SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
0answers
32 views

Error when trying to force Glassfish to use HTTPS instead of HTTP

I am developing a JavaEE applicaction using Glassfish as server. I would like to force http connections to https. I have added to following code to web.xml, but when I run the application I have a ...
1
vote
1answer
538 views

Internet Explorer 8 - TLS Fatal Error Close Notify - Oracle HTTP - Server Apache 2.2.22.0

I applied the POODLE fix for Apache via "SSLProtocol All -SSLv2 -SSLv3" in the ssl.conf file for our Apache server but am having issues with the CAC Client authentication via "SSLVerifyClient ...
1
vote
1answer
47 views

Why layer 7 load balancer cannot pass through SSL termination?

I need to share ssl termination task among server farm or multiple processes. In this architecture, there should be a load balancer before this ssl termination task. After looking for an appropriate ...
1
vote
1answer
51 views

Determining if an SSL cert is affected by SHA-1 phase-out

Google chrome will start to warn users that their SSL connection is insecure under the following conditions: The cert uses the SHA1 hashing algorithm, and The cert expires on or after 2016-01-01 (or ...
0
votes
1answer
138 views

Spacewalk client OSAD service SSL error

I have some problems with my freshly Spacewalk setup. I have registered my test client, and installed osad service to avoid executing rhn_check. But when I start osad service, I get the following ...
0
votes
1answer
57 views

IIS 7 Still showing old certificate

I installed an SSL certificate in my IIS 7 (Windows Server 2008). I deleted the expired certificate but still showing when i access from any browser. I deleted the expired certificate. I Installed ...
0
votes
1answer
261 views

Nginx reverse proxy with multiple ssl domain

I have problem with Nginx when I need configure it as reverse proxy for multiple locations based on source server, but on one port. For example I have these servers: server1.domain.com ...
0
votes
0answers
183 views

Wordpress behind nginx reverse proxy doesnt work in https

I'm trying to run wordpress on a docker based cloud. The setup is: There is a server running a mysql array, which serves a container with Wordpress Running on Nginx. The setup is copied from this ...
1
vote
0answers
111 views

How to replace Zentyal CA certificates and key with an already existing CA

The context: we're using a CA which is deployed on all our client machines, and a lot of hosts and web servers. It seems that Zentyal CA module only allows to issue a new CA using the GUI, but not to ...
0
votes
1answer
88 views

TLS-intolerant sites suddenly not working

About 2 weeks ago users started reporting that they were unable to access two https-only sites. When I inspected these sites I found they were completely intolerant to TLS. In order to connect, SSL3 ...
0
votes
2answers
56 views

IP Based certificate for HTTPS - is it possible? [duplicate]

We are having multiple business sites hosted on Windows 2008 r2 server. We do own a static IP. We want to have all of the sites work under SSL. However it is kinda not possible to have separate ...
1
vote
1answer
98 views

Unable to disable SSL3.0 in IIS

I have tried to disable SSL3.0 on my Windows web server that is running Windows Server 2008R2 with IIS 7.5. I have entered the following registry keys: Windows Registry Editor Version 5.00 ...
0
votes
0answers
48 views

Using SSL to secure Solr with Tomcat - Admin Dash Fails to Load Properly

Tomcat: 7.0.56 / Java: 7 Upd: 71 / Webapp: Solr 4.10.1 / OS: Windows 2012 R2 Busy trying to secure Solr to compensate for the lack of security prevalent for a developer. We're having some difficulty ...
2
votes
2answers
287 views

SSL on IIS8.5 - Working with named URL, but localhost results in ERR_CERT_COMMON_NAME_INVALID

I have IIS8.5 running on Win Server 2K12 R2. I have a valid SSL certificate registered to server's name foo.domain.com: I have configured my website's bindings to use https with this certificate: ...
1
vote
1answer
31 views

What do I need to ldapsearch AD?

