SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
2answers
104 views

How can one create an internal-use ssl certificate with an in-house CA that doesn't read as self-signed?

I'm ultimately attempting to get a PHP CAS client (zend server 8 with apache) to trust a CAS server (tomcat 7), and to that end have gone as far as to gin up my own private key infrastructure, here ...
0
votes
1answer
106 views

HAProxy 1.6 SSL connections reseting

I have been beating my head against this HAProxy issue for entirely to long, and I am hoping someone here has seen this before. Here is some information: Our HAP instances are in AWS across three ...
2
votes
1answer
238 views

How can I use Let's Encrypt (letsencrypt.org) as a free SSL certificate provider?

I have a few sites running with a StartSSL free certificate (CJSHayward.com, JobhuntTracker.com), and Firefox rejects StartSSL and displays an error page saying that my server is not properly ...
1
vote
0answers
22 views

How to use your ssl certificate and key from your website with activemq console?

After enforcing strict transport security in a server, it is also forcing https into port 8161 for activemq which of course makes it fail. I followed this instructions to enable https on activemq ...
0
votes
4answers
81 views

Using the same SSL Certificate of a Domain on different IIS Servers?

We have different Web Sites on different IIS Servers belonging to the same Domain as site1.example.com, site2.example.com, site3.example.com. However, we have no idea about how to use the same ...
1
vote
3answers
288 views

SSL certificates - can they be used on more than one server

I have many websites all scattered on different IIS servers but they all accessible via sitename.example.co.uk. i.e. site1.example.co.uk Btw this is only an example so I can get to grips with SSL ...
0
votes
1answer
59 views

nginx mutiple domain with ssl and www redirection

nginx redirection is not working as expected with ssl and www redirection. I have two domains say, domain1.com and domain2.com. I need to have https with www redirection on both ie https:/www.domain1....
2
votes
1answer
61 views

How to add nameRelativeToCRLIssuer To CRL using OpenSSL

I'm trying to create a certificate using OpenSSL with a nameRelativeToCRLIssuer attribute for the DistributionPoint URL, rather than a fullName attribute. I've been using the following extfile.cnf to ...
1
vote
1answer
34 views

Ubuntu / CentOS - PHP5 imap ssl

I was wondering now, I have developed a Helpdesk System, than uses the PHP imap library to connect to configured mailbox's and "pull" the mails through and create tickets based on the content. But ...
-3
votes
1answer
49 views

Change SSL encryption to 128 bit from 256 bit

I have bought SSL using Godaddy and running nginx over an ubuntu machine. I have came to know that I am using 256 bit encryption with my SSL certificate. I want to downgrade it to 128 bit. How is it ...
1
vote
1answer
71 views

SELinux context for apache ldap ssl

Question What SELinux context do I need, for what file to get apache ldap (over ssl) auth to work? Or is it a network protocol or system call or something else entirely? Environment Apache 2.4 on ...
0
votes
2answers
84 views

LDAPS on Windows Server 2012 R2 without CA

I am building Splunk in a production environment. The long and short is, in order to get relevant AD things that I need from my Domain Controllers, which are running Windows Server 2012 R2, I need to ...
1
vote
1answer
23 views

AWS SSL vs Comodo (or other)

Is there an advantage or reasons for choosing to use a paid SSL certificate from Comodo (or another) over using the new AWS Certificate Manager (free SSL certificates)? I'm specifically talking about ...
1
vote
0answers
14 views

SSL of domain redirecting to plesk panel default screen [closed]

I have plesk setup on my linux server, where we have a subscription setup for a website 4ti.co.uk We are getting a strange error where if you go to the domain using https://4ti.co.uk it directs you ...
0
votes
0answers
39 views

trying certificate authentication with python3 - ftplib got an unexpected keyword argument 'context'

I got this error while trying to use ftplib.FTP_TLS function as described in documentation here. Here is my MWE : (I run it with python3 on debian) import sys,ssl from ftplib import FTP_TLS # only ...
-3
votes
1answer
24 views

what ssl solution allow Server IP so any domains pointed to that will ssled?

