SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
0answers
9 views

How to install a self-signed certificate in chromium under Debian [migrated]

I have a web server that uses https protocol. I want to create a self signed certificate so I did the following: Issued this command: openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout ...
0
votes
1answer
12 views

Problems using SSL input with NXLog

TL;DR summary: NXLog won't load my certificate - why? I've set up an NXlog CE server to act as an encrypted entrypoint for a Graylog server. After creating a self-signed certificate and adding it to ...
1
vote
0answers
19 views

Certificate chain lost apache 2.4

So I think I'm not getting something here. I'm getting javax.net.ssl.SSLHandshakeException: null cert chain when I access my application via apache httpd, but not when I'm accessing it directly. ...
0
votes
0answers
23 views

Enabling SSLv3 in vCloud Director 5.6.x

We have some legacy systems that use SSLv3 but vCloud Director disabled SSLv3 by default from version 5.5.3, see: ...
1
vote
2answers
84 views

how to force a http webapp so use https (ssl)?

On our Linux Server we got some sort or WebApp running its own little webserver using http ONLY. That means it does not support ssl by itself. So im looking for a way to have "something" packed in ...
0
votes
1answer
51 views

Fixing invalid DNS records for mail server with SSL certificate

Ok, so the question name is a bit weird but I wasn't quite sure how to word it. I have a machine with the hostname foo.example.com with an SSL certificate for the domain mail.example.com. I have also ...
1
vote
2answers
57 views

CentOS - Apache HTTPS not reading htaccess

I have been stuck with an issue with rewrite on apache on CentOS. If I load my site from HTTP, it works fine. Rewrite rules work. Once I change it to HTTPS, the rewrite rules don't work. After some ...
-1
votes
0answers
16 views

SSL certificate(on SHARED HOSTING) sometimes causes redirections? [duplicate]

my Hosting company (support person) told me, that I can install a SSL on my single domain (In my package I have many domains), but if i wont purchase DEDICATED IP, then sometimes(because of Server has ...
2
votes
1answer
26 views

Installing SSL certificate for Application hosted on Virtualised Windows IIS

I am currently running Ubuntu 14.04 that has WebMin installed and running Apache. I am also running Virt Manager to have a virtualised Windows Server. I am wanting to setup an SSL certificate for an ...
2
votes
0answers
25 views

Multiple Client Certificates in SSLProxyMachineCertificateFile

Here is my use case. I want to learn how to setup Apache, so this is just for learning. Feel free to suggest better alternatives. I'm using Apache 2.4 in RHEL5. I want to use a ProxyPassMatch to ...
1
vote
1answer
93 views

SSL handshake with CentOS, curl and ECDHE

Since I limited my Ciphers to ECDHE because of the Logjam vulnerabilities, I am not able to do a curl from a Centos machine anymore. (works from Ubuntu) $ curl -v https://mysite.mydomain.com * ...
2
votes
2answers
56 views

Sniff outgoing traffic on my server on a SSL channel

Im executing a CURL command on a php application running on my nginx server (centOS). The end point is a https address so the outgoing traffic is of course encrypted. I want to see the network ...
0
votes
2answers
64 views

Windows Server 2012 unable to access specific SSL page

This problem really boggles the mind. I have a standard Windows 2012 server with windows firewall enabled. Using Chrome, I am unable to access a certain HTTPS website while other HTTPS websites can ...
1
vote
1answer
55 views

LDAP Client Search with SSL - CentOS7

Has anybody got SSL client authentication working with OpenLDAP (on CentOS7 - which is using moznss)? I've search for the last 2 days trying to get this to work, both with a certutil database and ...
0
votes
1answer
21 views

Apache Server does not update certificate for subdomains after restart

I have a server which has domain1.example.com and domain2.example.com. The server is using 2 certificates one for domain1.example.com and a UCC certificate for domaind.example.com. My ssl config is as ...
1
vote
1answer
156 views

Add SSL certificate after curl error: “unable to get local issuer certificate”

I'm trying to access a partners SOAP API, for that goal I made a CSR and received a CRT. I've made a PEM file with my key and the CRT: cat mycert.crt mykey.key > mycertandkey.pem When I try to ...
0
votes
0answers
34 views

Wildcard SSL on 2 Servers

I'm helping an SEO client install an SSL certificate and have run into some issues. I'll try to simplify it. He has 2 servers: 1. SERVER A: Internal server running IIS that contains chat and support ...
0
votes
0answers
23 views

Does coreos' cloud-init have something similar to ansible's vault?

