SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

-2
votes
1answer
41 views

Mutiple SSL For one domain

Firstly forgive me for my lack of knowledge on this subject. The Scenario is that i run a small hosting company and i wish to have ssl on all my servers. Issue is that i want to install a Extended ...
-1
votes
2answers
68 views

.htaccess file isn't working for https

I have simple .htaccess file to forbid access to a directory as : order allow,deny deny from all Well, it doesn't work with SSL and show the content of directory if client access the directory ...
0
votes
1answer
407 views

ssl_crtd helpers are crashing too rapidly in squid

I am using the sslBump and Dynamic SSL Certificate Generation features of squid, below is my configuration for the sslBump sslcrtd_program /usr/lib64/squid/ssl_crtd -s ...
0
votes
1answer
581 views

Redirect non-www to www over SSL with Nginx

I'm having an error when trying to redirect https://example.com to https://www.example.com. When I go to https://example.com, it doesn't redirect and returns the page/200 status. I don't want this, ...
0
votes
2answers
219 views

SSL Mismatched Address Certificate Error on IIS 7

We have a local application server (trisha0002), and on this server we have an application (FlexibleBenefits). When we install SSL for this application, it gives Mismatched Address. What can be the ...
0
votes
0answers
23 views

Browser doesnt load new ssl certificate

I have lighttpd webserver running in the backend. when I upload a new self signed SSL certificate and restart the web server, the old https session doesn't work not even when the browser is refreshed. ...
-5
votes
1answer
40 views

Configure subdomain godaddy and use an existing CERT [closed]

I just created a subdomain ony my domain named: profile.cv.hsoto.me However, when I try to access it, I get a warning: I'm not sure how to fix this. My .htaccess file is as follows: # BEGIN ...
-2
votes
2answers
37 views

host SSL version of website in another server [closed]

I have a website that hosted in a shared hosting. I bought a ssl cert but shared hosting do not install ssl from other providers. I also have a VPS. is it possible to host SSL version of my website ...
-2
votes
1answer
61 views

Is HTTPS slower than HTTP? [closed]

I think about put my all www throught SSL Is https slower than http? How exactly it work I mean technically, Is all data between server and client is encrypted? If so this would consume a lot of ...
2
votes
0answers
238 views

I'm having issues with the SSL versions used by curl and by python ssl lib

TL;DR I'm trying to reach an URI which only takes SSLv3. If I try to access it with curl or Python requests (which uses the ssl module) it doesn't work (different errors). Some longer explanation ...
1
vote
2answers
50 views

Installing SSL cert for all workstations in domain

We have a fax server only accessible internally on our network, say address 10.10.10.2. Many of our employees use this fax server daily, so I created a DNS entry with an easy name, like ...
-1
votes
1answer
33 views

ssl and loadbalancing : answer directly from backend?

Context debian 64bits. I try to learn https. I created a loadbalancer but I cannot answer tthe client directly from the backend since it receive the LB ip. Question I would like to know how I ...
0
votes
0answers
53 views

Nginx redirect https://www.dom.com to https://dom.com on multi-domain setup

I am struggling to get my Nginx to redirect my ssl requests. It is a bit complicated setup I believe. I have multiple servers on multiple domains and subdomains, say sub1.dom.com, sub2.dom.com, and ...
1
vote
1answer
53 views

How do I specify subjectAltName in the openssl cli?

I'm generating a self-signed SSL cert: $ openssl req -x509 -newkey rsa:2048 -subj 'CN=example.com' I'd like to specify a subjectAltName also at creation time, but I cannot find info in the openssl ...
1
vote
1answer
572 views

HAProxy and Intermediate SSL Certificate Issue

We are currently experiencing an issue with verifying a Comodo SSL certificate on an Ubuntu AWS cluster. Browsers are displaying the site/content fine and showing all the relevant certificate ...
1
vote
1answer
127 views

HAproxy 1.5 Trusted CAs

I'm trying to get HAproxy 1.5.x to trust any certificate authority already in the trust store of the machine (/etc/ssl/certs) without having to explicitly specify the individual ca-file root authority ...
1
vote
1answer
35 views

Does stunnel prevent non ssl traffic to “the” specified port?

