SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
2answers
30 views

Reverse Proxy on ClientHello with bad security (e.g. WinXP)

XP seems to be a lot of "fun", these days with security especially since the security features XP DOES support are being phased out day by day. for all those who want to drop XP there is always the ...
0
votes
1answer
61 views

New SSL, Safari can't open the page b/c server unexpectedly dropped the connection (subdomain)

After much googling and Serverfault browsing I still have an SSL problem : Safari can't open the page at all, Firefox gives a "secure connection fail" after 5mn of inactivity (not browsing or ...
0
votes
2answers
22 views

Redirect port 443 to port 80 at a firewall?

I recently ran into a situation in which a web server I was running could no longer serve HTTPS traffic (due to some SSL cert issues). Since the server could not process this traffic I could not use ...
-1
votes
1answer
45 views

HTTPS certificate not working on WWW, but is on NON-WWW

I bought an SSL certificate from SSLMate and it's working fine on my Nginx server when I access http://example.com, but not when I access http:// www.example.com I believe the problem has to do with ...
0
votes
2answers
33 views

CloudFlare giving error 522 without HTTPS

I've set up Let's Encrypt (with nginx) on my server, following the tutorial I've linked in the comments. I've also set up CloudFlare with the following DNS settings: http://i.imgur.com/Z7PRD6l.png ...
-5
votes
1answer
59 views

Disable/remove Let's Encrypt? [closed]

I followed this tutorial to enable Let's Encrypt on my server, however I now want to remove/disable it: ...
1
vote
1answer
34 views

HTTP & HTTPS Apache redirect to internal IP Virtual Machine

Here's my basic setup: Router forwarding port's 80 and 443 to Ubuntu Server 14.04 running apache. Works great. Running several virtual machines (QEMU/KVM) on Ubuntu server. VM's are in bridged mode ...
2
votes
1answer
81 views

Generate subdomain certificate from valid wildcard certificate

Giving the nature of SSL certificates and keys which can be chained, can I (myself) generate a certificate for a subdomain based on the main domain certificate and key which are issued for wildcard ...
0
votes
1answer
20 views

SSL .csr asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag

I have created a .csr and .key file in /etc/apache2/ssl/domain/ like openssl req -new -newkey rsa:2048 -nodes -keyout domain.key -out domain.csr like GoDaddy said, then linked to those files with ...
0
votes
1answer
47 views

is it possible to terminate SSL with Nginx and cache https responses from the backend?

Looking to terminate SSL from backend service at nginx and offload to clients as http. Cache all responses for performance and offline scenario. With the setup below I'm not able to cache, what's ...
1
vote
2answers
34 views

Nginx correct SSL Certificate order

I got the following files: priv.key // This is my priv key and contains one -----BEGIN ENCRYPTED PRIVATE KEY----- section req.csr // This is my certificate request file cert.pem // This is my ...
0
votes
1answer
72 views

Let's Encrypt — “DNS … query timed out looking up CAA for …”

I have been using Let's Encrypt on a few domains for a couple of months now, and it generally has been working. I was going through renewing the certs, and for one of the domains I get the following ...
0
votes
1answer
34 views

Apache SSL virtual hosts sharing same DocumentRoot

I have a web server with two domains pointing to the same document root. I have separate SSL certs for the two domains. I want (almost) everything that comes to the site(s) to run under SSL. All ...
0
votes
0answers
16 views

Apache SSLVerifyClient

Please excuse any dumb statements regarding this. I am very new to Apache and to HP-UX. I am a SQL Server DBA but ended up on this project. I am working to try and implement SSL with Client Verify ...
1
vote
1answer
21 views

Domino Offers SSL3.0 instead of TLS for Outgoing connection to WebService

I have problem understanding Dominos behavour to offer SSL or TLS for outgoing connections to WebService. We have an agent that access a WebService. The WebService only accepts TLS 1.0 From time to ...
1
vote
0answers
22 views

Enable SSL on wordpress site hosted on Azure

I have a website running on Azure and its a wordpress site. from the Azure Documentation what they say is to just copy and past the example in web.config file <?xml version="1.0" ...
1
vote
1answer
78 views

nginx / ssl: Always redirect to one of two https subdomains [duplicate]

My webserver supports the following two subdomains: https://www.example.com https://en.example.com I want to create my nginx config so that: http://en.example.com$request_uri => ...
1
vote
1answer
55 views

nginx: Redirect https traffic without subdomain to subdomain (non-www to www)

My current ssl certificate covers the subdomains www.example.com and static.example.com So if a users try to access my site via https://example.com I want to redirect him to https://www.example.com . ...
0
votes
0answers
23 views

Pound and Varnish Multiple sites SSL

I'm trying to setup Pound for more than one website but when the enter the below code in /etc/pound.cfg file, it applies only the first certificate in the line for all the websites and it results in ...
2
votes
4answers
560 views

Is an SSL Cert needed here?

