SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

-1
votes
1answer
24 views

https connection can't established behind a gre tunnel

I have a network topological graph like this: Local box GateWay box +---------------+ +--------------------------+ |192.168.1.200 | -> |192.168.1.2 10.2.10.2 | ...
1
vote
0answers
21 views

SVN merge with HTTPS hangs on FreeBSD

I was asked to post it on here instead (original here) I setup SVN and Apache, and when I do a checkout it executes normally, but whenever I try to run svn merge for some reason it just hangs. Here ...
0
votes
0answers
20 views

How to use Apache2 to proxy a service from a subdirectory URL to another port on the same server, while enabling SSL?

I'm running Ubuntu Server 14.10 which has an apache2 install hosting a couple of websites. I also have some other web services installed which are accessible on other ports. Here's a layout (sorry I ...
1
vote
0answers
35 views

SHA-2 issues with Verisign root on OS 10.9 Mavericks?

I'm using a Secure Site Pro with EV certificate from Verisign/Symantec, with a full SHA-2 root chain. Everything is great - except for Mac OS 10.9 (Mavericks), that complains the certificate is ...
0
votes
1answer
26 views

Setup SSL keys when using roles-profiles pattern with Puppet

Here is a scenario. I have two web applications (lets call them webapp1 and webapp2) that needs apache, php (with some modules), and the web app's code it self. This is how I set this I set this up ...
0
votes
1answer
49 views

How to make apache, node.js, beego and https work nicely together?

I have a server who I want to serve up two different sites: a.example.com should be directed to node.js listening on 8081/8443 b.example.com should be directed to beego listening on 8081/8444 I ...
1
vote
1answer
39 views

SSL not working with subdomains

I have an issue here, I am new on this, I've been watching some tutorials and I see that everything is OK in my configuration but I can not access to my page with the subdomains. Here is the report ...
0
votes
1answer
43 views

Configure Zenoss login screen for SSL URL

I'm trying to configure Zenoss 4.2.X to use an SSL-enabled URL in the login form. I have nginx as an SSL reverse-proxy sending requests to Zenoss listening on port 8080. This works. However, the ...
1
vote
0answers
27 views

WinRM HTTPS Connection to Windows 8 Systems

I have a couple virtual Windows 8 clients that I will be using to run some tests against a server. I set up WinRM so I can easily pull the data back from all the clients for analysis but the data ...
0
votes
1answer
74 views

Can I configure IIS 7.5 Forward Secrecy to redirect for unsupported browsers (I.E.)?

I have successfully configured Windows Server 2008 R2 with IIS 7.5 serving my Asp.Net 4 application for forward secrecy utilizing the information from here I still have visitors/user with downlevel ...
2
votes
2answers
38 views

Having SSLCertificateFile/SSLCertificateKeyFile/SSLCertificateChainFile in ssl.conf vs. inside VirtualHost

I'm setting SSL up for a new server and going off of how I configured it on the previous server. I noticed that I have SSLCertificateFile, SSLCertificateKeyFile, and SSLCertificateChainFile specified ...
1
vote
1answer
179 views

Configuring Tomcat 7 to use TLS only

I have a Tomcat 7 server on Ubuntu 14.04 (Java OpenJDK 1.7) which has been working fine for over a year, with no problems. A few months ago it stopped being accessible wtih Chrome, I dealt with ...
0
votes
0answers
28 views

HTTPS Config for symfony2

I have followed this tutorial for setting up https on an ubuntu server: https://www.digitalocean.com/community/tutorials/how-to-create-a-ssl-certificate-on-apache-for-ubuntu-14-04 I have ended up ...
2
votes
0answers
45 views

rabbitmq-shovel amqps connection handshake failure

I fail to setup a rabbitmq shovel over amqps. The same shovel works fine over amqp. my (edited) uri: ...
-2
votes
0answers
11 views

nginx ssl server rewrite request to external url to be http

I have an nginx server configured as a reverse proxy with SSL offloading. The server name is example.com Everything works fine, but there is a form in the webpage that needs to post to an external ...
0
votes
1answer
26 views

Dedicated server issues with SSL and IPs, content showing on wrong site [closed]

We have a number of sites on this dedicated server. Pages from one site are showing up on another site. Example: clientsite1.com (right site, no SSL installed) clientsite2.com (forwards to SSL, ...
2
votes
0answers
25 views

