SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
0answers
32 views

How install SSL on two sites running on port 80 in IIS 7

I have a website running a simple PHP page in IIS and I have another program installed in windows. This other program is installed as a service and also runs on port 80 and can also be accessed using ...
0
votes
0answers
29 views

Using Multiple SSL Certs on the same port with OWIN Self-Hosting?

I have an application that is being hosted on an Azure Cloud Service - Worker Role. On start up, the application creates multiple new instances of OWIN SelfHosted Apps. Each app has it's own domain ...
1
vote
1answer
22 views

openssl tool cannot get certificate from CloudFront, does anyone know why?

Im writing a script to check the SSL expiry dates of all my domains. This works for my normal sites: echo | openssl s_client -connect $domain:443 2> /dev/null | openssl x509 -noout -enddate ...
2
votes
1answer
24 views

SSL handshake across multiple devices

A fairly basic SSL question, if you don't mind: Lets say I have traffic flow from a client to a web server as follows: [client] --> [public SLB:80] --> [reverse proxy:80] --> [internal SLB:80] --> [...
0
votes
1answer
54 views

Nginx upstream block nondefault port

experts. I am trying to configure nginx/1.10.0 for upstream to 2 https web servers on non standart port with ssl termination. Here is my current website setup in sites-available/ upstream backend {...
0
votes
0answers
9 views

App engine ssl not deleting

I'm trying to cancel an old, soon to be expiring SSL Certificate and replace it with a new one in the Google Cloud Console for App Engine. Both certs have been assigned to the custom domain name. The ...
0
votes
0answers
129 views

How to add a certificate to the keystore

As part of some changes required by PayPal I need to discontinue using the VeriSign G2 Root Certificate and use the G5 Root Certificate. The server is running Red Hat Enterprise Linux Server 6.6. I ...
0
votes
1answer
39 views

Kafka acl without kerberos

I'm trying to set up a single kafka server with certificate authentication and access controls based on those certificates without the bother of setting up a kerberos service. Setting upp the ...
-1
votes
1answer
41 views

How to re-write non-WWW to WWW whilst also enforcing HTTPS in Nginx

I have a client who I am tidying things up for after a migration to a newer/faster server. One of the inclusions is to bring in SSL support, and also standardize links/URLs. The goal is to force ...
0
votes
1answer
146 views

Two domains on one IP, added a subdomain and different domain's SSL gets protocol error

I've been running two domains on one IP for years using SSL. One is example.com and the other is other.com. example.com has three names with its SSL cert; example.com, www.example.com and dev.example....
2
votes
1answer
55 views

How to properly refuse ssl connections to subdomains that don't have a certificate

I'm currently setting up a (semi-serious) server with nginx for the first time. I have a couple of domains and subdomains and want to use SSL as much as possible to keep the traffic to and from my ...
1
vote
1answer
429 views

How to build Apache httpd 2.4.20 on CentOS 7 with http2 support?

I've spent nearly a day trying to make Apache httpd builds with ALPN and http2 support for EL6 and EL7 for my company and society, as I previously did for NGINX (Built statically against OpenSSL 1.0....
0
votes
1answer
38 views

Single front NGINX to proxy pass SSL to sites with their own certificates

Current setup: Front NGINX proxy passes 80 and 443 to local VM Local VM's NGINX redirects everything to HTTPS (if request is HTTP/80) Local VM's NGINX listens to 443 and proxy passes to the upstream ...
0
votes
1answer
159 views

Apache SSL reverse proxy with two name virtual host

I have an Apache reverse proxy that correctly proxies an https internal server. It is configured to use a wildcard self signed certificate and to be a name-based virtual host with ServerName directive....
0
votes
0answers
15 views

How to upload a certificate to Amazon ELB?

