SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
0answers
17 views

Tomcat : Multiple domain names redirect to one domain

I have a Webapp running on Apache tomcat on Debain wheezy, using a single domain name currently. The webapp uses SSL certification too. Now, the company which I am working for, bought similar domain ...
4
votes
2answers
209 views

Google Chrome says my SSL uses outdated security settings but other site tests disagree [closed]

I installed StartSSL on my web server which is running Linux Apache on CentOS 6.5. shaaaaaaaaaaaaa.com said Nice. example.com has a verifiable certificate chain signed with SHA-2. However ...
1
vote
1answer
59 views

How to setup Nginx to use ssl/non-ssl for different urls on a single site, but always use ssl if user explicity types https in browser's address bar?

My current nginx.conf looks something like this: server { listen 80; server_name www.example.com; root /var/www/; location / { } location /users { rewrite ^ ...
1
vote
1answer
85 views

Can't connect to MySQL 5.5 with SSL

I am trying to get MySQL SSL replication setup for two brand new RHEL 6.6 x64 servers. I have replication working without SSL, but I can't get it set up with SSL, and can't connect directly using SSL ...
1
vote
0answers
17 views

When using HTTPS Index.html showing instead of ProxyPass reverse proxied site on Centos 7 Apache 2

The goal is that external users can connect via HTTPS, go through basic auth on Apache and then view a proxies tomcat site. I have set up a reverse proxy to a tomcat server running on the same ...
0
votes
1answer
44 views

Nginx + ssl not responding

I'm currently putting up a server with SSL for leapfunder. I created a server (Ubuntu 14.04 on AWS), directed notes.civocracy.org to it. I bought a SSL certificate on GoDaddy, lauched and configure a ...
0
votes
1answer
47 views

Extra SSL Certificate For Database Server?

I have three servers: Web-Server Database Server Database Replication Server In the upcoming days, I am going to order a SSL certificate for the Web-Server to deliver the data encrypted to the ...
1
vote
1answer
32 views

How to bind webmin to one specific domain/vhost? [closed]

I'm running a Virtual Private server with three specific domains. Let's say example1.com, example2.com, example3.com. I installed webmin on this VPS to peform some easy tasks and just to manage some ...
2
votes
3answers
50 views

Multiple wildcard certificates for same common name on different servers

We've recently ventured into the cloud for hosting a number of websites. On our on-premise hosting we're using a wildcard certificate for a number of websites, and we want to do the same for our ...
0
votes
1answer
16 views

Can't set up https access on apache 2 (ssl_error_rx_record_too_long)

I've already looked at a number of how to guides and other posts on server fault but nothing seems to work and in Firefox I always get that same error (ssl_error_rx_record_too_long). I purchased an ...
0
votes
1answer
30 views

Can't remove forced HTTPS redirect from Nginx?

I had originally setup my Nginx configuration to automatically redirect HTTP to HTTPS. Due to my work security policy and Cloudflare integration, HTTPS will not resolve inside my network. I'd simply ...
0
votes
1answer
53 views

Nginx HTTPS config issue for non-wws

I need to configure nginx for one of my rails application to route some pages through SSL but facing problem with configuration. I've a SSL certificate where common name is example.com and my site is ...
1
vote
0answers
27 views

HTTP Strict Transport Security (HSTS), Azure and HTTP Strict Transport Security IIS Module

Question: How do you properly install and configure HTTP Strict Transport Security (HSTS) in an Azure website? Apparently for IIS the method to use is to install this module: ...
0
votes
0answers
30 views

Does my SSL cert have anything to do with or say about the symmetric session key?

The answer found on this server fault thread is my jumping off point for this general topic: http://serverfault.com/a/313558 ... and this question can be thought of as a follow-up to that answer. ...
1
vote
1answer
28 views

Certificate common name invalid

I have a webserver and its domain name is foo.com, if I access the site in https://foo.com I will receive the warning from Chomre browser. NET::ERR_CERT_COMMON_NAME_INVALID I searched the web and ...
0
votes
1answer
10 views

IIS 7.5 Redirct from HTTPS

I have multiple websites on my IIS 7.5 with one IP address and a wildcard SSL Certificates installed. Now i want to change the wildcard certificate but i want if the user browse the old https web ...
-3
votes
1answer
48 views

SSL certificate(s) for one domain and one subdomain

I want to add https to my site. I only need domain validation and I want the cheapest possible option. I have: Server 1 - example.com (IP 1.1.1.1) Server 2 - files.example.com (IP 2.2.2.2) Users ...
0
votes
1answer
54 views

