SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

3
votes
0answers
51 views

Improve SSL Performance with Nginx

We have Nginx in the front of our system and we Proxy to Apache at the back. We use SSL/TLS for our connection. Question: Is Nginx the best option to terminate SSL/TLS connections in terms of ...
0
votes
2answers
52 views

Can I use the same SSL certificate on the CDN and the origin

It's pretty straightforward question, I have a certificate issued by DigiCert, already installed it on my origin, and I want to use it for the CDN. I'm starting to configure Akamai CDN in front of my ...
3
votes
1answer
617 views

Do I need to have port 80 configured in LAMP for an HTTPS website?

I have a LAMP webserver, and on it there is https://sslhosting.cz/ domain. First I attach a general Let's Encrypt config file, which I changed to my needs: /etc/letsencrypt/options-ssl-apache.conf ...
0
votes
1answer
53 views

Apache refuses HTTP CONNECT over SSL on non default virtual host

I have an apache 2.4.18 server running with multiple vhosts. /etc/apache2/sites-enabled/000-default.conf: <VirtualHost *:80> DocumentRoot /var/www/html Redirect 400 / ...
1
vote
1answer
157 views

Do SRV records indicate security

Is there a way to specify 2 SRV records for the same service, one implementing security and one not? Is there enough information on the specification to indicate such a thing?
-1
votes
1answer
39 views

Apache 2.4 on Debian 8 - SSL_ERROR_RX_RECORD_TOO_LONG

I have read that the general solution to this issue is to add NameVirtualHost *:80 and NameVirtualHost *:443 to the VirtualHosts. However Apache 2.4 tells me: AH00548: NameVirtualHost has no ...
1
vote
1answer
68 views

Redirect from port 80 to 443 with nginx and multiple servers

To begin, I'm a bit new with nginx and a bit lost… I sadly didn't found any solution to this, so here is my problem. If it's a duplicate of an already existing question I apologize and I would be very ...
0
votes
0answers
50 views

RabbitMQ SSL Configuration

I generated a letsencrypt certificate and tried to configure the cert with my rabbitmq server. I enabled both rabbitmq_management and rabbitmq_mqtt plugins with the same ssl cert configuration. My ...
1
vote
1answer
42 views

Stunnel “wrong version number” error with TLS-PSK

I've got Stunnel running on a Raspberry Pi which is acting as a TLS wrapper for an apache2 server. I've configured it to use TLS-PSK (correctly, I think), but the logs show the following when I try to ...
0
votes
1answer
28 views

Redirecting https non-www to https www

I domain name registered through GoDaddy and the site hosted with Heroku. www CNAME is pointed correctly and then I'm doing a forward on the domain to www Everything should be pointing and ...
7
votes
3answers
2k views

How can an SSL certificate work for some clients only?

My hosting provider has recently re-issued and re-installed an SSL certificate for my domain, after they let the old one expire by mistake. I am now able to browse the website over HTTPS again, and ...
0
votes
1answer
56 views

Apache2 - SSL is not working

I am currently trying to install an SSL certificate issued through Namecheap by Comodo. I am however currently having issues. In the error log, I have this error: [Sun Apr 10 17:59:06.567045 2016] ...
0
votes
2answers
15 views

Self-Signed SSL: Subject Alternative Name (SAN) are not respected by my web browsers

I have created a self-signed certificate that works with https://*.blah.com (for example www.blah.com works). I have blah.com listed as a SAN but https://blah.com doesn't work with my web browser. ...
0
votes
1answer
31 views

My SSL configuration aren't working. Ubuntu apache 2.4

My ssl config arent working now. I just move a site from one host (I moved the certs files. When I try access I have this error. (Chrome and Firefox say to me that SSL protocol is invalid) Solved: ...
-2
votes
2answers
92 views

How long does it take to renew an SSL certificate?

I rent a managed dedicated server from a hosting company. A year ago, they added SSL support to one of my domains at my request. Last night, however, the certificate expired: yourdomain uses an ...
4
votes
0answers
49 views

Is it possible to change the SSL binding order in IIS?

