SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
0answers
35 views

openssl s_client -connect: 20 error with server signed certificate for client

What I want I want to connect to a server using a given signed certificate (by the company running the server) What I have Ubuntu 12.04 LTS My key and CSR files A signed certificate. It was signed ...
0
votes
0answers
12 views

Windows Server 2008 - HTTPS connection timing out

On my Windows Server 2008, I've got an EV SSL certificate set up in IIS and: HTTPS binding has been set Inbound HTTPS port 443 is open Web application has no errors SSL Certificate is valid Yet, ...
0
votes
2answers
49 views

Properly setting up a “default” nginx server for https

I have several servers running on the same machine, some with http only, some with both http and https. There are several server blocks defined in separate files which are included from the main ...
0
votes
1answer
38 views

Nginx, GET and POST solution for “The plain HTTP request was sent to HTTPS port”

I'm trying to create a SSL proxy for a web management console running on localhost and having no SSL support. Here is my config: server { listen 111.222.1.1:8443 ssl; ...
0
votes
0answers
25 views

Apache Tomcat & SSL - not connecting from different Sub Network

we are deploying an Apache Tomcat .WAR application provided from a third party. We have followed all the instructions provided from the party. The specs are: windows 2008 server Apache Tomcat 6.0.37 ...
1
vote
0answers
102 views

ejabberd starttls_required in c2s/s2s and disable SSLv3 + unsecure Ciphers

I'm using ejabberd on Ubuntu. My configuration looks like this: {5269, ejabberd_s2s_in, [ {shaper, s2s_shaper}, {max_stanza_size, 131072}, ...
1
vote
2answers
28 views

nginx ssl virt host issue - site won't load

I have configured nginx for port 80 and 443, with 443 containing an ssl cert configuration. When I restart nginx, no errors occur, so I don't believe it's a cert issue, but of course I could be ...
1
vote
1answer
46 views

Plesk is delivering incorrect SSL certificate when accessed through OpenSSL cli, but correct in browser

I have a Plesk setup with several sites. When accessed in the browser, Plesk serves the proper SSl cert just fine. But then when I go to access it through openssl using openssl s_client -connect ...
0
votes
2answers
62 views

SSL Library Error: -8181 Certificate has expired

After a yum update, there is an error when starting apache, in /var/log/httpd/error_log: [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec) [error] SSL Library Error: -8181 Certificate has ...
0
votes
1answer
32 views

SSL isn't working with Apache

I was trying to install a SSL certificate on my VPS. I Generated the CSR, and Got the Certificate and Intermediate CA. I am working on apache 2 on ubuntu server 13.10. So I used the Default SSL ...
0
votes
1answer
69 views

Blocking/redirecting port 3000 with Nginx and Ruby On Rails (thin server)

I am setting up a server now that uses Ruby on Rails with the Thin server. I have set up Nginx to redirect all of my http://mysite.com to https://mysite.com(with ssl). I want all network traffic to ...
0
votes
3answers
87 views

Use IP address or FQDN [closed]

I am preparing servers infrastructure consisting MYSQL , LDAP , PHP and FTP. I have all servers have static public and private IP(LAN). Now while configuring SSL i am facing problem of FQDN. For ...
1
vote
0answers
44 views

Apache passphrase working sometimes

On one of my servers I observe the following problem with SSL passphrase: some certs are passing it without asking for a password, while some others keep asking for it. I have set it up globally: ...
1
vote
2answers
66 views

Avoid Man in Middle AWS load balancer

I have a load balancer configurated with the port 443 to port 80 of the ec2 servers and with a sniffer like Burtsuite can I edit the request. How can configure the ELB to avoid this type of attack?. ...
4
votes
2answers
335 views

your security settings have blocked a self-signed application from running

I'm trying to use Integrated Lights-Out 2 (aka iLO)'s Virtual Media (which is Java based applet) and I'm getting following error(s): Application Blocked by Security Settings Your security settings ...
0
votes
1answer
42 views

nginx proxy_pass with a backend requesting client certificates

We're proxying a backend that we don't control & the backend is requesting a client certificate when connecting on https. When we request these pages through the proxy the connection times out ...
1
vote
1answer
35 views

nginx SSL with bare domain and wildcard

This is turning out to be an annoying problem that I'm hoping someone can help me with. To start, I run my own CA, so I'm doing self-signed certs; I can do anything I need with them using openssl. I ...
0
votes
1answer
23 views

Check client certificate in nginx?

