SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
1answer
46 views

Apache: SSL and Non-SSL (without VirtualHosts?)

I have a web server and have two folders I would like to treat differently. One folder on the local filesystem should use SSL and the other should not, for example: /path/to/ssl/site ...
0
votes
1answer
188 views

Can't access https web service from web server - Schannel fatal alert: 40

About a month ago our code to access a web service started failing, and gives an error relating to SSL connection: System.Net.WebException: The request was aborted: Could not create SSL/TLS secure ...
0
votes
0answers
48 views

Unable to redirect Https to http using htaccess

I'm trying to redirect https://example to http://www.example.com. I just migrate from one provider to another and my website on google search are index as Https , when I visit the page I get : ...
1
vote
1answer
82 views

Squid SSL intercept works for most google sites but not www.google.com

I am able to access pretty much all of Google's .co.uk services now that I have configured squid to use SSL. I can also view my certificate information in the certificate being presented by Google. ...
1
vote
0answers
92 views

Upgraded Certificate to sha-2, Chrome still complains

Along with many others, I too have had the problem of Google Chrome complaining about outdated security settings on my site. I have a RapidSSL cert, so I reissued the cert and it now checks out using ...
0
votes
1answer
53 views

Heroku is not switching certificates after adding custom

I have an app on Heroku and I bought my own certificate, valid for myapp.mydomain.de. I added it to Heroku using their addon, SSL Endpoint. I have a CNAME record which redirect from myapp.mydomain.de ...
0
votes
1answer
28 views

Adding SSL for a domain name using a CNAME record

I'm hosting a website with Fortrabbit. I point subdomain.mywebsite.com to mywebapp.eu1.frbit.net using a CNAME record, next I wanted to add ssl. I created a certificate signing request and applied ...
0
votes
1answer
83 views

Binding stunnel on both IPv6 and IPv4

I would like to make a local unencrypted service that listens on 127.0.0.1:8000 available via SSL on both IPv4 and IPv6 on port 8001. Unfortunately, stunnel configuration [Server] accept = 8001 ...
0
votes
1answer
98 views

Ubuntu/apache2: cannot open port 443

I am trying to install a SSL certificat on my Ubuntu 14 server (using apache 2). For some reason the port 443 appears to be closed I installed and enable ssl /etc/apache2/ports.conf is as ...
0
votes
1answer
73 views

Nginx doesn't send certificate chain

I've got the following certificate (first one is my own, the other two are from Comodo PositiveSSL): -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIPPZlYpZLvxHV+Rsy+qSD/MA0GCSqGSIb3DQEBCwUAMIGQ ...
0
votes
1answer
57 views

Changed Exchange URLs, still a reference to the old one somewhere

So at one of my clients their SSL certificate was up for renewal, and when I renewed it, I did not include their primary External/Internal URL in it (remote.domain.com) instead opting to change ...
0
votes
0answers
35 views

Doku wiki cannot connect to fast cgi behind ngnix

I'm trying to configure dokuwiki with ngnix. I'm using the https setup: server { server_name wiki.example.co; root /var/www/dokuwiki; index doku.php; listen 443 ssl; keepalive_requests 10; ...
0
votes
1answer
58 views

Browser gets two different SSL certificates instead of one (IE only) [closed]

It seems the problem appears only for IE11 (Win) users, for other OS and browsers HTTPS connection works fine. IE11 firstly gets outdated SSL certificate warning You ignore warning, proceed anyway ...
0
votes
1answer
22 views

SSL not working for the certain path

This is my configuration for ssl: <VirtualHost *:443> DocumentRoot /path/todirectory/ SSLEngine on SSLCertificateFile /etc/httpd/ssl/server.crt SSLCertificateKeyFile ...
6
votes
2answers
59 views

How to simulate SSL client failing handshake?

I have a bug in my app, which is triggered when the client disconnects in the middle of SSL handskahe. The only way I found to trigger it is to run 100 threads in JMeter and suddenly stop the test, ...
-2
votes
1answer
54 views

Apache server config: how can I disable the certificate/SSL handshake on the WWW version only? [duplicate]

Serving a apache website via https:// => how can I disable the certificate/SSL handshake on the WWW version only? Hi we use SSL on the https://www version of our website Now I would like to disable ...
1
vote
0answers
55 views

Can I use both RSA and ECC certificates in apache?

