SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
1answer
200 views

Avoid the need of CAfile on client

I am trying to configure my apache that it is delivering all certificates files to get always a positive validation. To be clear there is no issue with any browsers, I am talking about openssl ...
2
votes
1answer
229 views

Specify a SHA-1 or SHA-2 cert depending on client abilities

With SHA1 certs being deprecated by major browsers it seems wise to get a SHA2 signed cert. But in doing so you will be locking out IE6 users. While for most people this won't be an issue in some ...
0
votes
1answer
38 views

Unable to use https on Amazon loadbalancer

I have a wild card certificate for a domain and have configured it on a load balancer. The load balancer has an EC2 instance assigned. I am using the domain name to point to the load balancer through ...
0
votes
0answers
40 views

How to set up an Apache ssl proxy for multiple sites using mod_rewrite or proxypass

(I asked this at stack overflow but no one even commented ;( perhaps it's better suited here I hope?) Some background: I wish to access some https sites on a separate VLAN to what my laptop is via a ...
0
votes
1answer
98 views

Exchange TLS Receive Connector Cert

We are using Securence incoming filtering in front of our Exchange 2010 server. It's basically a spam filter. I'm trying to get TLS communication between Securence and our server on incoming ...
1
vote
2answers
201 views

nginx + varnish, optimize caching urls for ssl and not

I have a working varnish cache for my websites, with the undesired side effect that requests for a domain with http are cached with a certain url, and requests for https with another url. That way I ...
0
votes
1answer
33 views

pg_createcluster ssl cert behaviour different for 9.1 and 9.3 on Debian Squeeze

I think i found a bug in pg_createcluster when creating a 9.3 cluster. At first, my configuration: Debian Squeeze with PostgreSQL 9.1 from squeeze-backports and PostgreSQL 9.3 from apt.postgresql.org ...
0
votes
1answer
47 views

Intermediate certificate not sent to clients? [duplicate]

I have installed intermediate certificate on server according to all tutorials for IIS, that is: "Certificates MMC snap-in, you choose computer store, you'll have the option to place the intermediate ...
0
votes
0answers
251 views

Foreman-Installer failed to install - puppet cert --generate FQDN returned 23 instead of one of [0] - Ubuntu 14.04

I tried to install Foreman serveral times at my Ubuntu 14.04 Server. Foreman 1.5 and 1.6 always fail at the same time with following error : /usr/bin/puppet cert --generate ubuntutest.domain.com ...
0
votes
1answer
46 views

Can Subject Alternative Name(SAN) Certificate install on different Web Server or OS? [closed]

Let say: application.house.com apache tomcat : physical server email.house.com apache tomcat : virtual finance.house.com Oracle Wallet Manager : physical server ...
-4
votes
2answers
40 views

Security certificate only displays with HTTPS and not HTTP [closed]

I have a security certificate installed on my Ubuntu server, running Apache. When I visit my site using the HTTPS protocol, the green certificate appears at the start of the URL. However, when I use ...
0
votes
0answers
26 views

Generate .pb7 or .p12 certs from .pem

I'm trying to enable SSL for Boomi webservices. I've followed the instructions on their documentation to generate the CSR and sent it to CA for signing. I've received the signed certificate in .pem ...
0
votes
1answer
269 views

Nginx load balancer is hanging on SSL

I'm trying to get nginx to do load balancing across my web servers, while terminating SSL at the load balancer level. The nginx.conf file I'm using is based on all the guides for doing this exact ...
2
votes
2answers
165 views

Apache HSTS exception for some virtual hosts

In the global config section for Apache 2.2.15, I have the following (per recommendation) <IfModule mod_headers.c> Header add Strict-Transport-Security "max-age=15768000;includeSubDomains" ...
0
votes
1answer
280 views

Nginx/Apache: set HSTS only if X-Forwarded-Proto is https

I got the following setup: Internet => nginx[public:80 +443, SSL termination) => Varnish[localhost:81] => Apache[localhost:82] Now some sites should only be reachable via HTTPS and a valid ...
0
votes
2answers
43 views

Solaris snoop on SSL headers

Is there a way to snoop (on Solaris) SSL headers ( I don't actually need to capture SSL data ) so that I can ensure SSL is not blocked by any firewalls before entering my server.
0
votes
0answers
33 views

Strict-Transport-Security on CloudFront with S3 origin?

