SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
0answers
118 views

Apache2 conditional section based on port

I don't know much about if statements in apache configuration, and I'm wondering if I can have a section of the configuration applied only if the request is received on a certain port. In short, this ...
1
vote
0answers
265 views

Configuring Nginx reverse proxy with SSL and websocket

I'm running a web app that is using websockets and have nginx as a reverse proxy for that and that works fine. I've also been able to get SSL to work without the socket. Now we're nearing the official ...
1
vote
0answers
102 views

proxy to SSL third party site and masquerade url

To improve search engine optimization I need to have my SSL-enabled site https://www.company.com/support proxy to our SSL enabled third party support site https://company.custhelp.com, while at the ...
1
vote
0answers
66 views

Setting up SSL on an Apache Ubuntu Server

I am setting up an SSL certificate for the first time on an Ubuntu server. I have purchased a dedicated IP address and have purchased the certificate under the subdomain of secure.example.com Port ...
1
vote
0answers
51 views

here filtering terminate TLS in openvpn but not ssl

I have configured an openvpn sever appliance on vmware and windows 2008 R2 and set it to use port 80 for openvpn, iphone and ipad could connect to it but windows and mac could't and generated error in ...
1
vote
0answers
58 views

Serving http and https on the same server with apache2

I have a server I host multiple sites on like http://this.example.com/site1, http://this.example.com/site2, http://this.example.com/site3. I am trying to add a secure site at ...
1
vote
0answers
478 views

Problems with apache2 and SSL not load files CSS and JS

I have an application in Ruby on Rails 3.2.8, and I'm using passenger-Nginx as Web Server on port 3037 with Apache2 and SSL using ProxyPass and ProxyPassReverse. My problem is, when load in chrome or ...
1
vote
0answers
57 views

Adding real SSL to SMTP mail

I have a domain that I check my SMTP mail on. For PCI reasons for a different domain on the same server, SSL is forced for mail. Now that the forced SSL is in place, I can no longer check my SMTP mail ...
1
vote
0answers
252 views

UFW blocks SSL connections Varnish/Apache2 on Ubuntu 12.04

I have installed Virtualmin on a Ubuntu 12.04 server and I'm using LAMP stack with Varnish (:80) in front of Apache (:8000). However, I cannot access https when UFW is enabled. When I disable UFW, all ...
1
vote
0answers
67 views

Is it possible to write a shared config for several VirtualHosts?

My intent here is avoid a lot of repetitive code. Essentially what I'm trying to do is use the same block of SSL config for several VirtualHost entries... <IfModule mod_ssl.c> <Directory ...
1
vote
0answers
274 views

disabling SSL / TLS Renegotiation on heroku

As the title sugests, is it possible to disable SSL / TLS Renegotiation when hosting a RoR application or Heroku? I ran the Nessus security tool on my website and the only serious warning showing up ...
1
vote
0answers
687 views

How to connect to Amazon RDS MySQL instance while preventing MITM attack

I have an Amazon RDS instance running MySQL. I've created a user account, and I've configured MySQL to require the use of SSL for all logins to that account. I want the MySQL client to be able to ...
1
vote
0answers
169 views

Modifying Authentication on web application / service in IIS(7/.5) via Powershell

I am trying to install a wcf-servce by using New-WebApplication in powershell. It works fine. However, how can I Modify the Authentication? I want to enable Anonymous Access Authentication and disable ...
1
vote
0answers
66 views

require client certificates in IIS without requiring SSL

In IIS 7, I've created an https binding for a site, and I'd like to require client certificates for https and still keep my http endpoint. That is to say, I'd like to require client certificates for ...
1
vote
0answers
699 views

How do I set up SSL in zend server?