If I simply use "SSLCertificateFile" and "SSLCertificateKeyFile" twice, the certificate chain is broken for the first one. Can I use both RSA and ECC certificate which is issued from different ...
0
votes
0answers
39 views

Certificate stops working after computer reboot

Got a strange issue that I just can't find any clues. We have a program (Qlikview) which talks to a remote admin service via SSL (Qlikview Server) but it uses the certificate to validate the client. ...
-3
votes
1answer
169 views

nginx proxy, wget, and lynx all fail but openssl s_client and curl both work

I'm trying to create a proxy in nginx and I'm having a weird problem. I'm trying to create an NGINX proxy that just works and ignores every cert problem, cert issue, cert thingy imaginable. I just ...
0
votes
2answers
35 views

Redirect HTTP to HTTPs using .htaccess and mod_rewrite

I know there are plenty of tutorials online and posts here about redirecting HTTP to HTTPS using .htaccess. However, my problem is regarding the URL which will be changed during redirection. Apache2 ...
2
votes
1answer
100 views

SSL refused by Chrome but passes SSL test

When I request my website from Google Chrome, I receive a CERT_INVALID error, but when I test it using Qualys SSL test, it passes all tests and receives a A+. In addition to this, SSL seems to be ...
2
votes
0answers
92 views

Azure public endpoint SSL termination

In Azure, is there any way to set up an HTTPS endpoint directly on the public VIP, as opposed to joining each VM to a load balanced set, so that I can associate this endpoint with the SSL certificate ...
0
votes
0answers
74 views

HAProxy SSL client authentication based on domain

I'm trying to achieve the following : If I request subdomain1.mydomain.com, terminate SSL and forward to backend. If I request subdomain2.mydomain.com, terminate SSL + authenticate with client cert, ...
0
votes
1answer
63 views

SSL Error for wildcard subdomain certificate

I have two SSL certificate one for *.sub.domain.com and one for *.domain.com. I don't have issues with domain level wildcard certificate. Meaning https://www.domain.com & https://domain.com works ...
0
votes
0answers
59 views

Configuring Oracle Access Manager to use x509 authentication

Hello members of Serverfault, I am new to serverfault and my knowledge of Oracle Access Manager(OAM) and x509 authentication is minimal. I have attempted searching the rest of serverfault and have ...
0
votes
1answer
39 views

Redirect non https domains to http [duplicate]

I have around 6-7 DOMAINS hosted on linode server where apache is a webserver. One domain is ssl configured and other runs on http only. Suppose https://www.example.com is ssl configured . others ...
1
vote
2answers
546 views

Apache SSL error: Private key not found

I'm running apache on Ubuntu 14.04 and trying to implement SSL. Any help would be greatly appreciated. default-ssl.conf has: SSLCertificateFile /etc/apache2/ssl/domain.crt ...
1
vote
2answers
62 views

Load Balancer, EC2 - HTTPS Connection

Ok this might be a rookie question but here's my scenario. I have a loadbalancer managing a single EC2 instance at the moment. I have an application running on that EC2 instance. What I like to ...
-1
votes
1answer
64 views

What type of SSL certificate I need to create CA? [duplicate]

I've a task to create Certificate Authority for company use. Preferably using "valid" ( not self-signed) certificate. The goal is to issue individual certificates for subdomains, instead of wildcard, ...
0
votes
1answer
22 views

Export specific certificate from JKS using keytool

We're trying to configure Apache HTTPd to use an SSL cert from a JKS keystore file we have. Since we want only one of the certs out of the JKS (www.MySite.com) and not the others (such as ...
0
votes
1answer
69 views

How to selectively enable or disable SSL for some URLs in Tomcat 7

I am using SSL in Tomcat 7, create a keystore and configure server.xml, and also config in web.xml as below <security-constraint> <!-- SSL enforced --> ...
1
vote
1answer
114 views

SSL VirtualHost not using DocumentRoot

I'm trying to set up a self-signed SSL certificate between my own VPS and Cloudflare (next to Full SSL). I'm using the following VirtualHosts for this: <VirtualHost *:80> ServerName ...
2
votes
1answer
69 views

W2012 R2 AD certificate Services sha algorithm

So shortly after configuring an offline root CA and online AD subordiante CA with SHA512 for future proofing. We discovered a thin client vender (teradici zero client with View 6) only supports SHA1 ...
0
votes
1answer
255 views

Apache forward proxy HTTP requests to arbitrary AWS S3 buckets over HTTPS

This is a rewrite of my original post. I still banging my head trying to figure out how to get a custom client (Windows service that only speaks HTTP, does not support HTTPS) to upload files to Amazon ...
1
vote
1answer
2k views

