SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

3
votes
4answers
691 views

Nginx. How do I reject request to unlisted ssl virtual server?

I have a wildcard SSL certificate and several subdomains on the same ip. Now I want my nginx to handle only mentioned server names and drop connection for others so that it'd look like nginx is not ...
3
votes
3answers
4k views

nginx HTTPS WWW redirect to non-WWW

My SSL certificate is for mydomain.com, so i am trying to redirect all www.mydomain.com over to without www. Now, all these work: http://www.mydomain.com http://mydomain.com https://mydomain.com ...
3
votes
1answer
416 views

how to redirect from https://www.example.com to https://example.com?

I server SSL pages from https://example.com. If a user types in https://www.example.com, I want to redirect. I've the got rewrite rule working, but chrome displays an error message because the server ...
3
votes
4answers
120 views

Enabling SSL for a website

I want to enable SSL on my local computer for an asp.net 4.0 web site. What steps do I need to take? I want to use a free SSL certificate.
3
votes
2answers
4k views

Access keystore on Sun ONE Webserver 6.1 for 2048 bit key length SSL

We want to get 2048 bit key length CSR requests. The browser based GUI provides us with a 1024 bit CSR and I don't know how to change that. It seems that 1024 bit key lengths will no longer ...
3
votes
1answer
544 views

What kind of SSL cert do I need for this vhost configuration?

If I have my virtual host configured as: <VirtualHost *:80> ServerName foo.com ServerAlias www.foo.com Include conf.d/foo.conf </VirtualHost> Can I get by with a single domain ...
3
votes
3answers
975 views

Apache wont start after attempting to install SSL

Below is what my VirtualHosts look like in httpd.conf <VirtualHost *:80> # Admin email, Server Name (domain name) and any aliases ServerAdmin support@mydomain.com ServerName mydomain.com ...
2
votes
1answer
987 views

Redirect http to https apache on different port

<VirtualHost *:82> SSLEngine on SSLCertificateFile /etc/ssl/certs/cert.pem DocumentRoot "/var/www/site" <Directory "/var/www/site"> allow from all Options -Indexes </Directory> ...
2
votes
1answer
456 views

Why would different versions of openssl produce different hashed filenames for the same root cert?

OpenSSL - Solaris - Windows When I run c_rehash (OpenSSL 0.9.x in Solaris) and c_rehash (OpenSSL 1.1.x in Windows), the same exact cert.pem file gets converted to a .0 file with a completely ...
2
votes
4answers
591 views

Do I really need client certificates to be signed by a trusted CA?

Suppose I have a site that I want users to be able to log into with client certificates. As I understand it, the client is presenting the site with the public half of a keypair and proving that they ...
2
votes
1answer
1k views

How can webapps within Apache Tomcat use SSL/TLS client-certificate authentication as clients?

I am using Apache Tomcat webapp as a client (java) to an IIS hosted webservice. I need to use SSL with client authentication. What kind of matching criteria is used by the client to send a client ...
2
votes
1answer
773 views

How can you detect SSL offload on server behind a load balancer?

In our production environment the SSL is offloaded to the load balancer. This was done to reduce the CPU load on the servers. For the most part this is perfectly fine, however, we now need the ...
2
votes
1answer
4k views

Cannot connect to SSTP VPN - Unable to check revocation because revocation server was offline

I have been trying to set up an SSTP VPN to my SBS 2011 server and have been battling certificate issues the whole way. I've been able to generate a new certificate for my external vpn address, ...
2
votes
2answers
918 views

can't install ssl certificate on apache

I have moved a website to another server and I have an SSL certificate from godaddy. SSL was working fine on an old server, maintained by my predecessor. Now on a new server I've regenerated the ...
2
votes
3answers
760 views

What percentage of web users are running on browsers/OSes that support SNI? [closed]

Has anyone done any analysis (or know where I can find some!) on what proportion of internet users are using a browser/operating system combination that support SNI (Server Name Indication) SSL/TLS ...
2
votes
1answer
3k views

IIS7 add certificate to site from command line

I've found through APPCMD that most of IIS7 configuration is possible through the command line. One thing I've not figured out how to do yet: in IIS Manager, Bindings -> Edit -> pick an SSL ...
2
votes
1answer
1k views

Client-side certificates (Apache, Linux, OpenSSL)

My company purchased a wildcard certificate from a vendor. This certificate was successfully configured with Apache 2.2 to secure a subdomain. Everything on the SSL side works. Now I'm required to ...
2
votes
1answer
8k views

What is the 'cacert.pem' and for what to use that?