So say I have an arbitrary tcp port 12345 and it's non ssl and I want to put stunnel to secure traffic to it. When stunnel is in front of it does it mean that this port is now tls/ssl only? Or can ...
-3
votes
1answer
31 views

Apache HTTP to HTTPS redirection rule

I am trying to apply SSL to a staging server. At the moment, we already have an ssl installed by an "unknown" guy in the production server. While going through prd server's apache settings, I found ...
-1
votes
1answer
129 views

Amazon EC2 - HTTPS - Certificate body is invalid. The body must not contain a private key

I'm very new to Amazon EC2. I am trying to setup https for my website, I follow the offical instruction from amazon doc: http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/configuring-https.html ...
0
votes
0answers
28 views

SSL cert issued to and SAN attribute

I have added a cert to my application cacerts file. The new cert is issued to one DNS(abc.com) and they have added few other DNS(XYZ.com, TEST.com) to the SAN attribute while creating. I tried ...
1
vote
0answers
35 views

Attach certificate to remote desktop connection - not gateway services

I have a Windows server that I want to attach a 3rd party signed certificate for remote desktop connections. This is not a remote desktop services server, i.e. it is just remote desktop ...
1
vote
1answer
79 views

Apache will not serve site over SSL

I have an Apache server that serves my site fine if I just use http, but I can't connect to it over https. I've combed all error logs and found nothing. I've tried several things from other answers on ...
1
vote
1answer
221 views

Configuring SSL through IIS on an AWS EC2 Windows instance

I am trying to enable HTTPS connections to a website hosted through IIS on an Amazon EC2 instance. The instance is running Windows Server 2012. I do not have a wildcard certificate. The EC2 instance ...
0
votes
1answer
39 views

Using an EV SSL certificate for your site with non-EV SSL content

If I purchase an EV SSL certificate for a site that is using static content from a non-EV SSL site does that effect the EV SSL certificate presentation on the main www site? For example: ...
0
votes
0answers
66 views

Convert IIS CA Certificate to Ubuntu Haproxy cerificate

Alright, I setup a simple Windows 2012 R2 RDs server aio farm with Web Access, everything works fine internally if I access the server directly (https: // rdsiisserver/RDWeb/). I created a Ubuntu ...
0
votes
1answer
29 views

Where should I apply the SSL certificate?

I just bought a positive SSL for my company's staging server. We Apache web server and tomcat installed on the server. I'm not an expert but I saw some settings in httpd.conf file that has url like ...
-2
votes
2answers
81 views

How can I scan a IP & Port range to get information about all SSL certificates in use

From a Linux system, for a given IP range I need to check each open port to see if an SSL certificate is in use. For example, I would like to check ports 1 - 9999 on the address range ...
2
votes
1answer
67 views

Wildcard SSL with name-based virtualhosting?

I have two sites that require different domains, but must both use the same server running Apache httpd and also use SSL. Here's the example: www.example.com legacy application receiving high ...
0
votes
1answer
46 views

Using different certificate for one domain

I currently have Apache setup to use a certificate on all my domains using these settings in ssl.conf: <VirtualHost _default_:443> SSLEngine on SSLCertificateFile /etc/httpd/conf/mycert.crt ...
0
votes
1answer
244 views

Sharepoint and SSRS report trust relationship ssl/tls secure channel remote certificate is invalid

I have no experience with sharepoint at all. but this is what I observed. I intermittently getting this error message on my sharepoint. could not establish trust relationship for the ssl/tls secure ...
0
votes
0answers
87 views

When trying to ProxyPass with SSL on Virtual Host (Apache2) I receive AH01630: client denied by server configuration: /var/www/

To give a little background; I am on EC2. I am running Apache2 version 2.4.7. I have also opened port 443 on my security group to allow SSL traffic. What I am trying to do in the long run is have a ...
1
vote
1answer
122 views

Atlassian Crowd + Nginx + SSL Setup Not Working - Redirect Loop

The nginx config: server { listen 443 ssl; server_name crowd.example.com; access_log off; client_max_body_size 10M; ssl_certificate ...
2
votes
2answers
61 views

What is the server.ca file?

