SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
0answers
21 views

Dovecot Require Client Certificate for Remote Connections Only

After a bit of a struggle I've managed to configure Dovecot to require client certificates for users logging in, and it works well. However, I also want to setup a web-mail solution (Roundcube) which ...
-1
votes
2answers
38 views

nginx 1.8.0 ssl configuration root location behaving unexpectedly

I bump into this problem. I recently install nginx 1.8+ on a centos 6.7 along with PHP-FPM (5.3+). The installation was fine and setting up the virtual host was okay too but when I create a secure ...
-2
votes
1answer
29 views

SSL proxy nginx cannot reach server by domain name

I am having an odd issue. I configured a SSL proxy with Nginx serving a website in HTTP which is on 127.0.0.1:1195 (example.com is in my hosts pointing to 127.0.0.1). For some reason : ...
0
votes
0answers
16 views

How to use keystores and trust stores in linux & nginx

I am a newbie to implementing some of these concepts.I have a few questions to ask. I have read about keystores and trust stores using various links. The one that makes sense is this ...
1
vote
0answers
32 views

Which permissions should I set to dhparam.pem?

I am generating Diffie-Hellman parameters for the ssl_dhparam directive in the SSL configuration of nginx. The file dhparam.pem is created with the command openssl dhparam 2048 -check -out ...
0
votes
1answer
58 views

ssl nginx wrong path

i am trying to configure ssl on nginx server but it show me the wrong directory.. http on port 80 is ok, https on 443 no this is my formazioneturismo.com.vhost fastcgi_cache_path ...
0
votes
0answers
45 views

Windows server 2012 R2: Adding support on new cipher

Environment Description I have a VM (hosted in Azure) cluster (one of many identical machines) that I'm using for running my application. I have noticed that some webpages are cannot be loaded in ...
0
votes
2answers
32 views

Apache TLS (SSL) Performance

We are running a fairly powerful dedicated server with a Xeon CPU, 32GB RAM, and RAID SSDs running Centos 6. Yet, we are still seeing HTTPS add over 100ms to our page download time. Is there anything ...
1
vote
2answers
40 views

Unable to disable SSLv3 in Apache for POODLE

One of my client wanted me to upgrade openssl and Apache on his server because he want to receive an A from SSLLabs. I went ahead and upgraded to Apache 2.4.18 and openssl to version 1.0.2e. I then ...
0
votes
1answer
35 views

Without using mod_rewrite, what is the best way to redirect all subdomains to https? [duplicate]

I am currently using mod_rewrite to redirect all subdomains to https, but multiple sources have suggested that Using mod_rewrite to do this isn't the recommended behavior. See RedirectSSL The ...
0
votes
1answer
22 views

Allow active mixed content (iframes) with SSL and Content Security Policies

I've installed a SSL certificate on my server, and I've made it HTTPS. But I need to load existent iframes with embedded content, usually YouTube videos that were saved with HTTP url, but also other ...
0
votes
0answers
12 views

F5 SSL offloading custom 404 page

We have an F5 that we want to use for SSL termination in front of our JBoss servers with NetIQ auth, and we have the configuration working for all normal traffic. The problem is with our custom 404 ...
-2
votes
1answer
25 views

Use a Mac to create a CSR for another server

I have a website hosted on Bluemix. I want to set up an SSL certificate, I am following this guide: https://developer.ibm.com/bluemix/2014/09/28/ssl-certificates-bluemix-custom-domains/ I placed an ...
0
votes
2answers
37 views

SSL on apache; the requested URL was not found

I am setting up SSL on my Apache/2.4.6 RHEL server. In httpd.conf, have VirtualHosts as shown below... <VirtualHost *:80> ServerName foo.bar Redirect permanent / https://foo.bar ...
0
votes
2answers
32 views

Reverse proxy redirect traffic ssl “ex: openvpn”

With netscaler, I can redirect all traffic SSL to specific host which depending their subdomains. Example: +-------------+ ...
0
votes
2answers
32 views

Reverse Proxy on ClientHello with bad security (e.g. WinXP)

XP seems to be a lot of "fun", these days with security especially since the security features XP DOES support are being phased out day by day. for all those who want to drop XP there is always the ...
0
votes
1answer
65 views

New SSL, Safari can't open the page b/c server unexpectedly dropped the connection (subdomain)

After much googling and Serverfault browsing I still have an SSL problem : Safari can't open the page at all, Firefox gives a "secure connection fail" after 5mn of inactivity (not browsing or ...
0
votes
2answers
24 views

Redirect port 443 to port 80 at a firewall?

