SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
0answers
142 views

Nginx - Adding a trailing slash to urls on HTTPS

I am using the below regex to add a trailing slash to any url that doesn't have a railing slash or ends ends with .. rewrite ^([^.]*[^/])$ $1/ permanent; This works fine for http, but when I use ...
1
vote
0answers
251 views

(Chrome/IE) 502.3 error encountered when POST-ing a file to an SSL-enabled IIS server running ARR that routes to JBoss

I am trying to get a file upload function to work on my site. It basically POSTs an image + image_id to the server. The server is running IIS7 with ARR. I have JBoss AS 7 running in the server as ...
1
vote
0answers
323 views

How to use client certificates with mysql

This concerns my attempt to use a client side certificate on an SSL encrypted connection to a mysql server. Some basics: Server is ubuntu 12.04 running mysql 14.14 Distrib 5.1.69. Client is MacOS ...
1
vote
0answers
259 views

Unable to install Alpha SSL certificate for Openfire

I have been issued an SSL certificate for www.mydomain.com, I have been able to successfully implement the certificate for the site and the site is working is https. However, I have not been able to ...
1
vote
0answers
339 views

apache authentication with SSL certificate and SSLUserName

i just try to put an SSL authentification for a SVN server over https. I would like that the client certificate allow authorized person to check their repositories. <VirtualHost ...
1
vote
0answers
112 views

SSL Handshake takes 10 seconds in LAN but not in WAN

Here is the structure we have, 3 servers in location A (172.22.25.X) and 3 servers in location B (192.168.140.X). One of the 3 servers in each location creates an SSL connection to the other 4 ...
1
vote
0answers
136 views

Apache2 conditional section based on port

I don't know much about if statements in apache configuration, and I'm wondering if I can have a section of the configuration applied only if the request is received on a certain port. In short, this ...
1
vote
0answers
294 views

Configuring Nginx reverse proxy with SSL and websocket

I'm running a web app that is using websockets and have nginx as a reverse proxy for that and that works fine. I've also been able to get SSL to work without the socket. Now we're nearing the official ...
1
vote
0answers
110 views

proxy to SSL third party site and masquerade url

To improve search engine optimization I need to have my SSL-enabled site https://www.company.com/support proxy to our SSL enabled third party support site https://company.custhelp.com, while at the ...
1
vote
0answers
69 views

Setting up SSL on an Apache Ubuntu Server

I am setting up an SSL certificate for the first time on an Ubuntu server. I have purchased a dedicated IP address and have purchased the certificate under the subdomain of secure.example.com Port ...
1
vote
0answers
51 views

here filtering terminate TLS in openvpn but not ssl

I have configured an openvpn sever appliance on vmware and windows 2008 R2 and set it to use port 80 for openvpn, iphone and ipad could connect to it but windows and mac could't and generated error in ...
1
vote
0answers
58 views

Serving http and https on the same server with apache2

I have a server I host multiple sites on like http://this.example.com/site1, http://this.example.com/site2, http://this.example.com/site3. I am trying to add a secure site at ...
1
vote
0answers
529 views

Problems with apache2 and SSL not load files CSS and JS

I have an application in Ruby on Rails 3.2.8, and I'm using passenger-Nginx as Web Server on port 3037 with Apache2 and SSL using ProxyPass and ProxyPassReverse. My problem is, when load in chrome or ...
1
vote
0answers
263 views

UFW blocks SSL connections Varnish/Apache2 on Ubuntu 12.04

I have installed Virtualmin on a Ubuntu 12.04 server and I'm using LAMP stack with Varnish (:80) in front of Apache (:8000). However, I cannot access https when UFW is enabled. When I disable UFW, all ...
1
vote
0answers
72 views

Is it possible to write a shared config for several VirtualHosts?

