SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
0answers
74 views

SSL certificate for sql-server on ec2

I have an ec2 node provisioned to host mssql server. I'm trying to request and install an ssl certificate for this node so I can securely connect to it but I can't get the certificate to appear in the ...
1
vote
0answers
362 views

haproxy client certificate authentication signed by 'common' CA

I am setting up haproxy as an SSL terminator/load balancer in front of an API that we need to expose over the internet to a customer. The plan was to use mutual (2-way) SSL/HTTPS to verify that both ...
1
vote
0answers
327 views

SSL error, unable to find valid certification path to requested target

I'm new to ssl so forgive me. I set up a site with ssl and all the online checks (eg. https://ssltools.websecurity.symantec.com/checker/views/certCheck.jsp) show that it is set up correctly and the ...
1
vote
0answers
284 views

Disable SSL3 on tomcat4

I have a very old web application that uses tomcat4. B/c of the poodle vulnerability I need to disable SSL3 and disable a bunch of weak ciphers. My connector looks like this, but apparently ...
1
vote
0answers
45 views

Can OpenDirectory on OS X reasonably be configured to use an intermediate CA cert from an existing CA?

We're trying to set up OpenDirectory. It seems to want to create its own CA, and then an intermediate CA with a certificate signed by its own CA. I'd prefer to generate an intermediate CA certificate ...
1
vote
0answers
1k views

Wordpress behind nginx reverse proxy doesnt work in https

I'm trying to run wordpress on a docker based cloud. The setup is: There is a server running a mysql array, which serves a container with Wordpress Running on Nginx. The setup is copied from this ...
1
vote
0answers
359 views

Lighttpd to include IP address in error.log

I have lighttpd/1.4.31 (ssl) on Debian 7.6 and I would for the standard error.log to include the IP address of the host which caused the error. Is it possible? The accesslog.format directive allows ...
1
vote
0answers
436 views

Apache access log format does not record SSL_PROTOCOL for all connections

We're trying to track the ssl protocol used by clients to our site/web services, the connections could be by browser, or, for the web services all sorts of soap libraries etc. I've created a custom ...
1
vote
0answers
357 views

Enabling AES 256 GCM on Windows Server 2012 R2

I'd like to enable the use of the AES 256 GCM encryption instead of the AES 256 CBC. We already have ECC certificates based on ECDSA so that pre-requisite has been fullfilled. The certificate has a ...
1
vote
0answers
153 views

Attach certificate to remote desktop connection - not gateway services

I have a Windows server that I want to attach a 3rd party signed certificate for remote desktop connections. This is not a remote desktop services server, i.e. it is just remote desktop ...
1
vote
0answers
347 views

Can I use tshark to write SSL-decrypted packets to a file?

I have a PCAP file containing SSL-encrypted HTTP traffic and the private key from the relevant web server. I'd like a PCAP file that contains the decrypted HTTP traffic to feed into a different tool. ...
1
vote
0answers
216 views

jsonrpc service nginx ssl configuration

I have a python jsonrpc service running in the server on port 8082. I want to reach it with php jsonRPCClient. (and have to be https) My nginx server looks like: server { listen 443; ...
1
vote
0answers
59 views

Can I pass_proxy over https?

Is it possible to have something like this in my local nginx.conf? pass_proxy https://mybackend.com:443; If not, how do I make my local nginx request and return my remote backend API over SSL?
1
vote
0answers
687 views

SSL Returning Blank Page, No Catalina Errors

This is my second, maybe third, time configuring SSL with Tomcat. Earlier I had created a self signed, which worked, and now using my signed is proving fruitless. I am using Tomcat, operating from ...
1
vote
0answers
640 views

Configure custom SSL certificate for RDP on Windows Server 2012?

I have been trying to get an installation of Remote Desktop Services deployed using Server 2012. I have now run into a problem where I need to use a certificate other than the self-signed cert from ...
1
vote
0answers
635 views

ldapmodify TLS: certificate is not valid - error -8179:Peer's Certificate issuer is not recognized

In trying to connect to an MS active directory server over ssl, I am trying to run this: ldapmodify -vv -H 'ldaps://abc.def.com:636' -D 'cn=user,cn=Users,dc=abc,dc=def,dc=com' -f test.ldif -w ...
1
vote
0answers
125 views

Aras Innovator PLM behind an SSL reverse proxy (Apache2)