My company's site has a static homepage for speed and cost reasons. We use S3 as the origin for CloudFront. Now, we would like to declare Strict-Transport-Security for the entire domain, but S3 seems ...
0
votes
1answer
75 views

Is it possible to restart a server without access to its SSL key?

I'm given a server (with root access) by a tech department to run a web-app app on some sub-domain. But the app requires authenification. So I requested the SSL key for the domain. The tech squad is ...
0
votes
0answers
16 views

Heroku won't recognize my intermediate cert

I have two subdomains: www.snipsalonsoftware.com and app.snipsalonsoftware.com. The www subdomain is pointed at a Rackspace Ubuntu server running apache and the app subdomain is pointed at Heroku. I ...
1
vote
1answer
169 views

Draytek SSL VPN connection incorrect subnet mask and gateway

I have remote machine connecting to our office lan through a draytek 2930 router in our office with a fixed IP (FW3.3.0). I have set it up to use SSL VPN with Draytek smartvpn client software on the ...
1
vote
1answer
152 views

SSL termination point for AWS EC2? ELB or NginX or..?

I have a number of stand alone java web applications that currently run on different ports and URLS. I would like to expose all these apps behind a single port(443) and map the different public URLs ...
-1
votes
1answer
99 views

How do I set up TLS-PSK with Tomcat [closed]

The Tomcat people won't help me, so I'm hoping someone here will come through. I can't figure out how to set up Tomcat to use pre-shared keys. All the SSL/TLS guides for it assume certificates. Please ...
0
votes
2answers
64 views

Redirect user from HTTP to HTTPS in IIS

I have a virtual machine with a Windows Server 2012 running in a Windows 8 host. The host redirects all http traffic to port 81 to port 80 of the server and there I have an IIS web server. What I'm ...
2
votes
5answers
160 views

SSL Issue on EC2 Ubuntu Server

I have an EC2 server with Ubuntu. Its running multiple websites and one of the websites uses a SSL certificate. The SSL is running fine but the issue is when you type in the url of one of the other ...
0
votes
0answers
29 views

OpenVPN and adding .p12 cert

Is there a way to add the .p12 type of cert to the openvpn config file? I've read and learned how to add the other files like so: <ca> -----BEGIN CERTIFICATE----- # insert base64 blob from ...
0
votes
1answer
35 views

Is there automatic SSL certificate renewal?

At the moment, I am replacing my SSL certificate every year, which means copying around keys and stuff. I could get a two-year certificate, then I would do this every two years. And having some ...
-2
votes
1answer
83 views

Need Help Forcing SSL for Remote Desktop

I have a standard windows 2008 R2 server (non-domain). I have a web service (non-IIS) I have a certificate issues from "GlobalSign" that came in a .pfx file. It's properties allow for Server ...
0
votes
0answers
31 views

Can I terminate an SSL Tunnel at the Load Balancer in Amazon VPC?

In other words, can the Amazon VPC load balancer be configured as an SSL Host? As a proof of concept, we've created this setup: Heroku Appserver <---> VPC Load Balancer <---> Ubuntu SSL ...
2
votes
4answers
186 views

How do I know if *.pem is password protected using ssh-keygen?

I have got a file myfile-privkey.pem. How do I check if the private key file is password protected using ssh-keygen?
0
votes
1answer
158 views

HAProxy SSL with new GoDaddy certs

I renewed my certificate from GoDaddy and I got back two files: gd_bundle-g2-g1.crt 27ec89cfaa7c28.crt I have the private.key. However I totally forgot how to use, or produce, a valid .pem file to ...
0
votes
1answer
105 views

Using SHA256 with SSL certificates in HAProxy

Through an article on Security Labs I read about Google deprecating SHA-1 as signature in Chrome next year. Now I want to edit our HAProxy SSL configuration to fit the new security needs. What are ...
1
vote
2answers
68 views

How does apache threads, running as non-root, handle private keys (used for the SSL certificate)?

How can apache's children, which are running as a non-root user, access the private key (used with the SSL certificate) which only root should have access to? Indeed, when Apache is starting, only ...
0
votes
1answer
79 views

Nginx ssl proxy for Apache

I am running the following setup: [public ip]-nginx_proxy-[lan]-apache_server SSL is configured and set up on the nginx proxy level (and this is working). However, when I visit a site over ssl, I ...
2
votes
1answer
306 views

What is wrong with my SSL trust chain?