I have a VPS with Directadmin panel. I have two files in my ssl.crt in the path /etc/httpd/conf which include server.ca and server.crt. My question is how is the first one originally created. My guess ...
0
votes
1answer
566 views

openssl giving me errors and apache is not working with https

I try to configure apache-tomcat with ssl, but find some issues [root@manage conf]# openssl s_client -state -debug -connect 10.104.1.38:443 -key server.key -cert server.crt CONNECTED(00000003) ...
0
votes
2answers
274 views

SSL certificate for www. and non-www domain [duplicate]

What SSL certificate should I buy to get my domain work? I use nginx web server and want that all users requests go to https. http://example.com -> https://example.com http://www.example.com ...
0
votes
1answer
295 views

Connection Reset error trying to set up HTTPS locally using VS and IIS Express

I'm trying to set up Facebook authentication on my application, so I tried following the steps at this page: ...
0
votes
1answer
341 views

nginx fails to load a file - ssl certificate - even if its clearly there

I want to use ssl with nginx. I create the necessary certificates: [root@arch ssl]# pwd /etc/nginx/ssl [root@arch ssl]# ls -l total 12 -rwx------ 1 root root 1346 Aug 3 14:36 server.crt -rwx------ 1 ...
0
votes
0answers
70 views

Courier IMAP, no response

I've got a Postfix with Courier IMAP mail server mostly set up. IMAP authentication works as expected on port 143 (when SSL is disabled), but whenever SSL is enabled or port 993 is used, nothing ...
0
votes
1answer
65 views

RedHat OS Upgrade - 5.5 to 6.5 is SSL certificate effected?

Doing an old web-server upgrade from 5.5 to 6.5 and was wondering if the existing ssl certificate (still valid) will be accepted by the new RedHat 6.5 OS
-1
votes
1answer
969 views

Error code: ssl_error_rx_record_too_long on nginx ubuntu server

I have a site which was perfectly running with apache on some old ubuntu server and also has https for it. But now for some reasons i need to move to different(new ubuntu server with high ...
1
vote
1answer
169 views

SSL chain verification problems - Barracuda load balancer

I've installed a new SSL certificate using SHA1 hashing. Im user a security certificate by GeoTrust SSL CA - G2 but With WebServices communications I'm getting a PKIX error. The follow page: ...
0
votes
0answers
64 views

SSL Certificate error only on host server

I'm running Windows Server 2008 R2 with IIS 7.5. This is in a development environment. I have a self-signed certificate, and a second wildcard server authentication certificate which was issued by ...
2
votes
0answers
51 views

Should load balancers ever use TLS session ID to direct traffic?

One of my vendors caused an outage today by using TLS SessionID (sent by the browser) as a way to determine which host to direct traffic to. Since SessionID can leak privacy details, and more ...
0
votes
1answer
88 views

Redis security using stunnel and AUTH

Im a redis newbie but want to make sure everything is setup securely as we deal with medical info. I have a few EC2 instances. One of which is a server that runs two redis instances, one for a dev ...
0
votes
2answers
59 views

Does qmail-pop3s supports multiple SSL certificates?

Current setup: 1. I work for E-mail service provider company. 2. We have multiple mail servers on which we use qmail for mail delivery. 3. Each server is hosting multiple different domains for ...
0
votes
1answer
62 views

How many elastic IP's do I need to host two sites using SSL in IIS on one windows EC2 instance

I have one windows instance on instance in EC2. I have two websites configured in IIS on this instance, each with a different SSL certificate for two completely different domains. Each is a wild card ...
1
vote
2answers
263 views

Nginx does not serve static files over HTTPS

I am trying to set up Nginx in front of Apache as a reverse proxy and to serve static files. I 301 http to https, and provide the directives in https section to serve a static folder via an alias. ...
0
votes
2answers
245 views

Setting up SSL - https works, http not working

Update: A temp solution I found was to just redirect all http requests to https. I have been working on setting up SSL on my website. It is like on a Rails. I use nginx with unicorn. I bought the ...
0
votes
3answers
442 views

Exim after Thunderbird update: “Could not negotiate a supported cipher suite” [closed]

Recently, after I installed updates on my Kubuntu 14.04. system and a new version of thunderbird was installed, I could not send emails any more. It prompts: Sending of message failed. The message ...
0
votes
0answers
50 views

Can you do a masked URL rewrite to a different protocol (in Apache)

Apache 2.2.15; I want to do: RewriteCond %{HTTP_HOST} site1.com RewriteRule (.*) https://site2.com [R=301,P,L] But that does not work. I put the P in there thinking it might allow the mod_proxy ...