SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
1answer
272 views

Scaling Multiple SSL Domains on Multiple EC2 instances in AWS ELB

I'm setting up server that will host multiple SSL domains across a wide range of load balanced EC2 instances and being a programmer who really sucks at network/infrastructure stuff I had some ...
0
votes
0answers
61 views

Force end user browser to forget old SSL - Caching & Secure Pages

Problem I recently switched the domain of my website. websiteA.com to websiteB.com (Stack: LEMP, running memcache and Varnish for caching.) I set up nginx to 403 re-direct everything and on new ...
0
votes
1answer
54 views

Early SSL termination

Just say you are terminating http SSL connections on an intermediary server like Cloudflare, this will decrypt the data and then forward it onto the server for processing. What is the performance gain ...
1
vote
1answer
128 views

How to convert certificate from CA to .pfx file?

I have been struggling since last night to create a .pfx file using OpenSSL. I have been following this document and have been following the instructions under the Get a certificate using OpenSSL ...
-2
votes
1answer
42 views

Simple http/https redirects [duplicate]

Is there a lightweight web server that only does http/https redirects? Right now I am looking at using lighttpd, but even than seems like overkill for what I need to do.
0
votes
2answers
132 views

Exchange 2010 Split-Brain DNS with an SSL for External DNS name

Last weekend I did a swing migration from Exchange 2003 to Exchange 2010. It all went fine, but now my users are getting a Security Alert ~ "The name on the security certificate is invalid or dose ...
0
votes
0answers
31 views

Oracle Content Server Losing HTTPS on adfAuthentication

This has been a nagging problem for a while now, in summary we have the following setup. Cisco ACE Load Balancer -> Oracle HTTP Sevrer -> WebLogic We are terminating the SSL on the load balancer, ...
1
vote
0answers
105 views

cURL Chain Issues

On Ubuntu 13.10 running the system curl: curl --version curl 7.32.0 (x86_64-pc-linux-gnu) libcurl/7.32.0 OpenSSL/1.0.1e zlib/1.2.8 libidn/1.28 librtmp/2.3 Protocols: dict file ftp ftps gopher http ...
1
vote
1answer
134 views

Apache2 SSL websites keep redirecting to the default website

so I have a Apache2 web server fully operational running in ubuntu. I have successfully modified the vhosts file for normal :80 requests and all web sites function correctly. However, once I attempted ...
0
votes
1answer
202 views

StartSSL.com SSL Class2 Certificate and Postfix

currently my Postfix 2.11 instance runs TLS on a GoDaddy SSL Certificate but as i would like to be able to access my server from smtp.example.com as well as imap.example.com, example.com or ...
0
votes
1answer
113 views

SSL Cert error after migrating to hosted exchange service

OLD SETUP SBS 2011 w/ Exchange and all clients running Office 2010 (using rpc/http as many were laptops) NEW SETUP All mailboxes and accounts moved to hosted Exchange. Local Exchange services ...
0
votes
1answer
822 views

Configure Nginx as reverse proxy with upstream SSL

I try to configure an Nginx server as a reverse proxy so the https requests it receives from clients are forwarded to the upstream server via https as well. Here's the configuration that I use: http ...
0
votes
0answers
62 views

Fixing nginx 1.4.6 dependency on old openssl version (libssl0.9.8)?

I'm trying to enable TLSv1.1 & TLSv1.2 on my Ubuntu 12.04 EC2 instance w/ nginx 1.4.6, but this version of nginx is dependent upon libssl0.9.8, even though the newest version of OpenSSL is ...
2
votes
2answers
123 views

Nginx issues between vhosts and SSL

I have two sites in the same IP with the follow configuration: site1.com Multiples subdomains (ie.: foo.site1.com, bar.site1.com) Everything listening on port 80, NOTHING in 443 ...
1
vote
1answer
53 views

Is it “safe” to use IIS for HTTPS?

I am trying to setup HTTPS in IIS (Windows Server 2008 R2 and Windows Server 2012) as secure as possible. In order to mitigate attacks such as BEAST and weakness of RC4, while trying to use ECDHE ...
9
votes
2answers
410 views

Does it matter where the CSR and key files for SSL certification are generated?

