SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
3answers
246 views

SSL reverse proxy and security (eavesdropping)

I am new to the hosting in datacenter. I would host my app in a datacenter (colocation). I can sell me only the bay I need. I would like to use a SSL reverse proxy : SSL Reverse proxy + LoadBalancer ...
0
votes
1answer
536 views

Add www to non-www address with ssl

I would like all traffic without the www, including https, to be redirected to the respective url with the www. So http://example.com -> http://www.example.com, https://example.com -> ...
0
votes
1answer
2k views

Securing Two Sub domains on IIS7.5 with SSL on port 443

I have two sub domains pointing at the same IP address i.e. sub1.example.com sub2.example.com Each sub domain maps to a site (let's say sub1 and sub2, respectively) in IIS 7.5 on Windows server ...
0
votes
2answers
2k views

SSL Certificate Installation Issue with Remote Desktop Connection

Using Remote Desktop Connection to connect from Win7 to Win2008 Server R2, what is the difference in installing a self-signed certificate (for server authentication only) and installing a regular ...
0
votes
1answer
395 views

Problem redirecting http to https with apache

I have a virtual host setup in apache, that works for SSL only. It is setup as so: <VirtualHost 8.8.8.8:443> <IfModule mod_ssl.c> SSLCertificateFile /home/me/server.crt ...
0
votes
1answer
243 views

Setting up Certification Authority on WinServer2003 and configuring IIS SSL

I'm a .net developer and I'm currently working on moving the asp.net project from http to https. I have worked my way through few tutorials and I'm wondering whether I have missed anything out. So ...
0
votes
1answer
3k views

Setting up SSL on Glassfish V2 or V3

My employer recently purchased a Trustwave SSL certificate. Trustwave advertises support on their website, but they don't give an installation guide like they do for their other servers at all, and I ...
-1
votes
1answer
244 views

Opscenter 4.1 - ssl agent communication vs internal authentication

My question relates to Opscenter 4.0.2 and Cassandra 2.0.4 with SSL and Auth : agent can't connect. The provided answer does help, but creates another problem. To summarize, everything runs find ...
14
votes
0answers
8k views

How to disable SSL 2.0 on IIS 7.5? [duplicate]

I've seen this KB Article which Microsoft put out covering how to remove SSL 2.0 on IIS 7.0 and earlier, but I can't find anything advising on how to do the same on IIS 7.5. The registry keys ...
10
votes
2answers
807 views

Getting an intermediate SSL certificate

Is it possible to buy an intermediate certificate to use it to sign subdomain certificates? It has to be recognised by browsers and I can't use a wildcard certificate. The search turned up nothing so ...
8
votes
2answers
2k views

Possible to close port 80 and still use port 443?

I have a web application that should only be accessible through HTTPS. Is it possible, and a wise idea to close port 80 entirely? Are there any drawbacks to closing port 80, beyond the fact browsers ...
7
votes
3answers
5k views

IIS 7 Still Serving old SSL Certificate

I installed a new SSL certificate into IIS7, removed the old certificate and setup the bindings for the new certificate - so https is now bound to the new certificate only. I restarted IIS7 (and the ...
5
votes
1answer
408 views

How to get certificate common name from PEM file

Various articles online have lead me to believe that a server certificate's common name must be an exact match to the root URL it is valid for. However, when I look at a bunch of the files in ...
5
votes
1answer
3k views

Serve http (port 80) and https (port 443) on same VirtualHost

I need to setup my VirtualHost on Apache to serve on both http and https (using standard ports) If I enable the SSL Engine (as per below) - I get an error when on port 80. The reason is, parts of ...
4
votes
1answer
942 views

Remove SSL warning with internal websites

I am using a signed SSL certificate generated by our internal CA. I have added subject alternative names so that myserver.example.net and myserver are both valid for the site. This works correctly in ...
4
votes
4answers
523 views

Multiple SSL certificates to access one ASP.NET application in IIS

I have an ASP.NET application that's currently accessible via a single domain name, with an SSL certificate. We'd like to be able to access the same application via a second domain name. The non-SSL ...
4
votes
5answers
463 views

Migrating an SSL Certificate from one host to another during site migration

We are helping a new client migrate their site from a previous unreliable host, over to a new host (cloud based). They run an ecom site with an SSL Certificate (GeoTrust SSL). We plan to move their ...
4
votes
5answers
785 views

How to provide HTTPS access to a webserver that doesn't support SSL?