Gandi SSL certificate, X509 private key values mismatch

I recently regenerated my SSL certificate, which I purchased from Gandi, using the following command: openssl req -nodes -newkey rsa:2048 -sha256 -keyout server.key -out server.csr This generates 2 ...
0
votes
0answers
12 views

SSRS 2012 Native Through Apache Proxy

I am trying to find a solution for getting MS SQL Reporting Services working through an Apache proxy. I have been at this about a week now and narrowed down what I can and cannot do quite a bit. I ...
1
vote
1answer
36 views

WIldcard SSL Subdomain Not Pointing at Correct DocumentRoot 3

I have the same problem than: WIldcard SSL Subdomain Not Pointing at Correct DocumentRoot but the answer does not help me. I have a Wildcard SSL installed on my Apache server. With HTTP : ...
0
votes
1answer
25 views

Disable cipher suite or change priority in apache based on IP address

I have run into an issue where I need to disable DH cipher suites or change the cipher suite priority only to certain IP addresses in Apache 2.4.7. Reason being is that a system running on JDK7 needs ...
-2
votes
0answers
8 views

All SSL except 3 pages - nginx [duplicate]

I make my website HTTPS, but I need to disable SSL for 3 pages: http://domain.com/activate http://domain.com/stop http://domain.com/change This is my config server { listen 80; ...
0
votes
2answers
28 views

How to count number of bytes used to by HTTPS handshake

Our application sends relatively large number of small requests (responses < 50 bytes) via HTTPS. I would like to reduce the server bandwidth usage. I want to tell how many bytes is used to ...
0
votes
1answer
18 views

handshake_failure from cloudflare ssl

I'm using FastSpring payment, the problem is when I'm making payment in FastSpring and returning to my website, it's giving me Http notification issue: -- Error -- ...
1
vote
1answer
42 views

How to mitigate STARTTLS MITM (downgrading and forged certificates) between email servers?

I'm not as technically inclined as most on this site so please keep that in mind. I wanted to learn more about email security so I did some research and everything is according to my understanding, ...
0
votes
1answer
38 views

SSL Architecture Advice Needed

We run a SaaS (software as a service) company where we allow multiple clients to create "sites" within our application. This typically results in the client having a site that is a subdomain of our ...
0
votes
1answer
37 views

SSL with Virtual Hosts Using SNI

I am using RHEL 6, httpd-2.4.10, openssl-1.0.2a and I have setup SNI as explained in http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI Everytime I restart apache I get following message: ...
1
vote
1answer
57 views

All LDAP traffic is being sent on TLSv1.1 not TLSv1.2

I have a kvm server, Centos 6.6 host with 6.6 guests. We run a php based web app that uses LDAP authentication for our clients. We just moved a client to this setup and they are reporting that all ...
0
votes
1answer
41 views

Can't stop www. from redirecting to HTTPS://

My SSL certificate expired recently and I have been trying to disable SSL temporarily until I can get it renewed however something keeps redirecting the subdomain www. to HTTPS:// It's not the ...
1
vote
1answer
44 views

SNI (SSL) support on Facebook built-in browser on Android [closed]

This issue in the Android bug tracker seems to suggest that SNI has been part of the Android OS now for some time so I'm surprised to find that visiting our CloudFlare Flexible-SSL enabled site throws ...
0
votes
1answer
67 views

Port 443 set up SSL on Nginx + Ubuntu + EC2

I've tried everything and I searched Google behind some solution, but can not configure SSL (https) in my Nginx server that is within a Ubuntu 14.04.2 LTS on Amazon EC2. My website works perfectly on ...
2
votes
1answer
68 views

When shoud I use ssl_session_cache paramter in nginx ssl settings

What do I benefit from ssl_session_cache set in nginx.conf when I using https? See here.
0
votes
0answers
42 views

OCS Inventory Agent Peer certificate cannot be authenticated with known CA certificates

I have configured OCS Inventory server for our helpdesk department. Few days ago they asked me to help them with OCSAgent configuration. They agents don't want to connect to server via ssl when ...
0
votes
0answers
17 views

SunOne Webserver 6.1 support for SHA2

I have sunone webserver 6.1SP19. Just like to check whether the certutil option -Z supports SHA256. I searched from examples and so far, what I see is -Z SHA1. I would like to create a CSR with SHA2 ...
0
votes
2answers
59 views