I can issue certificates without a problem and I can get nginx to force users to provide a certificate but how do I get nginx to give me information about the certificate? Information such as name and ...
1
vote
0answers
115 views

Apache SSL handshake interrupted by system

I have an up-to-date Ubuntu 12.04 server running Apache 2.2.22-1ubuntu1.4. For every HTTPS request my Apache logs record what appear to be error messages related to encrypted connections. Self-signed ...
0
votes
2answers
71 views

How to redirect from FR to COM when using HTTPS [duplicate]

I have two domains : my-domain.com and my-domain.fr I want to redirect traffic as followed : my-domain.com:80 -> my-domain.com:443 my-domain.fr:80 -> my-domain.com:443 my-domain.fr:443 -> ...
1
vote
1answer
83 views

Turning on ssl_verify_client in Nginx causes Gitlab user identification to fail

We have a private Gitlab instance that we plan on exposing externally, in order to ensure that only employees can connect to the website I have rolled out a small internal CA with user certs in order ...
0
votes
1answer
45 views

Why Nginx reverse proxy shows http location?

I need help with my nginx configuration. In this config I've got /svn location, that comes to apache http. Apache is password protected (Basic Auth) When accessing https://my.server.com/svn it shows ...
2
votes
2answers
41 views

Specify nginx's ssl_certificate in location{} block

For a web service we have two certificates: myservice.com and api.myservice.com. Both have the same application (document root) but are serverd over HTTPS with different certificates. Unfortunately, ...
0
votes
1answer
35 views

Download root CA certificate in browser

I have a Apache server installed on CentOS 6. I have created a trusted self sign certificate. For that I had created root CA certificate and using it I have signed my self signed certificate. Now I ...
1
vote
2answers
39 views

Which operating systems ship with StartCom_Certification_Authority.pem

I purchased some (cheap) HTTPS certificates from StartSSL. They work great on all browsers I tested. According to this post they are even recognized in IE 7 and 8, which good enough for me. However, ...
0
votes
1answer
80 views

How to create ssl certificate for multiple domains which requires the CA root key in Linux

I have mail server. There are may domains hosted on it. I am deploying ssl certificate on it. I want that when user access there mail account using https browser should show that certificate is ...
0
votes
1answer
61 views

nginx and SNI: is it possible to automatically resolve SSL certificate by domain name

I need to setup a server that will server same content over SSL using different domain names. The problem is that I need an ability to add new domain names as easily as possible. Assuming that all ...
0
votes
0answers
33 views

OpenSSL connection Error called stream_socket_enable_crypto()

in my php coding i have following line which uses by SWIFT MAILER Class if(!stream_socket_enable_crypto($this->smtp_conn, true, STREAM_CRYPTO_METHOD_TLS_CLIENT)) { return false; } however ...
1
vote
2answers
35 views

How can I implement custom domains with SSL support for my SaaS product?

I have a SaaS project that needs to support custom SSL domains. I've looked into SNI which looks perfect. If I decide to (or need to) support Windows XP. What other techniques can I use? I know that ...
1
vote
1answer
130 views

NGINX SSL termination slow

I am using NGINX as a reverse web proxy to an upstream IIS webserver. I am proxy_pass'ing to an https binding on the IIS server so I understand SSL is being encrypted/decrypted twice- but it shouldn't ...
0
votes
3answers
68 views

How to Redirect FROM https TO http [closed]

I have a site that does not need https. We do not collect any information at all, nor do we have any forms. This being so we did not set up an SSL certificate. However, when I go to ...
0
votes
1answer
30 views

IIS URL Rewrite and Reverse Proxy

I have a reverse proxy rule that forwards all requests to a specific subdomain to an internal server and everything works great. <rule name="cloud.domain.com" enabled="true" ...
1
vote
1answer
32 views

Apache with self signed certificate, www subdomain hanging when requesting from browser

I created a staging site with a self signed certificate using: mkdir /etc/ssl/wildcard.yourdomain.com cd /etc/ssl/wildcard.yourdomain.com/ openssl genrsa 2048 > host.key openssl req -new -x509 ...
2
votes
1answer
85 views

How to authenticate a user through certificate exchange?

