SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
1answer
99 views

nginx reverse proxy for websockets with SSL

I am trying to configure nginx (installed via macports) on my osx development machine. I am trying to reverse proxy localhost:12346/trade to a websocket connection which is available on port 12346 at ...
0
votes
0answers
27 views

SSL with rsyslog on CentOS - protocol family not supported?

For the life of me, I can't seem to get rsyslog to have imrelp use TLS(SSL). I've engaged the good people on http://kb.monitorware.com/post25017.html#p25017 to try and chase the rsyslog angle, but I'm ...
9
votes
1answer
305 views

Passing SSL protocol info to backend via HTTP header

After Poodle vulnerability was revealed recently, our team decided to move on from SSLv3. But before complete removal, they want to warn the daily users that their browser use deprecated SSLv3. So, we ...
0
votes
0answers
91 views

Tomcat ECDHE-ECDSA chiphers are not supported

Tomcat does not support ECDHE-ECDSA* ciphers. Configuration and version information is given below. OS is CentOS 6.5 x64 Tomcat version is 7.0.56 Tomcat native version is 1.1.30 (Loaded APR based ...
4
votes
1answer
548 views

Poodle Exploit - Disable SSL v3 on a website specific basis

I'm looking for a very specific situation here with this Poodle exploit. I have a need to disable SSL v2/3 on a subset of my IIS websites, but leave SSL 2/3 available on a few others. Is it possible ...
13
votes
1answer
709 views

How to mitigate POODLE but keep SSLv3 support for old clients

How do I mitigate the POODLE attack, but still keep support for old clients such as IE6 on Windows XP or an e-mail client. I've noticed that google does this: ...
1
vote
2answers
49 views

New SSL Cert causes no connection to website on POST from web application

I have a web application which will not connect to a website to POST after they changed their SSL cert. The URL and REF post is mentioned below. Is there anything else I should try on the server? ...
0
votes
1answer
109 views

Where to start? Multiple Websites, same IP and port, same SSL, on Apache 2.4, Ubuntu, EC2, behind AWS ELB?

Current Situation: My company runs a number of individual EC2 instances hosting unique websites using multiple subdomains off of a common top-level domain. (abc.foo.com, and def.foo.com, for example). ...
1
vote
1answer
97 views

verify enabled protocols on HTTPS for POODLE vulnerabilty CVE-2014-3566

after recent POODLE vulnerability I am going around and checking all my servers are configured correctly. Configuration is usually easy, almost all services have a way to set which protocols are ...
24
votes
7answers
16k views

Poodle: Is disabling SSL V3 on server really a solution?

I've been reading all day about the Poodle vulnerability and it I am bit confused now vs Security and Revenue. If I disable SSL V3 on Server (SSL V2 and V3 both will be disabled for Apache) clients ...
0
votes
1answer
60 views

OpenVPN connection issue

After I successfully connect to the VPN, a TLS handshake that I believe is done for the ping (keep alive parameter) always fails, so I keep getting disconnected after a random period of time. My ...
6
votes
2answers
6k views

How do I disable SSLv3 support in Apache Tomcat?

I am trying to reconfigure my Apache Tomcat server to only use TLSv1. However, it is still falling back to SSLv3 using certain browsers. I setup the <connector> tag with the following settings: ...
8
votes
2answers
1k views

In response to the OpenSSL Poodle vulnerability should I disable SSLv3?

OpenSSL just announced another new vulnerability in it's memory routines. You can read all about it here: https://www.openssl.org/news/secadv_20141015.txt The workaround is to disable SSLv3. Will ...
1
vote
0answers
49 views

Apache access log format does not record SSL_PROTOCOL for all connections

We're trying to track the ssl protocol used by clients to our site/web services, the connections could be by browser, or, for the web services all sorts of soap libraries etc. I've created a custom ...
0
votes
1answer
150 views

What to do with secured sites in IIS in regard of SSL 3 vulnerability (POODLE Bites)

I just find out today about this issue, and I have the following question: If we disable SSL3 in IIS as described in On IIS, how do I patch the SSL 3.0 POODLE vulnerability ...
-2
votes
1answer
80 views

How can I check if my server is using ssl 3? [duplicate]

How can I check if my server is using ssl 3? When I run openssl version command I get this. OpenSSL 1.0.1 14 Mar 2012 Thanks.
0
votes
1answer
150 views

Is it possible to set an SSLProtocol in Apache for a single VirtualHost (poodle)?

