SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

-1
votes
0answers
38 views

openssl: How to build the right bundle for godaddy certificate

I can use open ssl and the steps here: http://serverfault.com/a/648367/13716 to: Create a "cacerts.crt" of the godaddy root, intermediate, etc certs (one text file w multiple certs) Build a single ...
0
votes
1answer
28 views

To serve SSL, does the web server need outbound internet access?

I am having a problem with intermediate certificates, and wonder: Could the problem be (that clients report an intermediate cert is missing), be the result of my web server having zero outbound inet ...
-1
votes
1answer
29 views

Apache SSL configuration does not take effect

I configured a site to be served via SSL on my server but it's not available at all. $ nmap localhost PORT STATE SERVICE 22/tcp open ssh 25/tcp open smtp 80/tcp open http My firewall ...
-3
votes
2answers
65 views

Accidently removed localhost.crt SSL in Centos 6 - what can i do?

So I just got my certificate issued from Digicert, and since there was other unused/old files in /etc/ssl/ i marked and removed, and accidently also removed localhost.crt. Now I cannot start my web ...
-3
votes
0answers
43 views

Start Apache with Passphrase [duplicate]

How can I start my apache2 service with SSL key? I want a single line command for the same,like sudo service apache2 start --passphrase="--my_passphrase_" Are there any suggestion?
0
votes
1answer
47 views

Client Cert Auth

I would like to setup Client Certificate Auth with my tomcat. I've configured the webapp for this auth and this is my tomcat config. I'm using Windows PKI for my certificates so I have pfx files. The ...
0
votes
0answers
19 views

Site functionality diminished over VPN/company network

We currently experience a diminished with one of our customers at our main production site. All subpages and resources seem to be affected as well. The customer reports a completely broken ...
-3
votes
0answers
51 views

How to install a SSL certificate on Ubuntu Server?

I need to make the connection between my origin server and CDN (Akamai) secured. I generated and installed a self signed certificate at my origin server (which hosts www.something.com.au) using the ...
0
votes
2answers
242 views

google recaptcha V2 on apache shared server: How to get it to work with SSL

I implemented google's reCAPTCHA V2 on non-https apache shared server and it worked 100%. I then changed the protocol to my shared server with SSL using the same script as the non-SSL script. The ...
0
votes
0answers
68 views

Allow Google apps and block consumer Google accounts using squid proxy

In my organisation, I am trying to allow the Google apps account and block consumer Google accounts using squid proxy. According to this link, Google says we can do it using following steps: 1. ...
2
votes
1answer
35 views

How to add an existing key to the certutil key database

I have created an SSL keypair with OpenSSL. I uploaded the Certificate Signing Request to my SSL Certificate provider and got my certificate files. I added my certificate and the required CA ...
2
votes
1answer
32 views

Dovecot SSL Certificate is not accepted

I have certificates issued from StartSSL, which is a trusted authority for certificates, and my websites work with its certificates with no problems and no complaints from all browsers about any trust ...
0
votes
2answers
80 views

RapidSSL: domain name does not match the certificate common name or SAN

I'm installing SSL certifcate (RapidSSL) on Amazon AWS (Load balancer). Installation was already completed, but when I test it I get: Wrong certificate installed. The domain name does not match the ...
1
vote
0answers
106 views

IIS Site breaks after disabling SSLv3

I am trying to disable SSLv3 on a 2008 R2 web server that runs IIS 7.5 but as soon as I disable SSLv3 and reboot, the website is no longer reachable. I ran a packet capture with SSLv3 still enabled ...
0
votes
1answer
31 views

Where do I find the SSL configuration for a tomcat 6 web server?

I've inherited a small secure web application that runs on a single Tomcat 6 web server on a machine running Amazon Linux. I need to disable the SSLv3 fallback, but I just can't find where the HTTPS ...
1
vote
1answer
30 views

nginx and SSL redirect

I have a nginx server which I use as a proxy. I want to have all requests forwarded as normal http requests, expect request to api.mydomain.org, those request I want to run with ssl/https. This works ...
-6
votes
1answer
36 views

Verify HASH value of certificate [closed]

How can I verify Hash value of a certificate I get from a website using openssl? Say for example or facebook.com.
-2
votes
1answer
25 views

EV Certificate on browser [closed]