I have to create a CSR for a wildcard SSL certificate. Some FAQs from SSL providers say that I should generate the CSR file on the machine where I want to install the certificate? My understanding is ...
1
vote
0answers
142 views

SSL exception “No name matching domain found” apache in front of 2 tomcats servers

I have 2 servers. Server1 is an Ubuntu 12.04 LTS with Alfresco 4.2 on Tomcat. Server2 is a Windows 7 with my CAS server (SSO) on eclipse installation. Both have apache with mod proxy AJP in front to ...
-3
votes
1answer
110 views

Upgrading to freebsd10 breaks apache24

Until now I was using freebsd9 with apache22 with ssl, every thing went well. But recently I moved to freebsd10 (fresh install) and then installed apache24 with same config as on old machine. ...
0
votes
1answer
57 views

SMTP Connection disconnecting after “STARTTLS”

We're having issues with our mail server. Basically some emails from external networks are not being accepted by the mailserver. After some debugging using telnet and looking through the logfiles, it ...
0
votes
0answers
19 views

Let Postfix show the appropiate SSL Certificate for a variety of host names

i bought an SSL Certificate for domain host.domain.com so my GNU/Linux mail server can deal with secure connections appropriately. That's ok while clients connect to host.domain.com but when they ...
1
vote
1answer
108 views

What is the “server.crt” in this example?

I'm looking at the example on this page: $ openssl verify -verbose -CAfile cacert.pem server.crt server.crt: OK What I'm using as my cacert.pem is my (professionally signed) root certificate ...
1
vote
2answers
63 views

How to verify signed certificate?

I have two SSL certificates: One for snipsalonsoftware.com which is currently in place and working properly. One for app.snipsalonsoftware.com which has been purchased but not yet installed. What ...
0
votes
1answer
28 views

How do I tell if a root CA is in place for a particular SSL certificate?

I have another question where I ask about an SSL problem I'm having. One commenter asked, "Are the root CA and intermediate CA also in place?" I understand that CA stands for Certificate Authority, ...
-2
votes
1answer
147 views

Why openssl s_client and gnutls-cli deliver different certificates (own server)

on my server i have multiple virtual hosts with apache2. Some with domain *.example-one.org and some whith *.example-two.org. Each domain has it's own wildcard certificate. When I fetch the ...
0
votes
0answers
126 views

What does it mean that no cert given is a “domain name certificate”?

I'm trying to add an SSL certificate to Heroku but I'm getting an error: heroku certs:add domain.pem private.key Resolving trust chain... failed ! No certificate given is a domain name ...
0
votes
1answer
240 views

SSL on AWS? Cert installed but still having issues

We bought an SSL certificate (From Comodo) and when I visit the page in Chrome I see the green padlock and it has the following information: Your connection to ...... is encrypted with 128-bit ...
0
votes
0answers
32 views

Cygwin - Squid SSL bump

I've done a full installation of cygwin on a windows server 2008 r2. I installed squid through the setup.exe My problem is this: I need ssl-crtd to be enabled on my Squid. When I did this on Ubuntu I ...
-1
votes
1answer
85 views

Opscenter 4.1 - ssl agent communication vs internal authentication

My question relates to Opscenter 4.0.2 and Cassandra 2.0.4 with SSL and Auth : agent can't connect. The provided answer does help, but creates another problem. To summarize, everything runs find ...
0
votes
2answers
46 views

Enable Apache Virtualhost Site To Only View Over SSL [duplicate]

Viewing site over http and https are both working but prefer to configure it so that ALL visitors ONLY go through the SSL connection so that it always start with http*s*://www.example.com - what am I ...
0
votes
1answer
427 views

Restart of nginx service fails because of /etc/nginx/nginx.conf test failure

Installing 3rd party SSL on DigitalOcean Droplet, Apache running Ubuntu 12.10. Following the instructions here: AlphaSSL on Apache Self signed SSL instructions from DigitalOcean So everything ...
1
vote
1answer
67 views

what are the security implication of intentionally leaking a ssl certificate?

I have a website (http://example.com) which makes some requests to http://localhost:12345 in its javascript. I want to open this website over https but due to mixed content some browsers throw ...
1
vote
0answers
186 views

500 OOPS: SSL: cannot load RSA private key vsftpd

Im configuring vsfptd on debian 7.3, Im trying to use ssl. I generate de certficates using this command: openssl req -x509 -nodes -days 1925 -newkey rsa:2048 -keyout /etc/vsftpd/private/vsftpd2.key ...
1
vote
0answers
288 views

How to have Jetty redirect http to https on the same port?