I have a program (motion) that serves a web page showing a live camera feed. I want to make that feed available via internet, but using SSL and a certificate so the feed can only be seen by those that ...
4
votes
2answers
5k views

Does an SSL certificate work on CNAME'd urls?

Suppose I create sub domain per user, something like mysite.test.com which is secured under a wildcard ssl certificate. If I allow users to have their own custom url via a CNAME would the new url ...
4
votes
3answers
3k views

Can you import a SSL certificate from another Windows IIS 7 server?

Usually I re-request the CSR and install the certificate when I move servers. Was hoping if there was a faster way, where I can just export/import a SSL certificate when I move my website to another ...
3
votes
2answers
2k views

OpenSSL issues in Debian Wheezy

I don't know what is exactly going on but I noticed that curl couldn't get secure pages without adding extra switches. ~# curl -v https://api.dreamhost.com * About to connect() to api.dreamhost.com ...
3
votes
1answer
592 views

Why would different versions of openssl produce different hashed filenames for the same root cert?

OpenSSL - Solaris - Windows When I run c_rehash (OpenSSL 0.9.x in Solaris) and c_rehash (OpenSSL 1.1.x in Windows), the same exact cert.pem file gets converted to a .0 file with a completely ...
3
votes
4answers
928 views

Nginx. How do I reject request to unlisted ssl virtual server?

I have a wildcard SSL certificate and several subdomains on the same ip. Now I want my nginx to handle only mentioned server names and drop connection for others so that it'd look like nginx is not ...
3
votes
2answers
2k views

How to tell nginx to serve https only for one vhost-managed domain?

I have an ec2 instance running ubuntu and nginx 0.8.4, with vhosts serving several different domains using http but one using SSL/https. Secure domain configuration: server { listen 443 ssl; ...
3
votes
3answers
4k views

nginx HTTPS WWW redirect to non-WWW

My SSL certificate is for mydomain.com, so i am trying to redirect all www.mydomain.com over to without www. Now, all these work: http://www.mydomain.com http://mydomain.com https://mydomain.com ...
3
votes
1answer
2k views

How can webapps within Apache Tomcat use SSL/TLS client-certificate authentication as clients?

I am using Apache Tomcat webapp as a client (java) to an IIS hosted webservice. I need to use SSL with client authentication. What kind of matching criteria is used by the client to send a client ...
3
votes
1answer
441 views

how to redirect from https://www.example.com to https://example.com?

I server SSL pages from https://example.com. If a user types in https://www.example.com, I want to redirect. I've the got rewrite rule working, but chrome displays an error message because the server ...
3
votes
3answers
1k views

What percentage of web users are running on browsers/OSes that support SNI? [closed]

Has anyone done any analysis (or know where I can find some!) on what proportion of internet users are using a browser/operating system combination that support SNI (Server Name Indication) SSL/TLS ...
3
votes
4answers
121 views

Enabling SSL for a website

I want to enable SSL on my local computer for an asp.net 4.0 web site. What steps do I need to take? I want to use a free SSL certificate.
3
votes
1answer
1k views

IIS7 Not sending Intermediate SSL Certificate

We have a GlobalSign Domain certificate for our domain. I've installed the certificate into IIS and added the GlobalSign Domain Intermediate certificate to the Intermediate certification authorities ...
3
votes
2answers
4k views

Access keystore on Sun ONE Webserver 6.1 for 2048 bit key length SSL

We want to get 2048 bit key length CSR requests. The browser based GUI provides us with a 1024 bit CSR and I don't know how to change that. It seems that 1024 bit key lengths will no longer ...
3
votes
3answers
3k views

Configuring IIS 7.5 to be FIPS 140.2 compliant

I need to configure IIS 7.5 (Server 2008 R2) to be FIPS 140.2 compliant. Specifically, this involves disabling all SSL protocols other than TLS 1.0. I have set the following registry keys: ...
3
votes
1answer
548 views

What kind of SSL cert do I need for this vhost configuration?

