SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
0answers
20 views

SHA1 cipher detection on Apache

I have a Windows Server 2008 R2 server running Apache 2.4 that acts as a proxy for all of our websites and we have a wildcard certificate installed. Right now the cipher used is SHA1 and the plan is ...
0
votes
2answers
125 views

intermittent ssl_error_no_cypher_overlap

For the past week, clients have been randomly getting intermittent ssl_error_no_cypher_overlap errors when using Firefox. Connection issues have also occurred in Safari and Chrome. I can't find any ...
-1
votes
1answer
191 views

How to disable SSLv1/SSLv2/SSLv3 protocols to block Poodle to Apache 2.4.9 on Windows Server 2008 R2?

How can I disable SSLv1, SSLv2 and SSLv3 protocols on Apache 2.4.9 installed on a Windows Server 2008 R2 as a service? (I am not using IIS.) I still want to have TLSv1.2 protocol on my server. Here ...
1
vote
0answers
29 views

Risks of letting ZNC have my private SSL key

I have a single VPS running a few websites and also my ZNC IRC bouncer. I purchased a wildcard SSL certificate for all my subdomains (this was silly; it would've been much cheaper just to purchase ...
4
votes
2answers
176 views

Should I need to provide a root certificate when setting SSL cert on nginx

In Qualys SSL test always warn me that the root certificate is an extra download and can be safely removed. However, from Comodo website, their guide on installing cert on nginx is NGINX Needed for ...
1
vote
3answers
86 views

Is there a way to set up SSL for a domain and all subdomains?

So, I have a domain with many subdomains. Let's say example.com, a.example.com, b.example.com, c.example.com, etc. I want to host them from the same server with the same IP address. I have my ...
0
votes
1answer
79 views

Nodejs: server doesn't close TCP connections

Facing a problem in the production server running debian (7.0) with nodejs (v0.10.x) cluster where it doesn't close some TCP connections to the clients. This leads to connection drops when connection ...
1
vote
1answer
36 views

nginx - no ssl for crawlers / bots

In a server directive for port 80 in nginx I want to redirect all requests to https if the user agent is not a bot. I tried using this: ... location / { if ($http_user_agent !~* ...
1
vote
1answer
91 views

Problems configuring SSL certificate on Apache VirtualHosts

I am attempting to run multiple SSL connections off a single IP server running RHEL6. I have successfully configured one domain on SSL, however when I attempt to add a second, Apache fails to ...
0
votes
1answer
80 views

Setting up basic proxy from https to http via Apache

I need to proxy some remote api https://example.com/api/ to be accessible locally as http://localhost/api/ I tried putting this line in httpd.conf: ProxyPass /api/ https://example.com/api/ ...
0
votes
0answers
14 views

SQL 2012 IPSec or SSL

I have a requirement to secure connections to SQL server. (at transit that is) - TDE will be used for encryption at rest. SQL provides two options which are either certificate based SSL or Windows ...
2
votes
1answer
132 views

Getting SSL certificate chain from jabber server

trying to connect my jabber client (pidgin) to a jabber server with self signed certificate, I am getting an "unable to validate certificate" error. As it is not possible to tell the client not to ...
0
votes
1answer
17 views

Why tomcat on linux needs to build APR and not download

I am trying to install APR on Ubuntu Linux. I found that tomcat provides a downloadable APR package for windows but i cannot find a downloadable version for Linux. The tomcat site gives instructions ...
0
votes
0answers
35 views

In nginx logs: SSL3_GET_CLIENT_HELLO:required cipher missing

We disabled SSLv3 several months ago, and on Sunday I noticed this filling our nginx logs. It's been continuing ever since and users are emailing us saying they cannot connect to our site. 2015/01/13 ...
0
votes
0answers
33 views

Apache not forwarding to HAProxy

Scenario: I have a mobile application that needs to talk to a service hosted by an IBM Datapower appliance. However, the Datapower appliance requires bi-directional SSL and that will not work for ...
4
votes
1answer
264 views

Have I referenced my website's SSL certificate chain correctly?

