SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
3answers
137 views

Cannot connect to HTTPS port on Ubuntu

I've installed a new SSL certificate and set up Nginx to use it. But requests time out when trying to hit HTTPS on the site. When I telnet to my domain on port 80 it connects, but times out on port ...
0
votes
1answer
42 views

Share one ssl certificate between multiples vhost

I have a setup like this: <VirtualHost 192.168.1.104:80> ServerName domain1 DocumentRoot /home/domain/public_html ... </VirtualHost> <VirtualHost 192.168.1.104:80> ...
1
vote
1answer
98 views

LDAP over SSL with an EFI Fiery printer

I've got a printer with a Fiery running 8e Release 2. I can authenticate users against AD using the LDAP configuration, but I can only get it to work if I don't use SSL/TLS, and only if I use SIMPLE ...
-2
votes
1answer
52 views

Virtual host, port 443 and ssl issue [closed]

I have a centos server, but I am having some issue regarding port 443 and ssl. my problem is that all domain on my server are accessible from HTTPS port. like when I visit a domain on my server from ...
-1
votes
1answer
22 views

Hosting two HTTPS sites on different ports

I'm trying to host two HTTPS sites. They are the same hostname, but different ports and different certificates. With config like this Apache starts but they both serve the certificate for the first ...
1
vote
1answer
189 views

Installing SSL certs with nginx on Amazon EC2

I finally got a cert from an authority and am struggling to get things working. I've created the appropriate combined certificate (personal + intermediate + root) and nginx is pointing to it. I got ...
1
vote
1answer
55 views

Multi domain server with dedicated SSL's HA

I am hosting a server with 150 domain names (websites), each of the ssl's requere dedicated IP address. So server windows 2008, with 150 IP addressees and 150 websites. I need to have high ...
0
votes
0answers
249 views

SSL Connection Error

I have purchased a comodo ssl cert and have submitted the Certificate Signing Request (CSR) generated by my server to the ssl management site. With the 3 files it returned me with, - ...
0
votes
0answers
234 views

The OCSP server has no status for the certificate. (Error code: sec_error_ocsp_unknown_cert)

Just set up a website (Apache/Centos) with SSL where the free cert came from startssl. I've used startssl before, and never had any problems. I have no problems accessing the site from IE and ...
0
votes
3answers
168 views

Enabling spdy in nginx fails spdycheck.org

I'm trying to enable spdy with nginx 1.6.0 but spdycheck.org is giving me two complaints: And My nginx configuration file is as such: server { listen 80; listen 443 ssl spdy; ...
0
votes
0answers
26 views

Amazon EC2 + SSL Godaddy are not routing properly in HTTPS

I have an Amazon EC2 + SSL just installed on GoDaddy. I have successfully managed to install it and get the green https on the main domain https://www.example.com however it doesn't any ...
2
votes
3answers
230 views

How to decide where to purchase a wildcard SSL certificate? [closed]

Recently I needed to purchase a wildcard SSL certificate (because I need to secure a number of subdomains), and when I first searched for where to buy one I was overwhelmed with the number of choices, ...
0
votes
1answer
36 views

SSL certificates that work out of the box server side [closed]

I have a GoDaddy SSL certificate and certain other server side scripts are hitting the endpoints. We're stumbling unto the problems fixed by this https://github.com/coolaj86/node-ssl-root-cas, where ...
1
vote
0answers
38 views

Can I pass_proxy over https?

Is it possible to have something like this in my local nginx.conf? pass_proxy https://mybackend.com:443; If not, how do I make my local nginx request and return my remote backend API over SSL?
1
vote
1answer
55 views

Both example.com and www.example.com with SSL

I obtained a free CA certificate from https://www.startssl.com/. I added the domain name example.com, and in the control panel, it shows www.example.com under SSL/TLS Server, and example.com under ...
0
votes
2answers
195 views

Postfix enable SSL 465 failed

I have installed the Postfix and enabled SSL/TLS, just tested, I can sent email from port 25, 578, but cannot sent email from port 465, the log is: May 26 17:24:06 mail postfix/smtpd[28721]: ...
2
votes
0answers
78 views

Clarification of Godaddy UCC SSL on multiple servers [closed]

After reading UCC SSL certificate across multiple machines and IPs I have follow up questions. The first server is running with a GoDaddy UCC SSL. www.exampleA.com I would like to use for ...
2
votes
1answer
75 views

