SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
2answers
42 views

Getting SSL errors with nginx

I've got a digitalocean droplet up and running, and the ip on my dashboard 159.xxx.xxx.xx, and with nano /etc/nginx/sites-available/hello_world I have this config file: server { listen 80; ...
0
votes
1answer
34 views

Which config values is apache loading?

I ran in some trouble today after spinning up a new server. I did the following: Installed CentOS 7 Installed Apache + PHP Securing my server with SSL (letsencrypt) But when I checked my ...
2
votes
2answers
23 views

Forward to https keeping the URL intact/complete

I want to forward all traffic to https. There can be subdomains and subpaths in the URL that should stay intact. Example: http://subdomain.myDomain.me -> https://subdomain.myDomain.me ...
-2
votes
1answer
27 views

Installing self-signed certificate on tomcat

down vote favorite The question: I have an application running under tomcat which calls another application under the same tomcat via a gateways which has a self signed SSL certificate installed. When ...
0
votes
0answers
38 views

using keystore in nginx configuration

Im new to using NGINX and keystore. Kindly forgive my ignorance. I'm working with an API that posts data to my server. The API requires mutual authentication to be done. So we I have a signed ...
1
vote
2answers
55 views

Correctly opening port 443 to the internet

I need port 443 open to the internet on my server. When I check internally via netstat -tulpn | grep "nginx", I see that nginx is indeed LISTENing on that port. However, trying nmap -p443 mysite.com ...
0
votes
0answers
57 views

Magento NGINX SSL ERR_TOO_MANY_REDIRECTS

Im having an error ERR_TOO_MANY_REDIRECTS Im implement the ssl and i get the errors In Magento i have the sites with ssl web/unsecure/base_url https://pontebuso.com/ web/secure/base_url ...
3
votes
0answers
54 views

Nginx - SSL forward secrecy and iOS9 support

I'm trying to bring a couple of Linux web servers into line with the current recommendations for SSL - in particular for allowing iOS9 to connect. One server is CentOS 7, the other CentOS 6.4. I have ...
1
vote
1answer
41 views

Enable HTTPS with CNAME Apache

I have two apache servers, both of which hostnames are primary.domain.com and secondary.domain.com The Primary server will rsync and mirror all files to Secondary server as a backup. I am trying to ...
2
votes
1answer
73 views

HAProxy: Detect SSL connection contents and then decide to forward it or not

I would like to have a front end with HAProxy on port 443. This front end acts in the following way: It decrypts the contents of the connection and checks: 1- If the encrypted contents of the ...
0
votes
1answer
43 views

Can I prohibit IIS from fetching intermediate SSL certificates via AIA?

According to this answer IIS can use Authority Information Access certificate extension to retrieve missing issuer certificate. Here's the scenario. There's an IIS installation with an HTTPs endpoint ...
0
votes
1answer
201 views

nginx ssl ERR_CONNECTION_REFUSED

I'm getting an error on the SSL, my site is https://pontebuso.com/ But it always give me ERR_CONNECTION_REFUSED sudo netstat -anp |grep :443| grep LISTEN tcp 0 0 0.0.0.0:443 0.0.0.0:* ...
0
votes
1answer
107 views

NGINX : How to configure mutual authentication for TCP Upstream?

The particular feature I am interested about about SSL termination for TCP Upstream. I am evaluating both NGINX Open Source and NGINX Plus. We have an application which accepts messages (TCP) over ...
1
vote
1answer
51 views

Redirect All URL to SSL, Except for X

I run NGINX on Vesta CP. There are two separate files nginx.conf and snginx.conf. Each has a server block in it. I redirect entire sites to SSL. To do this I add a return 301 ...
0
votes
0answers
15 views

force mysql cleint to start SSL/TLS immediately without server's plaintext handshake

I am trying to get HAProxy to do the SSL for a MySQL Proxy in front of a MySQL Server, however my problem is the mysql client is waiting for the Initial Handshake Packets from the server, and the ...
0
votes
0answers
27 views

Installing a SSL certificate to a Domain Hosted in AWS

I have domain example.lk hosted in Amazon AWS. And I want it to be accessed (only) using HTTPS. In other words I want to redirect all my traffic to the website http://example.lk to https://example.lk ...
1
vote
1answer
68 views

NGINX does not prompt for client ssl certificate

On our setup we want to promt a user for a client ssl certificate. All certificates are issued by StartSSL. The problem is that even though ssl_verify_client on; is set 'on', the website / browser ...
0
votes
2answers
40 views

different ssl cerfiticate for subdomain [duplicate]

Since I can't afford buying a wildcard ssl, I want to purchase another ssl certificate for m.mysite.com, so mysite.com and www.mysite.com will have the a different ssl certificate than m.mysite.com ...
0
votes
2answers
43 views

Is my site secure if the SSL padlock does not appear?

