SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
1answer
186 views

Installing SSL certs with nginx on Amazon EC2

I finally got a cert from an authority and am struggling to get things working. I've created the appropriate combined certificate (personal + intermediate + root) and nginx is pointing to it. I got ...
1
vote
1answer
55 views

Multi domain server with dedicated SSL's HA

I am hosting a server with 150 domain names (websites), each of the ssl's requere dedicated IP address. So server windows 2008, with 150 IP addressees and 150 websites. I need to have high ...
0
votes
0answers
234 views

SSL Connection Error

I have purchased a comodo ssl cert and have submitted the Certificate Signing Request (CSR) generated by my server to the ssl management site. With the 3 files it returned me with, - ...
0
votes
0answers
217 views

The OCSP server has no status for the certificate. (Error code: sec_error_ocsp_unknown_cert)

Just set up a website (Apache/Centos) with SSL where the free cert came from startssl. I've used startssl before, and never had any problems. I have no problems accessing the site from IE and ...
0
votes
3answers
158 views

Enabling spdy in nginx fails spdycheck.org

I'm trying to enable spdy with nginx 1.6.0 but spdycheck.org is giving me two complaints: And My nginx configuration file is as such: server { listen 80; listen 443 ssl spdy; ...
0
votes
0answers
25 views

Amazon EC2 + SSL Godaddy are not routing properly in HTTPS

I have an Amazon EC2 + SSL just installed on GoDaddy. I have successfully managed to install it and get the green https on the main domain https://www.example.com however it doesn't any ...
1
vote
3answers
205 views

How to decide where to purchase a wildcard SSL certificate? [on hold]

Recently I needed to purchase a wildcard SSL certificate (because I need to secure a number of subdomains), and when I first searched for where to buy one I was overwhelmed with the number of choices, ...
0
votes
1answer
36 views

SSL certificates that work out of the box server side [closed]

I have a GoDaddy SSL certificate and certain other server side scripts are hitting the endpoints. We're stumbling unto the problems fixed by this https://github.com/coolaj86/node-ssl-root-cas, where ...
1
vote
0answers
38 views

Can I pass_proxy over https?

Is it possible to have something like this in my local nginx.conf? pass_proxy https://mybackend.com:443; If not, how do I make my local nginx request and return my remote backend API over SSL?
1
vote
1answer
51 views

Both example.com and www.example.com with SSL

I obtained a free CA certificate from https://www.startssl.com/. I added the domain name example.com, and in the control panel, it shows www.example.com under SSL/TLS Server, and example.com under ...
0
votes
2answers
178 views

Postfix enable SSL 465 failed

I have installed the Postfix and enabled SSL/TLS, just tested, I can sent email from port 25, 578, but cannot sent email from port 465, the log is: May 26 17:24:06 mail postfix/smtpd[28721]: ...
2
votes
0answers
75 views

Clarification of Godaddy UCC SSL on multiple servers [closed]

After reading UCC SSL certificate across multiple machines and IPs I have follow up questions. The first server is running with a GoDaddy UCC SSL. www.exampleA.com I would like to use for ...
2
votes
1answer
72 views

Multiple SSL certs for wildcard domain

I would like to set up an EV SSL certifcate for a few subdomains like blog.domain.com and www.domain.com. I also need to set up a wildcard PositiveSSl cert for *.domain.com, excluding blog.domain.com ...
2
votes
1answer
388 views

FortiClient (Windows 7 32 bit) shows 'connected' for an SSL VPN connection but can't ping the remote server

I am trying to connect to a remote server through FortiClient for an SSL VPN connection. When I connect through the FortiClient (version 4.3.5.472) on my windows 7 32-bit system, it shows connected. ...
0
votes
3answers
72 views

Strict SNI matching for Apache

I have multiple SSL vhosts and non-SSL vhosts served from a single server. If one of the non-ssl vhosts is accessed using "https", the first SSL directive is used. Is there some setting to make it so ...
0
votes
2answers
237 views

Chef Server 11.4 SSL certificate failure when bootstrapping a node

I'm trying to bootstrap a RHEL 5 server with Chef 11 Chef-Client using my Chef 11 Work station through a Chef Server 11.4. However, I am receiving the error below. ...
1
vote
1answer
232 views

nginx as ssl reverse proxy for wildfly

I am trying to setup nginx to be reverse proxy for wildfly 8.0.0.Final. Part of my configuration file for HTTPS redirect: location /console { include conf.d/proxy.conf; proxy_pass ...
0
votes
1answer
38 views

