SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

3
votes
1answer
47 views

MySQL JDBC force ignore client certificate on AWS RDS

I have a Java web app running on AWS and connecting to a MySQL database running on AWS RDS. My app uses SSL client certificates signed by our own CA to connect to various web services, so I have set ...
0
votes
0answers
31 views

SSL certificate mismatch on certain networks

I am encountering a very curious problem with my ubuntu server setup. I am running a few websites using a LAMP stack. One of the websites has a dedicated ip and a comodo ssl certificate. The other ...
1
vote
3answers
54 views

Is it safe to disable HSTS Preloading as long as the site will remain accessible via HTTPS?

I have a website which is using the free Cloudflare service and have enabled HTTP Strict Transport Security (HSTS) preloading on it. If I wish to remove the domain from Cloudflare and route directly ...
0
votes
1answer
7 views

Supporting different TLS versions by service on a tomcat web application

I have a legacy web application that runs on Tomcat7 with Java6 and makes web service calls to multiple external services. One of those service providers has decided to end support for TLS1. I tried ...
1
vote
1answer
17 views

Apache SSL FS disable SHA1

I am using apache 2.2.15 and are about to make it as secure as possible. When I do a scan of one of my websites via the Qualys SSL Test. https://www.ssllabs.com/ssltest/analyze.html It lists me the ...
0
votes
1answer
46 views

Full end to end encryption with AWS Elastic Load Balancer, Nginx and SSL

You will see a lot of places on the web telling you the way to setup SSL with an AWS ELB is to set up a certificate on the load balancer and then forward traffic from port 443 to 80 so that traffic ...
0
votes
0answers
22 views

Do I need to block my application port(In security group) for the security in Linux EC2 instance

What I DID I have two Play framework web applications which runs in 9001 and 9002 ports in AWS EC2 instance. I am using the Nginx proxy server to routing the two applications. I have configured the ...
0
votes
3answers
36 views

Nginx SSL config returns too many redirects, but regular http version is fine

I have recently tried to add SSL termination to my NGINX server configuration. The regular http reverse proxy/load balance version is working fine. Unfortunately, the current config is returning "too ...
0
votes
0answers
6 views

ERROR: (gcloud.compute.ssl-certificates.create) invalid_grant

My website is running on Google Compute Engine and Machine type is n1-standard-1 (1 vCPU, 3.75 GB memory) I am trying to install SSL on the website and have both the example.key and www_website_com....
0
votes
1answer
25 views

SSL certificate for AWS Route 53 NS record

I have a client who has asked me to set up a subdomain that delegates to a set of nameservers for handling email. This is a little bit ouside of the work I normally do. They've explicitly told to me ...
0
votes
0answers
54 views

Change of Server (IP Address) Affects Access to the server from Domain SSL Certificated by LetsEncrypt

According to many answers the Certificate is not bound to the IP address but bound to the domain. But still I can not reach the application by using the domain. Is there a way to notify the DNS that ...
0
votes
2answers
33 views

SSL wildcard pattern not working when prefixing URL with “www.”

If I have a certificate which is issued to *.abc.dk, I can get to the site with for example vm.abc.dk fine (changes automatically to https://www.vm.abc.dk) but when I try to write www.vm.abc.dk I get ...
-1
votes
1answer
32 views

Force use of new SSL certificate?

I recently let an ssl certificate expire. I then purchased and installed a new certificate (didn't renew the old one do to the cost of renewing an ev cert vs a new basic cert). Everything works fine, ...
1
vote
1answer
43 views

Signing OpenVPN server and clients certificates by Samba4 DC auto-signed CA.pem

I installed Samba4 and configured it to be domain controller, and it auto generated ca.pem, cert.pem, key.pem. And now I want to use the same CA of samba to sign the new certificates (maybe generated ...
-1
votes
2answers
20 views

Apache SSL not working in Centos 6.5

I have a simple LAMP stack with httpd/Apache installed on Centos 6.5. I've set my vhost up in /etc/httpd/sites-available/acute.conf like so: <VirtualHost *:80> ServerName acutemedical.co ...
0
votes
0answers
14 views

3 apache config files after SSL cert install. Rewrite won't work

I used EFF Certbot to install a free SSL certificate. Now I have three config files for my website. 000-default.conf 000-default-le-ssl.conf default-ssl.conf Additionally I have some other config ...
0
votes
0answers
21 views

