SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
1answer
266 views

Apache Bench: SSL handshake failing directly related to concurrency level

I ran some tests on ab and when I use a concurrency level of over 155 I get the following: SSL handshake failed (5). SSL handshake failed (5). SSL handshake failed (5). SSL handshake failed (5). SSL ...
1
vote
2answers
158 views

Error 502 - Random SSL Library Error: 336151568 error:14094410

I'm facing a random 502 error on my webservers. Rate : 0.5% Error in my logs: SSL Library Error: 336151568 error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure OpenSSL Version ...
2
votes
1answer
58 views

What happpens to my SSL certificate if I transfer domain regsistrars?

I am in the process of transferring my domain from Gandi to GoDaddy (don't ask) and I also have a Gandi wildcard SSL certificate. Will the SSL certificate continue to work once the domain has been ...
1
vote
0answers
30 views

How can I update rekeyed certificates on stunnel?

I have configured stunnel using GoDaddy certificate and it was working fine. Due to some circumstances, I need to rekey the certificate and update the pem file on the load balancer. Upon updating the ...
1
vote
0answers
47 views

Unable to generate a Bundle of CA Root Certificates (failed to create symbolic link)

I am trying to generate a Bundle of CA Root Certificates. Similar to what Facebook has done for its PHP SDK (https://github.com/facebook/facebook-php-sdk/blob/master/src/fb_ca_chain_bundle.crt). I ...
1
vote
1answer
81 views

AWS: Forwarding HTTPS to HTTP via ELB

I'm having issues setting up HTTPS on AWS via a load balancer. I've managed to get as far as proxying my standard :80 server, via HTTPS on the load balancer, so requests to https://www.example.com are ...
0
votes
1answer
41 views

Enable SSL on domain

I want to enable SSL on a certain domain, but I can't see anything on it. The domain is api.conoform.com. ` # Fix MIME types AddType text/css .css AddType text/html .php AddType ...
1
vote
1answer
159 views

How to install multiple Intermediate CA Certificate files on Apache?

I just bought a SSL certificate, and here are all the certificate files i got: Root CA Certificate - xxCARoot.crt Intermediate CA Certificate - x1.crt Intermediate CA Certificate - x2.crt ...
3
votes
1answer
54 views

Active Directory LDAPS Somehow Holding on to the Expired Certificate

Windows Server 2008 Non-R2, 64bit. It's an AD domain controller. It uses a third party certificate (not AD CS and autoenrollment) in its Computer\Personal store to enable LDAP over SSL. I obtained ...
8
votes
1answer
266 views

How can I use https with AWS Cloudfront without paying $600 to upload my cert?

I can host a dynamic website through Amazon CloudFront because they have CNAME Wildcard Support. However, some pages of my Site use HTTPS. Amazon have some documentation about how to associate your ...
0
votes
1answer
102 views

Apache OpenSSL Loop

I just configured the sites on my Windows Azure Hosted Ubuntu 12.04 Apache server to use SSL, the sites are working and redirecting correctly. Here is my virtual host configuration: <VirtualHost ...
2
votes
1answer
328 views

EC2 ELB Wildcard SSL Renewal “Invalid Public Key Certificate”

We have an existing ELB on EC2. It's got a GoDaddy issued wildcard ssl cert. I've downloaded the new .crt and gd_bundle.crt from GoDaddy. In ec2 I go to the load balancer, click the certificate, ...
0
votes
1answer
31 views

Widows server 2008, iis7. Unable to set up SSL for public use. Possible port issue

I have an asp.net mvc website hosted on IIS 7, Windows Server 2008, on Amazon server I think. SSL certificate is set up and when browsing from the server everything works fine(except for the warning ...
1
vote
0answers
366 views

Nginx reverse proxying to HTTPS upstream getting 502 Bad Gateway?

My goal is to write Jasmine (a JavaScript BDD testing framework) tests that exercise a back-end API built by a separate team. I have a Jasmine server running on port 9000. That code issues AJAX ...
-1
votes
1answer
125 views

How can I block a redirect by my hosting provider to cgi-sys/defaultwebpage.cgi [closed]

I run a couple of hosted domains in a shared hosting package with cpanel. I did not think it was worth paying for an ssl certificate so opted for a self signed certificate instead but the ...
2
votes
2answers
107 views