NGINX SPDY client differentiation/determination

I'm having a question about determining if a client is capable of SPDY or just SSL. I'm having a setup of a NGINX load balancer and a few Apache backend servers and I'd like to redirect SPDY capable ...
0
votes
0answers
68 views

What is incorrect about my RabbitMQ / Erlang configuration

I'm attempting to configure RabbitMQ with SSL using client certificates for authentication on a windows server 2012 x64 box. The Erlang version installed is OTP 17.0 for Windows x64, Configuration ...
2
votes
1answer
358 views

Having problems setting up SSL with Nginx

I'm trying to setup SSL(0.9.8e) using Nginx(1.2.3) on a Windows 7 machine. I've generated a self-signed certificate that is needed, so I have a key and a certificate file. When trying to start Nginx ...
1
vote
1answer
132 views

Renew an IIS 8 SSL certificate when it is in the “Web Hosting” store

I have a working IIS 8.0 server (on Windows Server 2012) that has a working SSL installation. The certificate is due to expire in a few days, so I am trying to renew it. When I try to create a ...
0
votes
0answers
44 views

SSL warning appears only to some devices

I have godaddy ssl certificate for domain.There wasn't any problems with my SSL certificate and visiting my domain(Haven't receiveed any errors), but couple times(two weeks ago) when I visited site ...
1
vote
2answers
192 views

SSL Certificate errors in Captive Portals

Situation: Hotel guests attempting internet access via our captive portal. Problem: Google, Yahoo and now more and more sites redirecting all home pages to HTTPS so guest gets a Certificate error when ...
1
vote
0answers
22 views

Should I completely rebuild my server due to Heartbleed? [duplicate]

I have a CentOS 6.5 VPS server... $ uname -a Linux mary 3.14.4-x86_64-linode40 #1 SMP Tue May 13 12:25:05 EDT 2014 \ x86_64 x86_64 x86_64 GNU/Linux When the news about the Heartbleed ...
1
vote
0answers
114 views

SSL Returning Blank Page, No Catalina Errors

This is my second, maybe third, time configuring SSL with Tomcat. Earlier I had created a self signed, which worked, and now using my signed is proving fruitless. I am using Tomcat, operating from ...
1
vote
2answers
153 views

Do I need wildcard SSL for the www subdomain

I own example.com, example.net, and example.biz. I use Apache to rewrite example.net and example.biz to example.com. Based on this rewriting, it is my understanding that I would only need a ...
0
votes
1answer
33 views

CGI scripts are not working on lighttpd with SSL

CGI scripts worked perfectly, while I was using HTTP. Then I set redirecting for all traffic through https and now CGI doesn't work at all (404 - not found). I use lighttpd server. Here is the part ...
0
votes
0answers
88 views

Unable to get private key, path is correct, file readable

When testing Cyrus IMAPs connection, the connection fails with: May 12 21:03:16 mail cyrus/imaps[25758]: executed May 12 21:03:16 mail cyrus/imaps[25758]: accepted connection May 12 21:03:16 mail ...
0
votes
1answer
77 views

PCI compliance and SSL certificates on a CentOS VPS

looking for a bit of advice please. We've been battling with a PCI compliancy project for the last couple of days and we've managed to eliminate most of security warnings. What we're left with now is ...
-1
votes
1answer
44 views

ssl address mismatch on purchased ssl cert [closed]

i've bought a "Protect 1 Website" ssl from godaddy http://www.godaddy.com/ssl/ssl-certificates.aspx , and requested and downloaded a cert for domain "example.com", but when i access dev.example.com, ...
1
vote
0answers
98 views

SNI error over SSL on some Android devices

I am getting an SNI error: Hostname X provided via SNI, but no hostname provided in HTTP request On some Android phones when making SSL requests to my domain. This is despite ensuring that the Host ...
2
votes
1answer
96 views

Nginx, setup https

I'm trying to setup https on my ubuntu server with NGINX ver 1.4.7 and Phusion Passenger 4.0.41. I created .key and .csr using these two commands sudo openssl genrsa -des3 -out server.key 2048 sudo ...
1
vote
1answer
87 views

Issuer Subject Policy in Self-Signed CA Certificate

When I build a self-signed certificate for an internal CA, should I make the issuer DN match the DN in the request, should they be different, or is there no convention for one or the other?
0
votes
2answers
47 views

Best Practices for migrating SSL web applications to a different server

Migrating some Tomcat/Apache applications from Mac OS X to Linux (RHEL 6), and was wondering what the best practices are for using the existing SSL certs. This migration is not a one to one, meaning ...
0
votes
0answers
1k views

Encrypted Alert Error 21 Wireshark SSL 3.0 error

I continue to receive schannel errors in the event log on an exchange server using outlook web access (OWA). From the capture I took during one of these schannel errors I see IP address 65.55.53.190 ...
1
vote
0answers
186 views

Configure custom SSL certificate for RDP on Windows Server 2012?