Multiple SSL certs for wildcard domain

I would like to set up an EV SSL certifcate for a few subdomains like blog.domain.com and www.domain.com. I also need to set up a wildcard PositiveSSl cert for *.domain.com, excluding blog.domain.com ...
2
votes
1answer
422 views

FortiClient (Windows 7 32 bit) shows 'connected' for an SSL VPN connection but can't ping the remote server

I am trying to connect to a remote server through FortiClient for an SSL VPN connection. When I connect through the FortiClient (version 4.3.5.472) on my windows 7 32-bit system, it shows connected. ...
0
votes
3answers
75 views

Strict SNI matching for Apache

I have multiple SSL vhosts and non-SSL vhosts served from a single server. If one of the non-ssl vhosts is accessed using "https", the first SSL directive is used. Is there some setting to make it so ...
0
votes
2answers
248 views

Chef Server 11.4 SSL certificate failure when bootstrapping a node

I'm trying to bootstrap a RHEL 5 server with Chef 11 Chef-Client using my Chef 11 Work station through a Chef Server 11.4. However, I am receiving the error below. ...
1
vote
1answer
250 views

nginx as ssl reverse proxy for wildfly

I am trying to setup nginx to be reverse proxy for wildfly 8.0.0.Final. Part of my configuration file for HTTPS redirect: location /console { include conf.d/proxy.conf; proxy_pass ...
0
votes
1answer
38 views

NGINX SPDY client differentiation/determination

I'm having a question about determining if a client is capable of SPDY or just SSL. I'm having a setup of a NGINX load balancer and a few Apache backend servers and I'd like to redirect SPDY capable ...
0
votes
0answers
68 views

What is incorrect about my RabbitMQ / Erlang configuration

I'm attempting to configure RabbitMQ with SSL using client certificates for authentication on a windows server 2012 x64 box. The Erlang version installed is OTP 17.0 for Windows x64, Configuration ...
2
votes
1answer
377 views

Having problems setting up SSL with Nginx

I'm trying to setup SSL(0.9.8e) using Nginx(1.2.3) on a Windows 7 machine. I've generated a self-signed certificate that is needed, so I have a key and a certificate file. When trying to start Nginx ...
1
vote
1answer
134 views

Renew an IIS 8 SSL certificate when it is in the “Web Hosting” store

I have a working IIS 8.0 server (on Windows Server 2012) that has a working SSL installation. The certificate is due to expire in a few days, so I am trying to renew it. When I try to create a ...
0
votes
0answers
45 views

SSL warning appears only to some devices

I have godaddy ssl certificate for domain.There wasn't any problems with my SSL certificate and visiting my domain(Haven't receiveed any errors), but couple times(two weeks ago) when I visited site ...
1
vote
2answers
199 views

SSL Certificate errors in Captive Portals

Situation: Hotel guests attempting internet access via our captive portal. Problem: Google, Yahoo and now more and more sites redirecting all home pages to HTTPS so guest gets a Certificate error when ...
1
vote
0answers
22 views

Should I completely rebuild my server due to Heartbleed? [duplicate]

I have a CentOS 6.5 VPS server... $ uname -a Linux mary 3.14.4-x86_64-linode40 #1 SMP Tue May 13 12:25:05 EDT 2014 \ x86_64 x86_64 x86_64 GNU/Linux When the news about the Heartbleed ...
1
vote
0answers
119 views

SSL Returning Blank Page, No Catalina Errors

This is my second, maybe third, time configuring SSL with Tomcat. Earlier I had created a self signed, which worked, and now using my signed is proving fruitless. I am using Tomcat, operating from ...
1
vote
2answers
158 views

Do I need wildcard SSL for the www subdomain

I own example.com, example.net, and example.biz. I use Apache to rewrite example.net and example.biz to example.com. Based on this rewriting, it is my understanding that I would only need a ...
0
votes
1answer
34 views

CGI scripts are not working on lighttpd with SSL

CGI scripts worked perfectly, while I was using HTTP. Then I set redirecting for all traffic through https and now CGI doesn't work at all (404 - not found). I use lighttpd server. Here is the part ...
0
votes
0answers
97 views

Unable to get private key, path is correct, file readable

When testing Cyrus IMAPs connection, the connection fails with: May 12 21:03:16 mail cyrus/imaps[25758]: executed May 12 21:03:16 mail cyrus/imaps[25758]: accepted connection May 12 21:03:16 mail ...
0
votes
1answer
78 views