Port 443 “listening” but “not open”

I am running Apache/2.2.15 on Centos 6.6. I have a Verizon router and checked the port forwarding and saw WorkstationName 192.168.1.6 HTTPS TCP Any -> 443 All Broadband Devices Active ...
0
votes
1answer
35 views

Redirect Subdomain That is Not on SSL

I have a SSL certificate that is installed on the server that only covers the domain, not subdomains All traffic is redirected using apache config file When I set up the subdomain to redirect a ...
0
votes
0answers
79 views

Setting up SQUID 3.5 with SSL Support

I’m setting up a SQUID 3.5 server with SSL support and managed to successfully configured HTTP with SQUID proxy. However, my HTTPS connection is not working. SSL configuration was carried out using ...
1
vote
1answer
26 views

CISCO SSL VPN (multiple Sites) [closed]

I'm having a small issues and I'm sure it's NAT related. Our Users connect to SSL VPN in Ft. Worth. We also have a site up in Dallas. There is a current Site to Site connection there with full ...
0
votes
0answers
71 views

CentOS Postfix/Dovecot status deferred conversation with 127.0.0.1[127.0.0.1] timed out while receiving the initial server greeting

Linux Kernel: Linux 2.6.32-504.16.2.el6.i686 on i686 RAM: 6GB OS: CentOS 6.6 Postfix 2.6.6 Dovecot 2.0.9 Relay Host Verizon Stunnel through 127.0.0.1:2525 Webmin 1.750 Virtualmin 4.17.gpl Multiple ...
0
votes
0answers
59 views

Nginx with proxy_protocol is not accpting requests from haproxy in TCP mode with send-proxy

I have haproxy and nginx. I want make this setup accept HTTPS connections and I want HTTPS request being decrypted on nignx, not haproxy. In haproxy I've created frontend and backend for HTTPS ...
1
vote
1answer
33 views

Remove www from subdomains in Apache

I have a domain domain.org I am adding SSL, unforunately a lot of subdomain where created as "www.subdomain" and it is way more expensive to create certificate to multiple 3 level subdomains. Is it ...
-1
votes
3answers
48 views

Wildcard SSL cert warning of insecure content across sub domains [closed]

I have a wildcard SSL certificate installed on various servers for different sub-domains. When looking at any pages or other content directly all browsers are happy with the certificate. But if I ...
0
votes
1answer
55 views

Arguments not transfered when nginx rewrite the url to https

I have nginx frontend and tomcat backend. Now I need to encryt the specific url end with .do from client to nginx server using ssl. And js/css could be requsted with http. In order to avoid mixed ...
0
votes
0answers
31 views

Windows Home Server 2011 and SSL certificates

I am running a home server with Windows Home Server 2011 and have set up Remote Web Access and Remote Desktop. I also have a valid SSL certificate from PositiveSSL which is set up on IIS. But whenever ...
0
votes
1answer
18 views

My Windows server 2008 does not have ssl3.0 or tsl

Developing some app I got a error about ssl and tsl things, the fix I found on the internet tell me about enable ssl3 o tsl on my host, but when I come to find that on the regedit I found this ...
1
vote
0answers
61 views

SSL Configuration failed in Apache after moving keys/certs to another machine

I'm in the process of moving my website to another server, and after moving the SSL key and certs and recreating the same Apache config, I encounter the following in the error logs at the time of ...
0
votes
1answer
41 views

Generating a CSR with a Multi-Domain Wildcard SSL [duplicate]

I tried Googling and haven't been able to find anything reliable that shows me how to generate the CSR. I have multiple domains, that I'd like added so I can't use the usual OpenSSL wizard: ...
0
votes
2answers
59 views

Is it possible to get 'csr' info from SSL certificate in web browser? [closed]

When creating a csr you provide some information about Country,company, email, etc. Then when the certificate files are installed in i.e. apache , you browse to the url and see i.e. in chrome the ...
1
vote
1answer
62 views

How can the HSTS header be added to WebLogic?

Is there an implementation for using the Strict-Transport-Security header to WebLogic? I figure it would be using something in web.xml under <security-constraint> I know how to do this for an ...
0
votes
0answers
17 views

How to get root CA certificate in windowsserver 2012

I am trying to connect to W2k12 server AD from my local unix box using net::ldaps. There seems to be CA certificate issue, as openssl s_client -connect AD.server.ip:636 is failing: [root@rh64-0 ~]# ...