I have been trying to get an installation of Remote Desktop Services deployed using Server 2012. I have now run into a problem where I need to use a certificate other than the self-signed cert from ...
2
votes
0answers
1k views

SSL verification error with git (on github) on Ubuntu 14.04

I'm trying to clone the atom repository that just went fully open-source and I've run into some trouble. Attempting to git clone the repository is producing an SSL error: wug@wugputer:/src/test$ git ...
0
votes
3answers
76 views

Preventing SSL access to an Nginx Server

I have a server that runs multiple virtual hosts. Some of those sites have SSL components and others don't. Today I noticed that if I try to access one of the non-SSL sites via https, Nginx just finds ...
0
votes
1answer
64 views

Why do we need to list our CAS servers as SANs in Exchange 2010's UCC certificate?

We currently have a few CAS/Hub servers behind a hardware balancer. We were told by Microsoft and Digicert that we may not need them listed as SANs in our UCC cert since we do not publicize their ...
0
votes
0answers
23 views

Multiple SSL sites on one IP with SNI - non-matching hosts go to first site? [duplicate]

I've got a server hosting a handful of websites with ISPConfig, and a few require SSL - I've set it up with SNI and it works, but if any of the other sites on the server without SSL are accessed via ...
10
votes
1answer
129 views

Find out how many browsers reject SSL certificate

I'd like to find out how many browsers reject our SSL certificate when making HTTP requests to our webserver. We're using a free CA which now seems to be recognised by most modern browsers, but I'd ...
1
vote
1answer
35 views

there is no certificate installed on this server

I want to secure a remote desktop connection using ssl. I provided a CA server, created a self-signed certificate, and then I installed that in remote server. When I tried to assign a certificate to ...
0
votes
0answers
70 views

ISPConfig 3 on Ubuntu 12.04, is it possible to enable SSL/TLS for dovecot for multiple domain?

I'm in the mists of setting up a web host for a friend and I'm new to using ISPConfig3. Previously, for my own web host I managed manually from cli. For ISPConfig3, I followed the official setup guide ...
2
votes
1answer
71 views

What determines how long an SSL session is valid

HTTP(S) is stateless, right? But if I go to some site via HTTPS, I assume I don't need an SSL handshake for every single page request. Is it a combination of SSL session cache and cookies?
0
votes
1answer
93 views

How can I make Nginx drop SSL requests from wrong domain?

So I've got a server with a single IP and a lot of websites, all hosted under nginx. Here's a very simplified reduction of my actual setup: server { listen 80; listen 443 ssl; server_name ...
0
votes
4answers
8k views

Fix/Bypass “Cannot connect to the real website-blocked” error in Google Chrome with OpenDNS blocking

I have a large problem with Chrome in my organisation. I use DNS to manage web site blocking, for sites which are not appropriate and are potentially a risk to the organisation where I do this. I ...
0
votes
0answers
179 views

Fixing TLS renegotiation vulnerability on Apache 2.2.3

On a RHEL 5.3 server, I have Apache version: Server version: Apache/2.2.3 Server built: Nov 12 2008 07:09:03 Server's Module Magic Number: 20051115:3 Server loaded: APR 1.2.7, APR-Util 1.2.7 ...
0
votes
2answers
67 views

Apache SNI, 2 domains, 2 certs, resolves to same document root

I am currently following the following guide: https://www.digitalocean.com/community/articles/how-to-set-up-multiple-ssl-certificates-on-one-ip-with-apache-on-ubuntu-12-04 Setup so far has been ...
0
votes
0answers
34 views

CLOUDFRONT - Site host name, https://media.domainname.com, does not match your SSL certificate Subject Name

I woke up this morning to an email from Google Webmaster Tools saying the following: We have noticed that the host name of your site, https://media.domainname.com, does not match any of ...
5
votes
2answers
947 views

Upgrading SSL library does not fix heartbleed

I have just upgraded the openssl library on my Ubuntu 12.04 server to fix the heartbleed bug. Here's the output that I get for the "openssl version -a" command: OpenSSL 1.0.0g 18 Jan 2012 built on: ...