We currently have a website set to redirect to a new address (our client changed domain names, but wants the old domain to send people to the new site) in IIS 8.5 using permanant redirects found in ...
1
vote
2answers
29 views

Apache webserver HTTPS port redirects to HTTP with port 443

At my work I installed Mediawiki (latest version) on a Apache webserver 2.4.6 with PHP 5. Everthing works fine when I want to access the wiki pages locally and I configure a hostname in Mediawiki ...
0
votes
3answers
50 views

NGINX Reverse proxy not loading resources

I'm trying to put a reverse proxy in front of a few internal web services. Nginx is setup and working properly to serve request. If I only serve one location / in my conf file, it loads that ...
5
votes
1answer
50 views

What would cause inconsistent SSL failure over Cisco ASA VPN

Over the weekend I completed the installation and testing of a Cisco ASA 5512 to replace our old router/firewall. Today, I've been wrestling with an issue of browsers inconsistently failing to connect ...
0
votes
2answers
22 views

Configure IIS7.5 to only accept SSL requests to specific hostnames

I know with http sites I can configure it to listen for specific hostnames and you can add several bindings, it ignores the rest which is great. I also know I can rename my ssl cert friendly name to ...
0
votes
1answer
26 views

Apache webserver : SSL certificate not understood

I am trying to specify an SSL certificate to Apache webserver, but I am getting some strange errors. Unfortunately, I don't know that much about SSL. Can someone kindly help me out. Error log in ...
-4
votes
1answer
39 views

How can I remove port number on ssl domains

I serve two ssl domains on different ports using apache2.2.3. My server version is CentOS 5.11. I can't update the server. For example: https://one.domain.com/ https://two.domain.com:444/ These ...
1
vote
1answer
35 views

Dovecot: increase ssl_dh_parameters_length

I'm using Dovecot 2.2.21 I set ssl_dh_parameters_length = 4096. Before that, I had set 2048. After the change I reloaded Dovecot. Since then, SSL doesn't work any more and I get these logs ...
0
votes
1answer
35 views

Set server wide ssl configuration

Background I have a simple server with only one site. I want to force ssl. I previously did this with a self signed certificate, but now I have got a letsencrypt cert. I have used the auto set up, ...
0
votes
1answer
62 views

HTTPS streaming and dynamic load balancer using Wowza and AWS

We are using Wowza instances to perform live streaming on AWS infrastructure. We have a script that monitors load balancer and launches/kills instances when required based on the number of ...
4
votes
1answer
30 views

how to configure sendmail with multiple ssl certificates for multiple domains

I need to configure a server to host multiple email domains on a single IP, and thus install multiple ssl certificates. Miraculously, I have been able to get apache and dovecot to work with multiple ...
0
votes
1answer
32 views

GoDaddy A record and SSL Handshake error

I have pointed A record to my server IP in GOoDaddty as ns1.example.com and it is working.But I am confused with SSL error. I have generated SSL certificate with CN as ns1.example.com. When I try to ...
0
votes
2answers
65 views

Serve multiple domains on one ip and one port

I want to serve multiple domains on my CentOS server. I run servers on http. Now I want to run these servers on https using another certificates. I written ssl.conf like this. Listen 443 ...
0
votes
0answers
18 views

how to get public key from certificate on azure automation [duplicate]

I need to get SSH public key from the certificate which is store on azure portal and I have created workflow on azure automation and import the certificate to azure portal. Once we get the SSH public ...
0
votes
0answers
49 views

Apache with Varnish, SSL termination and additional proxy - redirect not working

I've got a problem with the SSL termiantion for my varnish. This is the request path I want to achieve: user -> Varnish(80) -> Apache(8080) -> Apache(8181) -> Apache(443) when termination is made. ...
0
votes
0answers
33 views

