SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
0answers
5 views

PKI subjectAltName OID for custom, internal data

If I had a business who wants to act as a root authority for the purpose of authenticating subordinate certificates, is there a subjectAltName OID that I can use to also store some arbitrary ...
1
vote
1answer
25 views

Load Balancer and using multiple SSL certificates

Here is our current production configuration at a 3rd party data center: •2 LINUX/CentOS tomcat web servers behind a shared load balancer •DNS entries point to the load balancer •Web apps are ...
0
votes
1answer
46 views

SChannel SSL 3.0 error - OWA - Windows Server 2008 R2

I am receiving errors in the event log with ID numbers 36888 and 36874. The errors state "The following fatal alert was generated: 40. The internal error state is 1205." and "An SSL 3.0 connection ...
3
votes
1answer
23 views

Revocation of SSL certificate on domain owner change?

I recently tranferred a domain name after winning a dispute resolution case. Generating an SSL certificate for the domain got me wondering if there is any process in place for invalidating any ...
1
vote
0answers
13 views

Aras Innovator PLM behind an SSL reverse proxy (Apache2)

We have Aras Innovator PLM running on an IIS Server within our LAN. We'd like to make this available on the Internet, for access to our partners and sub-contractors, but for logistical reasons can't ...
0
votes
1answer
37 views

Saving SSL password for SVN in Ubuntu

I have tried to set up my SVN that way, that it saves my passwords, but for some reason it won't work. I am using a SSL certificate, for which I need to provide a password every time. I have tried ...
3
votes
1answer
41 views

If I get a certificate signed for ECDSA will older browsers be able to use RSA?

I'm looking into using ECDHE-ECDSA and there are a lot of great articles on why (https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/) and ...
0
votes
1answer
25 views

No server response over IPv6 with NGINX

I decided I would give IPv6 a go for my website, but I am having issues getting my server to respond to requests via IPv6. I have already set up an AAAA record and have had a good go at configuring ...
0
votes
1answer
47 views

Cannot kill httpd process even with -9

I cannot kill httpd process on my VPS running centos 6.5. I tried killing it with -9 flag which didn't work either. Output of command: ps aux | grep httpd root 29459 0.0 0.0 103252 828 ...
1
vote
2answers
53 views

Importing SSL into Windows Server 2008 - just CER, not PFX

We've recently suffered a server collapse while moving sites from one box to another. The old box was running IIS6 / Windows Server 2003, the new IIS7 / Windows Server 2008. Normally when moving sites ...
0
votes
1answer
46 views

Disable Cipher SSL3_RSA_WITH_SEED_SHA in Postfix

I want to disable cipher SSL3_RSA_WITH_SEED_SHA in Postfix. I have got in main.cf smtpd_tls_ciphers = high smtpd_tls_protocols = TLSv1,!SSLv2,!SSLv3 smtpd_tls_exclude_ciphers = aNULL, DES, 3DES, ...
1
vote
1answer
31 views

Using a reverse tunnel to access a firewall-ed web server serving HTTPS

I have a device ("A) on my network that only serves content via HTTPS, it's not accessible as its behind my router/firewall. I have another machine ("B"), elsewhere on the internet (fake IP of ...
6
votes
3answers
279 views

Upgrade HTTP connection to SSL/TLS

I currently have a server which automatically redirects all HTTP requests to the equivalent HTTPS site. The problem is that is seems like some browsers do not accept the SSL certificate (StartSSL.com) ...
1
vote
2answers
51 views

How does OpenSSL determine that a certificate is for a root CA?

I have a Verisign intermediate certificate that was issued by a Verisign root CA. But when I ask OpenSSL to validate the chain without providing the root CA certificate, OpenSSL says the chain is ...
0
votes
0answers
13 views

Windows 2012 - Certificate Issue

My application runs as a WCF web-server in a Windows service. It uses https/ssl protocol and binds it's certificate with its port number. During the Service start, I am seeing this error in Windows ...
0
votes
1answer
42 views

Scaling Multiple SSL Domains on Multiple EC2 instances in AWS ELB

I'm setting up server that will host multiple SSL domains across a wide range of load balanced EC2 instances and being a programmer who really sucks at network/infrastructure stuff I had some ...
0
votes
0answers
22 views

Force end user browser to forget old SSL - Caching & Secure Pages

Problem I recently switched the domain of my website. websiteA.com to websiteB.com (Stack: LEMP, running memcache and Varnish for caching.) I set up nginx to 403 re-direct everything and on new ...
0
votes
1answer
37 views

Early SSL termination

Just say you are terminating http SSL connections on an intermediary server like Cloudflare, this will decrypt the data and then forward it onto the server for processing. What is the performance gain ...
1
vote
1answer
51 views

How to convert certificate from CA to .pfx file?