In nginx error log: “SSL_BYTES_TO_CIPHER_LIST:inappropriate fallback”

We recently changed our nginx config to support TLSv1.2 as well as a number of more secure ciphers. Since the change, our nginx error logs have been filled with the following errors: 2015/01/28 ...
0
votes
0answers
105 views

ACL at HAProxy shows NOSRV

I have 3 backends in HAProxy 1.5.10: "WEB", "API", and "SSL" for web and api. For SSL termination I'm using ACL with SNI. Here is my config: frontend ssl mode tcp bind 0.0.0.0:443 ssl crt ...
0
votes
0answers
107 views

Send apache ssl access log to syslog

I'm having an issue piping apache ssl access logs to my syslog server. I've added the following line to my apache config: CustomLog "|/usr/bin/nc -u <syslogserver> 514" "<134>%{%b %d ...
7
votes
3answers
809 views

SSL certificate invalid in Chrome

For the website scirra.com (click for SSL Labs Server Test Results) Google Chrome reports the following icon: It's an EV SSL, and it seems to work fine in Firefox and Internet Explorer, but ...
3
votes
1answer
99 views

NginX + WordPress + SSL + non-www + W3TC vhost config file questions

I have the following questions about my server block(s) for a WordPress site running solely on https, with nginx and W3TC browser caching. Environment: Ubuntu - 14.04LTS nginx - 1.4.6 ...
2
votes
3answers
57 views

Does SSL need to be configured at the external load balancer if you are using one?

Using Elastic Load Balancer, it is easy enough to set up SSL at the external load balancer, and serve requests up as http to the applicaion. When running a single server, it is also possible to ...
1
vote
1answer
593 views

HAProxy with SNI and different SSL Settings

I have HAProxy for my two sites, one of them public and one private. www.mysite.com private.mysite.com Atm, I'm using haproxy like this: frontend mysite_https bind *.443 ssl crt /etc/mycert.pem ...
1
vote
0answers
44 views

jrun ssl peer not authenticated

Before I start, I should say that I've already posted this question at Code Ranch, and have not yet gotten an answer. I'll make sure both this site and Code Ranch receive the answer should I find ...
1
vote
0answers
39 views

SSL certificate for sql-server on ec2

I have an ec2 node provisioned to host mssql server. I'm trying to request and install an ssl certificate for this node so I can securely connect to it but I can't get the certificate to appear in the ...
4
votes
3answers
175 views

Displaying a remote SSL certificate details using CLI tools

In Chrome, clicking on the green HTTPS lock icon opens a window with the certificate details: When I tried the same with cURL, I got only some of the information: $ curl -vvI https://gnupg.org * ...
0
votes
1answer
65 views

OpenSSL PositiveSSL certificate untrusted connection

I bought a SSL certificate and I cannot get it to function. I get a This Connection is Untrusted error in Firefox. I do believe it's due to my .crt file being incomplete/wrong all together. My .crt ...
0
votes
2answers
183 views

vsftpd does not give a valid certificate using CA cert.

When setting up vsftpd we have problems with it not providing a trusted connection us a basic pem certificate container using just our private key and certificate. We created our pem file with the ...
0
votes
0answers
145 views

haproxy client certificate authentication signed by 'common' CA

I am setting up haproxy as an SSL terminator/load balancer in front of an API that we need to expose over the internet to a customer. The plan was to use mutual (2-way) SSL/HTTPS to verify that both ...
0
votes
0answers
29 views

SHA1 cipher detection on Apache

I have a Windows Server 2008 R2 server running Apache 2.4 that acts as a proxy for all of our websites and we have a wildcard certificate installed. Right now the cipher used is SHA1 and the plan is ...
0
votes
2answers
266 views

intermittent ssl_error_no_cypher_overlap

For the past week, clients have been randomly getting intermittent ssl_error_no_cypher_overlap errors when using Firefox. Connection issues have also occurred in Safari and Chrome. I can't find any ...
-1
votes
1answer
694 views

How to disable SSLv1/SSLv2/SSLv3 protocols to block Poodle to Apache 2.4.9 on Windows Server 2008 R2?

How can I disable SSLv1, SSLv2 and SSLv3 protocols on Apache 2.4.9 installed on a Windows Server 2008 R2 as a service? (I am not using IIS.) I still want to have TLSv1.2 protocol on my server. Here ...