SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

2
votes
2answers
149 views

Renew Letsencrypt certificate

I am trying to renew my letsencrypt certificate by the next command: ./letsencrype-auto renew but I receive this error message: configuration file /etc/letsencrypt/renewal/domain.conf produced ...
0
votes
1answer
44 views

http(s) non-www to www redirect nginx

This is my config: server { listen 80; server_name domain.com www.domain.com; return 301 https://www.domain.com$request_uri; } #server { # listen 443 ssl; ...
0
votes
1answer
16 views

SSL offloading from Apache to Tomcat get overwritten somewhere

I was asked to upgrade a server running Apache and Tomcat-6 on Debian Wheezy from HTTP to HTTPS. I have successfully obtained and install SSL certificates on the Apache part and checked that they work ...
0
votes
1answer
20 views

How to create a *.crt file out of keystore? (SSL / Tomcat)

to use https (ssl) with tomcat i build a keystore with this commands: $JAVA_HOME/bin/keytool -genkey -alias [youralias] -keyalg RSA -keystore [/preferred/keystore/path] $JAVA_HOME/bin/keytool ...
1
vote
2answers
62 views

Apache2 redirect www to non-www (with SSL)

Wise people, I am trying to accomplish the following: Redirect these: http://www.veluwsvuurbarneveld.nl http://veluwsvuurbarneveld.nl https://www.veluwsvuurbarneveld.nl To ...
1
vote
2answers
53 views

Do web Servers send the certificate chain to the Web Client?

If my web server (latest Apache) has a valid (not expired or revoked) Verisign certificate chain (root -> intermediate -> leaf/my server), then does the server send the entire(?) chain to the client? ...
0
votes
0answers
37 views

Google App Engine The SSL certificate provided could not be inserted. xn- domain

I try installing Comodo Certificate that I ordered in SSLs.com on Google App Engine Custom Domain. But I have error: The SSL certificate provided could not be inserted. I checked that my key is ...
1
vote
0answers
40 views

Plesk 12.5 Nginx proxy pass SSL to Node app on different port [closed]

Preface: tried installing JXCore's Node Extension for Plesk, and I can't get it to work. Gives me some error, and their support is not answering emails...... [IP ADDRESS] = real IP, example.com = ...
0
votes
1answer
56 views

How to get a perfect score from SSLLabs?

As you can see at: https://www.ssllabs.com/ssltest/analyze.html?d=www.notfriendly.xyz&hideResults=on&clearCache=on my forum does have an A+ score but is lacking in Key Exchange and Chipher ...
0
votes
1answer
29 views

Adding a second SSL for a second domain on a server - second domain is still using the first SSL Cert

I need to add an ssl cert to a second domain on my server (AWS Amazon Linux) I thought I enabled SNI correctly? although probably not... domain1 already has a functioning SSL cert. First attempt I ...
0
votes
1answer
39 views

NGINX / PHP-FPM + SSL very slow

My application is served on an Amazon EC2 t2.small instance. When using the ab command to test performance. ab -n 3000 -c 100 mydomain.com HTTP Finished 3000 requests Server Software: ...
1
vote
1answer
39 views

Dockerized Apache + SSL behind NGINX as reverse proxy

I have two containers, one of which is running NGINX as a reverse proxy for serveral other containers. One of the other containers is running Apache with SSL enabled and configured. I have seen ...
0
votes
0answers
20 views

Apache2 on Ubuntu running SSL returns data after time-out reached

I am working with a server that I recently inherited from a departed developer. The server returns XML documents via a RESTful interface over an SSL port. For small documents, the data is returned ...
0
votes
1answer
27 views

Exchange 2010/Outlook certificate errors

We are running Exchange 2010 on SBS 2011. About a year ago, I renewed the certificate for the mail server, however, ever since that time, we receive certificate errors on OWA, and internally, we ...
0
votes
1answer
30 views

Can I use Cloudflare CDN/HTTP proxy for SSL-enabled web-site?