Is there any ssl solution based on Server IP so any domains pointed to that will be allowed? We allow client to run our app on their domain for whilelabling and our app also require ssl as well. So ...
1
vote
0answers
60 views

SSL_accept error with postfix oportunistic STARTTLS

I have configured postfix 2.6.6 on centos 6 as a mailrealy in front of an exchange 2010 server. Things work. Now I would like to add oportunistic encryption to incomming and outgoing mail. At least ...
1
vote
1answer
90 views

Mutual SSL authentication - client certificate vs server certificate

I am setting up a web application which will connect to a remote web service and is required to use a client certificate. My web app uses HTTPS to connect and I have it configured with my existing ...
1
vote
1answer
54 views

ECDHE Cipher not being displayed

I am trying to fully support forward secrecy on my FreeBSD Apache 2.4.16 server. I am using the correct cipher suite as the same cipher order works correctly on a different FreeBSD server. However, ...
0
votes
0answers
50 views

DirectAdmin ssl cache lock

strange log came out from web error log: (43)Identifier removed: AH02026: Failed to acquire SSL session cache lock (43)Identifier removed: AH02026: Failed to acquire SSL session cache lock (43)...
0
votes
1answer
88 views

Nginx TLS Performance Optimization

I switched a busy site to TLS-everywhere and HTTP/2 last week. Performance hasn't improved as much as hoped. In fact, depending on how you measure it, you can argue it has degraded. There is plenty ...
0
votes
1answer
26 views

NodeJs App Not Showing On https

I recently installed an SSL certificate, but as a result, my nodejs app only appears on http://something.com, and the apache default/stock directory listing is on https://something.com. I made it so ...
0
votes
2answers
38 views

ssl connection fails with wget, suceeds in browsers

I have a server running Apache 2.4 with various virtual hosts that provide https:// connections. These all are set up seemingly correctly and work fine in all browsers. However one virtual host ...
1
vote
1answer
26 views

Tomcat SSL not available outside

I do have a Tomcat8 server running, currently in the development environment. It's been working for a while on the port we have picked (8085) and was available outside of our network (unblocked on the ...
2
votes
1answer
126 views

Assigning a SSL certificates in IIS7 on Windows Server 2008 R2

We want two ssl sites on an IIS Server. I generated a self signed ssl certificate using IIS for https://Django.mycompanyname.com:443 However we also need https://site2.Django.mycompanyname.com:443 ...
0
votes
2answers
789 views

Lets Encrypt OpenVPN AS

I've got an OpenVPN AS running and I am trying to setup SSL certs (running ubuntu) from letsencrypt. I've managed to get my certificates from letsencrypt (using letsencrypt standalone) and I was ...
-3
votes
1answer
48 views

I get other website's tls certificate when visiting my website [closed]

i have a weird issue while visiting my website using https... I can't track how often this happens, but sometimes T get a TLS certificate of another website.... and the browser warns me that the ...
0
votes
0answers
45 views

Azure security HTTPS vs VPN vs ExpressRoute?

We're getting ready to release a Web API and I'm confused about the best way to secure it. Users will request data like: Browser -> HTTPS -> On-premise nginx -> ??? -> Azure worker -> Azure MSSQL ...
0
votes
1answer
29 views

Wowza SSL error PR_END_OF_FILE_ERROR

I have installed the SSL certificate by following https://www.wowza.com/forums/content.php?128-How-to-request-an-SSL-certificate-from-a-certificate-authority The certificate was imported properly &...
1
vote
1answer
51 views

Reinstalling a godaddy certificate on node/express server?

Copied from here I'm looking at a server on behalf of a client and was wondering what the cert actually is and where it comes from in this example: require('https').createServer({ key: fs....
0
votes
0answers
978 views

Ignore certain endpoints in nginx SSL rewrite rule

I am currently redirecting all traffic on my site to https using the following rewrite rule: if ($ssl_protocol = "") { rewrite ^ https://$host$request_uri? permanent; } I would like ...
0
votes
1answer
60 views

Install SSL certificate on server (before switching the doimain's dns to point to the server)

As part of a major revamp of our site: retiring old server (no ssl) setting up new server (with ssl amongst other changes) switching the domain's dns once the new server is ready Is it possible to ...
13
votes
1answer
2k views

How can SSL be on port 110?

