SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

-1
votes
1answer
39 views

How to re-write non-WWW to WWW whilst also enforcing HTTPS in Nginx

I have a client who I am tidying things up for after a migration to a newer/faster server. One of the inclusions is to bring in SSL support, and also standardize links/URLs. The goal is to force ...
-2
votes
0answers
18 views

apply ssl via apache for specific requests, forward those requests to node server and take reply

My Case is simple but seems to be confusing so far. I have nodeJS server application up and running at port 3000 need to apply SSL before this NodeJS server, opted for Apache httpd, scenario is ...
0
votes
1answer
103 views

Two domains on one IP, added a subdomain and different domain's SSL gets protocol error

I've been running two domains on one IP for years using SSL. One is example.com and the other is other.com. example.com has three names with its SSL cert; example.com, www.example.com and dev.example....
2
votes
1answer
43 views

How to properly refuse ssl connections to subdomains that don't have a certificate

I'm currently setting up a (semi-serious) server with nginx for the first time. I have a couple of domains and subdomains and want to use SSL as much as possible to keep the traffic to and from my ...
1
vote
1answer
243 views

How to build Apache httpd 2.4.20 on CentOS 7 with http2 support?

I've spent nearly a day trying to make Apache httpd builds with ALPN and http2 support for EL6 and EL7 for my company and society, as I previously did for NGINX (Built statically against OpenSSL 1.0....
0
votes
1answer
34 views

Single front NGINX to proxy pass SSL to sites with their own certificates

Current setup: Front NGINX proxy passes 80 and 443 to local VM Local VM's NGINX redirects everything to HTTPS (if request is HTTP/80) Local VM's NGINX listens to 443 and proxy passes to the upstream ...
0
votes
1answer
137 views

Apache SSL reverse proxy with two name virtual host

I have an Apache reverse proxy that correctly proxies an https internal server. It is configured to use a wildcard self signed certificate and to be a name-based virtual host with ServerName directive....
0
votes
0answers
13 views

How to upload a certificate to Amazon ELB?

I've generated the pem files for a new certificate which we recently purchased from comodo, using this link as a guide: "https://guillaumemaka.com/2015/05/06/install-your-comodo-certificates-to-amazon-...
-1
votes
0answers
24 views

Not able to configure free AWS SSL certificate

I was trying to install free SSL certificate provided by AWS. But I'm getting 503 Service Unavailable: Back-end server is at capacity error in my console. I was tried by following below link which i ...
0
votes
1answer
18 views

IIS - How to have a separate SSL for an application under the Default Website

We are hosting multiple ASP.Net applications on an IIS web server. All the applications are under the same 'Default Web Site' parent. Most of them have their separate application pool. The default ...
0
votes
2answers
68 views

Nginx - subdomains to Apache, index to WP

I am trying to deploy our new Wordpress (with Apache2 in Docker) one-pager over our existing setup. Right below the LB we have an Nginx server that terminates SSL and proxies plain HTTP requests to ...
0
votes
0answers
26 views

Attempts to Disable SSLv3 in Tomcat Fail

I'm attempting to disable SSLv3 in Tomcat 7.0.68 but every attempt to test still results in CONNECTED(00000003) 140680439531168:error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal ...
0
votes
1answer
43 views

openvpn certificate error prevents from connection

I try to connect with Tunnelblick to my private VPN, but I get the following error message. 2016-05-24 12:18:07 VERIFY ERROR: depth=1, error=unable to get issuer certificate: C=IL, O=StartCom Ltd., ...
0
votes
0answers
24 views

HAProxy, Varnish and Multiple websites with SSL

I can't seem to find any documentation on setting this kind of configuration up with Apache. I have 1 load balancer and 2 slaves running MySQL replication and unison syncing both machines and website ...
0
votes
0answers
7 views

Connections are reset when trying to access site over HTTPS

I have a Windows 2008 R2 Server running IIS 7.5 The Site was running fine on Friday and I came in this morning to find that it was not accessible. After removing the 'Require SSL' restriction on the ...
0
votes
0answers
27 views

Open ports for Passive FTPS on Amazon EC2?