I recently ran into a situation in which a web server I was running could no longer serve HTTPS traffic (due to some SSL cert issues). Since the server could not process this traffic I could not use ...
-1
votes
1answer
47 views

HTTPS certificate not working on WWW, but is on NON-WWW

I bought an SSL certificate from SSLMate and it's working fine on my Nginx server when I access http://example.com, but not when I access http:// www.example.com I believe the problem has to do with ...
0
votes
2answers
38 views

CloudFlare giving error 522 without HTTPS

I've set up Let's Encrypt (with nginx) on my server, following the tutorial I've linked in the comments. I've also set up CloudFlare with the following DNS settings: http://i.imgur.com/Z7PRD6l.png ...
-5
votes
1answer
64 views

Disable/remove Let's Encrypt? [closed]

I followed this tutorial to enable Let's Encrypt on my server, however I now want to remove/disable it: ...
1
vote
1answer
35 views

HTTP & HTTPS Apache redirect to internal IP Virtual Machine

Here's my basic setup: Router forwarding port's 80 and 443 to Ubuntu Server 14.04 running apache. Works great. Running several virtual machines (QEMU/KVM) on Ubuntu server. VM's are in bridged mode ...
2
votes
1answer
83 views

Generate subdomain certificate from valid wildcard certificate

Giving the nature of SSL certificates and keys which can be chained, can I (myself) generate a certificate for a subdomain based on the main domain certificate and key which are issued for wildcard ...
0
votes
1answer
23 views

SSL .csr asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag

I have created a .csr and .key file in /etc/apache2/ssl/domain/ like openssl req -new -newkey rsa:2048 -nodes -keyout domain.key -out domain.csr like GoDaddy said, then linked to those files with ...
0
votes
1answer
49 views

is it possible to terminate SSL with Nginx and cache https responses from the backend?

Looking to terminate SSL from backend service at nginx and offload to clients as http. Cache all responses for performance and offline scenario. With the setup below I'm not able to cache, what's ...
1
vote
2answers
35 views

Nginx correct SSL Certificate order

I got the following files: priv.key // This is my priv key and contains one -----BEGIN ENCRYPTED PRIVATE KEY----- section req.csr // This is my certificate request file cert.pem // This is my ...
0
votes
1answer
105 views

Let's Encrypt — “DNS … query timed out looking up CAA for …”

I have been using Let's Encrypt on a few domains for a couple of months now, and it generally has been working. I was going through renewing the certs, and for one of the domains I get the following ...
0
votes
1answer
34 views

Apache SSL virtual hosts sharing same DocumentRoot

I have a web server with two domains pointing to the same document root. I have separate SSL certs for the two domains. I want (almost) everything that comes to the site(s) to run under SSL. All ...
0
votes
0answers
18 views

Apache SSLVerifyClient

Please excuse any dumb statements regarding this. I am very new to Apache and to HP-UX. I am a SQL Server DBA but ended up on this project. I am working to try and implement SSL with Client Verify ...
1
vote
1answer
21 views

Domino Offers SSL3.0 instead of TLS for Outgoing connection to WebService

I have problem understanding Dominos behavour to offer SSL or TLS for outgoing connections to WebService. We have an agent that access a WebService. The WebService only accepts TLS 1.0 From time to ...
1
vote
0answers
22 views

Enable SSL on wordpress site hosted on Azure

I have a website running on Azure and its a wordpress site. from the Azure Documentation what they say is to just copy and past the example in web.config file <?xml version="1.0" ...
1
vote
1answer
81 views

nginx / ssl: Always redirect to one of two https subdomains [duplicate]

My webserver supports the following two subdomains: https://www.example.com https://en.example.com I want to create my nginx config so that: http://en.example.com$request_uri => ...
1
vote
1answer
61 views

nginx: Redirect https traffic without subdomain to subdomain (non-www to www)

My current ssl certificate covers the subdomains www.example.com and static.example.com So if a users try to access my site via https://example.com I want to redirect him to https://www.example.com . ...
0
votes
0answers
26 views

Pound and Varnish Multiple sites SSL

I'm trying to setup Pound for more than one website but when the enter the below code in /etc/pound.cfg file, it applies only the first certificate in the line for all the websites and it results in ...
2
votes
4answers
564 views

Is an SSL Cert needed here?