I have a clean install of Zend Server CE, and I've been trying to add SSL support for the past hours, but I have no idea how, I moved the same SSL configuration file from xampp to zend (changed the ...
1
vote
0answers
110 views

Generating client certificates for IIS webapp

I am trying to figure out how to set up my web application so that only clients (external) with issued certificates could access it. (on Windows7) I have followd this tutorial where i got a .CER and ...
1
vote
0answers
142 views

WebDAV over SSL - Cannot access folders - no errors in logs

I am running a CentOS server on Amazon EC2 and have WebDAV, Apache, and mod-ssl installed. I tested my current configuration first through port 80 and was able to connect to the dav without a hitch. ...
1
vote
0answers
703 views

Securing using SSL multiple web servers behind a single IP address

Background We have number of web servers serving services and pages behind a single IP address we want to use SSL to secure the connection from the clients to those servers. We access the web ...
1
vote
0answers
1k views

How to client authentication in SSL

I was trying to connect to my server over ssl. The server and client are made possible using Openssl. I made the code for study purpose only. I made self signed certificates for clients and servers ...
1
vote
0answers
30 views

Is it possible to configure windows server 2008 to do windows form authentication BEFORE client certificate authentication?

I have setup a lab on vmware with both of them. It works but it doesn't suit my business case. I would like to have windows form authentication first. If sucessfull I want to check client certificate. ...
1
vote
0answers
124 views

Apache2 new SSL vhost causing major performance issue

I recently was tasked with installing an SSL cert on our existing server which has been using http protocol only for the existing vhost. I created the new *:443 NameVirtualHost vhost config for the ...
1
vote
0answers
119 views

ISA SSL Could not create SSL/TLS secure channel

I'm working on solution that uploads large amount of data through web service to the server. Between Client and Web Service implemented ISA server. Client use certificate to authenticate on ISA ...
1
vote
0answers
68 views

Apache not sending headers on certain SSL errors

If I make a http:// request over port 443 on our server, Apache is sending a plaintext error page with no headers, which most implementations of the protocol will interpret as a 200/ As far as I can ...
1
vote
0answers
246 views

Apache 2.2.22 SSL Virtual Hosts and Android/WebOS browsers

I recently upgraded my CentOS 5.8 servers to Apache 2.2.22 and I seem to be having some problems with SSL afterwards. Our client gives a CNAME to blah.mydomain.com. blah.mydomain.com is a web server ...
1
vote
0answers
99 views

How can I setup webdav server using SSL on a Mac (Lion)?

How can I setup webdav server using SSL on a Mac (Lion)? Thanks in advance!
1
vote
0answers
232 views

SSLRequire multiple OU validation

We are using client certificates with multiple OU fields. For example: OU1= ZZZ(unique value) OU2= XYZ(dynamic value) OU3= ABC(dynamic value) I need to write a rule only if the OU3 matches with the ...
1
vote
0answers
333 views

Ubuntu apache ssl issues

I am a little confused about what is going on here. I've tried to diagnose the situation with Google to no avail. I want to get this working as well as understand what is wrong. Basically I am trying ...
1
vote
0answers
254 views

Bandwidth Consumption on VPN + SSL

I need to estimate how much bandwidth (in Kilobytes) I will consume doing a https request (with client ssl authentication) between two servers connected through VPN over Internet. There's no need to ...
1
vote
0answers
410 views

SSL is dead slow in Internet Explorer + Safari

I had a Comodo SSL certificate installed on my website yesterday, after going through a lot of trouble it has finally been activated. I am, however, experiencing serious issues in Safari and Internet ...
1
vote
0answers
284 views

Configure OpenSCEP to grant certificate requests automatically

I am trying to setup an OpenSCEP server that can grant certificates automatically instead of me running scepgrant command every time there is a new request? Can someone let me know how to proceed with ...
1
vote
0answers
1k views

Debugging mutual-authentication SSL handshake

I've got a load balancer that is configured for mutual-authentication SSL. As far as I'm aware, the load balancer has been configured with an Entrust certificate, and has been installed with our own ...
1
vote
0answers
442 views

How do I get self signed SSL certificates to work locally on Mac OSX?

I'm trying to test a local page on my local git repository. Unfortunately, the SSL certificates I installed using OpenSSL and Mod_SSL aren't seeming to work. I've worked on checking the httpd file ...
1
vote
0answers
499 views

Install client side ssl cert on Openfire

I'm developing client-server app and trying to secure the connection. I'm using openfire as the server. I don't want any other jabber-clients to connect to it except mine. I want to make it by using ...
1
vote
0answers
77 views

change symmetric key in a SSL connection?

I'm analyzing (for didactic reason) the SSL security, and now I'm focusing on the symmetric key used for crypt the data on SSL tunnel. I read that at the first access to the server, both client and ...
1
vote
0answers
342 views

WebLogic 8.1 and 4096-bit SSL?