I have installed ProFTPd on an Amazon EC2 running Amazon Linux. I have enabled SSL (FTPS) on for ProFTPd and set passive ports in proftpd.conf: port 21 <IfModule mod_tls....
0
votes
0answers
37 views

enabling ssl connection from wordpress to mysql

I have been searching on how to configure wordpress to connect to mysql db over ssl, however most of the example are about three to five years old e.g. this wordpress support topic my wordpress ...
0
votes
1answer
30 views

ssl curl not working

I set up my site I have ssl setup and working, works fine in chrome, works fine for postman. For whatever reason it does not work when twilio or curl trys to access it. It gives me a unable to get ...
0
votes
3answers
65 views

Should I use a single SSL certificate for example.com and www.example.com?

I have a website (hosted by Amazon S3) which redirects example.com to www.example.com. I am setting up an Amazon CloudFront distribution for this website, and would like the same redirection to work ...
0
votes
2answers
35 views

Disable Cloudlfare SSL on nginx to use certificate

I use Nginx to host a wordpress site which is configured to use exclusively SSL. A while ago, I activated the Strict SSL option and the HSTS option from Cloudflare. Now I want to disable it and only ...
0
votes
0answers
22 views

How to create a pem certificate for a mongo server that is accessed from different domains

I have a mongo server on aws. The server has both internal and external addresses. I enabled ssl on the server and create a CA and a mongo server certificate and a client side certificate. https://...
0
votes
1answer
63 views

Unable to get StartSSL trust chain to work

I received a free SSL certificate from StartSSL which I installed on my server. It works fine on desktop browsers and such but as soon as I open the website on my phone it says "NET::...
0
votes
1answer
24 views

Site being accessed with wrong protocol?

I'm running a Tornado web server that only accepts SSL connections, and only listens on port 443. Connecting to it in a browser over HTTPS works well. I'm seeing messages like this in my logs: ERROR ...
0
votes
1answer
24 views

SSL and Apache: GeoTrust CryptoReport says “OK”, but openssl says “unable to get local issuer certificate”

This actually applies to a bunch of other services we use this same certificate for, but the way Apache does this is the most obvious and contradictory when you compare the test results. We have a ...
0
votes
1answer
88 views

MQTT certificates verification fails

I'm been desperately trying to get my MQTT clients to connect to my MQTT broker which is set up with a certificate from a CA (Letsencrypt). To be able to get the CA certificate, I've used the ...
1
vote
1answer
24 views

Which server should generate the CSR when running SSL with Apache ProxyPass

I have an apache 2.4 server which uses proxypass to forward SSL connections for one domain to an OSX server 5.1.5 on the same local network. I generated my CSR on the apache server and it seems to ...
0
votes
1answer
40 views

SSL for Webserver with nginx

I am totally not familiar with SSL and all tutorials are pretty confusing for me. I want to ask you one thing - I have from rapidssl this two certs: intermediate.crt & web_server.crt. I had to ...
0
votes
0answers
54 views

Can haproxy perform ssl termination for forwarding to (squid) proxy servers?

I understand that haproxy can perform ssl termination for load balancing web servers, but is it possible to perform ssl termination when load balancing squid proxy servers? My scenario is that I have ...
0
votes
1answer
30 views

How to enable SSL only on certain locations

I have an Apache that serves an application as well as a web service. I want the web service over https but the application over http. How do I enable SSL on only a certain location? None of the SSL ...
2
votes
1answer
502 views

LetsEncrypt: Unknown SSL protocol error in connection

I have a host with LE certificate and it works well in a browsers, but I still can't connect using curl, openssl, wget, POST (libwww-perl): curl # curl -v -3 https://example.com/ * Hostname was NOT ...
0
votes
0answers
18 views

Can't install SSL cerificate - error AH00169 SIGTERM

I'm new to server stuff. On Azure I run VirtualMachnine based on Ubuntu 14. I install apache2 and everything workd fine. Now I need to add SSL certificate. So at default-ssl.conf I write: <...
17
votes
3answers
2k views

Why would a hosting provider not allow SSL over port 443? [closed]

I am setting up a website and bought the SSL certificate for the domain of the website. When I asked the hosting company why https://www.example.com was refusing connections, they answered that SSL ...
0
votes
1answer
81 views

Haproxy, Nginx Pretty Url not working

Hi I'm having trouble setting up pretty urls from nginx behind Haproxy. Haproxy.cfg global log /dev/log local0 log /dev/log local1 notice chroot /var/lib/haproxy stats socket /...
0
votes
1answer
24 views