I have moved a website to https and its working fine. The admin area and login page display the green https padlock when i visit the pages, but none of the other pages display the padlock. I ran a ...
0
votes
0answers
66 views

nginx reverse proxy for gerrit breaks with http_ldap and ssl

I am trying to get nginx to ssl reverse proxy gerrit with http_ldap authentication. Here are my tests: nginx operating as an https proxy and gerrit using ldap auth -- works nginx operating as an ...
-6
votes
2answers
46 views

Should I use SSL on SSH [closed]

I am trying to setup a web server in Linux (Debian). I have modified the IP tables to provide access only SSH and HTTP/S. Also SSH port has been changed to non-standard one. Apart from these steps, ...
0
votes
0answers
46 views

setting up ssl on amazon ec2 linux instance

I have been struggling to setup ssl on my amazon ec2 server from 2 days. I have gone to aws docs for setting it up. I have generated private key and csr and got ssl certificate from www.ssl.com. I ...
0
votes
0answers
33 views

Python/Django/WSGI/Apache webserver gateway timeout with outgoing SSL connections with urllib2/urllib3/requests

I have a webserver serving Django through Apache 2.4 with mod_wsgi and Python 2.7 on Ubuntu 14.04. Outgoing connections with any of urllib2, urllib3, or requests, connections to non-SSL (on port 80) ...
0
votes
1answer
80 views

Error 503 Service Unavailable Varnish/Nginx/SSL

I have a setup where Nginx and Varnish are just working fine. Multiple website running on one VPS. Nginx runs on port 8080. I added a SSL certificate to one of the websites to run it in https but ...
1
vote
2answers
47 views

Client-side certificate signing

One of my partners wanted to do client side SSL certificate authentication. They wanted us to sign the certificate using a recognized CA. I was under the impression that for client side SSL ...
1
vote
2answers
79 views

Add existing wildcard SSL certificate to Amazon EC2 Nginx

I'm trying to add a pre-existing wildcard SSL certificate to a single Ubuntu instance on Amazon EC2, where the webserver is Nginx, and I run a single subdomain. I have - from the original vendor who ...
1
vote
0answers
37 views

apache server takes very long time to establish a connection with ssl

I am running apache-2.4.7 with Ubuntu 14.04, I have 2 cores, 2GB RAM on my server. I have ssl enabled and activated on my website. I usually push notifications to users, so sometimes maybe 150-200 ...
3
votes
1answer
54 views

Prevent HAProxy from redirecting HTTP to HTTPS

I'm using HAproxy to load balance requests between Apache servers. I'm trying to disable HTTPS for a special use case (serving of kickstart files), and I'm using port 8000 to do this. I have an ...
1
vote
1answer
97 views

How can I run 2 virtual hosts on Apache 2.4 where one use port 80 “no ssl” and the other uses port 443 “ssl”?

I am running Apache 2.4.18 on Windows Server 2008 R2 and PHP 5.6.18. My Apache server by default have SSL turned on. I need to run 2 different sites where one site uses SSL and the other one does ...
0
votes
1answer
189 views

How to disable SSL on Apache 2.4.18 running on Windows Server 2008

I have Apache 2.4.18 running on Windows Server 2008 R2. I want to stop SSL on that environment altogether. How can I disable it? Here is what I done in attempt to disable it In the httpd.conf file ...
-2
votes
1answer
34 views

Communication from Tomcat to Apache Web Server

I have deployed my application in Apache Tomcat, and I am using Tomcat as a standalone web server. Now from my application, I am sending request to a plugin which is in Apache Web Server for getting ...
0
votes
0answers
93 views

Changing SSL-version for curl

I have been trying for hours to change the SSL Version for curl from NSS to OpenSSL because I have a web application that's dependant on it. I'm running RedHat RHEL 6.7 on a 64-bit system. I have ...
1
vote
1answer
99 views

client SSL certificate verify error: (27:certificate not trusted)

I'm having some difficulty with nginx's client authentication while using an intermediate CA (self-created). Although the same certificate bundle (intermediate + root certificates in a single .pem ...
1
vote
1answer
32 views

