SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

2
votes
2answers
55 views

Rabbitmq federation with SSL client certificates not working

I'm trying to set up a federated pair of rabbitmq servers authenticated with SSL client certificates. I've generated a set of keys and certificates, but I get this error on one server when the other ...
1
vote
1answer
58 views

Nginx: it takes too long to establish a ssl connection

I have a nginx set up with ssl certifivate. Recently I noticed, that establishing connection to that server sometimes takes way too long (8+ seconds). In chrome developer tools I can see, that all of ...
0
votes
1answer
19 views

Certificates/SSL via SSL-Proxy vs. real certificate for a server

While researching the different certificate types I've come across hosters that offer what they call SSL-Proxy type installations for their servers. I'm concerned about this idea, as it defeats what I ...
0
votes
2answers
64 views

nginx redirect https://www to https:// non-www without untrusted connection warning?

I have a valid SSL certificate for myapp.com, but not for www.myapp.com. Based on this question, it seems to me that it's not possible to immediately redirect from https://www.myapp.com to ...
1
vote
1answer
30 views

How to best encrypt http traffic between frontent (VPS/AWS) and remote backend?

I have a couple of frontend servers running on AWS (running pound for SSL termination and Varnish for caching). My backend is at a remote location (not on AWS). I am looking for the best/fastest way ...
0
votes
0answers
36 views

IIS/OWA is not handling new SSL Certificate

I recently created a new SSL Certificate and self-signed it via this tutorial. The new certificate showed up in the list of certificates. I then assigned IMAP, POP, SMTP & IIS to the ...
1
vote
1answer
37 views

How to unable mail.example.com from browser (ISPConfig)? [closed]

I am running under Debian 7 + ISPConfig 3. I have recently configured the dns (at OVH web hosting service) so that ISPConfig manages the dns zone. For foobar.com, I have a MX record that points to ...
0
votes
1answer
75 views

SSL Cert Expire or Caching issue, don't understand [closed]

If I visit BT's site in Chrome I get this ... http://imgur.com/b05alsX It looks like the cert has expired. (Similar in Firefox) BT claim it isn't. https://twitter.com/BTCare/status/440405157999030272 ...
1
vote
0answers
32 views

SNI and wildcard SSL certificates on the same server with IIS

I'd like to host a website that should listen to subdomains (e.g. sub.domain.com) together with multiple websites that live just under a second-level domain (e.g. domain2.com, domain3.com) with IIS ...
1
vote
2answers
27 views

Correct configuration for SSL over 3 domains on same IP in nginx

I have been working on this for several hours now, to no fruition. Right now I have three domains, for example domain1.com, domain2.org, and domain3.net. These domains are all using the same IP ...
0
votes
0answers
28 views

Hostname mismatch while connecting to XMPP server?

I have the following problem: After I setup an intranet Jabber/XMPP server, I asked an SSL certificate for my server, so people can connect securely using a valid certificate. The DNS of example.com ...
0
votes
1answer
52 views

Ubuntu server failing to perform SSL handshake (ssl handshake failure:s23_lib.c)

This is started as a Java issue (there's a stackoverflow question) and it turns out it's not really Java-related as I can reproduce it with wget. This happens in 3 different Ubuntu boxes. $ wget ...
0
votes
0answers
17 views

Exchange domain name change + SSL deployment

My problem: Currently OWA and ActiveSync can be accessed through https://rmt.companyname.com/owa and https://rmt.companyname.com/Microsoft-Active-Sync with a self-signed SSL. I would like to modify my ...
0
votes
0answers
42 views

openssl s_client -connect: 20 error with server signed certificate for client

What I want I want to connect to a server using a given signed certificate (by the company running the server) What I have Ubuntu 12.04 LTS My key and CSR files A signed certificate. It was signed ...
0
votes
0answers
12 views

Windows Server 2008 - HTTPS connection timing out

On my Windows Server 2008, I've got an EV SSL certificate set up in IIS and: HTTPS binding has been set Inbound HTTPS port 443 is open Web application has no errors SSL Certificate is valid Yet, ...
0
votes
2answers
51 views

Properly setting up a “default” nginx server for https

I have several servers running on the same machine, some with http only, some with both http and https. There are several server blocks defined in separate files which are included from the main ...
0
votes
1answer
41 views

Nginx, GET and POST solution for “The plain HTTP request was sent to HTTPS port”

