SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
0answers
67 views

Is it possible to write a shared config for several VirtualHosts?

My intent here is avoid a lot of repetitive code. Essentially what I'm trying to do is use the same block of SSL config for several VirtualHost entries... <IfModule mod_ssl.c> <Directory ...
1
vote
0answers
263 views

disabling SSL / TLS Renegotiation on heroku

As the title sugests, is it possible to disable SSL / TLS Renegotiation when hosting a RoR application or Heroku? I ran the Nessus security tool on my website and the only serious warning showing up ...
1
vote
0answers
634 views

How to connect to Amazon RDS MySQL instance while preventing MITM attack

I have an Amazon RDS instance running MySQL. I've created a user account, and I've configured MySQL to require the use of SSL for all logins to that account. I want the MySQL client to be able to ...
1
vote
0answers
167 views

Modifying Authentication on web application / service in IIS(7/.5) via Powershell

I am trying to install a wcf-servce by using New-WebApplication in powershell. It works fine. However, how can I Modify the Authentication? I want to enable Anonymous Access Authentication and disable ...
1
vote
0answers
66 views

require client certificates in IIS without requiring SSL

In IIS 7, I've created an https binding for a site, and I'd like to require client certificates for https and still keep my http endpoint. That is to say, I'd like to require client certificates for ...
1
vote
0answers
681 views

How do I set up SSL in zend server?

I have a clean install of Zend Server CE, and I've been trying to add SSL support for the past hours, but I have no idea how, I moved the same SSL configuration file from xampp to zend (changed the ...
1
vote
0answers
109 views

Generating client certificates for IIS webapp

I am trying to figure out how to set up my web application so that only clients (external) with issued certificates could access it. (on Windows7) I have followd this tutorial where i got a .CER and ...
1
vote
0answers
142 views

WebDAV over SSL - Cannot access folders - no errors in logs

I am running a CentOS server on Amazon EC2 and have WebDAV, Apache, and mod-ssl installed. I tested my current configuration first through port 80 and was able to connect to the dav without a hitch. ...
1
vote
0answers
684 views

Securing using SSL multiple web servers behind a single IP address

Background We have number of web servers serving services and pages behind a single IP address we want to use SSL to secure the connection from the clients to those servers. We access the web ...
1
vote
0answers
1k views

How to client authentication in SSL

I was trying to connect to my server over ssl. The server and client are made possible using Openssl. I made the code for study purpose only. I made self signed certificates for clients and servers ...
1
vote
0answers
30 views

Is it possible to configure windows server 2008 to do windows form authentication BEFORE client certificate authentication?

I have setup a lab on vmware with both of them. It works but it doesn't suit my business case. I would like to have windows form authentication first. If sucessfull I want to check client certificate. ...
1
vote
0answers
124 views

Apache2 new SSL vhost causing major performance issue

I recently was tasked with installing an SSL cert on our existing server which has been using http protocol only for the existing vhost. I created the new *:443 NameVirtualHost vhost config for the ...
1
vote
0answers
118 views

ISA SSL Could not create SSL/TLS secure channel

I'm working on solution that uploads large amount of data through web service to the server. Between Client and Web Service implemented ISA server. Client use certificate to authenticate on ISA ...
1
vote
0answers
68 views

Apache not sending headers on certain SSL errors

If I make a http:// request over port 443 on our server, Apache is sending a plaintext error page with no headers, which most implementations of the protocol will interpret as a 200/ As far as I can ...
1
vote
0answers
245 views

Apache 2.2.22 SSL Virtual Hosts and Android/WebOS browsers

I recently upgraded my CentOS 5.8 servers to Apache 2.2.22 and I seem to be having some problems with SSL afterwards. Our client gives a CNAME to blah.mydomain.com. blah.mydomain.com is a web server ...
1
vote
0answers
97 views

How can I setup webdav server using SSL on a Mac (Lion)?

