SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
0answers
48 views

Generate .pb7 or .p12 certs from .pem

I'm trying to enable SSL for Boomi webservices. I've followed the instructions on their documentation to generate the CSR and sent it to CA for signing. I've received the signed certificate in .pem ...
0
votes
0answers
66 views

Strict-Transport-Security on CloudFront with S3 origin?

My company's site has a static homepage for speed and cost reasons. We use S3 as the origin for CloudFront. Now, we would like to declare Strict-Transport-Security for the entire domain, but S3 seems ...
0
votes
0answers
23 views

Heroku won't recognize my intermediate cert

I have two subdomains: www.snipsalonsoftware.com and app.snipsalonsoftware.com. The www subdomain is pointed at a Rackspace Ubuntu server running apache and the app subdomain is pointed at Heroku. I ...
0
votes
0answers
50 views

OpenVPN and adding .p12 cert

Is there a way to add the .p12 type of cert to the openvpn config file? I've read and learned how to add the other files like so: <ca> -----BEGIN CERTIFICATE----- # insert base64 blob from ...
0
votes
0answers
45 views

Can I terminate an SSL Tunnel at the Load Balancer in Amazon VPC?

In other words, can the Amazon VPC load balancer be configured as an SSL Host? As a proof of concept, we've created this setup: Heroku Appserver <---> VPC Load Balancer <---> Ubuntu SSL ...
0
votes
0answers
64 views

Apache2 listening on https port but not responding to https request

I am trying to setup a re-direct from http to https on apache and have the following config : <VirtualHost *:80> ServerName www.mycompany.eu ServerAlias mycompany.eu ...
0
votes
0answers
82 views

Client authentication on tomcat fails

I have a Apache Tomcat 7.0.39 server running on a Windows server machine and I'm trying to enable client authentication. I first tried this using eclipse on a client machine I have (also on windows ...
0
votes
0answers
50 views

Loading pem certificate files in Tigase server

I'm trying to load a SSL certificate sign by thawte in a XMPP server running on Tigase 5.2. As described in this howto the certificate is in certs/ folder, but the server rename it with .bak extension ...
0
votes
0answers
82 views

Nginx redirect https://www.dom.com to https://dom.com on multi-domain setup

I am struggling to get my Nginx to redirect my ssl requests. It is a bit complicated setup I believe. I have multiple servers on multiple domains and subdomains, say sub1.dom.com, sub2.dom.com, and ...
0
votes
0answers
42 views

SSL cert issued to and SAN attribute

I have added a cert to my application cacerts file. The new cert is issued to one DNS(abc.com) and they have added few other DNS(XYZ.com, TEST.com) to the SAN attribute while creating. I tried ...
0
votes
0answers
159 views

Convert IIS CA Certificate to Ubuntu Haproxy cerificate

Alright, I setup a simple Windows 2012 R2 RDs server aio farm with Web Access, everything works fine internally if I access the server directly (https: // rdsiisserver/RDWeb/). I created a Ubuntu ...
0
votes
0answers
146 views

When trying to ProxyPass with SSL on Virtual Host (Apache2) I receive AH01630: client denied by server configuration: /var/www/

To give a little background; I am on EC2. I am running Apache2 version 2.4.7. I have also opened port 443 on my security group to allow SSL traffic. What I am trying to do in the long run is have a ...
0
votes
0answers
70 views

SSL Certificate error only on host server

I'm running Windows Server 2008 R2 with IIS 7.5. This is in a development environment. I have a self-signed certificate, and a second wildcard server authentication certificate which was issued by ...
0
votes
0answers
66 views

Can you do a masked URL rewrite to a different protocol (in Apache)

Apache 2.2.15; I want to do: RewriteCond %{HTTP_HOST} site1.com RewriteRule (.*) https://site2.com [R=301,P,L] But that does not work. I put the P in there thinking it might allow the mod_proxy ...
0
votes
0answers
108 views

Proxy to SSL site (on another server) from a non SSL site

I have a *:80 virtual host in Apache 2.2.15 which is just a bunch of URL rewrites like: ServerAlias foo.bar biz.baz tit.tat RewriteRule / http://somesite.com (R=301,L) ServerAlias ...
0
votes
0answers
489 views

Apache mod_proxy with HTTPS without key material (using SNI)

I would like to have an Apache 2.4 proxy which redirects port 80 and 443 requests to different machines in the local network, depending on the host name. I used mod_proxy and it works fine with port ...
0
votes
0answers
140 views