I'm trying to create a SSL proxy for a web management console running on localhost and having no SSL support. Here is my config: server { listen 111.222.1.1:8443 ssl; ...
0
votes
0answers
27 views

Apache Tomcat & SSL - not connecting from different Sub Network

we are deploying an Apache Tomcat .WAR application provided from a third party. We have followed all the instructions provided from the party. The specs are: windows 2008 server Apache Tomcat 6.0.37 ...
1
vote
0answers
107 views

ejabberd starttls_required in c2s/s2s and disable SSLv3 + unsecure Ciphers

I'm using ejabberd on Ubuntu. My configuration looks like this: {5269, ejabberd_s2s_in, [ {shaper, s2s_shaper}, {max_stanza_size, 131072}, ...
1
vote
2answers
31 views

nginx ssl virt host issue - site won't load

I have configured nginx for port 80 and 443, with 443 containing an ssl cert configuration. When I restart nginx, no errors occur, so I don't believe it's a cert issue, but of course I could be ...
1
vote
1answer
48 views

Plesk is delivering incorrect SSL certificate when accessed through OpenSSL cli, but correct in browser

I have a Plesk setup with several sites. When accessed in the browser, Plesk serves the proper SSl cert just fine. But then when I go to access it through openssl using openssl s_client -connect ...
0
votes
2answers
71 views

SSL Library Error: -8181 Certificate has expired

After a yum update, there is an error when starting apache, in /var/log/httpd/error_log: [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec) [error] SSL Library Error: -8181 Certificate has ...
0
votes
1answer
32 views

SSL isn't working with Apache

I was trying to install a SSL certificate on my VPS. I Generated the CSR, and Got the Certificate and Intermediate CA. I am working on apache 2 on ubuntu server 13.10. So I used the Default SSL ...
0
votes
1answer
73 views

Blocking/redirecting port 3000 with Nginx and Ruby On Rails (thin server)

I am setting up a server now that uses Ruby on Rails with the Thin server. I have set up Nginx to redirect all of my http://mysite.com to https://mysite.com(with ssl). I want all network traffic to ...
0
votes
3answers
87 views

Use IP address or FQDN [closed]

I am preparing servers infrastructure consisting MYSQL , LDAP , PHP and FTP. I have all servers have static public and private IP(LAN). Now while configuring SSL i am facing problem of FQDN. For ...
1
vote
0answers
48 views

Apache passphrase working sometimes

On one of my servers I observe the following problem with SSL passphrase: some certs are passing it without asking for a password, while some others keep asking for it. I have set it up globally: ...
1
vote
2answers
67 views

Avoid Man in Middle AWS load balancer

I have a load balancer configurated with the port 443 to port 80 of the ec2 servers and with a sniffer like Burtsuite can I edit the request. How can configure the ELB to avoid this type of attack?. ...
4
votes
2answers
397 views

your security settings have blocked a self-signed application from running

I'm trying to use Integrated Lights-Out 2 (aka iLO)'s Virtual Media (which is Java based applet) and I'm getting following error(s): Application Blocked by Security Settings Your security settings ...
0
votes
1answer
45 views

nginx proxy_pass with a backend requesting client certificates

We're proxying a backend that we don't control & the backend is requesting a client certificate when connecting on https. When we request these pages through the proxy the connection times out ...
1
vote
1answer
36 views

nginx SSL with bare domain and wildcard

This is turning out to be an annoying problem that I'm hoping someone can help me with. To start, I run my own CA, so I'm doing self-signed certs; I can do anything I need with them using openssl. I ...
0
votes
1answer
26 views

Check client certificate in nginx?

I can issue certificates without a problem and I can get nginx to force users to provide a certificate but how do I get nginx to give me information about the certificate? Information such as name and ...
1
vote
0answers
116 views

Apache SSL handshake interrupted by system

I have an up-to-date Ubuntu 12.04 server running Apache 2.2.22-1ubuntu1.4. For every HTTPS request my Apache logs record what appear to be error messages related to encrypted connections. Self-signed ...
0
votes
2answers
71 views

How to redirect from FR to COM when using HTTPS [duplicate]

I have two domains : my-domain.com and my-domain.fr I want to redirect traffic as followed : my-domain.com:80 -> my-domain.com:443 my-domain.fr:80 -> my-domain.com:443 my-domain.fr:443 -> ...
1
vote
1answer
89 views

Turning on ssl_verify_client in Nginx causes Gitlab user identification to fail

We have a private Gitlab instance that we plan on exposing externally, in order to ensure that only employees can connect to the website I have rolled out a small internal CA with user certs in order ...
0
votes
1answer
48 views

Why Nginx reverse proxy shows http location?