We have Aras Innovator PLM running on an IIS Server within our LAN. We'd like to make this available on the Internet, for access to our partners and sub-contractors, but for logistical reasons can't ...
1
vote
0answers
445 views

cURL Chain Issues

On Ubuntu 13.10 running the system curl: curl --version curl 7.32.0 (x86_64-pc-linux-gnu) libcurl/7.32.0 OpenSSL/1.0.1e zlib/1.2.8 libidn/1.28 librtmp/2.3 Protocols: dict file ftp ftps gopher http ...
1
vote
0answers
463 views

SSL exception “No name matching domain found” apache in front of 2 tomcats servers

I have 2 servers. Server1 is an Ubuntu 12.04 LTS with Alfresco 4.2 on Tomcat. Server2 is a Windows 7 with my CAS server (SSO) on eclipse installation. Both have apache with mod proxy AJP in front to ...
1
vote
0answers
1k views

How to have Jetty redirect http to https on the same port?

This question is related to How to have Jetty redirect http to https and Jetty 9 - redirect http to https but not answered in either location. Basically, we run our app at some port, say 8085. We ...
1
vote
0answers
552 views

Virtual hosts with port 80 & 443 not working

I can't figure out why I can't connect to my VPS. httpd.conf: i added: Listen 80 listen 443 NameVirtualHost *:80 NameVirtualHost *:443 <VirtualHost *:80> SSLEngine off ServerAdmin ...
1
vote
0answers
6k views

openssl s_client -connect: 20 error with server signed certificate for client

What I want I want to connect to a server using a given signed certificate (by the company running the server) What I have Ubuntu 12.04 LTS My key and CSR files A signed certificate. It was signed ...
1
vote
0answers
3k views

Apache SSL handshake interrupted by system

I have an up-to-date Ubuntu 12.04 server running Apache 2.2.22-1ubuntu1.4. For every HTTPS request my Apache logs record what appear to be error messages related to encrypted connections. Self-signed ...
1
vote
0answers
58 views

How can I update rekeyed certificates on stunnel?

I have configured stunnel using GoDaddy certificate and it was working fine. Due to some circumstances, I need to rekey the certificate and update the pem file on the load balancer. Upon updating the ...
1
vote
0answers
249 views

Unable to generate a Bundle of CA Root Certificates (failed to create symbolic link)

I am trying to generate a Bundle of CA Root Certificates. Similar to what Facebook has done for its PHP SDK (https://github.com/facebook/facebook-php-sdk/blob/master/src/fb_ca_chain_bundle.crt). I ...
1
vote
0answers
244 views

Stunnel only for specific domain

I'm configuring stunnel to encapsulate SSL petitions to Haproxy. Haproxy serves several sites in the same IP address: domain.com - Website app.domain.com - Node.js webserver I acquired an SSL ...
1
vote
0answers
607 views

CouchDB v1.2.0 - Timeout error on replication

Currently, I have a replication task that looks something like this: { "continuous": true, "create_target": true, "owner": "admin", "source": "https://remote/db/", "target": "db", ...
1
vote
0answers
202 views

Windows Server 2012 - SSL Cypher Suite Order Not Long Enough

I want to re-order the cypher suites on our new Windows Server 2012 box to help mitigate the BEAST vulnerability for our clients. I went to Local Group Policy => Computer Configuration => ...
1
vote
0answers
196 views

Nginx - Adding a trailing slash to urls on HTTPS

I am using the below regex to add a trailing slash to any url that doesn't have a railing slash or ends ends with .. rewrite ^([^.]*[^/])$ $1/ permanent; This works fine for http, but when I use ...
1
vote
0answers
310 views

(Chrome/IE) 502.3 error encountered when POST-ing a file to an SSL-enabled IIS server running ARR that routes to JBoss

I am trying to get a file upload function to work on my site. It basically POSTs an image + image_id to the server. The server is running IIS7 with ARR. I have JBoss AS 7 running in the server as ...
1
vote
0answers
536 views

How to use client certificates with mysql

This concerns my attempt to use a client side certificate on an SSL encrypted connection to a mysql server. Some basics: Server is ubuntu 12.04 running mysql 14.14 Distrib 5.1.69. Client is MacOS ...
1
vote
0answers
316 views

Unable to install Alpha SSL certificate for Openfire

I have been issued an SSL certificate for www.mydomain.com, I have been able to successfully implement the certificate for the site and the site is working is https. However, I have not been able to ...
1
vote
0answers
136 views