This question is related to How to have Jetty redirect http to https and Jetty 9 - redirect http to https but not answered in either location. Basically, we run our app at some port, say 8085. We ...
0
votes
1answer
70 views

Use Wildcard SSL with Amazon EC2 instance, secure.mydomain.com -> EC2 instance

I recently purchased my first wildcard SSL certificate and I am trying to use it to secure the connection between my site (Cent OS 6 VPS) and an Amazon EC2 instance running Ubuntu 12.04. My primary ...
1
vote
0answers
111 views

Virtual hosts with port 80 & 443 not working

I can't figure out why I can't connect to my VPS. httpd.conf: i added: Listen 80 listen 443 NameVirtualHost *:80 NameVirtualHost *:443 <VirtualHost *:80> SSLEngine off ServerAdmin ...
2
votes
2answers
173 views

Rabbitmq federation with SSL client certificates not working

I'm trying to set up a federated pair of rabbitmq servers authenticated with SSL client certificates. I've generated a set of keys and certificates, but I get this error on one server when the other ...
1
vote
1answer
102 views

Nginx: it takes too long to establish a ssl connection

I have a nginx set up with ssl certifivate. Recently I noticed, that establishing connection to that server sometimes takes way too long (8+ seconds). In chrome developer tools I can see, that all of ...
0
votes
1answer
22 views

Certificates/SSL via SSL-Proxy vs. real certificate for a server

While researching the different certificate types I've come across hosters that offer what they call SSL-Proxy type installations for their servers. I'm concerned about this idea, as it defeats what I ...
0
votes
2answers
151 views

nginx redirect https://www to https:// non-www without untrusted connection warning?

I have a valid SSL certificate for myapp.com, but not for www.myapp.com. Based on this question, it seems to me that it's not possible to immediately redirect from https://www.myapp.com to ...
1
vote
1answer
45 views

How to best encrypt http traffic between frontent (VPS/AWS) and remote backend?

I have a couple of frontend servers running on AWS (running pound for SSL termination and Varnish for caching). My backend is at a remote location (not on AWS). I am looking for the best/fastest way ...
0
votes
0answers
66 views

IIS/OWA is not handling new SSL Certificate

I recently created a new SSL Certificate and self-signed it via this tutorial. The new certificate showed up in the list of certificates. I then assigned IMAP, POP, SMTP & IIS to the ...
1
vote
1answer
62 views

How to unable mail.example.com from browser (ISPConfig)? [closed]

I am running under Debian 7 + ISPConfig 3. I have recently configured the dns (at OVH web hosting service) so that ISPConfig manages the dns zone. For foobar.com, I have a MX record that points to ...
0
votes
1answer
100 views

SSL Cert Expire or Caching issue, don't understand [closed]

If I visit BT's site in Chrome I get this ... http://imgur.com/b05alsX It looks like the cert has expired. (Similar in Firefox) BT claim it isn't. https://twitter.com/BTCare/status/440405157999030272 ...
1
vote
0answers
51 views

SNI and wildcard SSL certificates on the same server with IIS

I'd like to host a website that should listen to subdomains (e.g. sub.domain.com) together with multiple websites that live just under a second-level domain (e.g. domain2.com, domain3.com) with IIS ...
1
vote
2answers
32 views

Correct configuration for SSL over 3 domains on same IP in nginx

I have been working on this for several hours now, to no fruition. Right now I have three domains, for example domain1.com, domain2.org, and domain3.net. These domains are all using the same IP ...
0
votes
1answer
88 views

Hostname mismatch while connecting to XMPP server?

I have the following problem: After I setup an intranet Jabber/XMPP server, I asked an SSL certificate for my server, so people can connect securely using a valid certificate. The DNS of example.com ...
0
votes
1answer
117 views

Ubuntu server failing to perform SSL handshake (ssl handshake failure:s23_lib.c)

This is started as a Java issue (there's a stackoverflow question) and it turns out it's not really Java-related as I can reproduce it with wget. This happens in 3 different Ubuntu boxes. $ wget ...
0
votes
0answers
21 views

Exchange domain name change + SSL deployment

My problem: Currently OWA and ActiveSync can be accessed through https://rmt.companyname.com/owa and https://rmt.companyname.com/Microsoft-Active-Sync with a self-signed SSL. I would like to modify my ...
0
votes
0answers
324 views

openssl s_client -connect: 20 error with server signed certificate for client

What I want I want to connect to a server using a given signed certificate (by the company running the server) What I have Ubuntu 12.04 LTS My key and CSR files A signed certificate. It was signed ...
0
votes
0answers
15 views

Windows Server 2008 - HTTPS connection timing out

On my Windows Server 2008, I've got an EV SSL certificate set up in IIS and: HTTPS binding has been set Inbound HTTPS port 443 is open Web application has no errors SSL Certificate is valid Yet, ...