I've generated the pem files for a new certificate which we recently purchased from comodo, using this link as a guide: "https://guillaumemaka.com/2015/05/06/install-your-comodo-certificates-to-amazon-...
0
votes
1answer
22 views

IIS - How to have a separate SSL for an application under the Default Website

We are hosting multiple ASP.Net applications on an IIS web server. All the applications are under the same 'Default Web Site' parent. Most of them have their separate application pool. The default ...
0
votes
2answers
70 views

Nginx - subdomains to Apache, index to WP

I am trying to deploy our new Wordpress (with Apache2 in Docker) one-pager over our existing setup. Right below the LB we have an Nginx server that terminates SSL and proxies plain HTTP requests to ...
0
votes
0answers
29 views

Attempts to Disable SSLv3 in Tomcat Fail

I'm attempting to disable SSLv3 in Tomcat 7.0.68 but every attempt to test still results in CONNECTED(00000003) 140680439531168:error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal ...
0
votes
1answer
91 views

openvpn certificate error prevents from connection

I try to connect with Tunnelblick to my private VPN, but I get the following error message. 2016-05-24 12:18:07 VERIFY ERROR: depth=1, error=unable to get issuer certificate: C=IL, O=StartCom Ltd., ...
0
votes
0answers
26 views

HAProxy, Varnish and Multiple websites with SSL

I can't seem to find any documentation on setting this kind of configuration up with Apache. I have 1 load balancer and 2 slaves running MySQL replication and unison syncing both machines and website ...
0
votes
0answers
9 views

Connections are reset when trying to access site over HTTPS

I have a Windows 2008 R2 Server running IIS 7.5 The Site was running fine on Friday and I came in this morning to find that it was not accessible. After removing the 'Require SSL' restriction on the ...
0
votes
0answers
32 views

Open ports for Passive FTPS on Amazon EC2?

I have installed ProFTPd on an Amazon EC2 running Amazon Linux. I have enabled SSL (FTPS) on for ProFTPd and set passive ports in proftpd.conf: port 21 <IfModule mod_tls....
0
votes
0answers
50 views

enabling ssl connection from wordpress to mysql

I have been searching on how to configure wordpress to connect to mysql db over ssl, however most of the example are about three to five years old e.g. this wordpress support topic my wordpress ...
0
votes
1answer
37 views

ssl curl not working

I set up my site I have ssl setup and working, works fine in chrome, works fine for postman. For whatever reason it does not work when twilio or curl trys to access it. It gives me a unable to get ...
0
votes
3answers
68 views

Should I use a single SSL certificate for example.com and www.example.com?

I have a website (hosted by Amazon S3) which redirects example.com to www.example.com. I am setting up an Amazon CloudFront distribution for this website, and would like the same redirection to work ...
0
votes
2answers
40 views

Disable Cloudlfare SSL on nginx to use certificate

I use Nginx to host a wordpress site which is configured to use exclusively SSL. A while ago, I activated the Strict SSL option and the HSTS option from Cloudflare. Now I want to disable it and only ...
0
votes
0answers
29 views

How to create a pem certificate for a mongo server that is accessed from different domains

I have a mongo server on aws. The server has both internal and external addresses. I enabled ssl on the server and create a CA and a mongo server certificate and a client side certificate. https://...
0
votes
1answer
70 views

Unable to get StartSSL trust chain to work

I received a free SSL certificate from StartSSL which I installed on my server. It works fine on desktop browsers and such but as soon as I open the website on my phone it says "NET::...
0
votes
1answer
31 views

Site being accessed with wrong protocol?

I'm running a Tornado web server that only accepts SSL connections, and only listens on port 443. Connecting to it in a browser over HTTPS works well. I'm seeing messages like this in my logs: ERROR ...
0
votes
1answer
26 views

SSL and Apache: GeoTrust CryptoReport says “OK”, but openssl says “unable to get local issuer certificate”

This actually applies to a bunch of other services we use this same certificate for, but the way Apache does this is the most obvious and contradictory when you compare the test results. We have a ...
0
votes
1answer
136 views

MQTT certificates verification fails

I'm been desperately trying to get my MQTT clients to connect to my MQTT broker which is set up with a certificate from a CA (Letsencrypt). To be able to get the CA certificate, I've used the ...
1
vote
1answer
24 views

Which server should generate the CSR when running SSL with Apache ProxyPass

I have an apache 2.4 server which uses proxypass to forward SSL connections for one domain to an OSX server 5.1.5 on the same local network. I generated my CSR on the apache server and it seems to ...
0
votes
1answer
40 views

SSL for Webserver with nginx

I am totally not familiar with SSL and all tutorials are pretty confusing for me. I want to ask you one thing - I have from rapidssl this two certs: intermediate.crt & web_server.crt. I had to ...
0
votes
0answers
71 views

Can haproxy perform ssl termination for forwarding to (squid) proxy servers?

