SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
0answers
236 views

Apache 2.2.22 SSL Virtual Hosts and Android/WebOS browsers

I recently upgraded my CentOS 5.8 servers to Apache 2.2.22 and I seem to be having some problems with SSL afterwards. Our client gives a CNAME to blah.mydomain.com. blah.mydomain.com is a web server ...
1
vote
0answers
97 views

How can I setup webdav server using SSL on a Mac (Lion)?

How can I setup webdav server using SSL on a Mac (Lion)? Thanks in advance!
1
vote
0answers
210 views

SSLRequire multiple OU validation

We are using client certificates with multiple OU fields. For example: OU1= ZZZ(unique value) OU2= XYZ(dynamic value) OU3= ABC(dynamic value) I need to write a rule only if the OU3 matches with the ...
1
vote
0answers
332 views

Ubuntu apache ssl issues

I am a little confused about what is going on here. I've tried to diagnose the situation with Google to no avail. I want to get this working as well as understand what is wrong. Basically I am trying ...
1
vote
0answers
247 views

Bandwidth Consumption on VPN + SSL

I need to estimate how much bandwidth (in Kilobytes) I will consume doing a https request (with client ssl authentication) between two servers connected through VPN over Internet. There's no need to ...
1
vote
0answers
356 views

SSL is dead slow in Internet Explorer + Safari

I had a Comodo SSL certificate installed on my website yesterday, after going through a lot of trouble it has finally been activated. I am, however, experiencing serious issues in Safari and Internet ...
1
vote
0answers
273 views

Configure OpenSCEP to grant certificate requests automatically

I am trying to setup an OpenSCEP server that can grant certificates automatically instead of me running scepgrant command every time there is a new request? Can someone let me know how to proceed with ...
1
vote
0answers
1k views

Debugging mutual-authentication SSL handshake

I've got a load balancer that is configured for mutual-authentication SSL. As far as I'm aware, the load balancer has been configured with an Entrust certificate, and has been installed with our own ...
1
vote
0answers
431 views

How do I get self signed SSL certificates to work locally on Mac OSX?

I'm trying to test a local page on my local git repository. Unfortunately, the SSL certificates I installed using OpenSSL and Mod_SSL aren't seeming to work. I've worked on checking the httpd file ...
1
vote
0answers
77 views

change symmetric key in a SSL connection?

I'm analyzing (for didactic reason) the SSL security, and now I'm focusing on the symmetric key used for crypt the data on SSL tunnel. I read that at the first access to the server, both client and ...
1
vote
0answers
299 views

WebLogic 8.1 and 4096-bit SSL?

We have a scenario in which we'd like to configure a WebLogic 8.1 server (running on Windows, JRockit 1.4.2) to connect to Active Directory over SSL for authentication. Our Active Directory is ...
1
vote
0answers
966 views

Set up SSL/HTTPS in zend application via .htaccess

I have been battling with .htaccess rules to get my SSL setup working right for the past few days.I get a requested URL not found error whenever I try access any requests that does not do through the ...
0
votes
0answers
39 views

VirtualHost for httpd SSL reverse proxy server for tomcat on CentOS 7

A CentOS 7 web server on the web will be configured to only accept SSL connections from a small number of known users. The server has one ip and only one domain name. As part of that configuration, ...
0
votes
0answers
12 views

How to get connected over IPP using SSL via AddPrinter() call?

I had three printers in my network. All of these three are using self-signed certificate. Only for one printer, I am getting error GetLastError() – 1797 – Printer Driver Unknown I had compared ...
0
votes
0answers
33 views

setup SSL with CA for multiple local sites in Apache and authenticate in a specific location (Error code: ssl_error_handshake_failure_alert) Ubuntu

i'm trying to implement SSL (HTTPs) on my local web-server to protect specified directories on Apache's websites where a user log's-in, combining SSL and HTTP Authentication Basic. I have follow ...
0
votes
0answers
23 views

how to check which forward secrecy cipher is enabled in tomcat 6.0.28 while I use TLSv1.0 protocol?