I want to use Cloudflare CDN/HTTP proxy for my web-site that already has HTTPS through LetsEncrypt certificate. I don't want to use Cloudflare's Free SSL certificate as it doesn't work on WindowsXP ...
1
vote
0answers
26 views

Rails + Nginx + SSL - Allow no-SSL on some routes

I have a rails app being served by nginx. I have ssl enabled on all routes with this conf: server { listen [::]:80; listen 80; server_name domain.com; access_log ...
3
votes
1answer
77 views

Secure Email Settings for Email Clients & for PHPMailer

I'm trying to work out how to make my outgoing/incoming email's as secure as I can possibly make them. First of all, my domain has Wildcard OV SSL Certificates, I have copies of the .csr, .crt and ...
1
vote
1answer
63 views

Let's Encrypt SSL Certificate File Not Found Error, but still working

I'm running SSL Certificates from Let's Encrypt. I've got them installed on my Ubuntu machine running Apache. The setup works fine and I can launch the website, see the green padlock and even got an ...
0
votes
0answers
25 views

WireShark tcpdump showing RST,ACK. Trying to figure out why?

Frame 5: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) on interface 0 Interface id: 0 (\Device\NPF_{49FD2502-47B9-4506-A052-F603251179ED}) Encapsulation type: Ethernet (1) ...
0
votes
0answers
17 views

stunnel keeps stopping with WSAECONNREFUSED given

Right so bit of background to start with I've got 2 stunnel installs on 2 different servers and basically using ensemble and stunnel to bounce a message around with ssl cert. Here is the flow. Where ...
0
votes
1answer
15 views

Is it possible to obtain a list of https hosts that users have visited from a Sonicwall before DPI-SSL is implemented?

The reason I ask is that if one could do this, is because one could use the logs to find a list of https sites to white list by counting the number of visits prior to implementation. But something ...
1
vote
1answer
35 views

Running an application on a second server with a dynamic IP. Do I need two SSL certificates when using Apache ProxyPass?

Terms example.com: The domain that points to the static server. static server: This server has a static IP address and has Apache ProxyPass pointing to dynamic server. dynamic server: This server ...
0
votes
1answer
19 views

importing self signed certificates mysql/mariadb and tomcat how to?

trying to use certs for securing connections between Tomcat 8.x and mysql/mariadb. I'm going to use a self-signed cert. What follows is what i think i should be going and appreciate you to jump in and ...
1
vote
0answers
17 views

Setup nginx proxy_pass to follow correct according to protocol used

I have the below config location / { proxy_pass http://backend; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For ...
3
votes
0answers
31 views

What process on a SonicWall Security Appliance Checks the DPI-SSL Client Inspection?

I'm interested in determining if there is high CPU usage on a SonicWall Security Appliance, but I don't know which process to check for high CPU usage. There are various options for this in the UI ...
1
vote
3answers
87 views

To SSL or to not SSL

Currently I have a website that serves a lot of mixed content I have the whole website under ssl. example.com All static content such as css js and a small amount of my own images such as logos ect ...
2
votes
1answer
45 views

421 Misdirected Request using HTTP/2 and SAN SSL

I'm running Apache 2.4.20 on Ubuntu and I have SSL configured. I have a SAN SSL Certificate and www.example.com and www2.example.com are sharing the same certificate. I'm getting a 421 Misdirected ...
0
votes
0answers
20 views

nginx - cannot get my subdomain running fine

I have a server "emberhub.me" with one subdomain "test.emberhub.me" I want to use SSL on all ... emberhub.me and www.emberhub.me requests should display the 'standard' Nginx welcome page ( ...
0
votes
0answers
25 views

Scan Ciphers on FTPS port

I'm trying to remove RC4 ciphers per BEAST, but I'm having trouble verifying that there are ciphers available on my FTPS ports. NMAP returns the cert on the port, but doesn't say anything about the ...
1
vote
1answer
55 views

gitlab SSL configuration / certificate verification failed

I have my own gitlab server, now secured with an letsencrypt SSL certificate. Now, I want to publish some packages via packagist. But when I enter the git repository url in packagist, I got the ...
-1
votes
1answer
57 views

Using SSL certificate issued by Godaddy for localhost website

I have a Godaddy SSL certificate that i want to use on localhost, however the certificate is issued to example.com and if i use that it definitely gives a certificate mismatch error. Is there any ...
0
votes
0answers
16 views

Accessing self signed SSL website in iis remotely shows error in ie

I have created a self signed SSL in IIS for the default website. I have used the solution here to get rid of certificate error while accessing the site locally however the requirement is that the ...
0
votes
0answers
58 views

FTP protocol Extremely slow on Windows 10. What could be causing this?