Nginx - SSL, HSTS & proxying requests to a different CN

We are using Nginx as a reverse proxy, and would like to allow site visitors to download a file from an Azure Blob server { listen 443; ssl_certificate ...
0
votes
1answer
16 views

Wordpress SSL switch/rewrite base on request (fixing insecure content)

I have a small Wordpress site to share my hobby. My webhost is SSL enabled and I successfully set the "force SSL login" option. But because I started without SSL there are mixed protocols in the ...
0
votes
3answers
66 views

How to make Apache’s mod_rewrite redirect over HTTPS by default?

Let’s say I have a website that is available over HTTPS, e.g. https://example.com/foo. Consider the following .htaccess: RewriteBase / RewriteEngine On RewriteRule ^foo$ bar [R=301,L] Now, when I ...
1
vote
2answers
48 views

ssl nginx proxy config for roundcube

I am running roundcube webmail over a nginx webserver that only serves http. This is proxied by another nginx which serves https. Both are separate FreeBSD jails on the same machine. I can ...
-1
votes
1answer
64 views

Domain SSL is not working for port 9002

I have example.com domain with SSL certificate. I tried to include http://example.com:9002 URL into https://example.com page using iframe. But i am getting the error like Blocked loading mixed active ...
0
votes
1answer
25 views

Enforcing client verification in Apache just for a specific client certificate

I want to make my Apache web server accept SSL connections ONLY IF the client presents itself with a specific SSL client certificate. In other words, only ONE client is allowed and it MUST use a ...
0
votes
1answer
21 views

Redirecting all requests on one domain to https non-www

I have an ISPConfig 3 site running on one domain. I have multiple vhost files for the different applications I run through Apache. I want to enable https://example.com/%QUERY_STRING% on every request ...
-1
votes
2answers
64 views

How to install freeipa server with apache ssl/tls virtualhosts already present

Is it possible to run an FreeIPA server next to a full configured apache server with ssl/tls configured virtual hosts and if yes what do I have to do to not get a conflicting 443 port error during ...
2
votes
3answers
97 views

How to run Gunicorn upstream with an Nginx SSL configuration?

I have an nginx server with an SSL certificate installed. I want to pass any requests upstream to my Gunicorn server running at 0.0.0.0:8000. However, whenever I run the Gunicorn server, it gives me ...
1
vote
0answers
27 views

nginx, redirection http to https not working as expected

My intention is to redirect all requests to https:// prefixed URLs for both the naked domain and for the www.* equivalent. The acme-challenge URL is to be excluded. I've tried with the below config, ...
2
votes
0answers
77 views

RabbitMQ TLS clustering - “insufficient security”

I am currently setting up a RabbitMQ cluster where a requirement is that all communication within the cluster be encrypted. I followed the guide at https://www.rabbitmq.com/clustering-ssl.html - ...
6
votes
2answers
94 views

Is there an equivalent to SSLLabs' SSL test for SSL/TLS that is not HTTPS? [closed]

I've used SSL Labs' SSL Server Test for testing SSL setup for HTTP servers, but it doesn't support other situations in which SSL is used, such as IMAP. Is there an equivalent detailed test for ...
1
vote
1answer
39 views

Fix missing ssl-cert for subdomain www. using redirect or similar

We're using setup with an nginx on one machine and (currently) one application server on apache in the back. For multiple domains we got ssl certs, but only for the domain itself. So without ...
0
votes
1answer
20 views

Apache2 VirtualHost not showing right directory

I've set up my Ubuntu server VPS with a LAMP stack serving a WordPress MU multi-site and using Let's Encrypt SSL certificates. I had it running on my main domain: zonk.be and was trying to now get ...
-4
votes
3answers
35 views

Do I need to purchase an SSL Certificate? [closed]

First time I'm setting up a external web application for a family member. I have a Domain Name purchased through GoDaddy setup to point at my Azure website. I've added the requires SSL filter so that ...
0
votes
1answer
44 views

Web server resets post request randomly when going over ssl

I've got a web server with Apache 2.4.12 running on a virtual Ubuntu 15.10 machine. Often, but completely random, I get a connection reset (flag is RESET in iptraf) when submitting a form ...