I am developing a web application on localhost with domains and sub-domains and I would like to use a HTTPS connection. On my Mac OS, in order to enable SSL, I need to set Apache correctly, so I ...
2
votes
2answers
1k views

SVN SSL negotiation failed

I am having issues using svn all of a sudden. When trying to update/commit or create a new checkout I get the following error. I cant seem to find much information about it. svn: OPTIONS of ...
2
votes
1answer
637 views

Recovering SSL key from a dead computer

When a server won't boot but you still have a functioning hard drive, you still should be able to extract the stored SSL certificates and keys, right? The information is all there after all. The ...
2
votes
3answers
2k views

SSL stops working on IIS7 after a reboot

I have a Windows 2008 Server with IIS7. Every time the server reboots, SSL stops working. Normal HTTP requests work fine, but any request to an HTTPS address gives the typical error message in the ...
2
votes
1answer
1k views

IE and Google Chrome timeout on an IIS6 hosted SSL page that Firefox handles well

Ok, here's the scenario: Up until a few weeks ago, none of us noticed anything wrong with the corporate website. People were using it without complaint. Then, a client complained that a specific page ...
2
votes
3answers
782 views

Sharing SSL Certificates in a Cluster

Hopefully a very simple question, if I wanted several servers providing the same service to hold a certificate (e.g interface.internal.org) would the procedure be; Generate Public/Private Pair on ...
2
votes
2answers
1k views

Multiple SSL websites on the same Apache server

I am still having issues trying to get multiple valid SSL certificates to work for multiple website domains on the same Apache-Ubuntu server. Client browsers need to successfully validate SSL ...
2
votes
4answers
15k views

SSL - how to make both http and https work

I have set up a Drupal 6 site on a dedicated server, and enabled SSL through the "Matrix" control panel which was installed on it. The problem is now, the site ONLY loads pages from https. Most of ...
1
vote
2answers
58 views

OwnCloud RSA certificate configured for SERVER- ISSUE, webpage has a redirect loop [closed]

I had Owncloud running on a server that had died, I remember installing being easy, I have migrated server and Owncloud is one of the last apps to install. Ok Just downloaded and installed the newest ...
1
vote
1answer
385 views

HAProxy isn't accepting reissued GeoTrust certificate

I requested a reissue of a GeoTrust certificate in light of the Heartbleed bug. We're using HAProxy 1.5-dev22 with OpenSSL enabled. I've updated OpenSSL on all affected instances. The PEM that ...
1
vote
0answers
140 views

Apache passphrase working sometimes

On one of my servers I observe the following problem with SSL passphrase: some certs are passing it without asking for a password, while some others keep asking for it. I have set it up globally: ...
1
vote
1answer
86 views

UCC SSL certificate across multiple machines and IPs

I have some doubts concerning the UCC certificates. From what I understand, they can be used to offer SSL to several domains using only 1 certificate file. However, in all sites that I search, UCC ...
1
vote
1answer
236 views

How to setup CodeIgniter with nginx allowing for SSL?

My nginx.conf file has: server { listen 80; listen 443; server_name www.mysite.com; #charset koi8-r; #access_log /var/log/nginx/host.access.log main; root ...
1
vote
4answers
368 views

SSL causing same content on multiple domains [duplicate]

I have setup a Debian LAMP server where I host multiple websites. As far as I know I can only use SSL on one of them, if I'd like to use SSL on two or more sites I'd have to add another IP - so far so ...
1
vote
2answers
419 views

How to fix from the server side: ERROR: The certificate of ‘www.example.org’ is not trusted

I am managing a website which uses a SSL/TLS Certificate from a well known issuer (GoDaddy in this case, although this same error appears with certificates from other issuers). The website is hosted ...
1
vote
4answers
1k views

both ssl and non-ssl on single port

I would like to make my apache2 webserver serve both http and https on the same port. With the different method i tried it was either not working on http or on https.. How can I do this? Update: If ...
1
vote
2answers
2k views

Disable all but RC4 in apache

Our PCI compliance vendor requires that we disable all but RC4 encryption on our web server. Currently our apache config file looks like this: SSLHonorCipherOrder On SSLCipherSuite ...
1
vote
3answers
2k views

Do I have to have an ssl certificate for my mail server?