I'm trying to test a patch for the poodle vulnerability that involves disabling SSLv3 on my web server. In order to test this on a non-production environment first, I'm setting the SSLProtocol on a ...
1
vote
1answer
300 views

Redirect Loop SSL Nginx Cloudflare

I have Universal SSL with CloudFlare. I wanted to set up a permanent SSL redirect on my Ghost blog. This was my original config. It works great individually using http://example.com and ...
9
votes
3answers
2k views

Protecting against POODLE SSL on stunnel

How can I mitigate POODLE SSL vulnerability when using stunnel as HTTPS reverse proxy?
4
votes
1answer
82 views

Is it possible to configure IIS to redirect based on the SSL cipher suite used for the connection?

With the announcement of POODLE, I would like my servers to accept SSL3.0 connections but have them serve a page which indicates that the user should update to a newer browser with TLS support. It ...
24
votes
6answers
27k views

On IIS, how do I patch the SSL 3.0 POODLE vulnerability (CVE­-2014­-3566)?

How do I patch CVE­-2014­-3566 on a Windows Server 2012 system running IIS? Is there a patch in Windows Update, or do I have to do a registry change to disable SSL 3.0?
0
votes
0answers
166 views

How to fix: Root installed on the server. Remove the self-signed root from the server

I have a CENT OS Server and app is hosted on apache tomcat. I don't know much about SSL certificates but I did following to set it up 1 - Generate key store file keytool -genkey -alias -keyalg RSA ...
0
votes
2answers
52 views

What SSL certificate to use with web app with API on Azure?

I am creating a web service / app and hosting it on Azure. Users signing up for the service will get their own subdomain, e.g. user1.example.com. I have an API which is accessible through www. I want ...
0
votes
0answers
125 views

NGINX: HTTP access not working from Chrome, only HTTPS

I 'm trying to publish IBM Connections NGINX allowing access using HTTP and HTTPS . By HTTPS is working but when i try to access by HTTP I get this error in Google Chrome only: This XML file does ...
0
votes
2answers
46 views

How to setup a backup SSL apache server

In case of my MAIN server crashing, I'd like to be able to change the DNS IP address to another (BACKUP) server, in order to reduce the system's downtime. MAIN server = https:// MAIN_WEBSITE / ...
0
votes
1answer
100 views

Using self signed certificates with Tigase XMPP server

I am trying to use a self signed certificate, generated using http://docs.tigase.org/tigase-server/5.3.0/adminguide/#_server_certificates, to start the XMPP server. However, the server does not start ...
1
vote
1answer
101 views

Configuring client certificates on IIS8 - Error 403.16

I am trying to implement client certificate authentication on IIS 8. I have deployed my configuration on a development machine and verified it working as expected there. However after setting up on ...
1
vote
1answer
95 views

Setup client certificate verification in an Apache webserver via SSLVerifyCilent on a Centos 6.5+ server

Goal: My goal is to setup an Apache web server on a Centos box, with SSL and client certificate validation similar to the following Apache virtual host ...
0
votes
1answer
46 views

Two domains one ssl

We have a production rails app being hosted on heroku at http://abc123.com. We also have a wordpress blog hosted on bluehost at http://abc123blog.com. We use Rack::ReverseProxy to make it look as if ...
0
votes
2answers
100 views

Redirect loop when forcing SSL with Nginx

I know this question has been asked and answered a million times, but none of the accepted answers are working for me. My site is unreachable due to some sort of infinite redirect loop when I force ...
0
votes
1answer
1k views

“SSL input filter read failed” Apache and 443

I have a little problem with my apache conf. When I read the error log, here is what I can see: [client xxx.xxx.xx.xx] AH01964: Connection to child 1 established (server www.mywebsite.com:443) ...
0
votes
1answer
173 views

Adding a self-signed cert to the trusted certs within cURL in Windows?