I'm trying to setup ssl keys and certs onto a coreos machine, on the previous ubuntu machine I was using, I had ansible's vault encrypt the key and cert for source control and decrypt it when adding ...
-1
votes
1answer
76 views

TLS 1.0 handshake fails in Windows Server 2012 R2

I am using Windows Server 2012 R2 to contact AWS services, namely https://elasticbeanstalk.eu-central-1.amazonaws.com/. However, the AWS toolkit for Visual Studio as well as Internet Explorer 11 fail ...
4
votes
0answers
79 views

What would be involved in moving a site like stackoverflow to https?

I've seen a lot of requests in the SO Meta asking for StackOverflow to be moved over completely to https. I've never run a site as large as Stack Overflow, so enabling SSL/TLS has always just meant ...
1
vote
1answer
45 views

facebook app giving Security error when click on a shared link to my site [closed]

I have built a site and users are sharing it on facebook, but when one of their friends click on the link it give them this error. Security error There are problems with the security ...
-1
votes
0answers
24 views

SSL23_GET_SERVER_HELLO:sslv3 alert handshaje failure gitlab

I installed latest version of gitlab and now git bash / command line is not working, all are getting SSL23_GET_SERVER_HELLO:sslv3 alert handshake error. How do we resolve this issue ? ssh is working ...
0
votes
0answers
15 views

Apache Redirect to https except for localhost requests [duplicate]

I want that external requests on my Apache will be redirected to https - RedirectMatch ^/$ https://example.com but when the request comes from localhost the Redirect should point to ...
1
vote
1answer
71 views

Unexpected File Download Slowness After Enabled SPDY on Nginx

A simple WordPress static site run entirely on https. Nginx conf here: http://pastebin.com/BrP0LThT Only difference before / after is: listen 443 ssl; listen 443 ssl spdy; Nginx ...
0
votes
0answers
10 views

Cross Domain LDAPS

I have a bit of an issues I am running in to. We have two domains: domain1.com domain2.com Our Enterprise and Subordinate CA Resides on domain1, let's call it subca.domain1.com. I am trying to ...
1
vote
2answers
86 views

Windows XP invalid certificate on Nginx

I migrated my SSL websites and certificates from Apache to Nginx and from that moment all Windows XP clients does not recognize the SSL certificate (it is a wildcard certificate issued by Trustico). ...
3
votes
2answers
174 views

Sendmail down on Ubuntu 12.04 after update, SSL related?

I posted this on askubuntu.com yesterday but haven't gotten any responses. We run a production Ubuntu server that serves thousands of people per day. Sendmail is currently not working on this server. ...
2
votes
1answer
39 views

Do not use Client Cert Auth when on local network apache2

I'm hoping someone could help me with this question... I am running an Apache 2.4.7 server on my Ubuntu 14.04 box with some public facing sites. For some of those sites I've implemented a Client Cert ...
0
votes
2answers
39 views

How to redirect a client whose browser fails the handshake because it can't accept TLS1.1 or 1.2?

Our servers are no longer using SSL3.0 or TLS1.0. When an older browser tries to connect and the request is made with https, they get a "Page cannot be displayed" message. I want to redirect them to ...
1
vote
0answers
46 views

Problems installing Homebrew on a new OS X installation (SSL error)

Have a fresh OS X installation here (new VM), and when trying to install Homebrew I just get an SSL error. fatal: unable to access 'https://github.com/Homebrew/homebrew/': Unknown SSL protocol error ...
-5
votes
1answer
20 views

DB Server and Fully Qualified Domain Name

I have a hosted virtual server (Windows Server 2012 R2) that exists solely to host a few SQL databases. I need to purchase a SSL certificate to encrypt data but purchasing a certificate requires that ...
1
vote
2answers
29 views

check_nrpe ssl couldnt complete handshake, in both master and client server it works fine individually

I am getting this check_nrpe ssl couldnt complete handshake error in master server when I try executing the below command. /usr/local/nagios/libexec/check_nrpe -H 10.192.122.234 10.192.122.234 ...
1
vote
1answer
74 views

HAProxy redirect traffic to NGINX getting error “The plain HTTP request was sent to HTTPS port”

What we are trying to is to have HAProxy to listen for all incoming traffic from port 443 (HTTPS & WSS) Below is our HAProxy config: frontend wwws bind 0.0.0.0:443 ssl crt ...
0
votes
1answer
40 views

HTTPS to HTTPS reverse proxy with nginx

I have an Apache webserver configures with an SSL certificate. I have to put it behind a proxy, from some reasons. I'd like to configure the proxy (nginx?) to works as simple relay, from HTTPS to ...
0
votes
2answers
23 views

Multiple SSL on NGINX with shared settings?