We currently have a website set to redirect to a new address (our client changed domain names, but wants the old domain to send people to the new site) in IIS 8.5 using permanant redirects found in ...
1
vote
2answers
32 views

Apache webserver HTTPS port redirects to HTTP with port 443

At my work I installed Mediawiki (latest version) on a Apache webserver 2.4.6 with PHP 5. Everthing works fine when I want to access the wiki pages locally and I configure a hostname in Mediawiki ...
0
votes
3answers
55 views

NGINX Reverse proxy not loading resources

I'm trying to put a reverse proxy in front of a few internal web services. Nginx is setup and working properly to serve request. If I only serve one location / in my conf file, it loads that ...
5
votes
1answer
54 views

What would cause inconsistent SSL failure over Cisco ASA VPN

Over the weekend I completed the installation and testing of a Cisco ASA 5512 to replace our old router/firewall. Today, I've been wrestling with an issue of browsers inconsistently failing to connect ...
0
votes
2answers
23 views

Configure IIS7.5 to only accept SSL requests to specific hostnames

I know with http sites I can configure it to listen for specific hostnames and you can add several bindings, it ignores the rest which is great. I also know I can rename my ssl cert friendly name to ...
0
votes
1answer
26 views

Apache webserver : SSL certificate not understood

I am trying to specify an SSL certificate to Apache webserver, but I am getting some strange errors. Unfortunately, I don't know that much about SSL. Can someone kindly help me out. Error log in ...
-4
votes
1answer
39 views

How can I remove port number on ssl domains

I serve two ssl domains on different ports using apache2.2.3. My server version is CentOS 5.11. I can't update the server. For example: https://one.domain.com/ https://two.domain.com:444/ These ...
1
vote
1answer
38 views

Dovecot: increase ssl_dh_parameters_length

I'm using Dovecot 2.2.21 I set ssl_dh_parameters_length = 4096. Before that, I had set 2048. After the change I reloaded Dovecot. Since then, SSL doesn't work any more and I get these logs ...
0
votes
1answer
37 views

Set server wide ssl configuration

Background I have a simple server with only one site. I want to force ssl. I previously did this with a self signed certificate, but now I have got a letsencrypt cert. I have used the auto set up, ...
0
votes
1answer
68 views

HTTPS streaming and dynamic load balancer using Wowza and AWS

We are using Wowza instances to perform live streaming on AWS infrastructure. We have a script that monitors load balancer and launches/kills instances when required based on the number of ...
4
votes
1answer
32 views

how to configure sendmail with multiple ssl certificates for multiple domains

I need to configure a server to host multiple email domains on a single IP, and thus install multiple ssl certificates. Miraculously, I have been able to get apache and dovecot to work with multiple ...
0
votes
1answer
34 views

GoDaddy A record and SSL Handshake error

I have pointed A record to my server IP in GOoDaddty as ns1.example.com and it is working.But I am confused with SSL error. I have generated SSL certificate with CN as ns1.example.com. When I try to ...
0
votes
2answers
67 views

Serve multiple domains on one ip and one port

I want to serve multiple domains on my CentOS server. I run servers on http. Now I want to run these servers on https using another certificates. I written ssl.conf like this. Listen 443 ...
0
votes
0answers
18 views

how to get public key from certificate on azure automation [duplicate]

I need to get SSH public key from the certificate which is store on azure portal and I have created workflow on azure automation and import the certificate to azure portal. Once we get the SSH public ...
0
votes
0answers
52 views

Apache with Varnish, SSL termination and additional proxy - redirect not working

I've got a problem with the SSL termiantion for my varnish. This is the request path I want to achieve: user -> Varnish(80) -> Apache(8080) -> Apache(8181) -> Apache(443) when termination is made. ...
0
votes
0answers
34 views

Nginx - SSL, HSTS & proxying requests to a different CN

We are using Nginx as a reverse proxy, and would like to allow site visitors to download a file from an Azure Blob server { listen 443; ssl_certificate ...