SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
1answer
144 views

How to Disable TLSv1.0 and TLSv1.1 in Nginx

I'm trying to figure out how to disable TLSv1 and 1.1 Nginx and ONLY allow connections on 1.2. This is for testing reasons more than in production use and for the life of me cannot figure out why ...
0
votes
2answers
52 views

SNI for multi tenant load balancing in 2015

We're a multi-tenant service and terminate our SSL at our load balancers (HAProxy + Apache for SSL termination), this has caused growing pains due to dedicated IP requirements. But times have changed ...
1
vote
0answers
123 views

Disabled SSLv3 in Tomcat, but Still Showing POODLE Vulnerability

I have a Windows 2008 server with Tomcat 7.0.59 & Java 8u31 & I am trying to ensure that SSLv3 is disabled. Looking at the changelog for Java, SSL3 should no longer be supported and the Java ...
0
votes
0answers
69 views

Apache Tomcat for Windows - cannot get https to work

Environment: Windows 2003 Server 64-bit Running on VMWare ESX 5.5 8GB of Ram Apache Tomcat 6.0.36 Server D:\Program Files\Java\jdk1.6.0_26\jre\bin\server\jvm.dll JDK 1.6 update: 26 Have been able ...
-2
votes
1answer
31 views

how many SSL certificate can be listed in SSLServercert?

I wanted to list more than one certificate in SSLServercert, so that websites can use either one of these certificates. i will use "SSLServercert label1 label2" in httpd.conf file. label1 has IP based ...
1
vote
1answer
42 views

If a non-SSL-enabled domain is requested via https will Apache serve a different, SSL-enabled domain on the same server?

I am hosting several websites on an Apache server (e.g. http://www.example.com), only one of which has an SSL certificate (e.g. https://www.example.net). Is it possible to set up Apache so that an ...
1
vote
1answer
42 views

Serving http with Apache on port 443 behind SSL terminator

Our network ops folks have set up SSL termination, then reverse-proxy the request to us. Their requirement is that, if they saw the input on port 443, we must serve the content on port 443, so we are ...
1
vote
0answers
36 views

IIS bindings keep being removed

I'm having a problem where the security certificate for a site is being periodically unbound from port 443 and replaced with another certificate which is sitting on the server. So whenever a user ...
0
votes
0answers
32 views

How to make a client's pkcs12 bundle if only server pkcs12 bundle is present

I've got a linux box with openvpn installed on it, openvpn is configured to use pkcs12 certs: dh server.dh pkcs12 server.p12 crl-verify server.crl I'd like to add more vpn clients, but I ...
0
votes
0answers
29 views

External clients get a certificate mismatch - but internal clients do not

I have a scenario where external clients are receiving a certificate that is different than the one that is bound to the IIS site. This is Win2008R2 / IIS, in the following configuration: ...
0
votes
2answers
90 views

Cannot set up https on microsoft azure VM

For over a week now I am trying to set up https to work with my owncloud hosted on a Microsoft Azure virtual machine (ubuntu server 14.04). I am using apache2. I have gone through every single ...
0
votes
1answer
56 views

Two https virtualhosts on same server: same port, different subdomains

I've tried searching for this scenario, but can't seem to find exactly this setup. I want to have something along the lines of the following: I want to have two subdomains redirect to different ...
0
votes
1answer
27 views

Is it normal for the identity of a host to change after enabling SSL?

I logged in to a known host - ssh username@example.com. I did a2enmod ssl and I generated a CSR to enable SSL on one of the virtual hosts on the server. From a separate terminal tab, I tried to do an ...
0
votes
3answers
81 views

How to force a own set of ciphers in Postfix 2.11?

I would like to force a own set of TLS cipher suites rather than use the Postfix built in ones. My desired set of ciphers is (taken from nginx configuration): ...
0
votes
1answer
27 views

How to exclude some path/page from client certification in Apache 2

I am trying to set up an Apache server with client certification enabled. So that the customers could access the content with a valid client certificate. Let's say, I have the server running as ...
0
votes
2answers
205 views

Wget, self signed cert and --no-check-certificate not working

I recently installed a self signed SSL cert on one of our nginx webservers. If I attempt to wget a file with --no-check-certificate I receive the errors below. You can reach the site with a browser, ...
0
votes
0answers
152 views

HTTPS request works to Linux, not to Mac, sometimes

I have two sites, say mac.example.com and linux.example.com. I'm using the same wildcard SSL cert, obtained from RapidSSL. If hit up either of the sites in a browser, hosted either in Linux (on ...
2
votes
1answer
49 views

How to serve multiple SSL certificates for the default virtual host on NGINX?