How does the browser recognise that the presented certificate actually is an EV certi cate? I went through this article but I couldn't figure out any thing for sure.
-2
votes
0answers
31 views

Why is this SSLerror coming on sending request to any subdomain like sandbox.example.com? [migrated]

>>> import requests >>> requests.get("https://api.example.com/index.php") <Response [200]> >>> requests.get("https://sandbox.example.com/index.php") Traceback (most ...
1
vote
0answers
53 views

Disable SSL3 on tomcat4

I have a very old web application that uses tomcat4. B/c of the poodle vulnerability I need to disable SSL3 and disable a bunch of weak ciphers. My connector looks like this, but apparently ...
-2
votes
0answers
59 views

Why my server responds with outdated ssl certificate, even after removing certificates?

I have a RackSpace VPS with nginx and a domain on GoDaddy. Previously I had ssl certificate from GoDaddy connected to my domain. Now, some time after the certificate expired, I have a new ssl ...
-1
votes
0answers
20 views

How to add SSL certificate to domain that is URL-frame redirected to AWS EC2 server

Currently running a node.js webapp with a NginX reverse proxy on an Amazon EC2 web server instance. Furthermore, I have a domain, call it example.com, which URL-frame redirects to this web server. ...
3
votes
2answers
80 views

IIS 8 SSL Stops working Windows 2012 Core

Is there any known bug or cause for an IIS server to just stop serving SSL overnight? The certificate has not been changed for some time and is still valid. Same certificate works on other identically ...
2
votes
0answers
19 views

Apache reverse proxy location based access control not working

I'm running a small web server with Ubuntu 12.05.5 LTS and Apache 2.2.22 and ran into this problem recently: For an IIS server on a virtual machine I have the following reverse proxy config: ...
2
votes
1answer
42 views

HAProxy 1.5 SSL and many website

Actually I'm hosting hundred website on Apache2 with some HTTP and some HTTPS, I'm preparing a new hosting infrastructure and I'm using HAProxy to loadbalance all my HTTP and HTTPS query on my ...
-1
votes
1answer
63 views

Nginx Enable HTTPS/SSL when forwarding to other URL

Currently, I'm working with an AWS Ubuntu EC2 instance, running a Node.js app on port 3000, that has an Nginx reverse proxy. I have been trying to enable HTTPS and add a SSL certificate and I've been ...
0
votes
1answer
38 views

AWS EC2 SSL Server certificate does not match the URL

After uploading the certificate to iam, when I visit https://www.mywebsite.com I get this error The identity of this website has not been verified. • Server's certificate does not match the URL. ...
1
vote
1answer
76 views

SSL proxying on nginx — different behavior in different clients

I'm running an SSL-required web service and planning to switch hosting providers. To avoid downtime for our users while DNS caches clear, I'm planning to proxy requests from our old server to the new ...
1
vote
1answer
47 views

Setting up SSL on nginx

I'm trying to set up SSL with Nginx, however I'm having a few problems. I received all the required files, and created the bundle as shown here, and added it to my site configuration as below: server ...
1
vote
0answers
5 views

Can OpenDirectory on OS X reasonably be configured to use an intermediate CA cert from an existing CA?

We're trying to set up OpenDirectory. It seems to want to create its own CA, and then an intermediate CA with a certificate signed by its own CA. I'd prefer to generate an intermediate CA certificate ...
0
votes
0answers
85 views

How to configure Coldfusion 10 CFLDAP to use TLS instead of SSL2

We are using CFLDAP to authenticate users from a remote system. The remote system has now shut down SSL 2 and 3 due to the POODLE issue. Is there a way to configure either Coldfusion or Tomcat to use ...
1
vote
1answer
26 views

How do I use a wildcard certificate with SSRS?

I am trying to setup SSRS access via SSL, and I have followed the instructions here; however, I do not receive a clickable url in the Configuration Manager to click on and test. The url shows as ...
6
votes
1answer
639 views

Why does my wildcard SSL certificate cause a domain mismatch error on a second level subdomain?