I understand that haproxy can perform ssl termination for load balancing web servers, but is it possible to perform ssl termination when load balancing squid proxy servers? My scenario is that I have ...
0
votes
1answer
34 views

How to enable SSL only on certain locations

I have an Apache that serves an application as well as a web service. I want the web service over https but the application over http. How do I enable SSL on only a certain location? None of the SSL ...
2
votes
1answer
576 views

LetsEncrypt: Unknown SSL protocol error in connection

I have a host with LE certificate and it works well in a browsers, but I still can't connect using curl, openssl, wget, POST (libwww-perl): curl # curl -v -3 https://example.com/ * Hostname was NOT ...
0
votes
0answers
19 views

Can't install SSL cerificate - error AH00169 SIGTERM

I'm new to server stuff. On Azure I run VirtualMachnine based on Ubuntu 14. I install apache2 and everything workd fine. Now I need to add SSL certificate. So at default-ssl.conf I write: <...
17
votes
3answers
2k views

Why would a hosting provider not allow SSL over port 443? [closed]

I am setting up a website and bought the SSL certificate for the domain of the website. When I asked the hosting company why https://www.example.com was refusing connections, they answered that SSL ...
0
votes
1answer
88 views

Haproxy, Nginx Pretty Url not working

Hi I'm having trouble setting up pretty urls from nginx behind Haproxy. Haproxy.cfg global log /dev/log local0 log /dev/log local1 notice chroot /var/lib/haproxy stats socket /...
0
votes
1answer
30 views

Ubuntu + apache2 + ssl - AH00072 address alredy in use

I'm new to server stuff. On Azure I run VirtualMachnine based on Ubuntu 14. I install apache2 and everything workd fine. Now I need to add SSL certificate. So at default-ssl.conf I write: <...
0
votes
1answer
27 views

Generate a certificate signing request based on an existing certificate with x509v3 extensions

With openssl I am trying to generate a CSR using an existing cert that contains X509v3 extensions, in particular SAN. I am able to create the new CSR by running openssl x509 -x509toreq -in ...
0
votes
1answer
71 views

SSL on apache2 - ubuntu, unknown issue

I try to install SSL certificate on my own server. I have ubuntu 14 and apache2 webserver. My default-ssl.conf file is: <IfModule mod_ssl.c> <VirtualHost _default_:443> ServerAdmin ...
1
vote
0answers
71 views

What's causing the SSL Protocol Error?

My site: https://www.notfriendly.xyz/ (disabled CloudFlare) (See CloudFlare enabled at https://host.notfriendly.xyz) is failing to connect claiming a protocol error after enabling CloudFlare. Could ...
0
votes
1answer
89 views

ServerAlias without www not working on SSL virtualhost

I'm moving a site from a server to another, and using its current and still valid SSL certificate. The machine I'm working on is a Ubuntu 14.04 server. I've set up my usual virtual host file, let's ...
2
votes
0answers
56 views

Installing apache2 ssl - ubuntu

I need to install a ssl in my apache2 ubuntu, and do not know what I'm wrong, but the fact is that I do not get ... I have the relevant files: one .key file and two .crt files. At first, when editing ...
0
votes
1answer
44 views

Problems with using NGINX on an SSL-only site

I've configured a website to be 100% SSL, and its on a cPanel server with NGINX. I'm able to get the SSL part to work fine, but the IP address reported for site visitors is the IP address of the ...
2
votes
0answers
149 views

AWS ELB with SSL backend adds proxy protocol inside SSL stream

Note, this has been also posted in http://thread.gmane.org/gmane.comp.web.haproxy/27737 we are trying to configure this architecture: ELB terminating SSL, using preconfigured certificates. (this ...
1
vote
1answer
58 views

Installing SSL Certificate

I am trying to install an SSL certificate on my Apache server that's hosted on an EC2 instance from AWS. I originally intended to go with AWS Certificate Manager and put the SSL on a Load Balancer but ...
1
vote
0answers
55 views

Https: not working but :443/ work?

I don't understand (on debian) why I can access to my website using http://www.myserver.com:443/ but not directly with https://... I'm using LetsEncrypt, all my cert' are generates and works. Here my ...
0
votes
2answers
39 views

Linux: where to store Java trusted CAs

I need an advice regarding the best practice of storing organisational CA on Linux servers for Java. Basically, JRE installation contains a list of trusted CAs in cacerts file, which is used by ...