SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

2
votes
1answer
65 views

Wildcard SSL with name-based virtualhosting?

I have two sites that require different domains, but must both use the same server running Apache httpd and also use SSL. Here's the example: www.example.com legacy application receiving high ...
0
votes
1answer
43 views

Using different certificate for one domain

I currently have Apache setup to use a certificate on all my domains using these settings in ssl.conf: <VirtualHost _default_:443> SSLEngine on SSLCertificateFile /etc/httpd/conf/mycert.crt ...
0
votes
1answer
149 views

Sharepoint and SSRS report trust relationship ssl/tls secure channel remote certificate is invalid

I have no experience with sharepoint at all. but this is what I observed. I intermittently getting this error message on my sharepoint. could not establish trust relationship for the ssl/tls secure ...
0
votes
0answers
67 views

When trying to ProxyPass with SSL on Virtual Host (Apache2) I receive AH01630: client denied by server configuration: /var/www/

To give a little background; I am on EC2. I am running Apache2 version 2.4.7. I have also opened port 443 on my security group to allow SSL traffic. What I am trying to do in the long run is have a ...
1
vote
1answer
82 views

Atlassian Crowd + Nginx + SSL Setup Not Working - Redirect Loop

The nginx config: server { listen 443 ssl; server_name crowd.example.com; access_log off; client_max_body_size 10M; ssl_certificate ...
2
votes
2answers
59 views

What is the server.ca file?

I have a VPS with Directadmin panel. I have two files in my ssl.crt in the path /etc/httpd/conf which include server.ca and server.crt. My question is how is the first one originally created. My guess ...
0
votes
1answer
291 views

openssl giving me errors and apache is not working with https

I try to configure apache-tomcat with ssl, but find some issues [root@manage conf]# openssl s_client -state -debug -connect 10.104.1.38:443 -key server.key -cert server.crt CONNECTED(00000003) ...
0
votes
2answers
204 views

SSL certificate for www. and non-www domain [duplicate]

What SSL certificate should I buy to get my domain work? I use nginx web server and want that all users requests go to https. http://example.com -> https://example.com http://www.example.com ...
0
votes
1answer
122 views

Connection Reset error trying to set up HTTPS locally using VS and IIS Express

I'm trying to set up Facebook authentication on my application, so I tried following the steps at this page: ...
0
votes
1answer
183 views

nginx fails to load a file - ssl certificate - even if its clearly there

I want to use ssl with nginx. I create the necessary certificates: [root@arch ssl]# pwd /etc/nginx/ssl [root@arch ssl]# ls -l total 12 -rwx------ 1 root root 1346 Aug 3 14:36 server.crt -rwx------ 1 ...
0
votes
0answers
54 views

Courier IMAP, no response

I've got a Postfix with Courier IMAP mail server mostly set up. IMAP authentication works as expected on port 143 (when SSL is disabled), but whenever SSL is enabled or port 993 is used, nothing ...
0
votes
1answer
50 views

RedHat OS Upgrade - 5.5 to 6.5 is SSL certificate effected?

Doing an old web-server upgrade from 5.5 to 6.5 and was wondering if the existing ssl certificate (still valid) will be accepted by the new RedHat 6.5 OS
-1
votes
1answer
643 views

Error code: ssl_error_rx_record_too_long on nginx ubuntu server

I have a site which was perfectly running with apache on some old ubuntu server and also has https for it. But now for some reasons i need to move to different(new ubuntu server with high ...
1
vote
1answer
95 views

SSL chain verification problems - Barracuda load balancer

I've installed a new SSL certificate using SHA1 hashing. Im user a security certificate by GeoTrust SSL CA - G2 but With WebServices communications I'm getting a PKIX error. The follow page: ...
0
votes
0answers
57 views

SSL Certificate error only on host server

I'm running Windows Server 2008 R2 with IIS 7.5. This is in a development environment. I have a self-signed certificate, and a second wildcard server authentication certificate which was issued by ...
2
votes
0answers
47 views

Should load balancers ever use TLS session ID to direct traffic?

One of my vendors caused an outage today by using TLS SessionID (sent by the browser) as a way to determine which host to direct traffic to. Since SessionID can leak privacy details, and more ...
0
votes
1answer
64 views

Redis security using stunnel and AUTH

Im a redis newbie but want to make sure everything is setup securely as we deal with medical info. I have a few EC2 instances. One of which is a server that runs two redis instances, one for a dev ...
0
votes
2answers
52 views

Does qmail-pop3s supports multiple SSL certificates?