Apache - Virtual Hosting Mass Client Configurable SSL, Reverse Proxy

My scenario is that we host multiple websites for clients and all of the clients sites run on SSL only. Currently we have a seperate virtual host file for each client for Apache. Each file is ...
0
votes
1answer
31 views

Configure a transparent Elastic Load Balancer

I want to create an Elastic Load Balancer in front of my SSL site which simply passes through ports 80 and 443. I do not want my Elastic Load Balancer to have an SSL certificate of its own, I just ...
-1
votes
2answers
119 views

What should I do to know if SSL is working? [closed]

I am working with NGINX, I just set up a domain and subdomain where I need to have SSL on both. Look at the server block for the subdomain server { listen 80; listen 443 ssl; server_name ...
0
votes
0answers
20 views

Extra certs issue with Nginx SSL config

It seems that I've set up my SSL wrong. SSL labs gives me the following: https://www.ssllabs.com/ssltest/analyze.html?d=pitot.io&hideResults=on The issue in question is "extra certs". This ...
0
votes
1answer
52 views

Proper method to generate a secure self-signed certificate

I have several websites on which I want to install a self-signed SSL certificate. I tried following various guides, such as this one (all provided more or less the exact same instructions). The given ...
-1
votes
1answer
41 views

If SSL certificate expired, will it get automatically deleted? [closed]

Our website is http://example.com is redirecting to https://example.com/cgi-sys/defaultwebpage.cgi So maybe our SSL certificate expired? I can't see the SSL cert. in the cPanel list of SSL ...
0
votes
0answers
18 views

Wiresharking access to AWS to debug permission problems

I have a plugin which pushes files to S3. It's not my plugin and auditing what exactly it does has proved difficult. I'm trying to enable access logging on the bucket to figure out what exactly is ...
1
vote
0answers
57 views

Debugging client certificate problems

I am trying to configure an Apache install to accept client certificates. When I work with self-signed certificate, unknown to Apache and using Firefox, it works when SSLVerifyClient set to ...
-4
votes
1answer
70 views

How to open Port 443 on External Firewall? [closed]

I've been trying to configure SSL on my server for last 4 days now, with absolutely no success. I've generated a CSR file and uploaded the certificate and configured a Vhost, but nothing seems to ...
2
votes
2answers
93 views

How to set up TLS on hMailServer?

Complete noob here. Please be gentle :) I have a Windows 2008 server, running hMailServer. Right now all my communication is unencrypted. I want to start using TLS. So now I've got myself a SSL ...
2
votes
1answer
53 views

NginX dropping session data when acting as an SSL reverse proxy for a sinatra application

I'm pretty much stuck at this point. I've got a website, served up on Mizuno (A Jetty variant, I think) using Padrino (A sinatra variant), on port 8080, with Nginx listening at 80/443 to allow for SSL ...
1
vote
0answers
24 views

Nginx user uploaded SSL Certificates

I'm wondering what's the best way to let users upload their SSL certificates. I have a multitenant application based on rails/passenger/nginx and I need each user to use his own domain with his SSL ...
0
votes
1answer
29 views

SMTP doesn't work on distinct machine [closed]

I'm trying to setup TLS e-mail on remote machine, but it doesn't work. Trying to send e-mail on my local machine (Windows 7 x64 locale ru-ru): 16:33:18 CONNECT : Looking up host name ...
-2
votes
2answers
38 views

Creating a self signed certificate for demonstration purposes on Centos 7 server

I have setup my default tomcat website (tomcat 8.0.3) on a server inside my company LAN. From my work computer if I try to access the website by typing it into google chrome it is not working. The IP ...
1
vote
3answers
280 views

apache ssl configuration - ssllabs how to get A+

I have this configuration SSLCipherSuite AES128+EECDH:AES128+EDH SSLProtocol All -SSLv2 -SSLv3 for apache 2.4.6, openssl 1.0.2a and on ssllabs' ssltest I get A, it suggests (warns) that I have ...
1
vote
1answer
50 views

Enabling LDAPS: Cannot get to open port 636

I have a domain controller, which has Active Directory (AD). I want to turn on LDAPS on this AD, so that I could access the AD via secure connection. I have followed the following guide: ...
1
vote
0answers
38 views

curl error 51 - of multiple requesting machines, only one has the issue

I have an SSL cURL request that fails from a single machine with the following error: curl: (51) SSL peer certificate or SSH remote key was not OK This error seems to have popped up overnight, and ...
0
votes
2answers
86 views

