit CSR encryption". Does that mean that the act of generating the certificate is uber-secure but the communications handled ...
2
votes
1answer
660 views

openvpn - only one client key/certificate pair working

Scenario: I have a Debian 6 openVPN virtual server and several clients (windows, os x). They all connect fine, however only one client with a certain key/certificate pair can ping the server, all the ...
8
votes
2answers
22k views

Stunnel won't work with SSLv3 from some hosts

WARNING: SSLv3 is obsolete. Consider disabling it altogether. I'm trying to set up Stunnel to server as SSL cache. Everything was smooth, and mostly it works as designed. Then I encountered errors ...
7
votes
3answers
6k views

Self generate SSL Certificate for IIS6?

Hi guys is it possible to create your own SSL cert for IIS 6? If so does anyone have a link to a good guide on the web? Thank! John
5
votes
3answers
7k views

nginx HTTPS WWW redirect to non-WWW

My SSL certificate is for mydomain.com, so i am trying to redirect all www.mydomain.com over to without www. Now, all these work: http://www.mydomain.com http://mydomain.com https://mydomain.com ...
5
votes
6answers
11k views

Can I run two different secure sites using the port 443 on the same server?

Let's say I want two secure sites running from the same machine using the Apache server: 1. https://example.com 2. https://example.ca Is it possible to use port 443 for both of the above sites?
5
votes
2answers
9k views

How can I make apache request a client SSL certificate without needing to verify it against a known CA?

I'm using apache2 (2.2.3) to serve a site where I'd like to have clients authenticate with certificates. Since I only need to verify that a user presenting a particular certificate is the same user ...
4
votes
2answers
6k views

OpenVPN port-share with Apache/SSL

I'm trying to set up OpenVPN to listen on port 443, and then pass all HTTPS traffic to Apache, by using the port-share option. Relevant config snippets are: OpenVPN local ${PUBLIC_IP} port 443 port-...
4
votes
2answers
12k views

Request Entity Too Large error while uploading files of more than 128KB over SSL

We have a web portal setup on Java spring framework. It running on tomcat app server. Portal is served through apache web server connected to tomcat through JK connector. Entire portal is HTTPS ...
3
votes
1answer
4k views

Apache answer both HTTP and HTTPS on the same port

I'm trying to get apache to redirect from http to https, however I want them both on the same port (20100, but I doubt that will matter). Basically what's going on here except I'm not doing this for ...
3
votes
1answer
2k views

stunnel: SSL-to-SSL? (for smtp/imap)

How can I configure stunnel to accpet SSL connections, and connect then to an SSL port on a different server? Here is my setup: Our ISP's server, "Mail Server", supports smtp/imap over SSL. (Not ...
2
votes
3answers
2k views

Nginx sslv3 poodle disable

I tried setup SSL cert without SSLv3 in my nginx, but SSL Labs say, my server have SSLv3 how to disable it. My config: add_header Strict-Transport-Security max-age=31536000; add_header X-...
2
votes
2answers
392 views

Stop default SSL response on Shared IP using SNI

Previously I asked a question here: Single domain SSL presented for all domains on Shared IP about setting up secure and non-secure domains on a single IP. Opinions were mixed, but it appears SNI ...
1
vote
2answers
341 views

How to have a certificate which works with both example.com and subdomain.example.com in IIS?

I have an IIS server hosting several websites, like: example.com subdomain1.example.com subdomain2.example.com I want those websites to be able to use SSL. If I install the certificate *.example....
5
votes
2answers
10k views

Does an SSL certificate work on CNAME'd urls?

Suppose I create sub domain per user, something like mysite.test.com which is secured under a wildcard ssl certificate. If I allow users to have their own custom url via a CNAME would the new url ...
4
votes
2answers
606 views

Wildcard certificates with short hostnames?

I'm trying to generate a certificate with the following subjectAltName: hostname *.hostname hostname.mydomain.local *.hostname.mydomain.local I generate the CSR via OpenSSL and then get the ...
3
votes
2answers
1k views

Apache HSTS exception for some virtual hosts

In the global config section for Apache 2.2.15, I have the following (per recommendation) <IfModule mod_headers.c> Header add Strict-Transport-Security "max-age=15768000;includeSubDomains" env=...
3
votes
1answer
3k views

Issues disabling SSL 2.0 in IIS 6

I have reviewed both related posts on this site: How do I disable SSL 2.0 support on IIS? How to disable SSL 2.0 on IIS 7.5? The issue I am having is that I have implemented the registry change, ...
3
votes
3answers
9k views

Do I have to have an ssl certificate for my mail server?

Question is really simple. If I want to setup a mail server, do i have to have it or is it just a security issue? What kind of problems can it cause?
1
vote
1answer
51 views

Fix missing ssl-cert for subdomain www. using redirect or similar

We're using setup with an nginx on one machine and (currently) one application server on apache in the back. For multiple domains we got ssl certs, but only for the domain itself. So without ...
1
vote
1answer
75 views

nginx: Redirect https traffic without subdomain to subdomain (non-www to www)

My current ssl certificate covers the subdomains www.example.com and static.example.com So if a users try to access my site via https://example.com I want to redirect him to https://www.example.com . ...
1
vote
1answer
631 views

Which SSL certificate would I need for external AND internal domain names?