The SSL cert for my site, https://www.snipsalonsoftware.com/, doesn't work on Android. In troubleshooting this problem I've plugged my site into the Qualys SSL Labs testing tool: ...
8
votes
2answers
4k views

Outlook security alert - The name on the security certificate is invalid or does not match the name of the site

SBS 2008 running Exchange 2007 and IIS6.0 CompanyA has two other companies that operate under the same roof. To accommodate email, we have 3 Exchange accounts per user to manage this. All users use ...
3
votes
1answer
113 views

New gTLD Chrome SSL Certificate errors

We've recently acquired a new .Care domain and are attempting to install a SSL certificate. Whilst FF and IE are perfectly happy with the certificate - both display the padlock, Chrome is not and ...
0
votes
0answers
35 views

Apache2 listening on https port but not responding to https request

I am trying to setup a re-direct from http to https on apache and have the following config : <VirtualHost *:80> ServerName www.mycompany.eu ServerAlias mycompany.eu ...
1
vote
1answer
216 views

Can nginx use different protocols for different server blocks?

I'm trying to setup a hostname to demonstrate a poor SSL config and I'm having some issues. I can specify some bad cipher suites, but nginx seems to ignore the protocol selection. server { ...
0
votes
1answer
165 views

How to install/update/upgrade SSL certificate in Tomcat

I am about to install/update/upgrade a SSL certificate in one of the servers which has the following configuration Sever information: Sever version: Apache Tomcat/6.0.35 OS version: Linux ...
0
votes
0answers
35 views

Client authentication on tomcat fails

I have a Apache Tomcat 7.0.39 server running on a Windows server machine and I'm trying to enable client authentication. I first tried this using eclipse on a client machine I have (also on windows ...
0
votes
2answers
51 views

How to manage third-party issued certificates in a Windows environment with Active Directory Certificate Services

I have a wildcard SSL certificate (*.ourdomain.com) + chain of trust that was issued from a public third-party CA that I have deployed on to all of our Windows servers in the domain. But our ...
0
votes
1answer
36 views

Error while configuring openldap with ssl

I have a certificate from Digicert and I have added the keys to the bdb config file. The rest of the LDAP setup works fine except the SSL part. I have added a Mozilla certificate store as well, but i ...
0
votes
1answer
23 views

Do browsers re-use ssl connections for different domain, but same ip:port and same SAN certificate?

I wonder if browsers can and do re-use the same connection when both domain names resolve to the same IP and both are covered by a single certificate (SAN) when used together on one web site. ...
0
votes
1answer
73 views

How to add HTTPS to Elastic Load Balancer?

I'm using boto to create an Apache http server that "hides" behind an AWS Elastic Load Balancer (ELB). However, the ELB DNS address is functional only when I specify port 80 (http) in its security ...
0
votes
2answers
267 views

How do you force an Apache Load balancer to rewrite http 302 redirects to https?

I've got a website that I want to always be served in https. The site is load balanced using Apache. The Apache load balancer is configured basically like so: <Proxy balancer://mycluster> ...
-1
votes
1answer
68 views

Amazon Route 53 domain mapping

We have some EC2 instances running NGINX that will be accessed via a loadbalancer that can be reached via www.example.com. The loadbalancer redirects the traffic to the appropriate EC2 servers. This ...
1
vote
1answer
125 views

Nginx https vhost capering all requests

I am trying to setup a gitlab instance along an own cloud instance on the same server. Both work fine over http, and both work fine over https if one one host is enabled. The weird thing is that the ...
0
votes
1answer
104 views

Squid, WCCP and Transparent HTTPS

Sorry if this has been answered but i just can't get it to work for me. We would like to log all HTTPS & HTTP requests but not to use Squid-in-the-middle. We would like the proxy to connect the ...
0
votes
0answers
35 views

Loading pem certificate files in Tigase server

I'm trying to load a SSL certificate sign by thawte in a XMPP server running on Tigase 5.2. As described in this howto the certificate is in certs/ folder, but the server rename it with .bak extension ...
-3
votes
2answers
54 views

Domain and Webhost in two different companies [closed]

I am planning to migrate from godaddy to another webhosting company but not including my domain registrations. I have two domain names and I am planning to get one free domain name from the webhosting ...