I patched up a Postfix + Dovecot server against a DROWN attack (I disabled sslv2 and sslv3). https://test.drownattack.com Shows :25 vulnerable to CVE-2016-0703 :110 vulnerable to CVE-2016-0703 ... ...
0
votes
1answer
138 views

OpenSSL test if server supports SSLv2

How to do this with the openssl command: openssl s_client -showcerts -connect localhost:443 I want to check for the DROW attack on non standard ports (test.drownattack.com)
1
vote
1answer
103 views

Let's Encrypt certificate not recognized by Nginx

I successfully created some LE SSL certs, using this guide. However, when I updated my nginx config to use the certs and redirect all port 80 traffic to 443. http successfully redirects to https, the ...
0
votes
1answer
36 views

SSL certificate installation to establish SSL connectivity between 2 servers

I want to establish SSL connectivity between 2 servers, and I understood that I need to install the SSL certificate of server A into server B's Java keystore and vice-versa. So, that server A can call ...
2
votes
1answer
59 views

Some IP addresses getting security or 403 errors when trying to access the site

I co-own a charity forum that gives support to people in crisis (mental health, self harm, suicidal thoughts etc) Our webmaster left in a bit of a snit a month and a half ago and I have been ...
1
vote
1answer
94 views

Disabling SSLv2 on Dovecot v1

I'm still using Dovecot v1 (1.1.20) on an osx server. I'm trying to disable SSLv2. Seem like the default config already disabled it: ssl_cipher_list = ALL:!LOW:!SSLv2:!aNULL:!ADH:!eNULL But when I ...
0
votes
2answers
71 views

Getting SSL errors with nginx

I've got a digitalocean droplet up and running, and the ip on my dashboard 159.xxx.xxx.xx, and with nano /etc/nginx/sites-available/hello_world I have this config file: server { listen 80; ...
0
votes
1answer
37 views

Which config values is apache loading?

I ran in some trouble today after spinning up a new server. I did the following: Installed CentOS 7 Installed Apache + PHP Securing my server with SSL (letsencrypt) But when I checked my ...
2
votes
2answers
27 views

Forward to https keeping the URL intact/complete

I want to forward all traffic to https. There can be subdomains and subpaths in the URL that should stay intact. Example: http://subdomain.myDomain.me -> https://subdomain.myDomain.me http://...
-2
votes
1answer
28 views

Installing self-signed certificate on tomcat

down vote favorite The question: I have an application running under tomcat which calls another application under the same tomcat via a gateways which has a self signed SSL certificate installed. When ...
0
votes
0answers
61 views

using keystore in nginx configuration

Im new to using NGINX and keystore. Kindly forgive my ignorance. I'm working with an API that posts data to my server. The API requires mutual authentication to be done. So we I have a signed ...
1
vote
2answers
67 views

Correctly opening port 443 to the internet

I need port 443 open to the internet on my server. When I check internally via netstat -tulpn | grep "nginx", I see that nginx is indeed LISTENing on that port. However, trying nmap -p443 mysite.com ...
0
votes
0answers
115 views

Magento NGINX SSL ERR_TOO_MANY_REDIRECTS

Im having an error ERR_TOO_MANY_REDIRECTS Im implement the ssl and i get the errors In Magento i have the sites with ssl web/unsecure/base_url https://pontebuso.com/ web/secure/base_url ...
3
votes
0answers
74 views

Nginx - SSL forward secrecy and iOS9 support

I'm trying to bring a couple of Linux web servers into line with the current recommendations for SSL - in particular for allowing iOS9 to connect. One server is CentOS 7, the other CentOS 6.4. I have ...
1
vote
1answer
41 views

Enable HTTPS with CNAME Apache

I have two apache servers, both of which hostnames are primary.domain.com and secondary.domain.com The Primary server will rsync and mirror all files to Secondary server as a backup. I am trying to ...
2
votes
1answer
101 views

HAProxy: Detect SSL connection contents and then decide to forward it or not

I would like to have a front end with HAProxy on port 443. This front end acts in the following way: It decrypts the contents of the connection and checks: 1- If the encrypted contents of the ...
0
votes
1answer
47 views

Can I prohibit IIS from fetching intermediate SSL certificates via AIA?

According to this answer IIS can use Authority Information Access certificate extension to retrieve missing issuer certificate. Here's the scenario. There's an IIS installation with an HTTPs endpoint ...
0
votes
1answer
378 views

nginx ssl ERR_CONNECTION_REFUSED

I'm getting an error on the SSL, my site is https://pontebuso.com/ But it always give me ERR_CONNECTION_REFUSED sudo netstat -anp |grep :443| grep LISTEN tcp 0 0 0.0.0.0:443 0.0.0.0:* ...