SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

4
votes
2answers
115 views

Can I use TLSv1.0 for one client IP, TLS v1.2 for everyone else

Something like this? # TLS v1.0+ for one IP <VirtualHost _default_:443> Order deny,allow // <------------- HERE Deny from all // <------------- HERE Allow from 10.20.30.40 ...
5
votes
3answers
221 views

Wildcard SSL with prefix

I am wondering if it's possible to create a wildcard certificate with a prefix. I know that *.domain.com will cover anything at the first level (eg. one.domain.com, two.domain.com, ...
0
votes
2answers
70 views

SSL works in Chromium but not Firefox (nginx)

I'm using client-side SSL certificates to access my web server. Suddenly stopped working after several months with no changes to my nginx config, but only in Firefox. Still works fine in Chromium. ...
0
votes
1answer
19 views

Meaning of ssl_ciphers line on nginx.conf

What is the meaning of the following line from an nginx.conf file? ssl_ciphers HIGH:!aNULL:!MD5; I know the ssl cipher is specifying which algorithm to use to secure the server communication and ...
1
vote
1answer
27 views

Error with Python2 as a https client with an nginx server and SSL certificate chaining

I am having trouble getting Nginx 1.8 working with my certificates so that I can use a python2 based https client. (requests.py, URLLib) I've tried using Comodo and GlobalTrust wildcard certificates ...
-3
votes
1answer
18 views

Buying a certificate for APIs [closed]

Our requirements are simply to secure end-to-end communication over https://. We need it from a CA that will be available on most android / iphones. The variety of certificates out there are simply ...
0
votes
1answer
77 views

The site is using outdated security settings that may prevent future versions of Chrome from being able to safely access it - even with SHA2

I get the above complaint from chrome. I've found The site is using outdated security settings that may prevent future versions of Chrome from being able to safely access it, but this is a non-issue ...
1
vote
1answer
127 views

Disabling SSLv3 and SSLv2 Protocol On My Ubuntu 14.04 Server

I recently installed a SSL Certificate on my server. Then I tried out this tool to test my newly installed SSL certificate on my server and see if there is no problem. It turned out that it has a ...
1
vote
1answer
116 views

Windows Server 2012 R2 IIS Weak Ciphers Reported After Lockdown

I am having issues getting a windows server 2012 R2 64-bit box locked down. I used a tool called IISCrypto to make the box FIPS 140 compliant. I have manually checked the registry entries and all the ...
2
votes
0answers
30 views

Configure AJP Connector for enabling SSL in Eclipse Tomcat

I am newbie to server side and would like to how to configure AJP connector in eclipse's tomcat in linux environment to enable SSL. I want to enable SSL in tomcat without using keystore. I created ...
0
votes
1answer
30 views

New Exchange SSL certificate now Windows XP Outlook clients won't connect

I renewed our SSL certificate for Exchange but now Outlook won't connect on any Windows XP machines. It asks for the username and password and even when the correct credentials are entered it just ...
19
votes
1answer
2k views

How do I disable TLS 1.0 without breaking RDP?

Our credit card processor recently notified us that as of June 30, 2016 we will need to disable TLS 1.0 to remain PCI compliant. I tried to be proactive by disabling TLS 1.0 on our Windows Server 2008 ...
0
votes
1answer
55 views

Self signed certificate in certificate chain

I'm having building the correct certificate chain. My certificate issue a class 2 issued by StartSSL. Here's in order what I have put in my ssl.crt: my cert https://www.startssl.com/certs/ca.pem ...
1
vote
2answers
35 views

Do I need to include `.local` addresses when I renew a SSL certificate?

I am about to renew a SSL certificate to be used with Microsoft Exchange Server 2013. I am viewing the current SSL certificate that is about to expire to check what addresses are currently included on ...
2
votes
1answer
26 views

Posting url of rails application on FB without https replace meta tag description with “welcome to nginx”

I have a rails application deployed on an amazon ec2 ubuntu instance, configured with nginx which is working fine. The problem is when I try and post the url of the site on facebook without https ...
0
votes
0answers
12 views

Random HTTPS failures, rebooting helped

I'm a web developer working on a product that has a web component and an Android application component. The Android part connects to the same web backend that provides the website. On Friday a lot of ...
1
vote
1answer
29 views

puppetserver timeout cannot find key

Fresh install on Centos (tried both 6 and 7) from the PC1 repo. Starting puppetserver munchs away at my RAM for a few minutes then fails with this error: Exception in thread "main" ...
0
votes
1answer
14 views

