SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

7
votes
2answers
3k views

HAProxy SSL Farm Options

I am trying to figure out how to set up an SSL farm with haproxy and SSL reverse proxies and I am looking for some general advice: Is it possible to meet all of the following: Load balance requests ...
7
votes
1answer
6k views

Jenkins won't serve with CA signed certificate

tl;dr Fixed I've been running a Jenkins instance for a while with a self signed certificate, which works fine except the hassle of having to create certificate validation exceptions in browsers. So ...
6
votes
0answers
618 views

IIS 6.0 SSL handshake error

Hi all I installed a trusted certificate in an IIS 6.0 server. I have the port 443 opened in the firewall and I verified the server is listening on that port. However when verifying using openssl I ...
5
votes
4answers
5k views

SSL Certificate errors in Captive Portals

Situation: Hotel guests attempting internet access via our captive portal. Problem: Google, Yahoo and now more and more sites redirecting all home pages to HTTPS so guest gets a Certificate error when ...
5
votes
4answers
3k views

Setting up Redmine With the Bitnami stack installer on Windows Server 2003

I'm running into a problem with the Redmine Bitnami stack intaller on Windows Server 2003. Setting up my project, I'm trying to add a remote subversion repo to the project, but it's erroring out. A ...
4
votes
2answers
2k views

Allowing users in from an IP address without certificate client authentication

I need to allow access to my site without SSL certificates from my office network and with SSL certificates outside. Here is my configuration: <Directory /srv/www> AllowOverride All ...
4
votes
2answers
10k views

How to install a Thawte SSL certificate on Amazon Elastic Load Balancer?

Here's my situation. We've generated an SSL certificate from Thawte for a site we're hosting on EC2. We have our servers load balanced using Elastic Load Balancer. Thawte gives us one PKCS signed ...
4
votes
1answer
9k views

How to use nginx as reverse proxy with multiple IPs and SSL?

I would like to setup nginx reverse proxy with multiple domains and an IP for each of them to use different SSL Certs. I run Ubuntu as OS which is installed on a KVM/Qemu VM. As I understand nginx, ...
3
votes
2answers
2k views

CDN that supports custom SSL over custom domain [closed]

SSL is the biggest problem: S3/Cloudfront doesnt support it. Rackspace CloudFiles just told me they will support it in Q2 2011. MaxCDN told me its $299 setup fee and a $299 monthly fee. Based on ...
3
votes
1answer
2k views

Certificate problems with Apache LDAPS access

I have a Subversion server running on Ubuntu 11.04 using Apache, and I'm trying to hook the authentication up with LDAPS. I got the Apache config file set up to authenticate against LDAP (sans the S) ...
2
votes
1answer
2k views

Stunnel too many clients

I'm trying to hook up stunnel and haproxy to forward https connections through to some backend servers. I've got haproxy setup right, and I seem to have stunnel set up right. Trouble is that when I ...
2
votes
3answers
550 views

Is there a way to make encrypted DNS resolutions? [closed]

Is there a way to make encrypted DNS resolutions, so that a packet sniffer in the same network still can't guess what DNS has been requested? Maybe, just thinking, by tunneling DNS requests through ...
2
votes
4answers
19k views

FTP/SSL in passive mode with portrange, which ports has to be open on the firewall?

We have to use FTP over SSL on our server and use a portrange with 5 ports for the data connection. A firewall is between client and server. We have to know what we have to open at the firewall: port, ...
2
votes
4answers
8k views

How do I setup a SSL mail server?

For a beginner, can anyone recommend a good method of setting up a encrypted IMAP server (on port 993) or at least TLS POP3 email ? There are plenty of examples of opportunistic client side email ...
1
vote
4answers
17k views

Why is https not working?

I am trying to redirect just the root of my site to https. Although the rewrite happens, https does not yield anything. The browser says. connecting to thinkingmonkey.me... and stagnates. ...
1
vote
1answer
8k views

SqlServer 2008 How to correctly install/configure SSL certificate to require encrypted connections

SqlServer 2008 instance is installed on Windows Server 2008 and is running under this identity: NT AUTHORITY\NETWORK SERVICE SSL cert from third-party CA has been installed in Local Computer\Personal ...
15
votes
4answers
35k views

How do you accept an SSL certificate through the SVN command line?