I'm attempting to test LDAP for Moodle auth, by using LDAP search. When I run $ ldapsearch -H ldaps://totally.legit.hostname "(uid=jldugger)" -b dc=example,dc=org memberOf I get back: ...
0
votes
1answer
86 views

nginx can't disable SSLv3 [duplicate]

I'm having an issue trying to disable SSLv3 on my nginx installation. HTTPS works fine, but I just can't seem to disable SSLv3 and it makes my site vulnerable to the POODLE attack. Also, for some ...
0
votes
2answers
139 views

Nginx sslv3 poodle disable

I tried setup SSL cert without SSLv3 in my nginx, but SSL Labs say, my server have SSLv3 how to disable it. My config: add_header Strict-Transport-Security max-age=31536000; add_header ...
1
vote
1answer
13 views

ftp alter server response in transit

I have a unique situation where one of my business partners runs a FTP server that is out of date and the client I need to use is slightly incompatible. The server I'm connecting to returns a 334 ...
0
votes
1answer
20 views

SSL Common Name Wildcard [duplicate]

I looked through the other questions and didn't really see anything specific to this. My boss bought a QNAP NAS server for our office and up until now it's been great to use. Up until I needed to ...
-2
votes
1answer
56 views

SSL on Heroku, error add cert: “not valid. The 'Not After' date restriction on the certificate has passed.” [closed]

I purchased a wildcard SSL cert from Gandi.net many months ago, and used it immediately after purchase successfully on other hosting services than Heroku. I now need to secure a new subdomain on a ...
-2
votes
1answer
29 views

How can I log SSL protocol on Apache [closed]

Nginx can do that with $ssl_protocol. http://nginx.org/en/docs/http/ngx_http_ssl_module.html#variables Is something like this possible with Apache?
-1
votes
1answer
109 views

Disabled SSLv3 on Apache, but still using it to send to other websites? [closed]

I followed the instructions for CentOS 6 to disable SSL v3 in Apache (2.2.15, not sure how much that matters), but it appears to only disable it for incoming clients, not outgoing requests (such as to ...
1
vote
1answer
340 views

httpd won't start with updated SSLCipherSuite (POODLE)

I'm trying to update SSL settings for a testing server running CentOs 6.4, but after updating the SSL cipher suites, apache won't start. Configuration file location: /etc/httpd/conf.d/ssl.conf. ...
0
votes
1answer
41 views

Extract correct format of key and cert files from .p12 file for a SSL MEAN App?

I'm writing a MEAN app for my university department on my Mac development machine. I started with the boilerplate from mean.io. In the configuration file config/env/all.js, there is a section for ...
1
vote
2answers
52 views

SSL Support for PHP 5.3.3 and Apache

After a solid day investigating why I can't get my application to connect to a remote server over SSL using PHP PDO, I found PDO::MYSQL_ATTR_SSL..., but it seems that they exists only for 5.3.7 or ...
0
votes
2answers
81 views

SSL/HTTPS issue (no padlock icon) on Safari when using ngixn+unicorn

I have an application that runs on nginx+unicorn. This is how my server block looks like upstream rtdev{ # fail_timeout=0 means we always retry an upstream even if it failed # to return a good HTTP ...
4
votes
2answers
192 views

Why did git stop working after server disabled SSLv3?

Like most others, our repository server needs to disable SSLv3 (and v2) ASAP. However, doing so seems to break our git-clients -- at least, on RHEL5 (connections from my FreeBSD desktop work fine). ...
0
votes
1answer
42 views

Connectivity problems on website

We've been experiencing some connectivity problems on http://www.scirra.com. Running a DNS check: http://dnscheck.pingdom.com/?domain=www.scirra.com We're getting some errors: Delegation not ...
1
vote
3answers
137 views

Apache Rewrite rules for SSL in sub domain

I have a web site deployed that uses kohana and URL rewriting to make the URLs more restful. This works fine. I also have Moodle installed in a sub directory on the same server and a subdomain ...
0
votes
0answers
25 views

How to get 2 ssl certs on alias of subdomain

had a quick look through can't find this actual situation, so appreciate any help. We have a domain hosted on a plesk server with a subdomain, Lets call it Domain.com and subdomain.domain.com An ...
0
votes
1answer
69 views

Single http/https server block in nginx with upstream https and upstream http

Our current nginx setup handles http/https with a solution similar to the one specified in this answer nginx.conf http { upstream backend { server backend.com } upstream ...
0
votes
1answer
218 views

openssl s_client shows alert certificate unknown but all server certificates appear to be verified

I am troubleshooting errors establishing a secure connection to an EPP server. I issue the command below and see that all of the server certificates are verified, but still I get an error ...
1
vote
1answer
95 views

Is it possible to configure ECDHE-ECDSA with mod_gnutls and Apache 2?