I have been struggling since last night to create a .pfx file using OpenSSL. I have been following this document and have been following the instructions under the Get a certificate using OpenSSL ...
-2
votes
1answer
38 views

Simple http/https redirects [duplicate]

Is there a lightweight web server that only does http/https redirects? Right now I am looking at using lighttpd, but even than seems like overkill for what I need to do.
0
votes
2answers
60 views

Exchange 2010 Split-Brain DNS with an SSL for External DNS name

Last weekend I did a swing migration from Exchange 2003 to Exchange 2010. It all went fine, but now my users are getting a Security Alert ~ "The name on the security certificate is invalid or dose ...
0
votes
0answers
22 views

Oracle Content Server Losing HTTPS on adfAuthentication

This has been a nagging problem for a while now, in summary we have the following setup. Cisco ACE Load Balancer -> Oracle HTTP Sevrer -> WebLogic We are terminating the SSL on the load balancer, ...
1
vote
0answers
42 views

cURL Chain Issues

On Ubuntu 13.10 running the system curl: curl --version curl 7.32.0 (x86_64-pc-linux-gnu) libcurl/7.32.0 OpenSSL/1.0.1e zlib/1.2.8 libidn/1.28 librtmp/2.3 Protocols: dict file ftp ftps gopher http ...
1
vote
1answer
81 views

Apache2 SSL websites keep redirecting to the default website

so I have a Apache2 web server fully operational running in ubuntu. I have successfully modified the vhosts file for normal :80 requests and all web sites function correctly. However, once I attempted ...
0
votes
1answer
81 views

StartSSL.com SSL Class2 Certificate and Postfix

currently my Postfix 2.11 instance runs TLS on a GoDaddy SSL Certificate but as i would like to be able to access my server from smtp.example.com as well as imap.example.com, example.com or ...
0
votes
1answer
44 views

SSL Cert error after migrating to hosted exchange service

OLD SETUP SBS 2011 w/ Exchange and all clients running Office 2010 (using rpc/http as many were laptops) NEW SETUP All mailboxes and accounts moved to hosted Exchange. Local Exchange services ...
0
votes
1answer
78 views

Configure Nginx as reverse proxy with upstream SSL

I try to configure an Nginx server as a reverse proxy so the https requests it receives from clients are forwarded to the upstream server via https as well. Here's the configuration that I use: http ...
0
votes
0answers
23 views

Fixing nginx 1.4.6 dependency on old openssl version (libssl0.9.8)?

I'm trying to enable TLSv1.1 & TLSv1.2 on my Ubuntu 12.04 EC2 instance w/ nginx 1.4.6, but this version of nginx is dependent upon libssl0.9.8, even though the newest version of OpenSSL is ...
2
votes
2answers
66 views

Nginx issues between vhosts and SSL

I have two sites in the same IP with the follow configuration: site1.com Multiples subdomains (ie.: foo.site1.com, bar.site1.com) Everything listening on port 80, NOTHING in 443 ...
1
vote
0answers
29 views

Is it “safe” to use IIS for HTTPS?

I am trying to setup HTTPS in IIS (Windows Server 2008 R2 and Windows Server 2012) as secure as possible. In order to mitigate attacks such as BEAST and weakness of RC4, while trying to use ECDHE ...
9
votes
2answers
300 views

Does it matter where the CSR and key files for SSL certification are generated?

I have to create a CSR for a wildcard SSL certificate. Some FAQs from SSL providers say that I should generate the CSR file on the machine where I want to install the certificate? My understanding is ...
1
vote
0answers
45 views

SSL exception “No name matching domain found” apache in front of 2 tomcats servers

I have 2 servers. Server1 is an Ubuntu 12.04 LTS with Alfresco 4.2 on Tomcat. Server2 is a Windows 7 with my CAS server (SSO) on eclipse installation. Both have apache with mod proxy AJP in front to ...
-3
votes
1answer
79 views

Upgrading to freebsd10 breaks apache24

Until now I was using freebsd9 with apache22 with ssl, every thing went well. But recently I moved to freebsd10 (fresh install) and then installed apache24 with same config as on old machine. ...
0
votes
1answer
33 views

SMTP Connection disconnecting after “STARTTLS”

We're having issues with our mail server. Basically some emails from external networks are not being accepted by the mailserver. After some debugging using telnet and looking through the logfiles, it ...
0
votes
0answers
15 views

Let Postfix show the appropiate SSL Certificate for a variety of host names

i bought an SSL Certificate for domain host.domain.com so my GNU/Linux mail server can deal with secure connections appropriately. That's ok while clients connect to host.domain.com but when they ...
1
vote
1answer
92 views

What is the “server.crt” in this example?