I need help with my nginx configuration. In this config I've got /svn location, that comes to apache http. Apache is password protected (Basic Auth) When accessing https://my.server.com/svn it shows ...
2
votes
2answers
42 views

Specify nginx's ssl_certificate in location{} block

For a web service we have two certificates: myservice.com and api.myservice.com. Both have the same application (document root) but are serverd over HTTPS with different certificates. Unfortunately, ...
0
votes
1answer
35 views

Download root CA certificate in browser

I have a Apache server installed on CentOS 6. I have created a trusted self sign certificate. For that I had created root CA certificate and using it I have signed my self signed certificate. Now I ...
1
vote
2answers
40 views

Which operating systems ship with StartCom_Certification_Authority.pem

I purchased some (cheap) HTTPS certificates from StartSSL. They work great on all browsers I tested. According to this post they are even recognized in IE 7 and 8, which good enough for me. However, ...
0
votes
1answer
85 views

How to create ssl certificate for multiple domains which requires the CA root key in Linux

I have mail server. There are may domains hosted on it. I am deploying ssl certificate on it. I want that when user access there mail account using https browser should show that certificate is ...
0
votes
1answer
64 views

nginx and SNI: is it possible to automatically resolve SSL certificate by domain name

I need to setup a server that will server same content over SSL using different domain names. The problem is that I need an ability to add new domain names as easily as possible. Assuming that all ...
0
votes
0answers
34 views

OpenSSL connection Error called stream_socket_enable_crypto()

in my php coding i have following line which uses by SWIFT MAILER Class if(!stream_socket_enable_crypto($this->smtp_conn, true, STREAM_CRYPTO_METHOD_TLS_CLIENT)) { return false; } however ...
1
vote
2answers
36 views

How can I implement custom domains with SSL support for my SaaS product?

I have a SaaS project that needs to support custom SSL domains. I've looked into SNI which looks perfect. If I decide to (or need to) support Windows XP. What other techniques can I use? I know that ...
1
vote
1answer
135 views

NGINX SSL termination slow

I am using NGINX as a reverse web proxy to an upstream IIS webserver. I am proxy_pass'ing to an https binding on the IIS server so I understand SSL is being encrypted/decrypted twice- but it shouldn't ...
0
votes
3answers
68 views

How to Redirect FROM https TO http [closed]

I have a site that does not need https. We do not collect any information at all, nor do we have any forms. This being so we did not set up an SSL certificate. However, when I go to ...
0
votes
1answer
31 views

IIS URL Rewrite and Reverse Proxy

I have a reverse proxy rule that forwards all requests to a specific subdomain to an internal server and everything works great. <rule name="cloud.domain.com" enabled="true" ...
1
vote
1answer
32 views

Apache with self signed certificate, www subdomain hanging when requesting from browser

I created a staging site with a self signed certificate using: mkdir /etc/ssl/wildcard.yourdomain.com cd /etc/ssl/wildcard.yourdomain.com/ openssl genrsa 2048 > host.key openssl req -new -x509 ...
2
votes
1answer
85 views

How to authenticate a user through certificate exchange?

I have an web application A where a user has to authenticate through a username/pass method (https://server.local/webappA). A secure connection is established (HTTPS) with the server A. Then, these ...
0
votes
1answer
56 views

Cheapest SSL by GoDaddy that is good enough for Facebook Tab?

GoDaddy is way too confusing . Period. One of my clients has specifically asked us to buy SSL from godaddy as both domain and server (shared hosting) have been bought on GoDaddy. So here is my ...
2
votes
1answer
37 views

SSL/TLS cert: Get alternative name to work with LAN IP

I have created my own CA and imported its root certificate on my devices. I use a signed SSL certificate to provide myself with remote access to my NAS. When I access my NAS over the proper URL (e.g. ...
1
vote
2answers
39 views

What Files Should I Set Up for Clean Apache Configuration

I am not new to Apache but nor am I an expert (by any means). I've run sveral versions of WAMP and XAMP server set-ups. Most of my Apache configurations are simple. I usually run a default master ...