If I have my virtual host configured as: <VirtualHost *:80> ServerName foo.com ServerAlias www.foo.com Include conf.d/foo.conf </VirtualHost> Can I get by with a single domain ...
3
votes
3answers
1k views

Apache wont start after attempting to install SSL

Below is what my VirtualHosts look like in httpd.conf <VirtualHost *:80> # Admin email, Server Name (domain name) and any aliases ServerAdmin support@mydomain.com ServerName mydomain.com ...
2
votes
1answer
324 views

What is wrong with my SSL trust chain?

The SSL cert for my site, https://www.snipsalonsoftware.com/, doesn't work on Android. In troubleshooting this problem I've plugged my site into the Qualys SSL Labs testing tool: ...
2
votes
1answer
1k views

Redirect http to https apache on different port

<VirtualHost *:82> SSLEngine on SSLCertificateFile /etc/ssl/certs/cert.pem DocumentRoot "/var/www/site" <Directory "/var/www/site"> allow from all Options -Indexes </Directory> ...
2
votes
2answers
5k views

How can I make apache request a client SSL certificate without needing to verify it against a known CA?

I'm using apache2 (2.2.3) to serve a site where I'd like to have clients authenticate with certificates. Since I only need to verify that a user presenting a particular certificate is the same user ...
2
votes
4answers
650 views

Do I really need client certificates to be signed by a trusted CA?

Suppose I have a site that I want users to be able to log into with client certificates. As I understand it, the client is presenting the site with the public half of a keypair and proving that they ...
2
votes
1answer
1k views

Is there an easy way to check SSL cipher preference from the command-line?

CentOS 5.x I want to confirm which SSL ciphers are supported and preferred on my web server. Is there an easy way to do this WITHOUT using third-party audit software/equipment? I was hoping for ...
2
votes
1answer
961 views

How can you detect SSL offload on server behind a load balancer?

In our production environment the SSL is offloaded to the load balancer. This was done to reduce the CPU load on the servers. For the most part this is perfectly fine, however, we now need the ...
2
votes
1answer
5k views

Cannot connect to SSTP VPN - Unable to check revocation because revocation server was offline

I have been trying to set up an SSTP VPN to my SBS 2011 server and have been battling certificate issues the whole way. I've been able to generate a new certificate for my external vpn address, ...
2
votes
2answers
1k views

can't install ssl certificate on apache

I have moved a website to another server and I have an SSL certificate from godaddy. SSL was working fine on an old server, maintained by my predecessor. Now on a new server I've regenerated the ...
2
votes
1answer
4k views

IIS7 add certificate to site from command line

I've found through APPCMD that most of IIS7 configuration is possible through the command line. One thing I've not figured out how to do yet: in IIS Manager, Bindings -> Edit -> pick an SSL ...
2
votes
1answer
1k views

Client-side certificates (Apache, Linux, OpenSSL)

My company purchased a wildcard certificate from a vendor. This certificate was successfully configured with Apache 2.2 to secure a subdomain. Everything on the SSL side works. Now I'm required to ...
2
votes
2answers
2k views

SVN SSL negotiation failed

I am having issues using svn all of a sudden. When trying to update/commit or create a new checkout I get the following error. I cant seem to find much information about it. svn: OPTIONS of ...
2
votes
1answer
753 views

Recovering SSL key from a dead computer

When a server won't boot but you still have a functioning hard drive, you still should be able to extract the stored SSL certificates and keys, right? The information is all there after all. The ...
2
votes
3answers
2k views

SSL stops working on IIS7 after a reboot

I have a Windows 2008 Server with IIS7. Every time the server reboots, SSL stops working. Normal HTTP requests work fine, but any request to an HTTPS address gives the typical error message in the ...
2
votes
1answer
1k views

IE and Google Chrome timeout on an IIS6 hosted SSL page that Firefox handles well

Ok, here's the scenario: Up until a few weeks ago, none of us noticed anything wrong with the corporate website. People were using it without complaint. Then, a client complained that a specific page ...
2
votes
3answers
875 views

Sharing SSL Certificates in a Cluster

Hopefully a very simple question, if I wanted several servers providing the same service to hold a certificate (e.g interface.internal.org) would the procedure be; Generate Public/Private Pair on ...
2
votes
2answers
1k views

Multiple SSL websites on the same Apache server

I am still having issues trying to get multiple valid SSL certificates to work for multiple website domains on the same Apache-Ubuntu server. Client browsers need to successfully validate SSL ...