The SSL certificate chain for one of my websites is incomplete, and I learned that I should reference the intermediate certificate in the virtual hosts file. Comodo sent me two intermediate ...
0
votes
1answer
46 views

Capturing LDAPS traffic with tcpdump

I have an app server that authenticates against Active Directory using LDAPS. I am connecting to the AD server over port 636. I'm trying to troubleshoot/debug some performance issues and am beginning ...
0
votes
3answers
66 views

Redirect Naked Domain to SSL

I have a wildcard SSL certificate and I want to redirect all http requests to their equivalent https. My server is a Debian (wheezy) and I am running Apache 2.2.22 I have added the following at the ...
0
votes
2answers
58 views

CAs in different child domains

I am trying to achieve the following; Environment is a Single Forest with a Root Domain and x2 child domains as follows; root.net child1.root.net child2.root.net There will be no logical or ...
-1
votes
2answers
53 views

Can one domain have 2 or more SSL certificates?

I have googled and found this post: http://security.stackexchange.com/questions/46988/is-it-technically-possible-to-configure-two-different-ssl-certificates-for-the-s If it actually is possible, then ...
1
vote
2answers
29 views

Force https before authentification - no access to vhost

I am a beginner when it comes to servers and I have a problem similar to this one. When accessing the desired webpage, .htpasswd prompts me for an authentification before I am redirected to https. ...
0
votes
1answer
60 views

Outlook SSL error when connecting to new exchange 2013 installation

I've just installed Outlook 2013 and have all the clients connecting to it, however, whenever a client connects via outlook they are prompted with an invalid SSL message for myserver.mydomain.local. I ...
1
vote
1answer
19 views

gnutls-cli hangs when testing an ssl connection

I'm running the command gnutls-cli -s facebook.com -p 443 --x509cafile /etc/ssl/certs/ca-certificates.crt -d 999 and the output is |<2>| p11: loaded provider 'p11-kit-trust' |<2>| p11: ...
2
votes
2answers
32 views

Is it possible to have IIS require SSL and redirect HTTP at the same time?

Our application currently has a HTTP-redirect to HTTPS. Now we want to completely remove this HTTP-binding because of security reasons, and have our users only use HTTPS by configuring "Require SSL" ...
3
votes
1answer
74 views

cURL is failing for normal users but not root

Have a strange issue on a RHEL box. To keep the editor from complaining about posting more than 2 site links, kindly mentally replace [google site] with https://www.google.com when reading the curl ...
1
vote
0answers
72 views

SSL error, unable to find valid certification path to requested target

I'm new to ssl so forgive me. I set up a site with ssl and all the online checks (eg. https://ssltools.websecurity.symantec.com/checker/views/certCheck.jsp) show that it is set up correctly and the ...
0
votes
1answer
347 views

IMAP TLS connection to Dovecot fails

Original title: IMAP connection to Dovecot fails only from Thunderbird I have set up Dovecot with SSL (TLS) on port 993. I can connect with Outlook, PHP SMTP and Android Mail, however Thunderbird ...
1
vote
1answer
55 views

Validating SSL/TLS renegotiation flaw

Our vulnerability scanner (Saint-based) is claiming that a large number of devices and servers are susceptible to the SSL/TLS renegotiation flaw (CVE-2009-3555). Most of these servers and devices are ...
2
votes
1answer
320 views

Weird http -> https redirection although not configured

I am running Apache 2.2.15 (CentOS 6.6) with a HTTP-only domain demo.xml-director.info Using wget I can retrieve the content properly wget -S http://demo.xml-director.info --2015-01-05 13:31:41-- ...
0
votes
2answers
19 views

SSL Certificate issue on renewal in IIS 7

I have an SSL certificate that expires on Februray 15, 2015. What if I install new certificate on my server on Feb 10, 2015. Will my certificate work with new renewed certificate on Feb 10 as my old ...
0
votes
1answer
75 views

HAProxy SSL Handshake failure on one server but not the other

I've been searching the net extensively but I'm not able to find a solution to this problem. I have setup two servers behind KeepAlived and HAProxy. When both servers are up, I can see that both ...
2
votes
0answers
30 views

Certificate can only be used by network service account

Issues : Our service is using one certification for partner service call. It worked well in IIS site which is running as network service account. But when we run test the code as administrator ...
1
vote
3answers
57 views

If a sub domain is secure with a SSL certificate, will the sub-subdomain also be secure?