SSL Handshake takes 10 seconds in LAN but not in WAN

Here is the structure we have, 3 servers in location A (172.22.25.X) and 3 servers in location B (192.168.140.X). One of the 3 servers in each location creates an SSL connection to the other 4 ...
1
vote
0answers
221 views

Apache2 conditional section based on port

I don't know much about if statements in apache configuration, and I'm wondering if I can have a section of the configuration applied only if the request is received on a certain port. In short, this ...
1
vote
0answers
397 views

Configuring Nginx reverse proxy with SSL and websocket

I'm running a web app that is using websockets and have nginx as a reverse proxy for that and that works fine. I've also been able to get SSL to work without the socket. Now we're nearing the official ...
1
vote
0answers
117 views

proxy to SSL third party site and masquerade url

To improve search engine optimization I need to have my SSL-enabled site https://www.company.com/support proxy to our SSL enabled third party support site https://company.custhelp.com, while at the ...
1
vote
0answers
76 views

Setting up SSL on an Apache Ubuntu Server

I am setting up an SSL certificate for the first time on an Ubuntu server. I have purchased a dedicated IP address and have purchased the certificate under the subdomain of secure.example.com Port ...
1
vote
0answers
59 views

here filtering terminate TLS in openvpn but not ssl

I have configured an openvpn sever appliance on vmware and windows 2008 R2 and set it to use port 80 for openvpn, iphone and ipad could connect to it but windows and mac could't and generated error in ...
1
vote
0answers
62 views

Serving http and https on the same server with apache2

I have a server I host multiple sites on like http://this.example.com/site1, http://this.example.com/site2, http://this.example.com/site3. I am trying to add a secure site at ...
1
vote
0answers
680 views

Problems with apache2 and SSL not load files CSS and JS

I have an application in Ruby on Rails 3.2.8, and I'm using passenger-Nginx as Web Server on port 3037 with Apache2 and SSL using ProxyPass and ProxyPassReverse. My problem is, when load in chrome or ...
1
vote
0answers
315 views

UFW blocks SSL connections Varnish/Apache2 on Ubuntu 12.04

I have installed Virtualmin on a Ubuntu 12.04 server and I'm using LAMP stack with Varnish (:80) in front of Apache (:8000). However, I cannot access https when UFW is enabled. When I disable UFW, all ...
1
vote
0answers
81 views

Is it possible to write a shared config for several VirtualHosts?

My intent here is avoid a lot of repetitive code. Essentially what I'm trying to do is use the same block of SSL config for several VirtualHost entries... <IfModule mod_ssl.c> <Directory ...
1
vote
0answers
990 views

How to connect to Amazon RDS MySQL instance while preventing MITM attack

I have an Amazon RDS instance running MySQL. I've created a user account, and I've configured MySQL to require the use of SSL for all logins to that account. I want the MySQL client to be able to ...
1
vote
0answers
244 views

Modifying Authentication on web application / service in IIS(7/.5) via Powershell

I am trying to install a wcf-servce by using New-WebApplication in powershell. It works fine. However, how can I Modify the Authentication? I want to enable Anonymous Access Authentication and disable ...
1
vote
0answers
73 views

require client certificates in IIS without requiring SSL

In IIS 7, I've created an https binding for a site, and I'd like to require client certificates for https and still keep my http endpoint. That is to say, I'd like to require client certificates for ...
1
vote
0answers
894 views

How do I set up SSL in zend server?

I have a clean install of Zend Server CE, and I've been trying to add SSL support for the past hours, but I have no idea how, I moved the same SSL configuration file from xampp to zend (changed the ...
1
vote
0answers
154 views

WebDAV over SSL - Cannot access folders - no errors in logs

I am running a CentOS server on Amazon EC2 and have WebDAV, Apache, and mod-ssl installed. I tested my current configuration first through port 80 and was able to connect to the dav without a hitch. ...
1
vote
0answers
964 views

Securing using SSL multiple web servers behind a single IP address

Background We have number of web servers serving services and pages behind a single IP address we want to use SSL to secure the connection from the clients to those servers. We access the web ...
1
vote
0answers
31 views

Is it possible to configure windows server 2008 to do windows form authentication BEFORE client certificate authentication?

I have setup a lab on vmware with both of them. It works but it doesn't suit my business case. I would like to have windows form authentication first. If sucessfull I want to check client certificate. ...
1
vote
0answers
130 views

Apache2 new SSL vhost causing major performance issue

I recently was tasked with installing an SSL cert on our existing server which has been using http protocol only for the existing vhost. I created the new *:443 NameVirtualHost vhost config for the ...