I have a server https://www.groups.example.com - in FireFox I get the "This Connection is Untrusted" message and the "technical details" say www.groups.example.com uses an invalid security ...
1
vote
1answer
69 views

Disabling weak ciphers

Does anyone have any experience disabling weak ciphers on Windows Registry? Server doesn't have IIS installed. Below is the results of my security scan but not 100% what registry entries should be ...
1
vote
1answer
51 views

SSL - create private.key from private-key.pem for Apache

I followed this tutorial to generate a private-key.pem and csr.pem for my AWS SSL Loadbalancer. Everything went well but now I need to setup Apache and need 3 files. SSLCertificateFile ...
-2
votes
1answer
40 views

SSL Certificate on CNAME

I have been reviewing the other posts regarding the issue, but having some trouble understanding since I've tried implementing it but still not able to figure it out. I have 2 servers. The main ...
1
vote
2answers
74 views

Setting up SSL with a redundant connection

My situation: We have two servers, Server A and Server B. Server A has a proxy configured, which serves data (over SSL) from Server B. Server B is reachable via 1.1.1.1 (one.server.example.com) and ...
2
votes
1answer
33 views

How can I log the negotiated SSL Cipher in Windows 2008 R2

I have a web server running IIS 7.0, on Windows Server 2008 R2. The web application is written in C# .Net 4.0. The web application receives web requests, and sometimes makes outbound https requests to ...
1
vote
2answers
384 views

Disabled SSLv3 to combat Poodle now cannot connect to SQL “Connection forcibly closed by remote host”

I have disabled SSL3 on my web server to combat the Poodle Vulnerability and now I am unable to connect to my SQL server using SQL Authentication. I just get "Connection forcibly closed by remote ...
1
vote
2answers
81 views

Is it possible to set SSL/TLS version HTTP header with Apache which an backend application can use?

There is one service on a virtual machine with a dedicated IP that required to be accessible via SSLv3 (WinXP with IE6 clients). I moved that service several several years ago to a that virtual ...
1
vote
1answer
125 views

SSL_accept error when mail client connect to postfix

I've managed to set up postfix and dovecot with self-signed certificate on my server. I can send and receive email using telnet command there. Now I want to connect to my mail server from a ...
1
vote
1answer
161 views

Connection to URL using OpenSSL client works, but curl fails

I have a CentOS 5.9 server, from which I need to make SSL connections to another server. The remote server has a certificate ultimately signed by the GeoTrust Global CA. At the time of writing, this ...
2
votes
1answer
34 views

Possible to Mix SNI and Dedicated IP SSL on Apache?

I've reached the limit of available IP addresses on my Apache web server but increasingly need sites to run under SSL. I'd be comfortable with some of the sites running under SNI but a few of them ...
0
votes
1answer
49 views

Domino SSL 301 redirect with www and non www

With reference to this question How to do a 301 redirect from http to https in a domino server? My redirects are failing. (gaps between protocol and : are because i dont have the rep to post multiple ...
0
votes
0answers
21 views

Windows SSL Cipher Suite Policy

I'm looking to customise the cipher suite priorities for my Windows Server 2008 R2 and 2012 R2 servers via Group Policy. Am I able to create one policy for both systems? Windows Server 2012 R2 ...
0
votes
0answers
26 views

How to Flush NginX's SSL buffer mid-request for Server Push

I'm writing an app that uses long polling to push messages to clients. It doesn't end the request when it finishes sending a message though: it just flushes. It works fine, even when I proxy it ...
0
votes
0answers
6 views

How to set SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS in Ubuntu 14 SSL Settings [duplicate]

I believe I'm having this problem: https://www.daniweb.com/hardware-and-software/microsoft-windows/threads/50765/why-i-cant-access-the-web-pages-by-ie-https-with-des-cbc-sha Their solution is this ...
0
votes
1answer
33 views

Multiple SSL Certificates Deployment For Multiple Domains at Single Server Ubuntu 12.04 [closed]

I would like to host multiple domains at same VPS and need to configure SSL certificate for those. The server is Ubuntu 12.04. All domains have their own certificates. I need help regarding multiple ...
-3
votes
1answer
49 views

Where to optain my client key for SSL decryption? [closed]

example.pcap is a traffic capture I have made on my local Linux box of and now I would like to decrypt it. tshark -o "ssl.desegment_ssl_records: TRUE" -o "ssl.desegment_ssl_application_data: ...
0
votes
0answers
32 views

Error when trying to force Glassfish to use HTTPS instead of HTTP

I am developing a JavaEE applicaction using Glassfish as server. I would like to force http connections to https. I have added to following code to web.xml, but when I run the application I have a ...