Utilizing SSL on Multi-domain, Autoscaling Elastic Beanstalk Setup

We are creating a Content Management System for our company. It is important that this CMS support dynamic domain names on a dynamic number of servers. After many hours of research we felt that Amazon'...
0
votes
1answer
40 views

https not working with www and DNS redirect isn't helping

Not sure why this site is killing me as I've configured SSL on domains before without a problem - but the combination of DNS management and server configuration is hurting my head - so I'm asking for ...
2
votes
1answer
35 views

MySQL SSL Connection

I'm trying set ssl connection with MySQL Server. I've read this and many more articles https://dev.mysql.com/doc/refman/5.7/en/using-secure-connections.html There is one thing i still don't know, ...
0
votes
0answers
28 views

OWA Issue after installation of rollup- Firefox and Chrome cannot load page, potential SSL issue

My company is using Microsoft Exchange 2010 on a 2008 Server virtual machine. It fell quite behind on regularly updates because of potential downtime conflicts, but this weekend we patched it ...
0
votes
2answers
50 views

How to enable HTTPS for the public DNS route of an Ec2 instance instance?

I am working on a Facebook bot app and one of their requirements is to setup a webbook on my webserver that is returning a token, to validate my account. I quickly spin up a micro instance (Ubuntu) ...
-1
votes
1answer
35 views

What permissions should I give to CA Bundle file? [duplicate]

Hi I setup an ssl certificate using godaddy and read the following article: Best location for SSL certificate and private keys on Ubuntu. I am trying to protect an aws ubuntu gitlab instance that uses ...
0
votes
0answers
43 views

Disabling TLS 1.0 prevents Client HELLO packet

We have an application that we are trying to get to communicate to Paypal. We noticed that communication failures were occurring, so we routed everything through Charles as a proxy. When we routed ...
1
vote
1answer
31 views

Security of SSL certs on AWS ELBs / SSL offloading

I have some concerns about security and am wondering how AWS will store an SSL certificate deployed to an ELB. I have a wildcard SSL cert for my domain that I want to make sure doesn't persist ...
2
votes
1answer
91 views

DL380 G6 iLO2: Upgrade SSL connection

I've got a HP DL380 G6 with ILO 2.29 installed. Now after upgrading the certificates to a AD-signed one (to get rid of the pesky warnings) we're stuck with one last one, only showing up on Google ...
2
votes
0answers
30 views

Internal EV SSL From A Windows Server 2012 R2 Root CA Shows Up As A Normal Certificate

I am trying to setup an internal ev ssl server for all of my internal applications giving ie the little green bar and chrome displaying my company name. It works fine in IE displaying the green bar as ...
0
votes
0answers
13 views

Disabling TLS1.0 in mod_proxy

We are using apache http server 2.2.29 and jboss 6.4. We are using Mod proxy for communication between web server and jboss application server. We are planning to disable TLSv1.0 in mod proxy ...
0
votes
1answer
140 views

SSL initial connection painfully slow in Chrome

Our customer has a PrestaShop based Webshop (https://www.hoerschiff.at) and now his hoster installed a SSL Cert. We updated the configuration of PrestaShop, so all pages are forced to be delivered via ...
0
votes
1answer
38 views

[SOLVED]: HTTPS access to phpmyadmin DOWNLOADS INDEX.php instead of opening phpmyadmin

When I open phpmyadmin without encription, everything goes fine. however, if I switch to https, the browser downloads the index file. apache 000-default.conf as <VirtualHost *:80> ...
0
votes
1answer
51 views

ldapsearch can't connect to ldaps

I am using a Centos 6.6 and i'm trying to use ldapsearch to connect to my windows ad server and i can't connect using port 636. I exported the CA root certificate of my ad server in base64 and added ...
0
votes
1answer
16 views

Composer is having ssl issues with private repository on osx

there are many similar questions but nothing that helps my cas. We are using a custom self hosted composer repo, for internal libraries. It all worked perfectly fine untill we updated the SSL ...
0
votes
0answers
21 views

Is Apache Basic Auth w/ SSL “good enough” from a security standpoint?

Is using Apache Basic Auth with enforced SSL good enough to secure internal-only sites that must be publicly accessible? I know that there are more advanced Apache authentication protocols such as ...
0
votes
1answer
28 views

How can i resolve this SSL report score?

Report: The server is vulnerable to the POODLE attack. If possible, disable SSL 3 to mitigate. The server supports only older protocols, but not the current best TLS 1.2. The server accepts RC4 ...
1
vote
1answer
102 views

How to redirect two domains, with/without https, to one https site?

