SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
0answers
283 views

How to use client certificates with mysql

This concerns my attempt to use a client side certificate on an SSL encrypted connection to a mysql server. Some basics: Server is ubuntu 12.04 running mysql 14.14 Distrib 5.1.69. Client is MacOS ...
1
vote
0answers
247 views

Unable to install Alpha SSL certificate for Openfire

I have been issued an SSL certificate for www.mydomain.com, I have been able to successfully implement the certificate for the site and the site is working is https. However, I have not been able to ...
1
vote
0answers
324 views

apache authentication with SSL certificate and SSLUserName

i just try to put an SSL authentification for a SVN server over https. I would like that the client certificate allow authorized person to check their repositories. <VirtualHost ...
1
vote
0answers
106 views

SSL Handshake takes 10 seconds in LAN but not in WAN

Here is the structure we have, 3 servers in location A (172.22.25.X) and 3 servers in location B (192.168.140.X). One of the 3 servers in each location creates an SSL connection to the other 4 ...
1
vote
0answers
127 views

Apache2 conditional section based on port

I don't know much about if statements in apache configuration, and I'm wondering if I can have a section of the configuration applied only if the request is received on a certain port. In short, this ...
1
vote
0answers
277 views

Configuring Nginx reverse proxy with SSL and websocket

I'm running a web app that is using websockets and have nginx as a reverse proxy for that and that works fine. I've also been able to get SSL to work without the socket. Now we're nearing the official ...
1
vote
0answers
104 views

proxy to SSL third party site and masquerade url

To improve search engine optimization I need to have my SSL-enabled site https://www.company.com/support proxy to our SSL enabled third party support site https://company.custhelp.com, while at the ...
1
vote
0answers
67 views

Setting up SSL on an Apache Ubuntu Server

I am setting up an SSL certificate for the first time on an Ubuntu server. I have purchased a dedicated IP address and have purchased the certificate under the subdomain of secure.example.com Port ...
1
vote
0answers
51 views

here filtering terminate TLS in openvpn but not ssl

I have configured an openvpn sever appliance on vmware and windows 2008 R2 and set it to use port 80 for openvpn, iphone and ipad could connect to it but windows and mac could't and generated error in ...
1
vote
0answers
58 views

Serving http and https on the same server with apache2

I have a server I host multiple sites on like http://this.example.com/site1, http://this.example.com/site2, http://this.example.com/site3. I am trying to add a secure site at ...
1
vote
0answers
507 views

Problems with apache2 and SSL not load files CSS and JS

I have an application in Ruby on Rails 3.2.8, and I'm using passenger-Nginx as Web Server on port 3037 with Apache2 and SSL using ProxyPass and ProxyPassReverse. My problem is, when load in chrome or ...
1
vote
0answers
258 views

UFW blocks SSL connections Varnish/Apache2 on Ubuntu 12.04

I have installed Virtualmin on a Ubuntu 12.04 server and I'm using LAMP stack with Varnish (:80) in front of Apache (:8000). However, I cannot access https when UFW is enabled. When I disable UFW, all ...
1
vote
0answers
68 views

Is it possible to write a shared config for several VirtualHosts?

My intent here is avoid a lot of repetitive code. Essentially what I'm trying to do is use the same block of SSL config for several VirtualHost entries... <IfModule mod_ssl.c> <Directory ...
1
vote
0answers
298 views

disabling SSL / TLS Renegotiation on heroku

As the title sugests, is it possible to disable SSL / TLS Renegotiation when hosting a RoR application or Heroku? I ran the Nessus security tool on my website and the only serious warning showing up ...
1
vote
0answers
716 views

How to connect to Amazon RDS MySQL instance while preventing MITM attack

I have an Amazon RDS instance running MySQL. I've created a user account, and I've configured MySQL to require the use of SSL for all logins to that account. I want the MySQL client to be able to ...
1
vote
0answers
175 views

Modifying Authentication on web application / service in IIS(7/.5) via Powershell

I am trying to install a wcf-servce by using New-WebApplication in powershell. It works fine. However, how can I Modify the Authentication? I want to enable Anonymous Access Authentication and disable ...
1
vote
0answers
67 views

require client certificates in IIS without requiring SSL

In IIS 7, I've created an https binding for a site, and I'd like to require client certificates for https and still keep my http endpoint. That is to say, I'd like to require client certificates for ...
1
vote
0answers
719 views

How do I set up SSL in zend server?