I have created a self-signed cert from the instructions on this page, have installed it and it appears to all be working correctly, but now I need cURL to trust it. Since the later versions of cURL ...
0
votes
1answer
66 views

App engine - Naked domain redirect to “www”

I set up my domain with SSL certificate on Google Appengine: https://www.ltc-x.de/ Everything is working fine for the www subdomain. Now I want to get the naked domain to work as well. So if someone ...
0
votes
0answers
28 views

Apache configuration redirect using only redirect, not rewrite

PS: this is the 2nd part of the question originally posted here. I'd like to disable the HSTS header completely for specific virtual hosts. I have (per recommendation) a redirect in the 443 container ...
0
votes
2answers
304 views

Https url appended with port 80 using CloudFlare, Nginx, and Thin

I have a Nginx setup for my Thin server running a Ruby on Rails project. Nginx is currently the endpoint for my SSL. I recently had some issues with attacks on my webserver, so I decided to add ...
-2
votes
2answers
164 views

Ssl error on mobile devices

I have a website which is ssl installed and working properly on pc's and also on Mac. But when I open it from mobile devices it gives an error that says server's certificate is not trusted. You can ...
0
votes
1answer
59 views

Root certificate invalid on a WHM site [closed]

I am a newbie in SSL certificates and was given the task on troubleshooting a site's WHM page that uses https but it displays an red "x" on the https section of the URL. On Google Chrome, details of ...
0
votes
1answer
2k views

upstream prematurely closed connection while reading response header from upstream

I am having issues setting up SSL for my Jenkins CI server. I use Jenkins behind nginx for a reverse proxy. I am getting these upstream prematurely closed connection while reading response header from ...
0
votes
1answer
56 views

Unable to set up 123-reg SSL's intermediate certificate on WHM?

I recently had an SSL certificate set for a domain on my VPS. Later I found out that it required an intermediate certificate to function properly on all devices. The SSL in question is 123-reg's ...
1
vote
1answer
216 views

phpldapadmin not being able to connect to LDAP server using ldaps

Update I have been able to reproduce the problem in a smaller scale using a simple php script that attempts an LDAP bind. From that script I got more debug output which lets me identify the actual ...
0
votes
1answer
143 views

Nginx Reverse Proxy: servername.domain.com reverse to http://ip.add.res.s/location/App

I need a little help sorting out how to configure a reverse proxying load balancer in nginx. Basically, I have two web applications that live under subdirectories on Apache servers, /flavors/Chocolate ...
0
votes
1answer
61 views

Nginx Server Block Config

I'm having a problem with my nginx configuration. I have several virtual hosts on the same server. However, I'm attempting to add another virtual host, this one being an SSL website. The website ...
1
vote
0answers
37 views

“invalid security certificate” (ssl_error_bad_cert_domain) after PFX uploaded to Azure

My SSL certificate (purchased on godaddy) on Azure stopped working all of a sudden. I am running a standard Azure website and I previously uploaded a .pfx file and bound my custom domain to it. ...
-1
votes
1answer
62 views

CName and A type sites hosted with and without SSL [closed]

Ok, I have a bit of a complicated set up that works for the most part, but recently I've had to migrate a couple sites to my server and I can't seem to get things working the way I want. I have 5 ...
0
votes
0answers
31 views

apache is redirecting all to SSL but still getting non-ssl log

I've just moved to ssl on apache, so i added this directive to my default conf Redirect 301 / https://the-checkout-tech.com/ with a log file called access.log Added a new ssl conf file with all ...
0
votes
1answer
176 views

SSL no longer working after Ubuntu 14.01.1 LTS upgrade

I upgraded my server to Ubuntu 14.04.1 LTS and now I can not seem to get my SSL certificate to work correctly. After the upgrade I had received an error when attempting to start Apache: AH00526: ...
0
votes
0answers
29 views

Is there a way to tell IIS to not require SSL, but require client certificates if the client uses SSL?

I'd like to set up IIS to listen on 127.0.0:80, and on *:443, so http connections are allowed from localhost only, while anyone from the net will have to use SSL. (This part is no problem). Also, i ...
0
votes
1answer
29 views

MySQL via SSL on VPC private subnet

Is an SSL connection recommended when connecting to a MySQL database server via a private subnet? SSL provides encryption but SSL causes a performance hit. The MySQL database server only serves ...
1
vote
1answer
66 views

Getting `HTTP/1.1 505 HTTP Version Not Supported` when using `openssl s_client`

I'm trying to use openssl s_client to send a raw HTTPS request. I type this: $ openssl s_client -connect homebrew.herokuapp.com:443 After it finishes the SSL pleasantries, I type this: POST ...
0
votes
0answers
96 views

Configuring NGINX with SSL and Node.js on CENTOS 6 in EC2

I'm trying to deploy a Node.js web-app on a Centos EC2 instance with an elastic IP. The SSL certificate is already setup and properly configured. I would like to allow only https connection to my app, ...