I have Site A in IIS 8.0 configured to an SSL certificate with the binding ###.###.###.###:443. I also have Site B configured to a different certificate with the binding ###.###.###.###:443 (same IP ...
0
votes
0answers
65 views

NGINX server_name configuration

I have setup my NGINX server and got the necessary ssl certificates for having a TLS/SSL connection Am working with an API that posts data to my server. For security the API requires mutual ...
0
votes
2answers
19 views

One site handles https request with no ssl correctly, other generates \x16\x03\x01 error

We have two sites, sub.example1.com and example2.com. Neither one is specifically configured to handle ssl requests. One site https:/sub.example1.com, handles a secure request to port 443 successfully ...
2
votes
1answer
47 views

HTTPS not working with two intermediate certificates

Iʼm trying to create my own certificate authority using the XCA software. I have successfully created the root CA (Fisir Technologies CA) and intermediate CA (Fisir Technologies Intermediate CA X1). ...
0
votes
1answer
18 views

Incorrect document root being set up

I have set up two virtual hosts. The configuration file is as follows: <IfModule mod_ssl.c> <VirtualHost _default_:443> ServerName a.b.com ...
1
vote
1answer
57 views

Setting up Let's Encrypt for my domain and all sub-domains

I have a server (Debian 7 Wheezy and Apache 2.2) set up that hosts my domain, and a few sub-domains stemming from this. At the moment, I have these all set up in the default conf file as separate ...
0
votes
0answers
19 views

SSL Port 8443 blocked in node.js

I have node.js listening on port 8443 using SSL . net stat shows node listening and I can telnet to the port. However, access is blocked for some reason. Firewall list ports shows that the port is ...
0
votes
1answer
15 views

How can I install an SSL certificate using Amazon Certificate Manager to a VirtualHost?

I'm using Elastic Beanstalk and a t2.micro instance to host a few of my websites. For one of the websites specifically, I want to enable https. How do I go about doing this? I have each domain ...
1
vote
0answers
24 views

Hardware choosing and Bandwidth limitations on NGINX reverse proxy on a VPS?

Good afternoon friends. We are currently growing our infrastructure of a SaaS application and require 2 app dedicated servers, each running multiple instances of a nodejs application. The company ...
1
vote
0answers
50 views

Checking HTTPS setup on Apache/Nginx before using

You have just got a new HTTPS (SSL/TLS) Certificate, and what you hope is the correct Intermediate Certificates. This is setup in Apache with: SSLCertificateKeyFile /etc/ssl/www.example.com.key ...
0
votes
1answer
40 views

Cannot connect to SSTP VPN Error 20227

I have a working PPTP VPN on Windows Server 2008 and I can connect to this PPTP VPN on a Windows 10 notebook with an AD-User. But when I am trying to switch to SSTP on my Windows Server by importing ...
0
votes
0answers
33 views

Azure Web App Service - Installed SSLcert from SSLs.com OK, but nothing works

I successfully deployed my .net webapplication to Azure App Services (WebApp), access to http ://mywebappAAA.azurewebsites.net and https ://mywebappAAA.azurewebsites.net are working properly. I ...
-1
votes
1answer
34 views

.htccess redirect from non-www https to www-https [closed]

I want to redirect https://example.com to https://www.example.com for my website. Can you help me with the code to put it on .htaccess file. the site is in magento.
1
vote
1answer
36 views

nginx port 443 access denied

I am trying to use ssl on nginx /django in ec2 . This is the config server { listen 443; ssl on; ssl_certificate /apps/cert-chain.crt; ...
3
votes
1answer
256 views

How to fix issues with LetsEncrypt certificate chains on Windows Server?

I've been using LetsEncrypt to generate certificates for my sites on Windows 2012 R2 server. It worked great, until recently when I renewed the certificates. LetsEncrypt made a recent change where ...
2
votes
2answers
31 views

What are the benefits of connecting to MySQL using PHP-PDO's SSL attribute?

I primarily develop PHP applications using MySQL as my database. Generally, the server running the application is on the same box as the MySQL server, though not always. I was reading in the PHP docs ...
1
vote
0answers
21 views

Install Comodo SSL Cert for AWS Elastic Beanstalk Instance

I purchased a wildcard SSL cert from Comodo SSL, but am really confused on how to install it to use with my AWS Elastic Beanstalk instance. The files they sent me are: STAR_setheroapp_com.crt ...
0
votes
0answers
38 views

Some (but not all) static content proxied by nginx loads successfully

I have nginx setup on my windows machine as a reverse proxy, listening on 443 over ssl. When I hit a particular url, it is supposed to serve a node js web application that I have running locally. It ...
1
vote
1answer
54 views

Nginx one ip and multiple ssl certificates

Example case. I have a web-server with one IPV4 address. I am hosting ~50 web sites and just two of them have ssl certificates. I have configured vhosts for 2 ssl websites and everything is OK, except ...
0
votes
2answers
123 views

SSL error in VMWare ESXi 5.5 when trying to add Host to VCenter

Recently I installed a new VMWare EsXi 5.5 Server in an ASUS Server with 32GB of RAM, I have a couple of tplink additional NICs and had to add the drivers from VMWARE bundle to original ISO and rebuil ...
0
votes
4answers
68 views

Does a server hostname always need a SSL certificate?