Current setup: 1. I work for E-mail service provider company. 2. We have multiple mail servers on which we use qmail for mail delivery. 3. Each server is hosting multiple different domains for ...
0
votes
1answer
54 views

How many elastic IP's do I need to host two sites using SSL in IIS on one windows EC2 instance

I have one windows instance on instance in EC2. I have two websites configured in IIS on this instance, each with a different SSL certificate for two completely different domains. Each is a wild card ...
1
vote
2answers
203 views

Nginx does not serve static files over HTTPS

I am trying to set up Nginx in front of Apache as a reverse proxy and to serve static files. I 301 http to https, and provide the directives in https section to serve a static folder via an alias. ...
0
votes
2answers
141 views

Setting up SSL - https works, http not working

Update: A temp solution I found was to just redirect all http requests to https. I have been working on setting up SSL on my website. It is like on a Rails. I use nginx with unicorn. I bought the ...
0
votes
3answers
324 views

Exim after Thunderbird update: “Could not negotiate a supported cipher suite” [closed]

Recently, after I installed updates on my Kubuntu 14.04. system and a new version of thunderbird was installed, I could not send emails any more. It prompts: Sending of message failed. The message ...
0
votes
0answers
45 views

Can you do a masked URL rewrite to a different protocol (in Apache)

Apache 2.2.15; I want to do: RewriteCond %{HTTP_HOST} site1.com RewriteRule (.*) https://site2.com [R=301,P,L] But that does not work. I put the P in there thinking it might allow the mod_proxy ...
0
votes
0answers
68 views

Proxy to SSL site (on another server) from a non SSL site

I have a *:80 virtual host in Apache 2.2.15 which is just a bunch of URL rewrites like: ServerAlias foo.bar biz.baz tit.tat RewriteRule / http://somesite.com (R=301,L) ServerAlias ...
1
vote
2answers
72 views

Apache2 not asking for password of private SSL key

I am trying to set up SSH for my apache2 server. Apache seems to find my private key, because it complains once I move it. But it doesn't check the content of the file: When I replace it with ...
2
votes
2answers
100 views

SSL connection not working with public ip address

EDIT : Problem solved, it was indeed the firewall of the server wich was blocking port 443. Everything is working now I'm trying to install a self-signed SSL certificate on an apache server running ...
0
votes
0answers
142 views

Apache mod_proxy with HTTPS without key material (using SNI)

I would like to have an Apache 2.4 proxy which redirects port 80 and 443 requests to different machines in the local network, depending on the host name. I used mod_proxy and it works fine with port ...
-1
votes
1answer
148 views

Disable support for LOW encryption ciphers for glassfish port no 3920

Qualis team found a vulnerability with our glassfish with port no 3920 . glassfish version :- glassfish-3.1.2.2 Port no :- 3920,3820 Below are the details from Qualis Messages ...
0
votes
0answers
65 views

Nginx configuration: continue sending request to application server on ssl_client_verify FAIL

I am currently using nginx/uwsgi, with nginx to check validity of client certificates (if one is provided). server { ... location /example { ... uwsgi_param SSL_CLIENT_VERIFY ...
-2
votes
1answer
257 views

ssl certificate - identity not verified with godaddy [closed]

I followed all the steps to create a unique certificate that looks like this -----BEGIN CERTIFICATE----- MIAGCSqGSIb3DQEHAqCAMIACAQExADALBgkqhkiG9w0BBwGggDCCAmowggHXAhAF ...
0
votes
0answers
43 views

Nginx catch-all ssl block with return invalidates all other ssl hosts

I recently tried to set up the following server block: server { listen 80 default_server; listen [::]:80 default_server; listen 443 ssl default_server; # this and listen [::]:443 ssl ...
1
vote
1answer
269 views

setting up multiple ssl certificates on same server/ip on CENTOs with apache 2.2

I'm using this reference to setup multiple ssl ceritificates on same ip on CENTOS 6.3 with apache 2.2 <VirtualHost *:443> ServerAdmin webmaster@localhost ServerName ...
0
votes
0answers
19 views

Apache occasionally returns no data responses for certain pages

Occasionally, perhaps once every 3 days, Apache will start emitting empty responses (Chrome says No Data Received; it looks like the connection is terminated) for the registration page of our LAMP ...
0
votes
0answers
65 views

IIS 6.0 SMTP Relay mail to other mail server through SSL port 465

May i know iis smtp relay can/can't support to mail server (Zimbra) through SSL (Port 465). i just can see the check box of TLS encryption, pls help, thanks a lot. SMTP Relay Version Internet ...
-1
votes
2answers
62 views

Wildcard SSL Multiple Servers [closed]

Firstly forgive me for my lack of knowledge on this subject. The scenario is that I have a domain example.com. This domain is hosted on 192.168.1.100 for example and is the main domain for a company ...
-3
votes
1answer
152 views

Why isn't my server responding on port 443?