How can I setup webdav server using SSL on a Mac (Lion)? Thanks in advance!
1
vote
0answers
227 views

SSLRequire multiple OU validation

We are using client certificates with multiple OU fields. For example: OU1= ZZZ(unique value) OU2= XYZ(dynamic value) OU3= ABC(dynamic value) I need to write a rule only if the OU3 matches with the ...
1
vote
0answers
333 views

Ubuntu apache ssl issues

I am a little confused about what is going on here. I've tried to diagnose the situation with Google to no avail. I want to get this working as well as understand what is wrong. Basically I am trying ...
1
vote
0answers
252 views

Bandwidth Consumption on VPN + SSL

I need to estimate how much bandwidth (in Kilobytes) I will consume doing a https request (with client ssl authentication) between two servers connected through VPN over Internet. There's no need to ...
1
vote
0answers
390 views

SSL is dead slow in Internet Explorer + Safari

I had a Comodo SSL certificate installed on my website yesterday, after going through a lot of trouble it has finally been activated. I am, however, experiencing serious issues in Safari and Internet ...
1
vote
0answers
281 views

Configure OpenSCEP to grant certificate requests automatically

I am trying to setup an OpenSCEP server that can grant certificates automatically instead of me running scepgrant command every time there is a new request? Can someone let me know how to proceed with ...
1
vote
0answers
1k views

Debugging mutual-authentication SSL handshake

I've got a load balancer that is configured for mutual-authentication SSL. As far as I'm aware, the load balancer has been configured with an Entrust certificate, and has been installed with our own ...
1
vote
0answers
442 views

How do I get self signed SSL certificates to work locally on Mac OSX?

I'm trying to test a local page on my local git repository. Unfortunately, the SSL certificates I installed using OpenSSL and Mod_SSL aren't seeming to work. I've worked on checking the httpd file ...
1
vote
0answers
493 views

Install client side ssl cert on Openfire

I'm developing client-server app and trying to secure the connection. I'm using openfire as the server. I don't want any other jabber-clients to connect to it except mine. I want to make it by using ...
1
vote
0answers
77 views

change symmetric key in a SSL connection?

I'm analyzing (for didactic reason) the SSL security, and now I'm focusing on the symmetric key used for crypt the data on SSL tunnel. I read that at the first access to the server, both client and ...
1
vote
0answers
336 views

WebLogic 8.1 and 4096-bit SSL?

We have a scenario in which we'd like to configure a WebLogic 8.1 server (running on Windows, JRockit 1.4.2) to connect to Active Directory over SSL for authentication. Our Active Directory is ...
1
vote
0answers
1k views

Set up SSL/HTTPS in zend application via .htaccess

I have been battling with .htaccess rules to get my SSL setup working right for the past few days.I get a requested URL not found error whenever I try access any requests that does not do through the ...
0
votes
0answers
3 views

NGINX Loadbalancer Using SSL Termination for Node.js Sessions

How can I ensure my session is passed from a NGINX loadbalancer using SSL termination? There must be some test I can perform and logs I can read. I am unsure how to continue approaching the ...
0
votes
0answers
9 views

Wiresharking access to AWS to debug permission problems

I have a plugin which pushes files to S3. It's not my plugin and auditing what exactly it does has proved difficult. I'm trying to enable access logging on the bucket to figure out what exactly is ...
0
votes
0answers
9 views

How to prevent MITM in mobile apps

I want to make sure that my mobile app is the only one making calls to my API. How to ensure that if softwares like Fiddler generate a HTTPs certificate (man-in-the-middle) and anyone is able to ...
0
votes
0answers
17 views

Debugging client certificate problems

I am trying to configure an Apache install to accept client certificates. When I work with self-signed certificate, unknown to Apache and using Firefox, it works when SSLVerifyClient set to ...
0
votes
0answers
35 views

nginx config - pass all to https apart from one folder

I've been banging my head on this for 3 days day and I'm getting nowhere. I transferred the whole site over to ssl and that change over didn't go too bad and the site was only down for about 30 min. ...
0
votes
0answers
22 views

Server returning 404 for only Baiduspider

I recently updated my website to enforce HTTPS for all requests. Everything appears to be working well after this change but Baidu's web crawler (Baiduspider) is receiving a 404 for all requests. ...
0
votes
0answers
20 views

Random error code: ssl_error_rx_record_too_long for certain clients

I have an apache2 web server that's been working for a couple of years without issue. Last week, a two of our users began randomly getting Error code: ssl_error_rx_record_too_long when trying to ...
0
votes
0answers
14 views

Set IIS to Require SSL + Require Client Certificate on requests from localhost?