I have a clean install of Zend Server CE, and I've been trying to add SSL support for the past hours, but I have no idea how, I moved the same SSL configuration file from xampp to zend (changed the ...
1
vote
0answers
110 views

Generating client certificates for IIS webapp

I am trying to figure out how to set up my web application so that only clients (external) with issued certificates could access it. (on Windows7) I have followd this tutorial where i got a .CER and ...
1
vote
0answers
144 views

WebDAV over SSL - Cannot access folders - no errors in logs

I am running a CentOS server on Amazon EC2 and have WebDAV, Apache, and mod-ssl installed. I tested my current configuration first through port 80 and was able to connect to the dav without a hitch. ...
1
vote
0answers
735 views

Securing using SSL multiple web servers behind a single IP address

Background We have number of web servers serving services and pages behind a single IP address we want to use SSL to secure the connection from the clients to those servers. We access the web ...
1
vote
0answers
1k views

How to client authentication in SSL

I was trying to connect to my server over ssl. The server and client are made possible using Openssl. I made the code for study purpose only. I made self signed certificates for clients and servers ...
1
vote
0answers
30 views

Is it possible to configure windows server 2008 to do windows form authentication BEFORE client certificate authentication?

I have setup a lab on vmware with both of them. It works but it doesn't suit my business case. I would like to have windows form authentication first. If sucessfull I want to check client certificate. ...
1
vote
0answers
124 views

Apache2 new SSL vhost causing major performance issue

I recently was tasked with installing an SSL cert on our existing server which has been using http protocol only for the existing vhost. I created the new *:443 NameVirtualHost vhost config for the ...
1
vote
0answers
121 views

ISA SSL Could not create SSL/TLS secure channel

I'm working on solution that uploads large amount of data through web service to the server. Between Client and Web Service implemented ISA server. Client use certificate to authenticate on ISA ...
1
vote
0answers
68 views

Apache not sending headers on certain SSL errors

If I make a http:// request over port 443 on our server, Apache is sending a plaintext error page with no headers, which most implementations of the protocol will interpret as a 200/ As far as I can ...
1
vote
0answers
247 views

Apache 2.2.22 SSL Virtual Hosts and Android/WebOS browsers

I recently upgraded my CentOS 5.8 servers to Apache 2.2.22 and I seem to be having some problems with SSL afterwards. Our client gives a CNAME to blah.mydomain.com. blah.mydomain.com is a web server ...
1
vote
0answers
99 views

How can I setup webdav server using SSL on a Mac (Lion)?

How can I setup webdav server using SSL on a Mac (Lion)? Thanks in advance!
1
vote
0answers
236 views

SSLRequire multiple OU validation

We are using client certificates with multiple OU fields. For example: OU1= ZZZ(unique value) OU2= XYZ(dynamic value) OU3= ABC(dynamic value) I need to write a rule only if the OU3 matches with the ...
1
vote
0answers
334 views

Ubuntu apache ssl issues

I am a little confused about what is going on here. I've tried to diagnose the situation with Google to no avail. I want to get this working as well as understand what is wrong. Basically I am trying ...
1
vote
0answers
258 views

Bandwidth Consumption on VPN + SSL

I need to estimate how much bandwidth (in Kilobytes) I will consume doing a https request (with client ssl authentication) between two servers connected through VPN over Internet. There's no need to ...
1
vote
0answers
433 views

SSL is dead slow in Internet Explorer + Safari

I had a Comodo SSL certificate installed on my website yesterday, after going through a lot of trouble it has finally been activated. I am, however, experiencing serious issues in Safari and Internet ...
1
vote
0answers
292 views

Configure OpenSCEP to grant certificate requests automatically

I am trying to setup an OpenSCEP server that can grant certificates automatically instead of me running scepgrant command every time there is a new request? Can someone let me know how to proceed with ...
1
vote
0answers
1k views

Debugging mutual-authentication SSL handshake

I've got a load balancer that is configured for mutual-authentication SSL. As far as I'm aware, the load balancer has been configured with an Entrust certificate, and has been installed with our own ...
1
vote
0answers
448 views

How do I get self signed SSL certificates to work locally on Mac OSX?