Redirect loop when forcing HTTPS

I am using the following to force HTTPS on my main website. ### Force SSL RewriteCond %{HTTPS} !=on RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301] If you want to view the full htaccess ...
0
votes
1answer
39 views

Reverse proxy Apache rewrite rule doesn't work

I've an apache reverse proxy and i try to make a rules for redirects few urls of example2 to example1 but my rewrite rules doesn't work. I've try this in the vhost of example2 : ProxyPass / ...
9
votes
1answer
522 views

Why is Internet Explorer 11 unable to connect to HTTPS sites when TLS 1.2 is enabled?

Normally I don't use Internet Explorer at all. I use it only in design time for interface tests (development machine and with unencrypted http). Every week I run the SSL Labs server test which says ...
0
votes
1answer
38 views

Which L1K entrust certificates should be kept private?

One of our client has made an update to his SSL certificate and he did send us a procedure to update the certificate on our side. They also provided the L1Kchain.txt (that should be converted to a ...
0
votes
0answers
45 views

nginx config - pass all to https apart from one folder [duplicate]

I've been banging my head on this for 3 days day and I'm getting nowhere. I transferred the whole site over to ssl and that change over didn't go too bad and the site was only down for about 30 min. ...
0
votes
1answer
26 views

Apache Reverse Proxy with SSL handling

I am trying to use apache as a reverse proxy, and to off load SSL processing from the underlying Node Js application. I have the configuration defined but it doesn't look as though the system is ...
2
votes
1answer
74 views

logging SSLv3-handshaking failure on nginx

I have website server by Nginx in FreeBSD. Last week we decided to drop support for SSLv3 connection for our site. However I wondering if nginx has logs of all client who can't do SSL-handshake ...
1
vote
0answers
40 views

nginx: Redirection from http://*.example.com to https://example.com showing strange behaviour

I have an SSL certificate being only valid for example.com (not valid for subdomains) and therefore want to redirect both http://example.com and http://www.example.com to https://example.com using ...
0
votes
0answers
28 views

Server returning 404 for only Baiduspider

I recently updated my website to enforce HTTPS for all requests. Everything appears to be working well after this change but Baidu's web crawler (Baiduspider) is receiving a 404 for all requests. ...
0
votes
1answer
27 views

Signed SSL certificates on Zyxel USG60 web interface?

I know that you can add SSH certificates for client/server authentication for the web interface and SSL VPN, but is there a way to change the SSL cert that the web interface sends to the browser just ...
1
vote
2answers
45 views

SSL Issue Only For Some Clients (Linode Server)

Leadup: Set up a wordpress linode. Imported a wordpress site. Everything worked. Added an ssl certificate from godaddy. It looks like the SSL certificate is installed correctly: ...
0
votes
2answers
80 views

Certificate Chain with AWS ELB & GoDaddy Certs

I'm trying to setup SSL on my AWS ELB, but I am thus far unable to figure out what goes into the "Certificate Chain" field. I receive the following error: Unable to validate certificate chain. The ...
8
votes
2answers
677 views

Is this SSL certificate chain broken and how to fix it?

For the SSL cert on the domain example.com, some tests tell me that the chain is incomplete and since Firefox keeps its own certificate store, it might fail on Mozilla (1, 2, 3). Others tell me it is ...
-2
votes
1answer
59 views

Connect to IPython via HTTPS, got SSL error

This question is migrated from here. I have a server running Ubuntu 12.04. I have installed IPython on it. Now, I would like to access IPython via HTTPS. I have done the following steps: Creating ...
0
votes
0answers
40 views

Random error code: ssl_error_rx_record_too_long for certain clients

I have an apache2 web server that's been working for a couple of years without issue. Last week, a two of our users began randomly getting Error code: ssl_error_rx_record_too_long when trying to ...
0
votes
1answer
24 views

Jboss SSL connection persistent

I have a Client code relying on Jboss 5.1 which uses self signed certificates for connecting to credit card servers over HTTPS. Certificate expired on 03-13-2015 9:55 AM and it got replaced the ...
0
votes
1answer
33 views

How to health check hosts over HTTPS behind the load-balancer?

I have NGINX serving my site over HTTPS on EC2 hosts behind Elastic Load Balancer. I need to set up a proper health-check in ELB. However, I cannot use https://www.example.com because I need to ...