I'm looking at the example on this page: $ openssl verify -verbose -CAfile cacert.pem server.crt server.crt: OK What I'm using as my cacert.pem is my (professionally signed) root certificate ...
1
vote
2answers
47 views

How to verify signed certificate?

I have two SSL certificates: One for snipsalonsoftware.com which is currently in place and working properly. One for app.snipsalonsoftware.com which has been purchased but not yet installed. What ...
0
votes
1answer
25 views

How do I tell if a root CA is in place for a particular SSL certificate?

I have another question where I ask about an SSL problem I'm having. One commenter asked, "Are the root CA and intermediate CA also in place?" I understand that CA stands for Certificate Authority, ...
-2
votes
1answer
40 views

Why openssl s_client and gnutls-cli deliver different certificates (own server)

on my server i have multiple virtual hosts with apache2. Some with domain *.example-one.org and some whith *.example-two.org. Each domain has it's own wildcard certificate. When I fetch the ...
0
votes
0answers
60 views

What does it mean that no cert given is a “domain name certificate”?

I'm trying to add an SSL certificate to Heroku but I'm getting an error: heroku certs:add domain.pem private.key Resolving trust chain... failed ! No certificate given is a domain name ...
0
votes
1answer
76 views

SSL on AWS? Cert installed but still having issues

We bought an SSL certificate (From Comodo) and when I visit the page in Chrome I see the green padlock and it has the following information: Your connection to ...... is encrypted with 128-bit ...
0
votes
0answers
20 views

Cygwin - Squid SSL bump

I've done a full installation of cygwin on a windows server 2008 r2. I installed squid through the setup.exe My problem is this: I need ssl-crtd to be enabled on my Squid. When I did this on Ubuntu I ...
-1
votes
1answer
48 views

Opscenter 4.1 - ssl agent communication vs internal authentication

My question relates to Opscenter 4.0.2 and Cassandra 2.0.4 with SSL and Auth : agent can't connect. The provided answer does help, but creates another problem. To summarize, everything runs find ...
0
votes
2answers
35 views

Enable Apache Virtualhost Site To Only View Over SSL [duplicate]

Viewing site over http and https are both working but prefer to configure it so that ALL visitors ONLY go through the SSL connection so that it always start with http*s*://www.example.com - what am I ...
0
votes
1answer
86 views

Restart of nginx service fails because of /etc/nginx/nginx.conf test failure

Installing 3rd party SSL on DigitalOcean Droplet, Apache running Ubuntu 12.10. Following the instructions here: AlphaSSL on Apache Self signed SSL instructions from DigitalOcean So everything ...
1
vote
1answer
62 views

what are the security implication of intentionally leaking a ssl certificate?

I have a website (http://example.com) which makes some requests to http://localhost:12345 in its javascript. I want to open this website over https but due to mixed content some browsers throw ...
1
vote
0answers
54 views

500 OOPS: SSL: cannot load RSA private key vsftpd

Im configuring vsfptd on debian 7.3, Im trying to use ssl. I generate de certficates using this command: openssl req -x509 -nodes -days 1925 -newkey rsa:2048 -keyout /etc/vsftpd/private/vsftpd2.key ...
1
vote
0answers
67 views

How to have Jetty redirect http to https on the same port?

This question is related to How to have Jetty redirect http to https and Jetty 9 - redirect http to https but not answered in either location. Basically, we run our app at some port, say 8085. We ...
0
votes
1answer
50 views

Use Wildcard SSL with Amazon EC2 instance, secure.mydomain.com -> EC2 instance

I recently purchased my first wildcard SSL certificate and I am trying to use it to secure the connection between my site (Cent OS 6 VPS) and an Amazon EC2 instance running Ubuntu 12.04. My primary ...
1
vote
0answers
49 views

Virtual hosts with port 80 & 443 not working

I can't figure out why I can't connect to my VPS. httpd.conf: i added: Listen 80 listen 443 NameVirtualHost *:80 NameVirtualHost *:443 <VirtualHost *:80> SSLEngine off ServerAdmin ...