So, This is my scenario: I have a WCF service application which is invoked by the cruel and mean outside world, and it is hosted in IIS to REQUIRE both SSL and client certificate. I.e. no ...
0
votes
0answers
27 views

Which browsers and OSes supports ECC based SSL certificates?

We are evaluating whether to buy a RSA based certificate or a ECC based certificate. RSA is older and is supported by all browsers. ECC is newer, they state it is faster due requiring smaller key ...
0
votes
0answers
36 views

How to use ssl everywhere except an endpoint

I have a Web site where I want all requests to be done with HTTPS except for requests to urls with paths that start with /out/. nginx is configured as proxy to serve gunicorn/django content from ...
0
votes
0answers
32 views

secure cookie in Apache => php session resets on every page load

I have set secure cookie in Apache based on this tutorial. But php session resets on every page load. for example this sample code: <?php session_start(); echo session_id(); ?> displays ...
0
votes
0answers
36 views

How can I disable/fix the SSL BEAST issue on windows 2008 SP2 (not R2)

Does anyone know how I can disable/fix the SSL BEAST attack issue on windows 2008 SP2 (not R2)? I'm using IIS-7.0 I found the issue by running a www.ssllabs.com scan. Thanks!
0
votes
0answers
47 views

Apache Tomcat for Windows - cannot get https to work

Environment: Windows 2003 Server 64-bit Running on VMWare ESX 5.5 8GB of Ram Apache Tomcat 6.0.36 Server D:\Program Files\Java\jdk1.6.0_26\jre\bin\server\jvm.dll JDK 1.6 update: 26 Have been able ...
0
votes
0answers
23 views

How to make a client's pkcs12 bundle if only server pkcs12 bundle is present

I've got a linux box with openvpn installed on it, openvpn is configured to use pkcs12 certs: dh server.dh pkcs12 server.p12 crl-verify server.crl I'd like to add more vpn clients, but I ...
0
votes
0answers
21 views

External clients get a certificate mismatch - but internal clients do not

I have a scenario where external clients are receiving a certificate that is different than the one that is bound to the IIS site. This is Win2008R2 / IIS, in the following configuration: ...
0
votes
0answers
103 views

HTTPS request works to Linux, not to Mac, sometimes

I have two sites, say mac.example.com and linux.example.com. I'm using the same wildcard SSL cert, obtained from RapidSSL. If hit up either of the sites in a browser, hosted either in Linux (on ...
0
votes
0answers
12 views

smb.conf - where do I set key and certificate for 'smb encrypt' transport encryption?

Reading smb.conf man page I can enforce encrypted smb transport; smb encrypt = mandatory. Where do I set the keys to use for the encrypted transport? I was expecting something like apache2: ...
0
votes
0answers
40 views

Node + PM2 - How to securely read SSL private key with non-root user?

I'm looking for a way to run node via PM2 whilst reading an SSL private-key that is placed in a secure directory. Details: Bitnami LEMP stack with Node permissions for /etc/ssl/private: drwx------ ...
0
votes
0answers
107 views

Nagios - Could not complete SSL handshake

I'm trying to configure Nagios command for checking status of physical memory on a remote Windows host using NRPE plugin. I'm using Nagios v3.0.6 on Ubuntu Server v14.10, and latest stable version of ...
0
votes
0answers
41 views

Unable to redirect Https to http using htaccess

I'm trying to redirect https://example to http://www.example.com. I just migrate from one provider to another and my website on google search are index as Https , when I visit the page I get : ...
0
votes
0answers
62 views

Upgraded Certificate to sha-2, Chrome still complains

Along with many others, I too have had the problem of Google Chrome complaining about outdated security settings on my site. I have a RapidSSL cert, so I reissued the cert and it now checks out using ...
0
votes
0answers
29 views

Doku wiki cannot connect to fast cgi behind ngnix

I'm trying to configure dokuwiki with ngnix. I'm using the https setup: server { server_name wiki.example.co; root /var/www/dokuwiki; index doku.php; listen 443 ssl; keepalive_requests 10; ...
0
votes
0answers
31 views

Certificate stops working after computer reboot

Got a strange issue that I just can't find any clues. We have a program (Qlikview) which talks to a remote admin service via SSL (Qlikview Server) but it uses the certificate to validate the client. ...