How to configure HAProxy on Amazon Linux AMI with SSL/TLS Passthrough

I'm trying to configure an Amazon Linux AMI instance that has an Elastic IP to act as Proxy to a standalone backend server. I'm trying to do HTTPS TCP Passthrough only but I can't get it to work! ANY ...
1
vote
1answer
78 views

Getting SSL to work on Django project

I'm trying to get my Django website to move entirely to https (currently it's solely http). The webserver is nginx (reverse proxy) and gunicorn. However, even after correctly installing SSL, opening ...
-1
votes
1answer
57 views

MariaDB always show SSL not in use when I start mysqld with --ssl

CentOS 7.2.1511 Linux 3.10.0-123.9.3.el7.x86_64 MariaDB: 10.1.11 /etc/my.cnf # # This group is read both both by the client and the server # use it for options that affect everything # ...
-1
votes
1answer
24 views

HTTPS activated, how to refuse HTTP connections [duplicate]

I recently installed an SSL certificate on my server and now HTTPS seems to work for all the pages. However, the server is still accepting connections from HTTP. How do I enforce HTTPS? I use a ...
1
vote
2answers
65 views

using 2 certificate to secure a single website apache

I currently have an apache http server version 2.2.0 with a self-signed sha-1 certificate. I need to migrate to a more modern trusted certificate. We have used our current certificate to generate ...
2
votes
2answers
34 views

SSL Subject Alternative Name and Man in the Middle attacks

My company "ourcompany" owns a 2nd level DNS domain name: ourcompany.org. We currently use this domain, as well as www.ourcompany.org and feature1.ourcompany.org, and have an SSL certificate generated ...
0
votes
0answers
239 views

Utilizing TLS 1.2 on CentOS 5.11 for use with Paypal IPN

Our current web stack is installed on a CentOS 5.11 server with Plesk. We are using PHP 5.4, cURL 7.47.1, and openSSL 0.9.8e-fips-rhel5 01 Jul 2008. I am trying to run Paypal IPNs using code based off ...
0
votes
0answers
66 views

How to run PowerShell ActiveDirectory command Get-ADObject over SSL

To query AD DS or AD LDS, I can successfully run the following Powershell commands: get-adrootdse -server 'localhost:389' get-adobject -server 'localhost:389' -searchbase 'dc=test,dc=com' ...
1
vote
2answers
57 views

Force SSL redirect with AWS decrypting SSL on an ELB and routing to Nginx/Passenger

Currently we are creating a new environment and are running into some quirks with SSL. We are using an ELB that accepts 80/443. Both route to the same port on an Nginx box (ELB Decrypts). On the Nginx ...
-4
votes
2answers
89 views

setup multiple https on same server using different ports

I am trying to setup multiple https websites via apache or nginx virtualhost but i noticed i have to append the port to the end of the IP address to view the https of websites that uses non default ...
0
votes
1answer
15 views

Apache2 wildcard cert www and non-www domain trouble

I've run into a bit of an issue with my SSL. I have a CA-signed wildcard cert by Digicert. I have installed it properly and am attempting to use it to access my sites, comp.org and www.comp.org via ...
0
votes
2answers
83 views

Have both Hostname and FQDN in SSL Certificate on IIS

I've been searching here, technet and google but haven't been able to find an answer to my question yet. I have a website running on IIS 7, Server 2012 R2. The IIS serves as an access to our Citrix ...
0
votes
1answer
36 views

Issue When trying to use port forwarding to expose PRTG Network Monitor

I am currently trying to expose our PRTG network monitor to the web so that we can monitor the network using the PRTG app and without having to remote in to a PC on the network. I have tried to use ...
0
votes
0answers
37 views

Disable SSL verification on Hsts

When i try to run openssl s_client -connect www.merdincz.com:443 -debug command i'm getting; SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error On SSLLabs ...
0
votes
0answers
24 views

Amazon ec2 apache needs to restart frequently

I launched a new instance on amazon ec2 (Frankfurt availability zone) and installed apache server (php & MySQL) and an SSL certificate. The website is not launched yet so there is no traffic. ...
1
vote
1answer
32 views

ActiveDirectory LDAPS third-party certificate and internal names

I have an AD RODC running on Server 2012 R2 Core in my perimeter network. I am using this for external/hosted applications that can do LDAPS based auth. My problem is that the FQDN of the server is ...
0
votes
1answer
63 views

No Certificates Found on Chrome Android with Comodo Positive SSL and IIS

For software testing reason, I have registered a domain name, set its A record to point to 192.168.1.30 (local PC on my network). I have installed Comodo Positive SSL for this domain on IIS on Windows ...