I have an EC2 server on AWS (Ubuntu 13.04). It's currently running a website on port 80 and I am trying to set up SSL. Right now it does not seem to be responding at all on port 443. telnet: Unable ...
0
votes
1answer
49 views

How to secure private communication among Apache servers with SSL (sign IP only)

I have 2 Apache servers (with PHP): public server A which hosts web pages, it has domain name etc. public server B which hosts some services (built as PHP application) and those services are used ...
3
votes
2answers
230 views

YouTrack on Tomcat 7 using SSL

I have a running YouTrack instance deployed using Tomcat 7 and it works fine on http://example.com:8080/youtrack Apache is already configured to support SSL for the main domain (I have .pem file). ...
0
votes
2answers
132 views

EC2 Load balancer and wildcard/multi-domain SSL certificates

I am running three sites through one load balancer (and 2 child-application servers) One of the site's has an SSL certificate, but I'd like to add a certificate for the other two sites What is my ...
0
votes
0answers
45 views

apache issue with https requests

I am running Apache/2.2.27 WHM vps and have problem with https requests. http requests are handled fine but when a single https page is visited, several requests are shown in "R" (reading) state in ...
2
votes
2answers
2k views

HAProxy with SSL and sticky sessions

We're trying to set up HAProxy (v1.5.1) to use SSL. While we managed to do that, we're having some issues with the round robin settings: We do want to have stick sessions, but haproxy seems to send ...
0
votes
1answer
69 views

How do I determine where an SSL certificate is being served from?

I am having the same issue described in this question: IIS 7 Still Serving old SSL Certificate I have replaced an old SSL certificate with a new one and completely removed the old certificate from ...
0
votes
2answers
60 views

Is a Multiple Domain SSL Cert necessary for Exchange?

We have a client with an external domain of abc.com and an internal domain of xyz.local. I see a lot of articles stating that for Exchange you should have a multi-domain cert that has Subject ...
3
votes
3answers
2k views

Failed tls handshake. Does not contain any IP SANs

I'm trying to set up logstash forwarder, but I have issues with making a proper secure channel. Trying to configure this with two ubuntu (server 14.04) machines running in virtualbox. They are 100% ...
1
vote
0answers
73 views

Can I use tshark to write SSL-decrypted packets to a file?

I have a PCAP file containing SSL-encrypted HTTP traffic and the private key from the relevant web server. I'd like a PCAP file that contains the decrypted HTTP traffic to feed into a different tool. ...
-1
votes
1answer
101 views

SSL certificate is not properly installed on Glassfish

I am an java developer not an web server/IT infra guy so i dont know wether I am asking this question correctly or not, So i apologies if I am wrong somewhere. Previously we are having an spring web ...
5
votes
3answers
286 views

Monit failing to connect to Dovecot over SSL IMAP

I run Monit to keep check on processes on a Debian server. It's working as normal for all other services (Apache SSL, Postfix, SSH etc.) but Monit's checks on Dovecot are failing repeatedly. I think ...
3
votes
1answer
63 views

RHEL6 httpd Root CA configuration

I'm setting up SSL on a RHEL6 box and I'm having problems finding information about configuring the Root CAs. I've got four files: cert.crt - My SSL certificate my_key.key - The key used to ...
0
votes
1answer
195 views

Replace wildcard certificate on multiple sites at once (using command line) on IIS 7.5

I have 3 websites: aaa.my-domain.com, bbb.my-domain.com and ccc.my-domain.com all using a single wildcard certificate *.my-domain.com on IIS 7.5 Windows Server 2008R2 64-bit. That certificate expires ...
0
votes
1answer
56 views

Nginx SSL Termination - How to encrypt data to client?

I've setup a Nginx as a HTTP load-balancer with SSL/TLS termination for apache webservers. My question is by using Nginx to terminate ssl how do I encrypt the data back to the browser/client. Does ...