I am using tomcat 6.0.28 and using TLSv1.0 ssl protocol only. I have configured ciphers as ...
0
votes
0answers
9 views

WL-Proxy-SSL / X-Forwarded-Proto in WebLogic

How do I configure my WebLogic server or WebLogic application to use this header coming from a proxy, when requesting the base URL from a class using JAX-RS? I prefer not to have my application have ...
0
votes
0answers
20 views

Site functionality diminished over VPN/company network

We currently experience a diminished with one of our customers at our main production site. All subpages and resources seem to be affected as well. The customer reports a completely broken ...
0
votes
0answers
68 views

Allow Google apps and block consumer Google accounts using squid proxy

In my organisation, I am trying to allow the Google apps account and block consumer Google accounts using squid proxy. According to this link, Google says we can do it using following steps: 1. ...
0
votes
0answers
86 views

How to configure Coldfusion 10 CFLDAP to use TLS instead of SSL2

We are using CFLDAP to authenticate users from a remote system. The remote system has now shut down SSL 2 and 3 due to the POODLE issue. Is there a way to configure either Coldfusion or Tomcat to use ...
0
votes
0answers
22 views

Windows SSL Cipher Suite Policy

I'm looking to customise the cipher suite priorities for my Windows Server 2008 R2 and 2012 R2 servers via Group Policy. Am I able to create one policy for both systems? Windows Server 2012 R2 ...
0
votes
0answers
27 views

How to Flush NginX's SSL buffer mid-request for Server Push

I'm writing an app that uses long polling to push messages to clients. It doesn't end the request when it finishes sending a message though: it just flushes. It works fine, even when I proxy it ...
0
votes
0answers
32 views

Error when trying to force Glassfish to use HTTPS instead of HTTP

I am developing a JavaEE applicaction using Glassfish as server. I would like to force http connections to https. I have added to following code to web.xml, but when I run the application I have a ...
0
votes
0answers
188 views

Wordpress behind nginx reverse proxy doesnt work in https

I'm trying to run wordpress on a docker based cloud. The setup is: There is a server running a mysql array, which serves a container with Wordpress Running on Nginx. The setup is copied from this ...
0
votes
0answers
48 views

Using SSL to secure Solr with Tomcat - Admin Dash Fails to Load Properly

Tomcat: 7.0.56 / Java: 7 Upd: 71 / Webapp: Solr 4.10.1 / OS: Windows 2012 R2 Busy trying to secure Solr to compensate for the lack of security prevalent for a developer. We're having some difficulty ...
0
votes
0answers
25 views

How to get 2 ssl certs on alias of subdomain

had a quick look through can't find this actual situation, so appreciate any help. We have a domain hosted on a plesk server with a subdomain, Lets call it Domain.com and subdomain.domain.com An ...
0
votes
0answers
468 views

pfsense reverse proxy + HTTPS/SSL interception

I have pfSense 2.1.5 and squid3-dev 3.3.10 configured as reverse proxy for internal http web server and server proxy (port 3128).It works. Activating HTTPS/SSL interception (Enable SSL filtering) on ...
0
votes
0answers
24 views

Change SSL Protocol in MSSQL 2012

Is there a way to change the SSL Protocol support in MSSQL express 2012 on windows 2008R2 ? I want to change the protocol from SSL3 to TLS (1.0,1.1,1.2), after hours of looking I cant find ...
0
votes
0answers
28 views

How do you configure Wildcard SSL on Apache a single IP?

I have recently purchased a Wildcard SSL Certificate for my domain, however I am having difficulty configuring it within Apache. My server has one dedicated IP address, so I have read that you need ...
0
votes
0answers
53 views

Install an SSL certificate for a subdomain on a server that already has an EV SSL certificate (CentOS 5.11)

I am maintaining a site on a server that is currently running: CentOS release 5.11 (Final) Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 PHP/5.3.28 The server is ...
0
votes
0answers
54 views

Splitting HTTP/HTTPS traffic with SSL Termination in Rackspace Load Balancer

I've got a Load Balancer (LB) set up, with the SSL certificate installed, and a Cloud Server sat behind it serving my site. If I visit a static file in the site, with http:// or https:// it gets ...
0
votes
0answers
19 views

Publishing Multiple SSL Connections via TMG

I am using a Microsoft TMG 2010 as my Firewall. It is configured in a Three-legged approach, with public facing servers in DMZ. There are two public servers. Once is a Citrix Access Gateway which ...
0
votes
0answers
33 views

SSL with rsyslog on CentOS - protocol family not supported?