This is a school-network. Official (outside reachable domain name) is bgschwechat.ac.at (www.bgschwechat..., mail.bgschwechat... and ftp.bgschwechat..) Internally the windows domain is named bgs.ac....
1
vote
2answers
7k views

CentOS PHP cURL NSS error 5938

Having a strange issue with cURL and PHP on a couple of CentOS boxes. Locally, I'm running CentOS 6.3. Remote is CentOS 5.9 Locally, the box receives a request, scp's a file to the remote server, ...
1
vote
1answer
987 views

Apache sending wrong SSL certificate on some connections / browsers

I have a bit of a strange problem and I hope someone can help! I have just moved servers (both Linux running Apache 2.2) and re-installed everything and pretty much everything is back up and running, ...
1
vote
2answers
134 views

How to tune Apache to show only one host on HTTPS protocol

I have a Web server Apache on FreeBSD and want to bind SSL only to one of many domains. Now my configuration is NameVirtualHost *:80 <VirtualHost *:80> DocumentRoot /home/web/web/domain01.com ...
1
vote
2answers
7k views

Possible to redirect from HTTPS to HTTP behind load-balancer?

I have a basic ASP.NET application that sits behind an F5 load-balancer. Incoming SSL requests (over HTTPS) terminate at the load-balancer and all internal communication between the load-balancer and ...
0
votes
1answer
1k views

Configuring IIS site to use HTTPS

I am working on a REST API which I have currently deployed on a Win XP Professional SP2 development machine running IIS 5.1. The site is currently being hosted on port 81 and being accessed via HTTP. ...
0
votes
1answer
1k views

Using several SSL certificates on same IP with IIS 7

I've got several domains (different sites with different domains. not sub-domains) which need SSL. I couldn't find a way to make it work - so that each domain will have its SSL certificate, but use ...
0
votes
1answer
2k views

Apache Serving Wrong Document Root

I have installed SSL on a subdomain of my site. Everything works perfectly, except this strange behavior. If I point my browser at the following locations, these document roots are served: http://...
0
votes
2answers
203 views

Last (I think and hope) problems configuring SSL certificate with Apache and VirtualHosts

Finally I set apache2 to get a single certificate for all subdomains. [...] # Go ahead and accept connections for these vhosts # from non-SNI clients SSLStrictSNIVHostCheck off # Apache setup ...
0
votes
2answers
2k views

SVN SSL Certificate Validation Error

I am running RedHat Enterprise Linux 6 and have a subversion server installed (with Apache). I have just configured Apache to run HTTPS with an SSL Certificate from Geotrust. The Apache part of ...
0
votes
1answer
122 views

Wildcard certificate with separate certificates for each host

We're using a wildcard certificate on several hosts, which right now means that we have to distribute the wildcard cert's private key to each machine, which is a security problem. On the other hand, ...
-4
votes
1answer
111 views

KNow nothing about ssl , how to setup apache to run with ssl? [closed]

I have an ubuntu server with apache installed i run a game on the server and want to integrate it to facebook but it is required to be through HTTPS :s how can i move the game to run on https ? i ...
102
votes
5answers
132k views

how to download the ssl certificate from a website?

I want to download the ssl certificate from, say https://www.google.com, using wget or any other commands. Any unix command line? wget or openssl?
36
votes
7answers
51k views

How do I disable TLS 1.0 without breaking RDP?

Our credit card processor recently notified us that as of June 30, 2016 we will need to disable TLS 1.0 to remain PCI compliant. I tried to be proactive by disabling TLS 1.0 on our Windows Server 2008 ...
39
votes
7answers
48k views

Poodle: Is disabling SSL V3 on server really a solution?

I've been reading all day about the Poodle vulnerability and it I am bit confused now vs Security and Revenue. If I disable SSL V3 on Server (SSL V2 and V3 both will be disabled for Apache) clients ...
35
votes
5answers
32k views

What are the exact protocol level differences between SSL and TLS?

This is a technical deep dive after this overview question was asked. What are the protocol differences between SSL and TLS? Is there really enough of a difference to warrant a name change? (versus ...
18
votes
7answers
45k views

How can I use HAproxy with SSL and get X-Forwarded-For headers AND tell PHP that SSL is in use?

I have the following setup: (internet) ---> [ pfSense Box ] /-> [ Apache / PHP server ] [running HAproxy] --+--> [ Apache / PHP server ] ...
10
votes
4answers
6k views

haproxy + stunnel + keep-alive?

I'd like to put stunnel in front of haproxy 1.4 to handle HTTPS traffic. I also need stunnel to add the X-Forwarded-For header. This can be achieved by the "stunnel-4.xx-xforwarded-for.diff" patches ...
25
votes
1answer
14k views

What Should be the Permissions of Apache SSL Directory, Certificate, and Key?

I have my cert.pem and cert.key files in /etc/apache2/ssl folders. What would be the most secure permissions and ownership of: /etc/apache2/ssl directory /etc/apache2/ssl/cert.pem file /etc/apache2/...
25
votes
4answers
42k views

How to use Jenkins with SSL / https

I have a Fedora server running Jenkins which I install via yum. Everything is okay, I can access it with http://ci.mydomain.com. But now, I want to access it with https://ci.mydomain.com so the login ...
9
votes
3answers
13k views

How can I use the same key for SSH and SSL (https)

I'm trying to install the development tools for a small team, and I can't get the authentication right. Since we are a distributed team, the server is on the internet. And I'd like to have SSO+zero ...
6
votes
4answers
17k views

transparent SSL proxy myths and facts

I've been searching for many hours now about a way to setup a transparent proxy for SSL (not Squid). The general answer is that I can't, but I know there are some ways, though. My purpose is only the ...
32
votes
4answers
6k views

Are self-signed SSL certificates secure?

I want to have a secure connection, when I log into my webmail, phpMyAdmin, etc. Therefore I signed my own SSL certificates with OpenSSL and told Apache to listen on port 443. Is this in fact secure?...