Ubuntu + apache2 + ssl - AH00072 address alredy in use

I'm new to server stuff. On Azure I run VirtualMachnine based on Ubuntu 14. I install apache2 and everything workd fine. Now I need to add SSL certificate. So at default-ssl.conf I write: <...
0
votes
1answer
19 views

Generate a certificate signing request based on an existing certificate with x509v3 extensions

With openssl I am trying to generate a CSR using an existing cert that contains X509v3 extensions, in particular SAN. I am able to create the new CSR by running openssl x509 -x509toreq -in ...
0
votes
1answer
67 views

SSL on apache2 - ubuntu, unknown issue

I try to install SSL certificate on my own server. I have ubuntu 14 and apache2 webserver. My default-ssl.conf file is: <IfModule mod_ssl.c> <VirtualHost _default_:443> ServerAdmin ...
1
vote
0answers
41 views

What's causing the SSL Protocol Error?

My site: https://www.notfriendly.xyz/ (disabled CloudFlare) (See CloudFlare enabled at https://host.notfriendly.xyz) is failing to connect claiming a protocol error after enabling CloudFlare. Could ...
0
votes
1answer
65 views

ServerAlias without www not working on SSL virtualhost

I'm moving a site from a server to another, and using its current and still valid SSL certificate. The machine I'm working on is a Ubuntu 14.04 server. I've set up my usual virtual host file, let's ...
2
votes
0answers
54 views

Installing apache2 ssl - ubuntu

I need to install a ssl in my apache2 ubuntu, and do not know what I'm wrong, but the fact is that I do not get ... I have the relevant files: one .key file and two .crt files. At first, when editing ...
0
votes
1answer
43 views

Problems with using NGINX on an SSL-only site

I've configured a website to be 100% SSL, and its on a cPanel server with NGINX. I'm able to get the SSL part to work fine, but the IP address reported for site visitors is the IP address of the ...
1
vote
0answers
95 views

AWS ELB with SSL backend adds proxy protocol inside SSL stream

Note, this has been also posted in http://thread.gmane.org/gmane.comp.web.haproxy/27737 we are trying to configure this architecture: ELB terminating SSL, using preconfigured certificates. (this ...
1
vote
1answer
51 views

Installing SSL Certificate

I am trying to install an SSL certificate on my Apache server that's hosted on an EC2 instance from AWS. I originally intended to go with AWS Certificate Manager and put the SSL on a Load Balancer but ...
1
vote
0answers
44 views

Https: not working but :443/ work?

I don't understand (on debian) why I can access to my website using http://www.myserver.com:443/ but not directly with https://... I'm using LetsEncrypt, all my cert' are generates and works. Here my ...
0
votes
2answers
38 views

Linux: where to store Java trusted CAs

I need an advice regarding the best practice of storing organisational CA on Linux servers for Java. Basically, JRE installation contains a list of trusted CAs in cacerts file, which is used by ...
0
votes
2answers
74 views

nginx wordpress ssl mixed content

I have a wocommerce site for which I am trying to setup an SSL certificate for checkout pages. The HTTP version of the site is working file. Prior to switching to nginx SSL on apache worked fine. ...
2
votes
2answers
223 views

Renew Letsencrypt certificate

I am trying to renew my letsencrypt certificate by the next command: ./letsencrype-auto renew but I receive this error message: configuration file /etc/letsencrypt/renewal/domain.conf produced ...
0
votes
1answer
50 views

http(s) non-www to www redirect nginx

This is my config: server { listen 80; server_name domain.com www.domain.com; return 301 https://www.domain.com$request_uri; } #server { # listen 443 ssl; #...
0
votes
1answer
26 views

SSL offloading from Apache to Tomcat get overwritten somewhere

I was asked to upgrade a server running Apache and Tomcat-6 on Debian Wheezy from HTTP to HTTPS. I have successfully obtained and install SSL certificates on the Apache part and checked that they work ...
0
votes
1answer
24 views

How to create a *.crt file out of keystore? (SSL / Tomcat)

to use https (ssl) with tomcat i build a keystore with this commands: $JAVA_HOME/bin/keytool -genkey -alias [youralias] -keyalg RSA -keystore [/preferred/keystore/path] $JAVA_HOME/bin/keytool -...
1
vote
2answers
80 views

Apache2 redirect www to non-www (with SSL)

Wise people, I am trying to accomplish the following: Redirect these: http://www.veluwsvuurbarneveld.nl http://veluwsvuurbarneveld.nl https://www.veluwsvuurbarneveld.nl To https://...