How to handle POODLE vulnerabilities on web service running on tomcat 6.0

I have a web service which is running on Tomcat 6.0, Java 7. The Connector uses the JSSE configuration. Below is what the connector in the server.xml file looks like, with a few modifications: ...
0
votes
1answer
120 views

Outlook SSL Error after New Certificate Installation

Recently replaced the SSL cert on our Exchange 2010 box with a new wildcard cert. Assigned services, reconfigured all URL's for external and internal access to be identical (previous cert was a SAN ...
0
votes
0answers
40 views

Glassfish 3 unable to deactivate SSL3 for IIOP

I'm running Glassfish 3.1.2.2 and want to disable SSL3 for the IIOP ports (default 3820 and 3920). I set configs.config.server-config.iiop-service.iiop-listener.SSL.ssl.ssl3-enabled=false ...
1
vote
1answer
98 views

Roundcube + Dovecot: SSL errors when trying to log in

I'm setting up a mailserver using Dovecot 2.2.13, Postfix 2.11.3, and with Roundcube 1.1.1 connecting to it. Roundcube is running on a different server in nginx/php-fpm. Both servers are running ...
3
votes
2answers
156 views

Do I need to purchase a trusted cert for offline environment?

I have a webserver used self-sign cert which is not connected to internet and those connect to my webserver also have no connection to internet, in such environment, do I need to purchase a trusted ...
-1
votes
1answer
41 views

Redirect https back to http in nginx with wildcard domain

I have a top level domain example.com with a SSL wildcard cert attached to it, and a subdomain forum.example.com that I don't want SSL to be used on. My problem is if I enter ...
1
vote
0answers
133 views

Google Chrome has detected insecure content on the page

I'm the system administrator of the site https://iris.quickfds.com. After setting a wildcard certificate *.quickfds.com for the site, I checked all main browsers. This site is consider with no mixed ...
0
votes
1answer
35 views

Self-signed SSL certificate to match multiple subdomains

I have a bunch of sites served through nginx with SSL with self-signed certificates, each of which is on a subdomain, e.g.: https://app1.example.com https://app2.example.com My user base is small ...
1
vote
1answer
100 views

Apache's deprecated SSLCertificateChainFile directive (AH02559)

Recently I've upgraded Apache from 2.2 to 2.4 and I cannot figure out how to deprecate a SSLCertificateChainFile directive. The error: me@jessie:~$ sudo apache2ctl configtest AH02559: The ...
0
votes
0answers
23 views

SSL Working on 8888 but not 443

I have Apache set up to server HTTPS traffic. If all I change in the 000-default.conf is <VirtualHost *:443> to <VirtualHost *:8888>, I am able to hit the page externally on port 8888. ...
0
votes
1answer
42 views

How to check if clients connect to IMAP/POP via TLS or SSL?

I am willing to disable SSL on my dovecot servers (Debian GNU/Linux), leaving TLS as the only option. Before doing so, I would like to know who is still connecting via SSL with older or misconfigured ...
2
votes
2answers
27 views

Command line to set up SNI on IIS for Windows 2012

I'm trying to complete the automated build script of my web server, which runs Windows 2012 and has two SSL websites, each with its own digital certificate. I am using SNI, which works fine when I ...
0
votes
1answer
59 views

Why I have set HTTP_X_FORWARDED_PROTO and unset HTTPS on Apache 2.4? [closed]

Recently I updated my website: CMS (Drupal), it's OS (Ubuntu 14.04) and Apache (2.4.7). The situation is that when surfing on https://example.com/whatever PHP can't detect HTTPS. $_SERVER['HTTPS'] is ...
-1
votes
1answer
31 views

Which kinds of SSL certs there are?