My intent here is avoid a lot of repetitive code. Essentially what I'm trying to do is use the same block of SSL config for several VirtualHost entries... <IfModule mod_ssl.c> <Directory ...
1
vote
0answers
320 views

disabling SSL / TLS Renegotiation on heroku

As the title sugests, is it possible to disable SSL / TLS Renegotiation when hosting a RoR application or Heroku? I ran the Nessus security tool on my website and the only serious warning showing up ...
1
vote
0answers
759 views

How to connect to Amazon RDS MySQL instance while preventing MITM attack

I have an Amazon RDS instance running MySQL. I've created a user account, and I've configured MySQL to require the use of SSL for all logins to that account. I want the MySQL client to be able to ...
1
vote
0answers
189 views

Modifying Authentication on web application / service in IIS(7/.5) via Powershell

I am trying to install a wcf-servce by using New-WebApplication in powershell. It works fine. However, how can I Modify the Authentication? I want to enable Anonymous Access Authentication and disable ...
1
vote
0answers
69 views

require client certificates in IIS without requiring SSL

In IIS 7, I've created an https binding for a site, and I'd like to require client certificates for https and still keep my http endpoint. That is to say, I'd like to require client certificates for ...
1
vote
0answers
754 views

How do I set up SSL in zend server?

I have a clean install of Zend Server CE, and I've been trying to add SSL support for the past hours, but I have no idea how, I moved the same SSL configuration file from xampp to zend (changed the ...
1
vote
0answers
110 views

Generating client certificates for IIS webapp

I am trying to figure out how to set up my web application so that only clients (external) with issued certificates could access it. (on Windows7) I have followd this tutorial where i got a .CER and ...
1
vote
0answers
147 views

WebDAV over SSL - Cannot access folders - no errors in logs

I am running a CentOS server on Amazon EC2 and have WebDAV, Apache, and mod-ssl installed. I tested my current configuration first through port 80 and was able to connect to the dav without a hitch. ...
1
vote
0answers
785 views

Securing using SSL multiple web servers behind a single IP address

Background We have number of web servers serving services and pages behind a single IP address we want to use SSL to secure the connection from the clients to those servers. We access the web ...
1
vote
0answers
1k views

How to client authentication in SSL

I was trying to connect to my server over ssl. The server and client are made possible using Openssl. I made the code for study purpose only. I made self signed certificates for clients and servers ...
1
vote
0answers
31 views

Is it possible to configure windows server 2008 to do windows form authentication BEFORE client certificate authentication?

I have setup a lab on vmware with both of them. It works but it doesn't suit my business case. I would like to have windows form authentication first. If sucessfull I want to check client certificate. ...
1
vote
0answers
125 views

Apache2 new SSL vhost causing major performance issue

I recently was tasked with installing an SSL cert on our existing server which has been using http protocol only for the existing vhost. I created the new *:443 NameVirtualHost vhost config for the ...
1
vote
0answers
125 views

ISA SSL Could not create SSL/TLS secure channel

I'm working on solution that uploads large amount of data through web service to the server. Between Client and Web Service implemented ISA server. Client use certificate to authenticate on ISA ...
1
vote
0answers
68 views

Apache not sending headers on certain SSL errors

If I make a http:// request over port 443 on our server, Apache is sending a plaintext error page with no headers, which most implementations of the protocol will interpret as a 200/ As far as I can ...
1
vote
0answers
251 views

Apache 2.2.22 SSL Virtual Hosts and Android/WebOS browsers

I recently upgraded my CentOS 5.8 servers to Apache 2.2.22 and I seem to be having some problems with SSL afterwards. Our client gives a CNAME to blah.mydomain.com. blah.mydomain.com is a web server ...
1
vote
0answers
99 views

How can I setup webdav server using SSL on a Mac (Lion)?

How can I setup webdav server using SSL on a Mac (Lion)? Thanks in advance!
1
vote
0answers
244 views

SSLRequire multiple OU validation

We are using client certificates with multiple OU fields. For example: OU1= ZZZ(unique value) OU2= XYZ(dynamic value) OU3= ABC(dynamic value) I need to write a rule only if the OU3 matches with the ...
1
vote
0answers
336 views

Ubuntu apache ssl issues

I am a little confused about what is going on here. I've tried to diagnose the situation with Google to no avail. I want to get this working as well as understand what is wrong. Basically I am trying ...
1
vote
0answers
262 views

Bandwidth Consumption on VPN + SSL

I need to estimate how much bandwidth (in Kilobytes) I will consume doing a https request (with client ssl authentication) between two servers connected through VPN over Internet. There's no need to ...
1
vote
0answers
479 views

SSL is dead slow in Internet Explorer + Safari

I had a Comodo SSL certificate installed on my website yesterday, after going through a lot of trouble it has finally been activated. I am, however, experiencing serious issues in Safari and Internet ...
1
vote
0answers
301 views

Configure OpenSCEP to grant certificate requests automatically

I am trying to setup an OpenSCEP server that can grant certificates automatically instead of me running scepgrant command every time there is a new request? Can someone let me know how to proceed with ...
1
vote
0answers
1k views

Debugging mutual-authentication SSL handshake

I've got a load balancer that is configured for mutual-authentication SSL. As far as I'm aware, the load balancer has been configured with an Entrust certificate, and has been installed with our own ...
1
vote
0answers
454 views

How do I get self signed SSL certificates to work locally on Mac OSX?