Validating HTTPS clients with certificates signed by other CAs than server's CA

I have an apache web server, ssl on that has a server certificate signed by a trusted official CA. Can I configure apache ssl to accept clients with valid certificates signed by CAs other than the CA ...
2
votes
1answer
580 views

haproxy multihost with ssl acl

how can I use ACL rules in haproxy (1.5dev19) for server multiple hosts with own ssl certificate for each?? I have 3 backends with multiple domains all on one IP address. nodejs (http/https/ws/wss) ...
1
vote
0answers
19 views

Apache configured for HSTS, but SSLLabs/Chrome not acknowledging

I'm setting up a webserver and I've been checking it against SSLLabs and Chrome 31 to make sure the security is up to snuff. However neither Chrome nor SSLLabs seems to believe that strict transport ...
0
votes
0answers
44 views

What is causing HTTPS handshake not to occur?

I have two systems, running an application that does web service calls over HTTPS. I run a test by trying to log in to the HTTPS over webservice and one system works with HTTPS but the other does not. ...
0
votes
0answers
37 views

HTTPS address still resolving (to default site) when no longer in IIS and new certificate installed

I have been banging my head with this and I'm hoping its just something silly. We have changed domains and SSL certificates for 2 sites. I have removed the old certificate and removed the IIS bindings ...
1
vote
1answer
40 views

Multiple domains with http and https on the same server

I am running multiple domains on an EC2 server with a single IP. I need to run 1 site on HTTPS and rest on HTTP. For instance: Run foobar.com on HTTPS. And run foobaz.com on HTTP https://foobar.com ...
0
votes
1answer
45 views

Enable SSL for “Sub-Application” in IIS 8

I have a website in IIS 8 that has several applications nested under it. So: example.com | ---app1 | ---app2 example.com has both an http binding on port 80 and an SSL binding on ...
0
votes
2answers
82 views

Why isn't tomcat serving the correct SSL certificate

I configured tomcat with SSL successfully and was using a self-signed certificate. Recently an issue arose where just having the client "Accept/trust" our certificate wasn't easy. We ended up ...
0
votes
1answer
53 views

apache windows xp not starting after installing new ssl certificate from godaddy

I am running apache 2.2 on windows. I currently have ssl running and have a key.pem file and a domain.crt file. THis was issued by godaddy. Everything is working. I renewed the ssl cert and ...
1
vote
1answer
42 views

Nginx with ssl always returning 301

I am trying to setup nginx with ssl, to serve some static HTML and the output of some Python scripts (through uwsgi). It works fine with HTTP, but I am not able to make it run on HTTPS, as nginx is ...
-2
votes
1answer
27 views

Amazon + NGINX + SSL + IE8 [closed]

How hosting multiple SSL sites on a server that has a single IP number and the WindowsXP + IE8 see the correctly certificate? Amazon EC2 allow to assign only one IP per server
2
votes
0answers
91 views

Internet Explorer SSL use causes segfault - Apache httpd SIGSEGV in apr_uri_parse

Recently I've had quite a large influx of the error below in the error_log. I've found out that it happens when someone browses my site using SSL https: and Internet Explorer, all other browsers are ...
1
vote
1answer
29 views

SSLv2 in IIS 7.5?

Just found that SSLv2 is enabled in IIS 7.5 by default and to change it requires tweaking in registry. What is the design decision for it? Is there a disadvantage of disabling it?
1
vote
2answers
256 views

curl succeeds on an https request, wget does not

When I run curl from the command line curl "https://example.com" It succeeds immediately, returning the result of the request. When I run the same wget command wget https://example.com ...
0
votes
1answer
42 views

Mixed IP and Name based vHosts with SSL issue [duplicate]

Apache proxy with one physical IP = 10.2.2.1 and a logical IP = 10.2.2.2 Configuration is similar to below <VirtualHost *:80> ServerName example.com <Location /> ...
0
votes
1answer
212 views

nginx - 403 Forbidden

I've trouble to get aliases working correctly on nginx. When i try to access the aliases, /pma and /mba (see secure.example.com.conf), i get a 403 Forbidden but the base url works correctly. I read ...
1
vote
1answer
377 views

Install a root certificate in CentOS 6

I know it has been already asked, but despite many hours of research I couldn't find a working solution. I am trying to install my root certificate in my server, so internal service can bind to each ...
2
votes
1answer
168 views

Wildcard certificate causes warning on Google Chrome only

I have a company.sv domain and recently purchased a RapidSSL wildcard certificate, I installed it and tested it with many browsers(Firefox, Chromium, Chrome, IE) and SSL checking tools, it worked fine ...
0
votes
0answers
106 views