I'm trying to configure my Debian box with mod_gnutls implementation (for sake of SNI), to achieve best possible results in TLSv1.0/1.1/1.2 (disregarding both SSL2 and SSL3) However it seems to me, ...
0
votes
0answers
458 views

pfsense reverse proxy + HTTPS/SSL interception

I have pfSense 2.1.5 and squid3-dev 3.3.10 configured as reverse proxy for internal http web server and server proxy (port 3128).It works. Activating HTTPS/SSL interception (Enable SSL filtering) on ...
1
vote
1answer
79 views

Postfix 'tlsv1 alert unknown ca'

I have VPS (server A) and hosting (server B). On the server A, I've set up mail server (debian, postfix, dovecot, postfixadmin and roundcube, self-signed cert, TLS only auth) which works fine: I can ...
0
votes
0answers
24 views

Change SSL Protocol in MSSQL 2012

Is there a way to change the SSL Protocol support in MSSQL express 2012 on windows 2008R2 ? I want to change the protocol from SSL3 to TLS (1.0,1.1,1.2), after hours of looking I cant find ...
0
votes
1answer
75 views

Secure Domain.nl , Alias of SSL Certified Domain.com not working with .com's SSL Certificate [closed]

I have a .com site that is https with a Comodo certificate via Dreamhost. I also have https://cdn.domain.com with a unique ip address to make it play nice with MaxCDN. The site is run in two languages ...
4
votes
2answers
233 views

Redirect users connecting with SSLv3 within nginx

I was looking to drop all support for the SSLv3 due to POODLE, but found that there are still some people coming from old browsers for the likes of IE on Windows XP. How do I detect these SSLv3-only ...
0
votes
1answer
19 views

Allow HTTPS only for specific domains with pound

quick question here: I have trafic from several domains routed to a Pound Reverse Proxy. I have a valid certificate for one of these domain that I want accessible over HTTPS (this part I managed to ...
0
votes
1answer
42 views

Which server to locate SSL certificates when using Apache reverse proxy

I'm in the process of just figuring out the process of setting up a gateway server (Using Apache reverse proxy with SSL) to host multiple web sites. I just wanted to confirm which server would require ...
0
votes
1answer
60 views

AH01896: Unable to determine list of acceptable CA certificates for client authentication in Apache v2.4 SSLCACertificatePath directive

I am using Apache v2.4 In ssl.conf file I am using SSLCACertificatePath directive with parameter like /var/dat/certificates/ssl.intermediate where ssl.intermediate is an empty directory with ...
1
vote
1answer
57 views

puppet server hostname does not match certificate - can't authenticate.

I know this question has been asked before in many different variant. I read all the post related to the problem but I cannot get agent and master talking to each other. I boot up 2 vm via vmwork ...
0
votes
1answer
52 views

Does DB2 accept SSL3 connections?

Does DB2 allow connection through Secure Sockets Layer version 3 (SSL3)? To be more exact, will a program using SSL3 connection get an access to DB2? or will it fail? If it does accept it, is there ...
0
votes
0answers
28 views

How do you configure Wildcard SSL on Apache a single IP?

I have recently purchased a Wildcard SSL Certificate for my domain, however I am having difficulty configuring it within Apache. My server has one dedicated IP address, so I have read that you need ...
0
votes
3answers
236 views

nginx poodle fix configuration

I have a dedicated CentOS web server (with Plesk 12) and I am trying to disable SSL 3. I have been everywhere trying to disable SSL 3 and tried to apply the fix as detailed within other posts, but ...
0
votes
1answer
324 views

Enabling cipher TLS_RSA_WITH_3DES_EDE_CBC_SHA (0xa) on Windows Server 2003+ISA 2006

I have been given a task to disable all "weak" ciphers/protocols on our very old ISA server based on Windows Server 2003. I have disabled all protocols but TLS1.0, and all ciphers but RC2/128, RC4/128 ...
0
votes
0answers
52 views

Install an SSL certificate for a subdomain on a server that already has an EV SSL certificate (CentOS 5.11)

I am maintaining a site on a server that is currently running: CentOS release 5.11 (Final) Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 PHP/5.3.28 The server is ...
1
vote
0answers
39 views

Lighttpd to include IP address in error.log

I have lighttpd/1.4.31 (ssl) on Debian 7.6 and I would for the standard error.log to include the IP address of the host which caused the error. Is it possible? The accesslog.format directive allows ...
0
votes
1answer
71 views

ELB and SSLInsecureRenegotiation

I currently have SSLInsecureRenegotiation set to off on my Apache 2.4 Amazon Linux server, but I am still failing over at SSLLabs (Secure Client-Initiated Renegotiation SUPPORTED). Do you know how ...
0
votes
1answer
45 views

ELB and Backend Authentication with Apache 2.4

I tried looking at AWS guides, and other things but can't seem to figure this one out. When using ELB there is a backend authentication option. I want to enable it, but I am not sure what ...