Nginx configuration: continue sending request to application server on ssl_client_verify FAIL

I am currently using nginx/uwsgi, with nginx to check validity of client certificates (if one is provided). server { ... location /example { ... uwsgi_param SSL_CLIENT_VERIFY ...
0
votes
0answers
64 views

Nginx catch-all ssl block with return invalidates all other ssl hosts

I recently tried to set up the following server block: server { listen 80 default_server; listen [::]:80 default_server; listen 443 ssl default_server; # this and listen [::]:443 ssl ...
0
votes
0answers
48 views

Apache occasionally returns no data responses for certain pages

Occasionally, perhaps once every 3 days, Apache will start emitting empty responses (Chrome says No Data Received; it looks like the connection is terminated) for the registration page of our LAMP ...
0
votes
0answers
113 views

IIS 6.0 SMTP Relay mail to other mail server through SSL port 465

May i know iis smtp relay can/can't support to mail server (Zimbra) through SSL (Port 465). i just can see the check box of TLS encryption, pls help, thanks a lot. SMTP Relay Version Internet ...
0
votes
0answers
54 views

apache issue with https requests

I am running Apache/2.2.27 WHM vps and have problem with https requests. http requests are handled fine but when a single https page is visited, several requests are shown in "R" (reading) state in ...
0
votes
0answers
82 views

Putty wrong passphrase

I connect to a remote server via SSH and I used a private and public key pair to do so, I usually do this on my laptop but today I wanted to set it up on my desktop. So I copied over the Private key, ...
0
votes
0answers
61 views

CreateObject failing when running asp application through https on iis7

I am running an asp site on iis7 / Server 2008. I have two websites set up in IIS pointing at the same application, one site uses http, the other uses https. When executing a script, the site using ...
0
votes
0answers
55 views

Self Signed SSL Cert - Browser Warning

I generated a new self-signed cert for one of our intranet sites. The old cert expired today. I pushed the new cert out via GPO and deleted the old one. I can see on the client that the new cert has ...
0
votes
0answers
97 views

How to setup testing environment for local HTTPS website?

I'm developing a web application on a local Ubuntu machine. Some IE8 users have problems with Javascript when the application is loaded over SSL. To debug this issue, I need to reproduce the problem. ...
0
votes
0answers
144 views

How do I get “redirect permanent” to work in Safari?

I want to force https. All certificates, signed and ready, are working. In httpd.conf, I put: redirect permanent / https://my.site.org It seems Firefox and Chrome use https, but in Safari it just ...
0
votes
0answers
99 views

How to approach SSL encryption with file uploads

I added SSL to a site I'm putting together, and it caused a huge error that I have no idea how to approach. The user logs into the site, which allows them to upload files to the server into a ...
0
votes
0answers
93 views

Apache2 SSL - Page randomly displays strange encoding

I have a Java EE web application running on JBoss AS6 that sits behind a Apache using AJP connection We have recently added an SSL certificate and configured the application so that all login pages ...
0
votes
0answers
42 views

ASP.Net Developer

We’ve created a web service using C# .Net, Framework 2.0, and are hosting it on a Windows 2008 R2 box using IIS 7.5. The site on which the web service resides is an extranet site using SSL. The SSL ...
0
votes
0answers
52 views

Single domain with Apache https as a proxy for many local servers

Using Apache we need to setup number of instances of our application running on different servers internally in such a way that they are visible under our single domain name externally. This is so ...
0
votes
0answers
64 views

Why does nginx ssl_session_id change on the next request after a HTTP post?

I was trying to use ssl_session_id for an additional validation step during authentication in my web app, but it seems like nginx changes the ssl_session_id after a POST request or maybe other ...
0
votes
0answers
283 views

Wildcard and multiname certificates aren't recognized by clients?

So, this is my problem. I have dev environment under internal domain - let's say machine name is dev. Every single working copy I create is autodetected by puppet and appropriate virtual host is ...
0
votes
0answers
54 views

Lync + SSL terminating web proxy

In my organization they federate using Lync with many partners - it works for everything except for sharing whiteboard and powerpoint presentations. When we attempt to join the whiteboard, we get a ...
0
votes
0answers
191 views

Apache2 unable to start: private key not found

today I edited some vhosts in my Apache installation and when I tried to restart it I got this error: [Sun Jun 08 15:20:19 2014] [error] Init: Private key not found [Sun Jun 08 15:20:19 2014] [error] ...
0
votes
0answers
277 views