Is there an command line option to auto accept a SSL certificate permanently using the SVN commandline in a way that avoids the prompt?
12
votes
3answers
19k views

“Server should be SSL-aware but has no certificate configured [Hint: SSLCertificateFile]” error

After recently upgrading Apache2 to version 2.2.31 I found a strange behaviour in SSL VirtualHost setup. A few of the website I'm hosting were showing the certificate for the default host even if the ...
9
votes
3answers
11k views

Can Https work without a certificate?

Recently our infrastructure team told our development team that you do not need a certificate for https. They mentioned that the only benefit of buying a certificate was to give the consumer peace of ...
8
votes
4answers
13k views

IIS 7 Still Serving old SSL Certificate

I installed a new SSL certificate into IIS7, removed the old certificate and setup the bindings for the new certificate - so https is now bound to the new certificate only. I restarted IIS7 (and the ...
8
votes
3answers
12k views

Install SSL on Amazon Elastic Load Balancer with GoDaddy Wildcard Certificate

I'm a bit stuck installing an SSL Cert on an AWS Elastic Load Balancer. I have a wildcard certificate from GoDaddy and need to point it at the ELB. I have run the command (I ran it on one of the ...
7
votes
4answers
3k views

Nginx. How do I reject request to unlisted ssl virtual server?

I have a wildcard SSL certificate and several subdomains on the same ip. Now I want my nginx to handle only mentioned server names and drop connection for others so that it'd look like nginx is not ...
7
votes
1answer
4k views

Will a graceful reload of Apache configuration require the SSL Cert password?

I have an apache server running that required a minor configuration update. I want to force Apache to reload the config (e.g. via /etc/init.d/httpd reload or apachectl graceful), but I do not posses ...
7
votes
1answer
5k views

Nginx : strip header on HTTP, add header on HTTPS

I'm configuring an Nginx server so as to serve as a reverse proxy to serve a Django app (run on Gunicorn). My problem is that I want my site secured with HTTPS, and so I want my Django app to be able ...
6
votes
2answers
346 views

Forward proxy for webservices with SSL client certs

I have lots of servers which access various external webservices, most of which use SSL, some of which require client certificates. I would like to centralize the configuration of client certs and ...
6
votes
2answers
19k views

“SSL input filter read failed” Apache and 443

I have a little problem with my apache conf. When I read the error log, here is what I can see: [client xxx.xxx.xx.xx] AH01964: Connection to child 1 established (server www.mywebsite.com:443) [...
5
votes
1answer
4k views

nginx ssl certificate issue key values mismatch

I am have been trying to setup an ssl certificate for a few days now, I am buying it from Namecheap.com and I am buying a rapid ssl wildcard certificate I am doing the following: Generate a csr - ...
5
votes
3answers
4k views

Can you import a SSL certificate from another Windows IIS 7 server?

Usually I re-request the CSR and install the certificate when I move servers. Was hoping if there was a faster way, where I can just export/import a SSL certificate when I move my website to another ...
5
votes
3answers
7k views

Extracting SSL certificates from the network or pcap files

I will appreciate if someone can point me to a tool or approach to extract SSL/TLS certificates from live HTTPS connections (directly from the network) or from a network trace file (pcap file). I ...
4
votes
2answers
36k views

curl: (35) SSL connect error

Trying to make a curl https request to Twitter API and get this error. I've tried from another server and it works with no problem. Does anyone know the reason for this error? [root@webscoming ...
4
votes
2answers
7k views

mod_ssl SSLCACertificatePath Proper Usage or What is the Best way to Handle Multiple Acceptable Client Certificate CAs

I am attempting to use the mod_proxy SSLCACertificatePath directive, but I'm a tad bit confused on how to use it properly. Here are two links explaining the SSLCACertificatePath directive: http://...
4
votes
4answers
2k views

Multiple SSL certificates to access one ASP.NET application in IIS

1 Hi, I have an ASP.NET application that's currently accessible via a single domain name, with an SSL certificate. We'd like to be able to access the same application via a second domain name. The ...
4
votes
2answers
3k views

How to tell nginx to serve https only for one vhost-managed domain?