Question is really simple. If I want to setup a mail server, do i have to have it or is it just a security issue? What kind of problems can it cause?
1
vote
2answers
4k views

How can I make apache request a client SSL certificate without needing to verify it against a known CA?

I'm using apache2 (2.2.3) to serve a site where I'd like to have clients authenticate with certificates. Since I only need to verify that a user presenting a particular certificate is the same user ...
1
vote
2answers
2k views

How to tell nginx to serve https only for one vhost-managed domain?

I have an ec2 instance running ubuntu and nginx 0.8.4, with vhosts serving several different domains using http but one using SSL/https. Secure domain configuration: server { listen 443 ssl; ...
1
vote
2answers
3k views

SSL error, Sec_Error_Unknown_Issuer With Firefox

I purchased a certificate from 123-Reg for my application, the problem is when I go to the url Brightlight I am getting the following message. The certificate is not trusted because the issuer ...
1
vote
1answer
231 views

Issuing client certificates to customers

What's the best approach for issuing client certificates to customers? Should we run our own certificate services (we're on Win 2008 R2), and issue them that way? Is there a CA that will issue them ...
1
vote
3answers
225 views

Is there a way to have all virtual servers use the same SSL certificate without having multiple IPs?

Is there a way to have all virtual servers,in Apache, use the same SSL certificate without having multiple IPs? I know that you can use a certificate on one site, per port and per IP, but can I make ...
1
vote
3answers
181 views

Tell nginx to SSL encrypt specific PHP documents

I have set up my server with the following settings: server { server_name www.example.com listen 443; listen 80; location /login\.php { rewrite ^(.*) ...
1
vote
1answer
681 views

Old SSL Certificate Cached on IE

We recently switched our SSL certificates on our web hosting environment and the old certificates are still showing up on certain computers with IE installed. It works perfectly fine in both Firefox ...
1
vote
2answers
207 views

Migrating Active Directory from a Non-RFC Internal Domain Name

We have an existing internal domain with extension .internal The .internal extension has been in-place for years and the AD has over 90 users with a linked to Exchange 2007 email accounts. We now ...
1
vote
1answer
671 views

iptables Ubuntu VPS SSH rule

I'm trying to configure a VPS Ubuntu server to connect to codebase GIT server, just like heroku codebase authentication is based on SSH RSA keys. I've uploaded the keys to the repository, and when ...
1
vote
1answer
2k views

Persuading openldap to work with SSL on Ubuntu with cn=config

I simply cannot get this (TLS connection to openldap) to work and would appreciate some assistance. I have a working openldap server on ubuntu 10.04 LTS, it is configured to use cn=config and most of ...
1
vote
1answer
832 views

One IP for multiple SSL sites? [duplicate]

Possible Duplicate: Multiple domains with SSL on same IP We are planning to host Magento websites in a dedicated server. Is it possible to host ~40 Magento websites per dedicated server. ...
1
vote
2answers
1k views

Apache Client Certificate Authentication

How can I configure Apache 2 (on Ubuntu 10.04) to use Client Certificate Authentication where my domain (secure.somedomain.com) is secured by a third party trusted SSL certificate, and the client ...
1
vote
3answers
990 views

Nginx & Https Redirection

I have an ssl certificate for www.domain.com. Obviously if someone goes to https: //domain.com, they will get an error from the browser about a certificate mismatch. Is it possible to setup the ...
1
vote
1answer
528 views

Outlook Web Access, reverse proxy and browser

We recently moved an exchange server behind a reverse proxy due to the loss of a public IP. I've managed to configure the reverse proxy (httpd proxy_http). But there is a problem for the SSL ...
1
vote
2answers
188 views

Storing RSA Private Key un-encrypted

We have our infrastructure on amazon ec2. Because we are growing we are setting up a basic Web Server AMI image that we will use to launch new servers as we need them. The main problem is that when ...