For the life of me, I can't seem to get rsyslog to have imrelp use TLS(SSL). I've engaged the good people on http://kb.monitorware.com/post25017.html#p25017 to try and chase the rsyslog angle, but I'm ...
0
votes
0answers
126 views

Tomcat ECDHE-ECDSA chiphers are not supported

Tomcat does not support ECDHE-ECDSA* ciphers. Configuration and version information is given below. OS is CentOS 6.5 x64 Tomcat version is 7.0.56 Tomcat native version is 1.1.30 (Loaded APR based ...
0
votes
0answers
210 views

How to fix: Root installed on the server. Remove the self-signed root from the server

I have a CENT OS Server and app is hosted on apache tomcat. I don't know much about SSL certificates but I did following to set it up 1 - Generate key store file keytool -genkey -alias -keyalg RSA ...
0
votes
0answers
167 views

NGINX: HTTP access not working from Chrome, only HTTPS

I 'm trying to publish IBM Connections NGINX allowing access using HTTP and HTTPS . By HTTPS is working but when i try to access by HTTP I get this error in Google Chrome only: This XML file does ...
0
votes
0answers
32 views

Apache configuration redirect using only redirect, not rewrite

PS: this is the 2nd part of the question originally posted here. I'd like to disable the HSTS header completely for specific virtual hosts. I have (per recommendation) a redirect in the 443 container ...
0
votes
0answers
33 views

apache is redirecting all to SSL but still getting non-ssl log

I've just moved to ssl on apache, so i added this directive to my default conf Redirect 301 / https://the-checkout-tech.com/ with a log file called access.log Added a new ssl conf file with all ...
0
votes
0answers
35 views

Is there a way to tell IIS to not require SSL, but require client certificates if the client uses SSL?

I'd like to set up IIS to listen on 127.0.0:80, and on *:443, so http connections are allowed from localhost only, while anyone from the net will have to use SSL. (This part is no problem). Also, i ...
0
votes
0answers
109 views

Configuring NGINX with SSL and Node.js on CENTOS 6 in EC2

I'm trying to deploy a Node.js web-app on a Centos EC2 instance with an elastic IP. The SSL certificate is already setup and properly configured. I would like to allow only https connection to my app, ...
0
votes
0answers
17 views

IIS routes to wrong https site

We are running a Microsoft Server 2008 R2 with 2 IP addresses: .1 .2 and IIS 7.5 as the webserver. On this server there is a website configures to use the domain A.Company.com on port 80 with IP ...
0
votes
0answers
41 views

How to set up an Apache ssl proxy for multiple sites using mod_rewrite or proxypass

(I asked this at stack overflow but no one even commented ;( perhaps it's better suited here I hope?) Some background: I wish to access some https sites on a separate VLAN to what my laptop is via a ...
0
votes
0answers
268 views

Foreman-Installer failed to install - puppet cert --generate FQDN returned 23 instead of one of [0] - Ubuntu 14.04

I tried to install Foreman serveral times at my Ubuntu 14.04 Server. Foreman 1.5 and 1.6 always fail at the same time with following error : /usr/bin/puppet cert --generate ubuntutest.domain.com ...
0
votes
0answers
27 views

Generate .pb7 or .p12 certs from .pem

I'm trying to enable SSL for Boomi webservices. I've followed the instructions on their documentation to generate the CSR and sent it to CA for signing. I've received the signed certificate in .pem ...
0
votes
0answers
33 views

Strict-Transport-Security on CloudFront with S3 origin?

My company's site has a static homepage for speed and cost reasons. We use S3 as the origin for CloudFront. Now, we would like to declare Strict-Transport-Security for the entire domain, but S3 seems ...
0
votes
0answers
16 views

Heroku won't recognize my intermediate cert

I have two subdomains: www.snipsalonsoftware.com and app.snipsalonsoftware.com. The www subdomain is pointed at a Rackspace Ubuntu server running apache and the app subdomain is pointed at Heroku. I ...
0
votes
0answers
31 views

OpenVPN and adding .p12 cert

Is there a way to add the .p12 type of cert to the openvpn config file? I've read and learned how to add the other files like so: <ca> -----BEGIN CERTIFICATE----- # insert base64 blob from ...
0
votes
0answers
31 views

Can I terminate an SSL Tunnel at the Load Balancer in Amazon VPC?

In other words, can the Amazon VPC load balancer be configured as an SSL Host? As a proof of concept, we've created this setup: Heroku Appserver <---> VPC Load Balancer <---> Ubuntu SSL ...
0
votes
0answers
35 views

Apache2 listening on https port but not responding to https request

I am trying to setup a re-direct from http to https on apache and have the following config : <VirtualHost *:80> ServerName www.mycompany.eu ServerAlias mycompany.eu ...
0
votes
0answers
35 views

Client authentication on tomcat fails

I have a Apache Tomcat 7.0.39 server running on a Windows server machine and I'm trying to enable client authentication. I first tried this using eclipse on a client machine I have (also on windows ...