I have a static app on Amazon S3 that is served through a NGINX proxy. The purpose I use a proxy is to allow users to point their domains to my Amazon EC2 instance (via CNAME record pointing to ...
1
vote
0answers
118 views

Nagios check_http gives 'HTTP/1.0 503 Service Unavailable' for HAProxy'd site

I asked this on stackoverflow, but I think it's better suited for here. Can't figure this one out! OS: CentOS 6.6 (Up-To-Date) I get the following 503 error when using my nagios check_http check ...
0
votes
0answers
16 views

smb.conf - where do I set key and certificate for 'smb encrypt' transport encryption?

Reading smb.conf man page I can enforce encrypted smb transport; smb encrypt = mandatory. Where do I set the keys to use for the encrypted transport? I was expecting something like apache2: ...
0
votes
2answers
62 views

Nginx - 2 https servers on same public ip [duplicate]

I currently have several regular http servers and 1 https server. I would like to add another https server with the same public ip. I have something similar to server { listen 443 ssl; ...
1
vote
0answers
27 views

IIS 7 set up web service on port 8080 with SSL

I'm trying to set up a web service on port 8080 with SSL on IIS 7. There is already a website set up on port 80 with SSL. I've tried a few things like adding a https binding with port 443 and a ...
1
vote
0answers
54 views

Node + PM2 - How to securely read SSL private key with non-root user?

I'm looking for a way to run node via PM2 whilst reading an SSL private-key that is placed in a secure directory. Details: Bitnami LEMP stack with Node permissions for /etc/ssl/private: drwx------ ...
1
vote
1answer
93 views

How to disable SSLv3 in Postfix 2.11?

I just noticed (by some online check tools) that my mailserver may allow SSLv3 and updated my configuration. My current config in Postfix 2.11.2: # inbound smtpd_tls_security_level = may ...
1
vote
2answers
316 views

Windows 2008 R2 Standard server - how to disable RC4

I have just used www.ssllabs.com and ran a few tests - my server is capped to a B grade because my server accepts RC4 This server accepts the RC4 cipher, which is weak. Grade capped to B. I've ...
1
vote
0answers
13 views

how to configure a default (or common) virtualhost for non-ssl domains when ssl domains exist? [duplicate]

I have several domains running on the same (physical) server under Apache 2.4 web server. Some of these domains support secure connections (over the standard HTTPS protocol). For them I configured ...
1
vote
0answers
48 views

SSL Proxying with mutual authentication

I have a bunch of backend servers each them should make https-requests. I want all my https traffic inspected and controled by few number of machines (many times fewer than server farm) - that's why I ...
0
votes
1answer
46 views

define ssl_ciphers in nginx for each vhost

i`am just wondering if i define something like this: ssl_ciphers 'AES256+EECDH:AES256+EDH:!aNULL'; in my vhost config in nginx, it is active on all my vhosts which use ssl. Is there a way to ...
0
votes
1answer
54 views

Disabling SSLv3 in ELB on Amzon linux ec2

Hi I have Elastic Load Balancer on which I've deployed my ssl certificates and when i check on the web it say site is vulnerable because of SSLv3 is enabled on the site. So my question is What ...
1
vote
1answer
32 views

Apache Limit directive is ignored, the contents are executed always

I want users to be authenticated when calling a specific HTTP method, while not needing to be authenticated when calling other HTTP methods. I use the Limit directive, because that's supposed to do ...
0
votes
0answers
214 views

Nagios - Could not complete SSL handshake

I'm trying to configure Nagios command for checking status of physical memory on a remote Windows host using NRPE plugin. I'm using Nagios v3.0.6 on Ubuntu Server v14.10, and latest stable version of ...
7
votes
2answers
84 views

Forward proxy for webservices with SSL client certs

I have lots of servers which access various external webservices, most of which use SSL, some of which require client certificates. I would like to centralize the configuration of client certs and ...
-1
votes
2answers
61 views

Building Mongodb 3.0.0 with SSL

I am trying to build Mongodb 3.0.0-rc8 (tried latest nightly too) with ssl support. I found a gist which works for 2.6.7 but when I run it with 3.0.0-rc8 I get that eror ...
1
vote
1answer
61 views

exim4 gnu_tls cipher configuration for incoming connections to gmail

On the Debian 7 / exim4 / gnutls mailserver I'm running, since about 1-2 weeks, mails from gmail don't arrive any more with the following typical error message in the log file: 2015-02-14 17:32:07 ...
1
vote
1answer
61 views

How do I use SSL with Amazon S3 CNAME masked buckets?