PCI compliance and SSL certificates on a CentOS VPS

looking for a bit of advice please. We've been battling with a PCI compliancy project for the last couple of days and we've managed to eliminate most of security warnings. What we're left with now is ...
-1
votes
1answer
45 views

ssl address mismatch on purchased ssl cert [closed]

i've bought a "Protect 1 Website" ssl from godaddy http://www.godaddy.com/ssl/ssl-certificates.aspx , and requested and downloaded a cert for domain "example.com", but when i access dev.example.com, ...
1
vote
0answers
104 views

SNI error over SSL on some Android devices

I am getting an SNI error: Hostname X provided via SNI, but no hostname provided in HTTP request On some Android phones when making SSL requests to my domain. This is despite ensuring that the Host ...
2
votes
1answer
99 views

Nginx, setup https

I'm trying to setup https on my ubuntu server with NGINX ver 1.4.7 and Phusion Passenger 4.0.41. I created .key and .csr using these two commands sudo openssl genrsa -des3 -out server.key 2048 sudo ...
1
vote
1answer
91 views

Issuer Subject Policy in Self-Signed CA Certificate

When I build a self-signed certificate for an internal CA, should I make the issuer DN match the DN in the request, should they be different, or is there no convention for one or the other?
0
votes
2answers
47 views

Best Practices for migrating SSL web applications to a different server

Migrating some Tomcat/Apache applications from Mac OS X to Linux (RHEL 6), and was wondering what the best practices are for using the existing SSL certs. This migration is not a one to one, meaning ...
0
votes
0answers
1k views

Encrypted Alert Error 21 Wireshark SSL 3.0 error

I continue to receive schannel errors in the event log on an exchange server using outlook web access (OWA). From the capture I took during one of these schannel errors I see IP address 65.55.53.190 ...
1
vote
0answers
200 views

Configure custom SSL certificate for RDP on Windows Server 2012?

I have been trying to get an installation of Remote Desktop Services deployed using Server 2012. I have now run into a problem where I need to use a certificate other than the self-signed cert from ...
2
votes
0answers
1k views

SSL verification error with git (on github) on Ubuntu 14.04

I'm trying to clone the atom repository that just went fully open-source and I've run into some trouble. Attempting to git clone the repository is producing an SSL error: wug@wugputer:/src/test$ git ...
0
votes
3answers
78 views

Preventing SSL access to an Nginx Server

I have a server that runs multiple virtual hosts. Some of those sites have SSL components and others don't. Today I noticed that if I try to access one of the non-SSL sites via https, Nginx just finds ...
0
votes
1answer
64 views

Why do we need to list our CAS servers as SANs in Exchange 2010's UCC certificate?

We currently have a few CAS/Hub servers behind a hardware balancer. We were told by Microsoft and Digicert that we may not need them listed as SANs in our UCC cert since we do not publicize their ...
0
votes
0answers
23 views

Multiple SSL sites on one IP with SNI - non-matching hosts go to first site? [duplicate]

I've got a server hosting a handful of websites with ISPConfig, and a few require SSL - I've set it up with SNI and it works, but if any of the other sites on the server without SSL are accessed via ...
10
votes
1answer
131 views

Find out how many browsers reject SSL certificate

I'd like to find out how many browsers reject our SSL certificate when making HTTP requests to our webserver. We're using a free CA which now seems to be recognised by most modern browsers, but I'd ...
1
vote
1answer
35 views

there is no certificate installed on this server

I want to secure a remote desktop connection using ssl. I provided a CA server, created a self-signed certificate, and then I installed that in remote server. When I tried to assign a certificate to ...
0
votes
0answers
74 views

ISPConfig 3 on Ubuntu 12.04, is it possible to enable SSL/TLS for dovecot for multiple domain?

I'm in the mists of setting up a web host for a friend and I'm new to using ISPConfig3. Previously, for my own web host I managed manually from cli. For ISPConfig3, I followed the official setup guide ...
2
votes
1answer
71 views

What determines how long an SSL session is valid

HTTP(S) is stateless, right? But if I go to some site via HTTPS, I assume I don't need an SSL handshake for every single page request. Is it a combination of SSL session cache and cookies?
0
votes
1answer
94 views

How can I make Nginx drop SSL requests from wrong domain?

So I've got a server with a single IP and a lot of websites, all hosted under nginx. Here's a very simplified reduction of my actual setup: server { listen 80; listen 443 ssl; server_name ...