In the context of a web server with HTTP, HTTPS, IMAPS, POP3S, SMTPS, SFTP and WebDav services, is it necessary to get a SSL certificate for the FQDN hostname of a server (example: ...
1
vote
1answer
35 views

java keystore with multiple aliases on apache

A JKS file (Java key store), May contains many aliases, this means it may hold many private+public keys combinations, some aliases may be trusted, some not. When I define jetty to use SSL, as this ...
-1
votes
1answer
2k views

I'm getting SSL_ERROR_BAD_CERT_DOMAIN for my www subdomain

Server: Ubuntu, nginx. I have a domain example.com registered at namecheap.com and configured at DigitalOcean. I have CNAME record for www subdomain: www.example.com. 1800 IN CNAME example.com. ...
0
votes
1answer
87 views

SSL connections reset with Nginx

I created ssl certs via letsencrypt. They get created just fine and when I run: openssl x509 -in {ssl_cert} -text -noout It prints out all the appropriate info and looks like everything is good. ...
0
votes
0answers
33 views

IIS 7.5 restore causing schannel fatal error 51

I am in a middle of a disaster recovery test. We did full disaster recovery backup (Using Novastore) of our production Win 2008R2 with IIS 7.5 and restored it to identical hardware at an off-site ...
1
vote
0answers
21 views

After changing to SSL index.php post fix is expected before server requests

I installed Mautic in an AWS server and it was working fine on the port 80. But when change to the following site configuration in mautic.conf (placed in /etc/apache2/sites-enabled/mautic.conf) to use ...
9
votes
3answers
1k views

Do I need a separate SSL certificate for a DNS redirect?

I am implementing a multi-tenant application where my application hosts and serves technical documentation for a tenant's product. Now, the approach that I was considering was - I host the ...
2
votes
1answer
42 views

One IP Address and Wildcard Certificate for multiple Virtual Hosts (Windows, Apache 2.4.2, OpenSSL 1.0.2e)

I have searched and searched but I cannot find a solution to my issue, so apologies if this sounds familiar, but I am at a loss. I have: Windows environment Apache 2.4.2 OpenSSL 1.0.2e one IP ...
1
vote
0answers
34 views

nginx default SSL SNI host overwrites SSL Protocols

I have setup nginx with SSL (SNI based). My first served vHost uses server { ... listen 443 ssl; server_name host1; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; .... On others vhosts I wanted ...
0
votes
1answer
35 views

Nginx default SSL Host: Disable completely or…?

I have many SSL Hosts on my server serving via Nginx SNI. However, when I enter the IP address of that server, I will see the first configured virtual host with a certificate warning. Is it possible ...
2
votes
2answers
62 views

Gracefully Killing Off SSL 2&3

In the light of POODLE we have an urgent requirement to turn off SSL2/3 and TLS 1.0 on our public-facing webservers. However we're a public sector body and around 5-10% of visits to our sites are made ...
0
votes
0answers
33 views

Trust a Self-Signed SSL Cert (RHEL) for LDAP over TLS

My Setup Mac OS X Server (El Capitan) as the OpenDirectory Server RHEL 6.5 connected via LDAP for authentication I have set /etc/sysconfig/authconfig on the RHEL server to "FORCELEGACY=yes" just ...
2
votes
1answer
33 views

Generating certificate signing request for ESXi 5.5

I would like to replace the (self signed) SSL certs on various ESXi 5.5 hosts with ones generated by our own CA. I found docs on the VMware site on how to overwrite the key and cert files on the ESXi ...
0
votes
1answer
88 views

How can one create an internal-use ssl certificate with an in-house CA that doesn't read as self-signed?

I'm ultimately attempting to get a PHP CAS client (zend server 8 with apache) to trust a CAS server (tomcat 7), and to that end have gone as far as to gin up my own private key infrastructure, here ...
0
votes
1answer
72 views

HAProxy 1.6 SSL connections reseting

I have been beating my head against this HAProxy issue for entirely to long, and I am hoping someone here has seen this before. Here is some information: Our HAP instances are in AWS across three ...