Nginx proxy with SSL Authentication

My proxy needs to be mutually authenticated, and the forwarded-to server (in another cluster) needs to be mutually authenticated. Therefore, the proxy needs to forward the request to that server using ...
0
votes
0answers
197 views

sSMTP Configuration issue for Zoho mail

I was using following configuration to send from Gmail from sSMTP from Ubuntu using PHP # # Config file for sSMTP sendmail # # The person who gets all mail for userids < 1000 # Make this empty to ...
0
votes
0answers
35 views

Amazon EC2 + SSL Godaddy are not routing properly in HTTPS

I have an Amazon EC2 + SSL just installed on GoDaddy. I have successfully managed to install it and get the green https on the main domain https://www.example.com however it doesn't any ...
0
votes
0answers
115 views

What is incorrect about my RabbitMQ / Erlang configuration

I'm attempting to configure RabbitMQ with SSL using client certificates for authentication on a windows server 2012 x64 box. The Erlang version installed is OTP 17.0 for Windows x64, Configuration ...
0
votes
0answers
58 views

SSL warning appears only to some devices

I have godaddy ssl certificate for domain.There wasn't any problems with my SSL certificate and visiting my domain(Haven't receiveed any errors), but couple times(two weeks ago) when I visited site ...
0
votes
0answers
264 views

Unable to get private key, path is correct, file readable

When testing Cyrus IMAPs connection, the connection fails with: May 12 21:03:16 mail cyrus/imaps[25758]: executed May 12 21:03:16 mail cyrus/imaps[25758]: accepted connection May 12 21:03:16 mail ...
0
votes
0answers
2k views

Encrypted Alert Error 21 Wireshark SSL 3.0 error

I continue to receive schannel errors in the event log on an exchange server using outlook web access (OWA). From the capture I took during one of these schannel errors I see IP address 65.55.53.190 ...
0
votes
0answers
827 views

Fixing TLS renegotiation vulnerability on Apache 2.2.3

On a RHEL 5.3 server, I have Apache version: Server version: Apache/2.2.3 Server built: Nov 12 2008 07:09:03 Server's Module Magic Number: 20051115:3 Server loaded: APR 1.2.7, APR-Util 1.2.7 ...
0
votes
0answers
63 views

CLOUDFRONT - Site host name, https://media.domainname.com, does not match your SSL certificate Subject Name

I woke up this morning to an email from Google Webmaster Tools saying the following: We have noticed that the host name of your site, https://media.domainname.com, does not match any of ...
0
votes
0answers
491 views

Failed to Configure CA Certificate chain after Rebuilding/Re-Installing OS

I got my free ssl at startssl.com and it works really fine. My site is working with https://. After I configure LAMP and VSFTP and broke something in there, I decided to re-install UBUNTU 12.04 OS to ...
0
votes
0answers
208 views

Full SSL site: SSL Negotiation Time and Cipher Suite in Nginx

Here is my Waterfall http://www.webpagetest.org/result/140417_42_H0D/1/details/ It is taking too much time in SSL negotiations. I tried to apply following article: ...
0
votes
0answers
144 views

Windows 2012 - Certificate Issue

My application runs as a WCF web-server in a Windows service. It uses https/ssl protocol and binds it's certificate with its port number. During the Service start, I am seeing this error in Windows ...
0
votes
0answers
152 views

Force end user browser to forget old SSL - Caching & Secure Pages

Problem I recently switched the domain of my website. websiteA.com to websiteB.com (Stack: LEMP, running memcache and Varnish for caching.) I set up nginx to 403 re-direct everything and on new ...
0
votes
0answers
117 views

Fixing nginx 1.4.6 dependency on old openssl version (libssl0.9.8)?

I'm trying to enable TLSv1.1 & TLSv1.2 on my Ubuntu 12.04 EC2 instance w/ nginx 1.4.6, but this version of nginx is dependent upon libssl0.9.8, even though the newest version of OpenSSL is ...
0
votes
0answers
310 views

What does it mean that no cert given is a “domain name certificate”?

I'm trying to add an SSL certificate to Heroku but I'm getting an error: heroku certs:add domain.pem private.key Resolving trust chain... failed ! No certificate given is a domain name ...
0
votes
0answers
136 views

IIS/OWA is not handling new SSL Certificate

I recently created a new SSL Certificate and self-signed it via this tutorial. The new certificate showed up in the list of certificates. I then assigned IMAP, POP, SMTP & IIS to the ...