I have a standard SSL certificate I just purchased from Godaddy. Now it won't let me use a wild card for issuing the certificate for my domain. It says that the * wild card is not included in my ...
2
votes
1answer
110 views

Force SSL not working either with Joomla or htaccess

We have a multiple sites in Joomla. Following are the details. Hosted on domain mydomain.co.in, sub.mydomain.co.in. Amazon EC2 instance, behind load balancer. We have bought WildCard SSL certificate ...
1
vote
2answers
85 views

Nginx SSL certificate served for all server name resolving the server IP

Given I have 2 subdomains configured in the DNS (so pinging both reply for both with the IP address of my server) and for those subdomains I have 2 different TLS certificates. I have configured nginx ...
2
votes
1answer
147 views

wordpress nginx ssl redirect loop

So I'm setting up an nginx server and installed wordpress and SSL. The site is working perfectly on both http and https but when I try to redirect http to https via nginx's server block, both http ...
0
votes
1answer
196 views

Nginx reverse proxy without SSL termination

I'm trying to set up Microsoft Remote Desktop Web Services on a Windows 2k12 server. This is fully functional, however I would like (need to) put a reverse proxy (Nginx) in front of it. I only have ...
4
votes
1answer
487 views

Puppet: New server unable to fetch configuration from puppet, with some ssl error, what could be the reason?

Three machines in the production environment had some hardware issues and were decommissioned. The infrastructure team has reinstalled them and gave them the same hostnames and IP addresses. On the ...
1
vote
0answers
148 views

PuppetDB: unable to get local issuer certificate

I'm attempting to use puppetdb on but I'm running into some issues. I have a node called puppet. It is the master as well as where I've installed puppetdb. It's also a node that puppet manages. ...
2
votes
1answer
84 views

nginx domains using SSL cert listening but inaccessible

I have multiple domains and multiple domains using SSL certs running under nginx. All domains are basically using the exact same config, substituting for names of course, except for the HTTPS-enabled ...
2
votes
1answer
66 views

How to fight BEAST vulnerability and maintain PFS for old clients?

Correct me if I'm wrong but BEAST is because of CBC in TLSv1.0, right? So to eliminate the threat of BEAST all CBC cipher suites which are SSLv3 or lower have to be disabled, right? Lets jump into ...
2
votes
1answer
124 views

How to Enforce SSL in Varnish 4

I am aiming to redirect clients to a SSL-version of a site using Varnish. In Varnish 3 this could be done by the following in the VCL: sub vcl_recv { if ( (req.http.host ~ "^(?i)somesite.org" || ...
1
vote
1answer
48 views

How to secure only one page with SSL on Apache2?

My web server hosts many pages. However, I need to secure only one of them with SSL. I know how to create self-signed certificate and how to install it on Apache2. My problem is quite different: since ...
2
votes
2answers
376 views

What should I do about a mixed content warning on my website?

My server is configured to use HTTPS only; this works okay. But when I visit the website I get this message in Firefox (next to the URL bar): Firefox is blocking content on this page Most ...
0
votes
1answer
26 views

.htaccess error with multiple rewriterules

I'm having a bit of an issue with my .htaccess file. I recently got an SSL certificate for my website and the https:// is working perfectly. However, I wanted to redirect any traffic using http:// to ...
5
votes
2answers
98 views

Perfect Forward Secrecy (PFS) for mail servers

Perfect Forward Secrecy is an important enhancement to SSL/TLS communications, helping prevent captured SSL traffic from being decrypted even if the attacker has the private key. It's easy enough to ...
1
vote
1answer
10 views

SSL for a single Lighttpd Vhost

I've inherited a lighttpd server that I have really very little knowledge of how to manage. I'm currently trying to install an SSL for one domain on that server. I've been looking at this bit in the ...
0
votes
1answer
141 views

Domino error, SMTP: SSL bad peer certificate. Connection refused

We use Lotus Domino 8.5. Currently our Domino server is able to route emails to different external domains. But very recently one of the user has changed the domain so for example xyz@old.com got ...
0
votes
1answer
193 views

How can one force Open Directory server to provide its full certificate chain to connecting clients?

The Problem We've created an Open Directory master on OSX 10.10 Yosemite + Server.app v4: $ sudo slapconfig -createldapmasterandadmin admin Administrator 1000 Which generates a root CA, an ...
2
votes
1answer
531 views

Correct Apache reverse proxy config with SSL for Jenkins and Sonar

I am running two services behind an Apache server: Jenkins (Port 8080) and SonarQube (Port 9000). My apache config looks like this: <VirtualHost *:80> ServerName server Redirect permanent ...