I have an ec2 instance running ubuntu and nginx 0.8.4, with vhosts serving several different domains using http but one using SSL/https. Secure domain configuration: server { listen 443 ssl; ...
4
votes
2answers
3k views

Google Chrome says my SSL uses outdated security settings but other site tests disagree [closed]

I installed StartSSL on my web server which is running Linux Apache on CentOS 6.5. shaaaaaaaaaaaaa.com said Nice. example.com has a verifiable certificate chain signed with SHA-2. However ...
4
votes
4answers
339 views

Is a wildcard SSL required for a single subdomain?

A typical SSL cert is based on a common name for the domain (domain.com) sometimes (www.domain.com) as well. I understand what a wildcard cert is used for (*.domain.com) and it would/should validate ...
3
votes
1answer
2k views

How to disable Apache http compression (mod_deflate) when SSL stream is compressed

I found that Goggle Chrome supports ssl compression and Firefox should support it soon. I'm trying to configure Apache to to disable http compression if the ssl compression is used to prevent CPU ...
3
votes
2answers
2k views

ssl certificate for www.example.com and example.com

I used make-dummmy-cert that comes with apache 2.2 and ssl_mod to make a self-signed certificate. I tried making it for www.example.com, example.com, or *.example.com, but none of them would work for ...
3
votes
1answer
3k views

How do I transfer an SSL certificate from an Apache server to an NGINX server

How do I transfer an SSL certificate from an Apache server to an NGINX server? Any help is much appreciated.
3
votes
1answer
474 views

apache authentication with SSL certificate and SSLUserName

i just try to put an SSL authentification for a SVN server over https. I would like that the client certificate allow authorized person to check their repositories. <VirtualHost 37.187.96.147:443&...
3
votes
3answers
3k views

puppet cert mismatch in ec2

I'm setting up a puppetmaster (2.7.6) in ec2 via gems (on rhel6) and I'm running into problems with the cert names and getting the master able to talk to itself. my puppet.conf looks like this: [...
3
votes
3answers
5k views

Multiple domain names for IIS websites with SSL

First off, this isn't a question about sub-domains or host headers and SSL. What I want to know is can I build a certificate request or find a certificate provider that will issue a certificate with ...
2
votes
1answer
3k views

WARNING: None of the ciphers specified are supported by the SSL engine

I have a working web service running through Apache Tomcat 7 with the following connector element in server.xml: <Connector port="443" protocol="org.apache.coyote.http11.Http11Protocol" ...
2
votes
4answers
1k views

Do I really need client certificates to be signed by a trusted CA?

Suppose I have a site that I want users to be able to log into with client certificates. As I understand it, the client is presenting the site with the public half of a keypair and proving that they ...
2
votes
2answers
13k views

Curl with SSL not working on ubuntu server

When I try to Curl a SSL page on my ubuntu 12.04 TLS server, it won't work: not ssl page: $ curl https://evernote.com/ -vv [the entire webpage] ssl page: $ curl https://evernote.com/ -vv * About ...
2
votes
2answers
646 views

How do I log tls-encrypted smtp traffic?

I'd like to know what my local postfix says to the Amazon SES smtpd after the STARTTLS. In plain text, so I can understand it. Amazon SES requires TLS, so I can't temporarily turn it off. I currently ...
2
votes
3answers
2k views

How to force a own set of ciphers in Postfix 2.11?

I would like to force a own set of TLS cipher suites rather than use the Postfix built in ones. My desired set of ciphers is (taken from nginx configuration): ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-...
2
votes
1answer
263 views

How can I use Let's Encrypt (letsencrypt.org) as a free SSL certificate provider?

I have a few sites running with a StartSSL free certificate (CJSHayward.com, JobhuntTracker.com), and Firefox rejects StartSSL and displays an error page saying that my server is not properly ...
2
votes
2answers
14k views

“Unable to locally verify the issuer's authority” for GeoTrust SSL CA

I am having troubles connecting to an SSL site (not mine) from the command-line. The certification path goes "GeoTrust Global CA" > "GeoTrust SSL CA" > "*.131500.com.au". The server recently ...
2
votes
5answers
5k views

Setting up SSL on apache on linux ubuntu

I'm trying to get SSL to run on my apache web server. I do not have the DNS for the domain setup yet is that an issue? How do I setup SSL on my web server? When I start apache it fails. root@...
2
votes
2answers
414 views

Self Signed Certificate Risks

I'm currently using a self signed certificate for in-house development purposes and want to make sure I am aware of any real security risks. Here's how I set things up. Root Certificate Created a ...