I have an web application A where a user has to authenticate through a username/pass method (https://server.local/webappA). A secure connection is established (HTTPS) with the server A. Then, these ...
0
votes
1answer
56 views

Cheapest SSL by GoDaddy that is good enough for Facebook Tab?

GoDaddy is way too confusing . Period. One of my clients has specifically asked us to buy SSL from godaddy as both domain and server (shared hosting) have been bought on GoDaddy. So here is my ...
2
votes
1answer
35 views

SSL/TLS cert: Get alternative name to work with LAN IP

I have created my own CA and imported its root certificate on my devices. I use a signed SSL certificate to provide myself with remote access to my NAS. When I access my NAS over the proper URL (e.g. ...
1
vote
2answers
38 views

What Files Should I Set Up for Clean Apache Configuration

I am not new to Apache but nor am I an expert (by any means). I've run sveral versions of WAMP and XAMP server set-ups. Most of my Apache configurations are simple. I usually run a default master ...
0
votes
1answer
53 views

CACert.org certificate giving sec_error_unknown_issuer

I have used cacert.org to issue class 1 certificates for my website. I made sure that the subdomain name is correct and that the e-mail address is there, but yet I keep getting the certificate problem ...
1
vote
0answers
43 views

Amazon EC2 IIS 8 SSL FTP results in 534: Local policy on server does not allow TLS secure connections

I have an Amazon EC2 Windows 2012 server. It is configured with a dozen sites, one of which is an FTP site that requires SSL. Currently it's set with: Basic Authorization Specific group for ...
0
votes
1answer
48 views

opendkim requires libcrypto [duplicate]

I am trying to install opendkim. For that, I used rpm to install epel, then did yum install opendkim. However, I get the following dependency errors: Error: Package: opendkim-2.9.0-2.el6.x86_64 ...
-5
votes
1answer
31 views

How to update SASS for the whole of a VPS automatically? [closed]

I have a VPS with SASS, and I have configured it correctly. I have multiple users on my server, and they don't have SSL access to the server. Some of them use SASS, and I don't want to have to ...
0
votes
1answer
64 views

SSL for secure.DOMAIN.com on port 443 and 2443, is it possible?

So I have a sub-domain that is secured using a godaddy ssl. what I would like to do is have the standard 443 port secured as well as port 2443 so when going to https://secure.domain.com its secured as ...
-1
votes
1answer
23 views

Windows azure vm refusing connection port 443

I am deploying my sailsjs app using forever in windows azure. And it is taking forever to get my server up and running. Initally it was working fine when it was http but I changed to SSL with self ...
0
votes
1answer
95 views

Dovecot handshake failure, on Postfix success

I am trying to setup a Dovecot/Postfix structure, relying on a MySQL backend. I came across a problem with SSL configuration, and it's really tearing my hair out... Situation Dovecot listens on port ...
0
votes
1answer
76 views

nginx config fails with SSL key/pem (unique case)

I am trying to install SSL on my nginx reverse proxy with certified ssl keys but i get this message when i try to restart server: Restarting nginx: [emerg]: ...
0
votes
0answers
28 views

Two Way SSL authentication - Generating a certificate request for a web service client

I am in the process of developing a client for a web service that requires Two Way SSL Authentication. My client will be a Windows Service that calls a remote webservice belonging to an external ...
0
votes
0answers
67 views

Random Switch from HTTP to HTTPS

For quiet sometime I've been dealing with a random switch from HTTP to HTTPS, at times it vanishes after a few attempts to remove the https from the url, otherwise I have to clear my cache to be ...
0
votes
0answers
35 views

SSL error - certificate not identifying correct server

SO I have set up my SSL certificate on my ubuntu/nginx server. When I created the certificate the wizard on Gandi (the CA for the certificate) asked me to identify a subdomain for the certificate. I ...
0
votes
1answer
45 views

Problems installing SSL certificate on nginx with intermediate key

I am trying to install an SSL certificate on my Ubuntu server. I have purchased the certificate from my CA and have downloaded the certificate itself and an intermediate certificate. As so: my ...
0
votes
0answers
6 views

VirtualHost ignore 443 [duplicate]

I have multiple virtual hosts running on the same ip. If I had https:// to a domain that does not support ssl then I'm redirected to the one domain that does support ssl. This has become an issue and ...