We have a scenario in which we'd like to configure a WebLogic 8.1 server (running on Windows, JRockit 1.4.2) to connect to Active Directory over SSL for authentication. Our Active Directory is ...
1
vote
0answers
1k views

Set up SSL/HTTPS in zend application via .htaccess

I have been battling with .htaccess rules to get my SSL setup working right for the past few days.I get a requested URL not found error whenever I try access any requests that does not do through the ...
0
votes
0answers
13 views

Multiple static IPs Amazon EC2

I want to have multiple sites with SSL on IIS (Windows 2008 R2 on Amazon AWS). I've read this other question and the documentation in Amazon where it explains how to add another IP. My question is, ...
0
votes
0answers
15 views

Can I use a domain name for a TCP process hosted in IIS?

I'm trying to set up a WCF service hosted in IIS 7.5, with TCP bindings. I also need to use a SSL certificate for security. From what I have read, I can add net.tcp as a binding type. However when I ...
0
votes
0answers
21 views

PHP cURL call returning error 56 with NSS error -12195

I have an internal server (internal to my network) to which I make a REST API call from my external server. I don't know if it helps but the external server is running php 5.3.6 with cURL 7.19.7. To ...
0
votes
0answers
14 views

How to use Apache2 to proxy a service from a subdirectory URL to another port on the same server, while enabling SSL?

I'm running Ubuntu Server 14.10 which has an apache2 install hosting a couple of websites. I also have some other web services installed which are accessible on other ports. Here's a layout (sorry I ...
0
votes
0answers
16 views

HTTPS Config for symfony2

I have followed this tutorial for setting up https on an ubuntu server: https://www.digitalocean.com/community/tutorials/how-to-create-a-ssl-certificate-on-apache-for-ubuntu-14-04 I have ended up ...
0
votes
0answers
18 views

Extra certs issue with Nginx SSL config

It seems that I've set up my SSL wrong. SSL labs gives me the following: https://www.ssllabs.com/ssltest/analyze.html?d=pitot.io&hideResults=on The issue in question is "extra certs". This ...
0
votes
0answers
18 views

Wiresharking access to AWS to debug permission problems

I have a plugin which pushes files to S3. It's not my plugin and auditing what exactly it does has proved difficult. I'm trying to enable access logging on the bucket to figure out what exactly is ...
0
votes
0answers
25 views

Server returning 404 for only Baiduspider

I recently updated my website to enforce HTTPS for all requests. Everything appears to be working well after this change but Baidu's web crawler (Baiduspider) is receiving a 404 for all requests. ...
0
votes
0answers
36 views

Random error code: ssl_error_rx_record_too_long for certain clients

I have an apache2 web server that's been working for a couple of years without issue. Last week, a two of our users began randomly getting Error code: ssl_error_rx_record_too_long when trying to ...
0
votes
0answers
17 views

Set IIS to Require SSL + Require Client Certificate on requests from localhost?

So, This is my scenario: I have a WCF service application which is invoked by the cruel and mean outside world, and it is hosted in IIS to REQUIRE both SSL and client certificate. I.e. no ...
0
votes
0answers
42 views

Which browsers and OSes supports ECC based SSL certificates?

We are evaluating whether to buy a RSA based certificate or a ECC based certificate. RSA is older and is supported by all browsers. ECC is newer, they state it is faster due requiring smaller key ...
0
votes
0answers
37 views

How to use ssl everywhere except an endpoint

I have a Web site where I want all requests to be done with HTTPS except for requests to urls with paths that start with /out/. nginx is configured as proxy to serve gunicorn/django content from ...
0
votes
0answers
46 views

secure cookie in Apache => php session resets on every page load

I have set secure cookie in Apache based on this tutorial. But php session resets on every page load. for example this sample code: <?php session_start(); echo session_id(); ?> displays ...
0
votes
0answers
51 views

How can I disable/fix the SSL BEAST issue on windows 2008 SP2 (not R2)

Does anyone know how I can disable/fix the SSL BEAST attack issue on windows 2008 SP2 (not R2)? I'm using IIS-7.0 I found the issue by running a www.ssllabs.com scan. Thanks!