I'd like to do the following: using Apache, redirect all of the following URLs: http://example.com http://www.example.com http://beta.example.com https://example.com https://www.example.com https://...
0
votes
0answers
39 views

HAproxy ssl re-encryption and http header modification

I want to use my Haproxy 1.6.5 as Https load balancer before my https servers but I stuck with a problem of misunderstanding . I want this behaviour: haproxy is available as https://example.com but ...
0
votes
0answers
23 views

DELLs iDRAC integrated VNC Server not working with encryption enabled

since I allready posted on two GitHub Communitys about this issue, I will try to keep this as short as possible. The GitHub Postings are added for reference at the end of the post. Im trying to ...
1
vote
2answers
46 views

Scalable way to install SSL certificates without downtime

We have a SaaS application that allows customers to use their own domain – pretty typical. At its core, the architecture has a simple catch-all virtual host (apache) and the software does the work of ...
0
votes
1answer
88 views

Enabling SSL in MySQL when using Windows as a server and client

I wanted to enable SSL on the connections to my MySQL server that I installed in a Windows machine, so I googled "use ssl mysql windows". The first result is this simple and straightforward guide. ...
2
votes
1answer
25 views

It´s possible to use a wildcard SSL certificate in SFTP/SSH connection?

I have a wildcard SSL certificate, *.mydomain.com, private, public Keys, pem/key file, certificate, etc. I have a SFTP/SSH Server based on MySecureShell to share and get some data using FTPS with ...
1
vote
0answers
62 views

haproxy with SSL in front of apache for local development

I work on a web app that regularly makes AJAX calls to a REST server that (in production) is accessed via the same domain. While developing locally, I have been redirecting REST calls to a dev server ...
0
votes
1answer
14 views

Are nodejs apps with proxy that has SSL certificate still secure?

I wrote a node.js app to deal with processing forms on a business's website. These forms can contain sensitive information so I knew it needed an SSL certificate. Since I didn't want to serve my node ...
1
vote
1answer
39 views

Using wireshark to determine which RSA PRIVATE KEY SSL conversation?

Situation I have a client VM and server VM communicating using SSL. The client VM runs wireshark capture using CLI Wireshark GUI is running locally on a different machine. Steps As USER on the ...
0
votes
1answer
60 views

Error during openssl s_client connection, SSL alert number 48

I am attempting to connect to a third party via CURL/PHP mainly, but since it doesn't work, am resorting to more verbose tools to diagnose the problem. If I try the following, on Ubuntu 14.04 LTS: ...
0
votes
1answer
39 views

SSL on some virtualhosts complains about wrong domain name

So I recently ran into this problem and want to describe the issue and the solution here: I have several virtualhosts on a httpd server and started to install letsencrypt SSL certificates on it via ...
2
votes
0answers
43 views

How can I let my clients use their own SSL on my SaaS

We run a service that lets our clients run their own CMS. Our clients want to use their own SSL Certificate, wether it's self signed, or signed by another company. Our application runs PHP. I was ...
0
votes
1answer
31 views

Disabled RC4 and SSL v3 with existing cert from letsencrypt

I can renew a cert like this: certbot-auto renew --apache but what parameters do I pass when I want to disable the less secure RC4 and SSL v3? I would assume the information I need is here, but I ...
2
votes
1answer
35 views

What version(s) of SSL/TLS does Active Directory support?

I'm running a pair of 2012R2 RODCs behind a load balancer for authentication for certain applications (mostly on Linux). LDP.exe works fine for lookups, but we're having an issue with Postgres where ...
0
votes
0answers
37 views

Right way to configure ejabberd ssl

I have XMPP server on ejabberd. Ejabberd works well for a long time. Now I trying to add SSL support to ejabberd. My domain is like "sub.domain.org". DNS configured to link XMPP to host "jab.sub....
0
votes
0answers
19 views

Tomcat6 Client Authentication

I configured a Tomcat6 webserver on CentOS with SSL, and it works fine. Now I want to configure Client Authentication on it too: The server and the clients have their own certs signed by a local ...
1
vote
0answers
24 views

httping generates message “error shutting down ssl” with F5 HTTP endpoint

There is no failed request, but I don't know what the message error shutting down ssl means. Any idea? # httping https://ds31s3.swisscom.com PING ds31s3.swisscom.com:443 (https://ds31s3.swisscom.com):...