Ubuntu apache reverse proxy to jboss

I hope that someone here can assist me with this problem because I am currently trying fix it for 3 weeks now and can’t seem to get it working. Well let’s start with explaining my situation. ...
0
votes
0answers
75 views

Certificate errors on Exchange 2010 NLB CAS array server

On my Exchange server, I have two CAS servers in a CAS NLB array. I need to install a 3rd party SAN/UCC certificate on both of these servers for OWA. I generated the request on CAS1, submitted to a ...
0
votes
1answer
33 views

Configure SSL for FTP

We are in the process of making our site PCI compliant. One of the vulnerabilities we are facing is as below. Description: SSL Version 2 (v2) Protocol Detection (for ftp) Synopsis: The remote service ...
-3
votes
2answers
216 views

Apache Wamp [error] (20024)The given path is misformatted or contained invalid characters [closed]

In httpd-ssl.conf file I set : CustomLog “C:/wamp/bin/apache/Apache2.2.11/logs/ssl_request.log” \ "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b" But Apache couldn't start since then and I ...
2
votes
1answer
166 views

Exchange SSL for Internal and External Access

I am going around in circles trying to configure Exchange / The Domain to accept an SSL certificate without showing a security warning when launching outlook. **Configuration:** 2012 Domain ...
0
votes
0answers
74 views

Squid 2.6 and https trasparent proxy

I have a question about Squid configuration as trasparent proxy using SSL. I would to use Squid 2.6 as trasparent proxy with http and https connection. I followed this steps: 1) I configurated my ...
0
votes
0answers
63 views

SSL Integration with apache used for load balancing

We are using apache mod-proxy on top of tomcat to achive load balancing. It is working fine , now we are planning to move to https from httpd . For that my configuration looks as follows ...
-1
votes
1answer
40 views

Https not working JBoss AS 7.0.2

I am trying to load SSL certificate to one of our site. We are using JBoss AS 7.0.2 for our application on Ubuntu Server 12.04, it's running successfully on http while on https it's not responding. ...
0
votes
1answer
25 views

Install certification to acknowledge another server

I need to install a .cer to my apache server in order to comunicate to another server. Basically I have my server, x.x.x.100, this server has an script that uses SOAP to communicate to another ...
0
votes
0answers
52 views

Stunnel only for specific domain

I'm configuring stunnel to encapsulate SSL petitions to Haproxy. Haproxy serves several sites in the same IP address: domain.com - Website app.domain.com - Node.js webserver I acquired an SSL ...
0
votes
1answer
43 views

Trying to get sendmail to run with SSL certificates

I've got my own domain name with my (CentOS 6.4) Linux box running as primary MX (two back-up MX off site). At home, I can get to my mail server from Thunderbird on my LAN, since sending the password ...
1
vote
1answer
146 views

MS SQL Server configured for secure (SSL) connection allows non-secure connection from JDBC Client

I need to connect to the MS SQL Server 2008 r2 using the secure communication. I have been able to do the same using the following connection string: jdbc:sqlserver://<<db server ...
0
votes
1answer
157 views

SSL Certificate error in IE8 (It's OK in IE10, Chrome and Firefox)

We have a SSL offloader (nginx) with different certificates for different machines and subdomains. It encrypts and redirects all the traffic to the corresponding machines. It works OK with all ...
0
votes
1answer
105 views

httpd generate SSLCertificateChainFile

I am looking for how to configure ssl in my web servers. I have used the following command to generate certificate file and certificate file. openssl req -x509 -nodes -days 365 -newkey rsa:2048 ...
2
votes
0answers
58 views

Accessing ActiveMQ's JMX via SSL

I'm trying to get SSL-enabled JMX access to ActiveMQ (5.8.0 or 5.9.0 running under java 1.6.0) but I'm not having any luck. I've dealt with SSL-enabled JMX access in the past, so I'm quite familiar ...
2
votes
0answers
47 views

How do I obtain the ssh public key from my VSphere ESXi 5.1 host hypervisor residing in vcenter with puppet-enterprise cloudprovisioner

I am using the learn puppet 3.1 vm and trying to connect to a host hypervisor. I followed the instructions to create a .fog file under root which includes a yaml hash, and I read that the yaml hash ...
2
votes
0answers
50 views

Forefront UAG with SSL/X509 auth for REST API

I'm not a network engeneer, but a software engeneer, so this theme is quite unfamiliar for me. We develop a solution, that consists of a server-side web application (with a rest api), working on java ...