I am running 2 different devices (A pc and a laptop) both on the same network, both Windows 10. The laptop has standard transfering speeds on the FTP protocol. The PC has extremely slow transfer speed ...
0
votes
0answers
68 views

SSL Error when pressing CTRL+F5 (overwriting cache) in Firefox

I have an nginx server which fails to correctly delive ssl, when a user presses ctrl+shift+r or ctrl+F5. These shortcuts reload the page and bypass the browser cache. It seems to work in Chrome and ...
2
votes
3answers
56 views

Apache SSL without Private Key

We are currently working with a client who needs SAML authentication to setup their QA site on our servers. They have sent us the CRT file for the SSL to install, however they are not sending the key. ...
0
votes
0answers
36 views

SSLv3 seems to be not disabled even after tomcat 6 server xml changes TLSv1

Even after setting in server.xml as sslProtocol="TLSv1" when we do vulnerability check, the below are the details of output.. # /usr/sfw/bin/ > openssl s_client -connect ipaddress:portNo -ssl3 ...
-1
votes
3answers
64 views

nginx SSL redirect fails

I've got a site I'm serving with nginx. I want it to default to https, so I set up a redirect and also HSTS. If you visit http://getsumbits.com, the request times out. If you visit the https version, ...
2
votes
2answers
104 views

Postfix: SSL_accept:error in SSLv2/v3 read client hello A

A couple weeks ago, I noticed the following lines in my logs after moving to a new server with up-to-date software (which, among others, allowed me to finally disable deprecated SSL/TLS versions): ...
0
votes
1answer
20 views

Move website to a new domain

At the moment, the client website (an ASP.NET app) is accessible via, let's say, www.domain1.com. The client has then purchased a new domain himself, e.g. www.domain2.com, and is wanting to switch to ...
1
vote
0answers
11 views

Create an ssl tunnel to allow old device using ssl3 to connect to current server

I am having an issue with some devices not being able to connect to vmware horizon after SSLv3 was disabled on the last upgrade. At the moment there are no firmware upgrades to fix the device so it ...
1
vote
0answers
14 views

Apache: Intermediate CA on “dark network” (no internet access)

Background: Apache 2.4 (server) and Windows 7 Internet Explorer (client) using PKI; both machines are on a "dark network" (no internet access). Question: In the SSL handshake, how does the client ...
1
vote
1answer
44 views

Intermittent API/SSL Issue

I've been working with an API for some time now with which calls work for the majority of the time however occasionally (1 to 2 times a day for around an hour, although it's completely unpredictable ...
0
votes
1answer
22 views

How do I configure a whitelist of SSL/TLS protocols in uWSGI?

I can specify a list of ciphers using https = =0,x.crt,x.key,<ciphers>. Documentation for that is here: http://uwsgi-docs.readthedocs.org/en/latest/HTTPS.html#setting-ssl-tls-ciphers But is ...
0
votes
0answers
25 views

certutil and pk12util fail to import distinct certificate/key to Mozilla NSS database

I am about to build LDAP access via TLS on a Centos 6.7 system. I created a CA key (CA.key) and certificate (CA.crt) in /etc/openldap/cacerts. Likewise I created server.key/server.csr and created a ...
7
votes
0answers
98 views

How can you gracefully restart Apache without disconnecting SSL connections?

We are trying to reload Apache gracefully using a command such as: apache2ctl -k graceful This works as expected for HTTP users and the Apache config is reloaded without affecting users of the ...
2
votes
0answers
31 views

Upgrade openssl in apache from source and set as default

I have upgraded the openssl from source to version OpenSSL 1.0.1s for Apache, which installed under /usr/local/ssl/bin/openssl, and change the symlink to point it into this new installation directory ...
1
vote
1answer
32 views

dnsimple redirect HTTPS URL to another extension using single SSL cert

I have a website with many extensions. The DNS is manage by DNSimple. I bought a SSL Wildcard cert for my .co extension. I would like to be able to redirect https://example.fr to https://example.co ...
0
votes
0answers
60 views

too many redirects when using SSL

Im having an issue with https redirects. Ive tested in chrome, firefox and safari. When i load my website using https i get the errors Firefox: "The page isn't redirecting properly" Chrome: ...
0
votes
0answers
24 views

Initial page load slow using Tornado server and Apache2 for SSL reverse proxy

I'm experiencing long delays (generally minutes, but sometimes the page never loads) for my website (en-real.com) if the site is being accessed by a new user (browser). If the new browser refreshes ...
0
votes
0answers
60 views

EssentialSSL Intermediate CA

Where can i find the EssentialSSL Intermediate CA? I downloaded the bundle from https://support.comodo.com/index.php?/Default/Knowledgebase/Article/View/979/108/domain-validation-sha-2 , then ...