When I visit eg. https://www.google.com, my web browser (IceWeasel) shows just a (grey) lock icon next to the URL. However, when I visit eg. https://www.cia.gov, a green lock and "Central Intelligence ...
0
votes
1answer
31 views

Apache SSL Errors every 30 seconds

I have three load-balanced Apache 2.4.6 servers running on fresh installs of CentOS 7. The load-balancer is a Barracuda 340. I know its old, but it's more than capable of handling the traffic, and ...
0
votes
1answer
33 views

Nginx SSL cant connect to site

I just bought a SSL certicate for my website and tried to get it working with my nginx install, but uppon connection the browser refuses the connection with the website. Here is the relevant part of ...
0
votes
1answer
149 views

Job for httpd.service failed

after following this tutorial :https://www.digitalocean.com/community/tutorials/how-to-create-an-ssl-certificate-on-apache-for-centos-7 I have tried everything I possibly can to fix the error I have ...
0
votes
4answers
64 views

How can I move certificates from 1 server to another

I'm using StartSSL which , after you proove who you say you are, provides a certificate which I can install to authenticate myself. I have some SSL certificates associated with this account. I've ...
0
votes
0answers
58 views

Dynamics CRM 2015 Outlook Client not connect

My Outlook CRM client don't connect to the crm 2015 server, not in the LAN nor the Internet. The error is: Authentication failed. The network is a test environment with virtual machines, installed ...
3
votes
3answers
61 views

What subdomains does an Exchange 2013 SSL certificate require?

I need to order a SSL certificate for an Exchange 2013 server. I am going to order an UC Certificate from Comodo Group Inc. I understand that I need to specify the below subdomains whilst ordering: ...
2
votes
1answer
46 views

configuring ssl on nginx - is this ciphers list up to date?

I have bought a certificate from Comodo and I'm following an article on their site on how to configure the certificate on my nginx. The question is, is this configuration, mainly the ciphers list, up ...
2
votes
2answers
38 views

AD server not using cert for Active Directory LDAP + SSL

I'm trying to enable SSL for Active Directory in our domain. The problem I'm running into is that the server is failing to recognize the certificate I've made for it. Whenever I try to query the ...
0
votes
1answer
65 views

ELB Https with HTTP on backend using Tomcat without nginx or haproxy

I want to setup ELB to terminate SSL at load balancer and communicate with backend instances over HTTP. I have uploaded valid certificate on ELB. When I set up following configuration ELB - HTTPS ...
0
votes
0answers
60 views

CURL & SSL failing on a specific site [duplicate]

I can't get curl to download https://www.sicdm.caixa.gov.br/cadmut/login_internet_form.do on a CentOS 6.2 server. The command curl -v -k -3 ...
1
vote
1answer
43 views

SSLRequire - file function

I'm having trouble with Apache 2.2 and the small documentation that I can find for the file function of SSLRequire. I'm trying to check the email property of the client certificate in a request using ...
0
votes
0answers
24 views

Lync Server SSL Cert

I have a cert issued by the domain CA. The cert subject is the name of the server. The subject alternative name contains sip.domain sip.domain2 dialin, meet, admin, and the auto discover for ...
1
vote
1answer
49 views

Apache refused to include TLS1.2

I was running openssl0.9.8 for a long time and suddenly my SSL gave me a red X. From the company that I purchased the ssl, they told me that i need to update my server config to include tls1.2 and ...
0
votes
0answers
81 views

AWS cloudfront with SNI + ELB with 443 to 80 redirection to EC2 issue

I have configured web server front ending with AWS ELB and CloudFront. I have deployed SSL certificate on load balancer (ELB) for HTTPS connection. We have set up 2 listener protocols: Source -> 80 ...
3
votes
2answers
96 views

Firefox sec_error_unknown_issuer after renewing root CA certificate [closed]

For our corporate network we use an internal CA, which directly signs some intranet server certificates. Now the root certificate is about to expire. I tried to renew it with the following OpenSSL ...
1
vote
1answer
89 views

nginx: How to log TLS error (if unsupported ciphers / protocol)

I'm in the progress of switching to 100% https. Server is running nginx+libressl. Before going https:100% I'm interested in seeing which clients would no longer be able to connect to my site. E.g. ...
0
votes
1answer
50 views

Best way to manage multiple domain with SSL in single droplet?

Firts of sorry about my poor english, but I'll do my best. Currently I manage 2 domain on my $5 DigitalOcean droplet and have use Cloudflare as my DNS manager with Flexible SSL configuration, ...
0
votes
1answer
30 views

Nginx forward ssl to ISPConfig lxc container

I am having issues with https connexions to the ISPConfig admin panel (port 8080). My setup is relatively standard. I own a physical host, which routes all traffic on common ports to an LXC container ...
0
votes
0answers
36 views

haproxy get ssl interrupt error, how haproxy tell server to close ssl or tcp?

I use haproxy 1.5 and a windows server build site. my site work under the https protocol, so for haproxy I use tcp mode since I think the ssl can not work on http mode. my problem is the ssl ...