I have an NGINX development server. I have a large number of configuration directives which drive various features of the server. I want to be able to access the server via SSL. The problem is that ...
0
votes
0answers
28 views

Enforcing RC4 cipher and testing enabled ciphers with openSSL

I am trying to enable and enforce RC4 cipher on apche 2.4 and I checked the http://httpd.apache.org/docs/trunk/ssl/ssl_howto.html It says RC4 cipher can be enabled in below 2 ways 1. SSLCipherSuite ...
1
vote
2answers
188 views

NGINX HTTPS Reverse Proxy - Fast TTFB but low concurrency

I've got an application that runs: NGINX (SSL) => VARNISH (CACHE) => APACHE/PHP. Running ab benchmark, I'm able to achieve 30k+ requests / second on varnish layer (via HTTP) via a EC2 t2.small ...
4
votes
3answers
608 views

View the SSL certificate of a page that immediately redirects to another

So I've googled quite a bit for this but it appears that my google-fu fails me - apologies if this is a trivial and already answered question, I could not find anything about this I'm trying to ...
3
votes
1answer
2k views

sendmail rejecting some connections with handshake failure: SSL alert number 40

My sendmail server on CentOS 5 started to reject some connections with the following message logged: error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:s3_pkt.c:1092:SSL alert ...
-3
votes
1answer
39 views

which port is used on nagios check_nrpe, is the ssh connection is must between nagios master and client server [closed]

I have configured the nagios master server and nagios client servers, still after lot of debugging i couldn't achieve the communication btwn these two :( i am getting this generic error CHECK_NRPE: ...
0
votes
1answer
165 views

Jetty 9 support for TLS_FALLBACK_SCSV

I've been trying to get that A+ on the SSL Server Test @ SSL Labs. However, I can't figure out how to pass the "downgrade attack prevention" test: I'm running Jetty 9.3.0.v20150612 alongside ...
0
votes
1answer
60 views

What would be a less-known SSL certificate attribute to look out for? [closed]

I'm looking for a simple domain SSL certificate for our company's website and I'm a little confused. A lot of them seems to offer the exact same features, yet at price ranges going from 5$ / year to ...
3
votes
2answers
522 views

Why does Chrome complain about “obsolete cryptography”?

I am hosting an ASP.NET website with wildcard ssl certificate on IIS / Windows 2008R2. While Chrome works fine with my website and shows a green lock the https connection, the https details mention ...
0
votes
1answer
41 views

Apache VirtualHost Multiple Wildcard Domains / SSL

I'm trying to figure out the configuration for the following: Multiple Domains - (example1.com, example2.com, example3.com) Single Virtual Host Wildcard Subdomains (*.example1.com, *example2.com, ...
-1
votes
4answers
112 views

Why are many mail servers using subdomains like mail.example.com?

I'm just setting up dovecat and postfix for the first time and wondering why so many companies are using subdomains for IMAP and SMTP like smtp.mail.example.com and imap.mail.example.com? What are ...
-1
votes
3answers
29 views

HTTPS url Works - HTTP does not, broken with SSL install

I was recently just installing SSL onto my server / website. Once I finished all the steps, I went to check my website using the https://www.breakwatersurfcompany.com which worked great, however. My ...
0
votes
0answers
74 views

Error using SHA256 certificate for RADIUS server for use with Ubuntu Unifi/Wireless 802.1x 802.11 network

We have an established wifi network with Unifi, setup as wpa2-enterprise with a Windows Server 2008 R2 RADIUS host. Our CA server crashed, which didn't seem to cause any trouble with phones ...
1
vote
1answer
20 views

SSL configuration for Intranet/VPN site

We've got a web site in development, that is to be used internally within our intranet, but also used externally by one client that will be accessing it via VPN. As far as Certificates go, what's the ...
1
vote
2answers
159 views

SSL will not work on Android mobile

I bought Comodo SSL from Namecheap. Now, the SSL works fine on desktop, I am getting a "This Connection is not private" on mobile phone.. on my chrome on Android Here is my virtual host file: server ...
0
votes
0answers
33 views

Self signed certificates create problems on NGinx/PHP

I just upgraded my Debian 7, Nginx 1.6.2, PHP 5.4.39 to Debian 8, Nginx 1.6.2, PHP 5.6.9. There is a CRM running on that server where we used to send emails via PHP, EspoCRM and that's using ...