I am successfully running an Amazon S3 bucket as media.mydomain.com. The problem is, I'm running an https site and I'm unable to link to files using https//media.mydomain.com. How can I switch to ...
2
votes
1answer
19 views

How would one configure an IIS that has SSL and client certs functional, to show a warning page before logon

I have a web site that uses a CAC client certificate, which is functioning like it should. The problem is, there's a requirement that the site regurgitate a message warning that it's a US Government ...
-1
votes
1answer
62 views

Tomcat 7 is being unresponsive when I turn on SSL (no SSL handshake) [duplicate]

My question is: why won't tomcat respond when I turn on SSL? I've attempted to migrate a working tomcat7 web application from an Ubuntu 12.10 x64 Server to a fresh Ubuntu 14.04 x64 server. Every ...
0
votes
1answer
44 views

Apache: SSL and Non-SSL (without VirtualHosts?)

I have a web server and have two folders I would like to treat differently. One folder on the local filesystem should use SSL and the other should not, for example: /path/to/ssl/site ...
0
votes
1answer
178 views

Can't access https web service from web server - Schannel fatal alert: 40

About a month ago our code to access a web service started failing, and gives an error relating to SSL connection: System.Net.WebException: The request was aborted: Could not create SSL/TLS secure ...
0
votes
0answers
48 views

Unable to redirect Https to http using htaccess

I'm trying to redirect https://example to http://www.example.com. I just migrate from one provider to another and my website on google search are index as Https , when I visit the page I get : ...
1
vote
1answer
82 views

Squid SSL intercept works for most google sites but not www.google.com

I am able to access pretty much all of Google's .co.uk services now that I have configured squid to use SSL. I can also view my certificate information in the certificate being presented by Google. ...
1
vote
0answers
81 views

Upgraded Certificate to sha-2, Chrome still complains

Along with many others, I too have had the problem of Google Chrome complaining about outdated security settings on my site. I have a RapidSSL cert, so I reissued the cert and it now checks out using ...
0
votes
1answer
46 views

Heroku is not switching certificates after adding custom

I have an app on Heroku and I bought my own certificate, valid for myapp.mydomain.de. I added it to Heroku using their addon, SSL Endpoint. I have a CNAME record which redirect from myapp.mydomain.de ...
0
votes
1answer
28 views

Adding SSL for a domain name using a CNAME record

I'm hosting a website with Fortrabbit. I point subdomain.mywebsite.com to mywebapp.eu1.frbit.net using a CNAME record, next I wanted to add ssl. I created a certificate signing request and applied ...
0
votes
1answer
82 views

Binding stunnel on both IPv6 and IPv4

I would like to make a local unencrypted service that listens on 127.0.0.1:8000 available via SSL on both IPv4 and IPv6 on port 8001. Unfortunately, stunnel configuration [Server] accept = 8001 ...
0
votes
1answer
90 views

Ubuntu/apache2: cannot open port 443

I am trying to install a SSL certificat on my Ubuntu 14 server (using apache 2). For some reason the port 443 appears to be closed I installed and enable ssl /etc/apache2/ports.conf is as ...
0
votes
1answer
70 views

Nginx doesn't send certificate chain

I've got the following certificate (first one is my own, the other two are from Comodo PositiveSSL): -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIPPZlYpZLvxHV+Rsy+qSD/MA0GCSqGSIb3DQEBCwUAMIGQ ...
0
votes
1answer
53 views

Changed Exchange URLs, still a reference to the old one somewhere

So at one of my clients their SSL certificate was up for renewal, and when I renewed it, I did not include their primary External/Internal URL in it (remote.domain.com) instead opting to change ...
0
votes
0answers
34 views

Doku wiki cannot connect to fast cgi behind ngnix

I'm trying to configure dokuwiki with ngnix. I'm using the https setup: server { server_name wiki.example.co; root /var/www/dokuwiki; index doku.php; listen 443 ssl; keepalive_requests 10; ...
0
votes
1answer
57 views

Browser gets two different SSL certificates instead of one (IE only) [closed]

It seems the problem appears only for IE11 (Win) users, for other OS and browsers HTTPS connection works fine. IE11 firstly gets outdated SSL certificate warning You ignore warning, proceed anyway ...