I'm trying to test a local page on my local git repository. Unfortunately, the SSL certificates I installed using OpenSSL and Mod_SSL aren't seeming to work. I've worked on checking the httpd file ...
1
vote
0answers
530 views

Install client side ssl cert on Openfire

I'm developing client-server app and trying to secure the connection. I'm using openfire as the server. I don't want any other jabber-clients to connect to it except mine. I want to make it by using ...
1
vote
0answers
78 views

change symmetric key in a SSL connection?

I'm analyzing (for didactic reason) the SSL security, and now I'm focusing on the symmetric key used for crypt the data on SSL tunnel. I read that at the first access to the server, both client and ...
1
vote
0answers
363 views

WebLogic 8.1 and 4096-bit SSL?

We have a scenario in which we'd like to configure a WebLogic 8.1 server (running on Windows, JRockit 1.4.2) to connect to Active Directory over SSL for authentication. Our Active Directory is ...
1
vote
0answers
1k views

Set up SSL/HTTPS in zend application via .htaccess

I have been battling with .htaccess rules to get my SSL setup working right for the past few days.I get a requested URL not found error whenever I try access any requests that does not do through the ...
0
votes
0answers
26 views

Haproxy Layer 4 balancing with TLS

We have ssl3 turned off in favor of TLS. Most the tutorials on https for layer4 support with haproxy, ie ssl passthrough, uses check-ssl or ssl-hello-chk. In our setup this will fail because we have ...
0
votes
0answers
23 views

Self-signed cert with Subject Alternative Names

I'm attempting to create a self-signed cert with SANs using OpenSSL on Ubuntu 14.10. I have been about to successfully generate a CSR that includes the proper extensions. When I generate the ...
0
votes
0answers
63 views

Nginx www. -> root SSL redirects

I AM USING DINORSAUR.COM AS AN EXAMPLE, I DONT ACTUALLY OWN IT Trying to figure out how to get https:// www.dinosaur.com to redirect to https:// dinosaur.com I have the certificate for ...
0
votes
0answers
23 views

Enabling SSLv3 in vCloud Director 5.6.x

We have some legacy systems that use SSLv3 but vCloud Director disabled SSLv3 by default from version 5.5.3, see: ...
0
votes
0answers
34 views

Wildcard SSL on 2 Servers

I'm helping an SEO client install an SSL certificate and have run into some issues. I'll try to simplify it. He has 2 servers: 1. SERVER A: Internal server running IIS that contains chat and support ...
0
votes
0answers
22 views

Does coreos' cloud-init have something similar to ansible's vault?

I'm trying to setup ssl keys and certs onto a coreos machine, on the previous ubuntu machine I was using, I had ansible's vault encrypt the key and cert for source control and decrypt it when adding ...
0
votes
0answers
10 views

Cross Domain LDAPS

I have a bit of an issues I am running in to. We have two domains: domain1.com domain2.com Our Enterprise and Subordinate CA Resides on domain1, let's call it subca.domain1.com. I am trying to ...
0
votes
0answers
28 views

Enforcing RC4 cipher and testing enabled ciphers with openSSL

I am trying to enable and enforce RC4 cipher on apche 2.4 and I checked the http://httpd.apache.org/docs/trunk/ssl/ssl_howto.html It says RC4 cipher can be enabled in below 2 ways 1. SSLCipherSuite ...
0
votes
0answers
72 views

Error using SHA256 certificate for RADIUS server for use with Ubuntu Unifi/Wireless 802.1x 802.11 network

We have an established wifi network with Unifi, setup as wpa2-enterprise with a Windows Server 2008 R2 RADIUS host. Our CA server crashed, which didn't seem to cause any trouble with phones ...