I'm trying to test a local page on my local git repository. Unfortunately, the SSL certificates I installed using OpenSSL and Mod_SSL aren't seeming to work. I've worked on checking the httpd file ...
1
vote
0answers
516 views

Install client side ssl cert on Openfire

I'm developing client-server app and trying to secure the connection. I'm using openfire as the server. I don't want any other jabber-clients to connect to it except mine. I want to make it by using ...
1
vote
0answers
78 views

change symmetric key in a SSL connection?

I'm analyzing (for didactic reason) the SSL security, and now I'm focusing on the symmetric key used for crypt the data on SSL tunnel. I read that at the first access to the server, both client and ...
1
vote
0answers
347 views

WebLogic 8.1 and 4096-bit SSL?

We have a scenario in which we'd like to configure a WebLogic 8.1 server (running on Windows, JRockit 1.4.2) to connect to Active Directory over SSL for authentication. Our Active Directory is ...
1
vote
0answers
1k views

Set up SSL/HTTPS in zend application via .htaccess

I have been battling with .htaccess rules to get my SSL setup working right for the past few days.I get a requested URL not found error whenever I try access any requests that does not do through the ...
0
votes
0answers
17 views

SSL Architecture Advice Needed

We run a SaaS (software as a service) company where we allow multiple clients to create "sites" within our application. This typically results in the client having a site that is a subdomain of our ...
0
votes
0answers
11 views

SSL with Virtual Hosts Using SNI

I am using RHEL 6, httpd-2.4.10, openssl-1.0.2a and I have setup SNI as explained in http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI Everytime I restart apache I get following message: ...
0
votes
0answers
28 views

Port 443 set up SSL on Nginx + Ubuntu + EC2

I've tried everything and I searched Google behind some solution, but can not configure SSL (https) in my Nginx server that is within a Ubuntu 14.04.2 LTS on Amazon EC2. My website works perfectly on ...
0
votes
0answers
10 views

OCS Inventory Agent Peer certificate cannot be authenticated with known CA certificates

I have configured OCS Inventory server for our helpdesk department. Few days ago they asked me to help them with OCSAgent configuration. They agents don't want to connect to server via ssl when ...
0
votes
0answers
5 views

SunOne Webserver 6.1 support for SHA2

I have sunone webserver 6.1SP19. Just like to check whether the certutil option -Z supports SHA256. I searched from examples and so far, what I see is -Z SHA1. I would like to create a CSR with SHA2 ...
0
votes
0answers
18 views

Setting up SQUID 3.5 with SSL Support

I’m setting up a SQUID 3.5 server with SSL support and managed to successfully configured HTTP with SQUID proxy. However, my HTTPS connection is not working. SSL configuration was carried out using ...
0
votes
0answers
38 views

CentOS Postfix/Dovecot status deferred conversation with 127.0.0.1[127.0.0.1] timed out while receiving the initial server greeting

Linux Kernel: Linux 2.6.32-504.16.2.el6.i686 on i686 RAM: 6GB OS: CentOS 6.6 Postfix 2.6.6 Dovecot 2.0.9 Relay Host Verizon Stunnel through 127.0.0.1:2525 Webmin 1.750 Virtualmin 4.17.gpl Multiple ...
0
votes
0answers
13 views

Nginx with proxy_protocol is not accpting requests from haproxy in TCP mode with send-proxy

I have haproxy and nginx. I want make this setup accept HTTPS connections and I want HTTPS request being decrypted on nignx, not haproxy. In haproxy I've created frontend and backend for HTTPS ...
0
votes
0answers
17 views

Windows Home Server 2011 and SSL certificates

I am running a home server with Windows Home Server 2011 and have set up Remote Web Access and Remote Desktop. I also have a valid SSL certificate from PositiveSSL which is set up on IIS. But whenever ...
0
votes
0answers
15 views

How can the HSTS header be added to WebLogic?

Is there an implementation for using the Strict-Transport-Security header to WebLogic? I figure it would be using something in web.xml under <security-constraint> I know how to do this for an ...
0
votes
0answers
14 views

How to get root CA certificate in windowsserver 2012

I am trying to connect to W2k12 server AD from my local unix box using net::ldaps. There seems to be CA certificate issue, as openssl s_client -connect AD.server.ip:636 is failing: [root@rh64-0 ~]# ...