SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
0answers
22 views

nginx - cannot get my subdomain running fine

I have a server "emberhub.me" with one subdomain "test.emberhub.me" I want to use SSL on all ... emberhub.me and www.emberhub.me requests should display the 'standard' Nginx welcome page ( /usr/...
0
votes
0answers
29 views

Scan Ciphers on FTPS port

I'm trying to remove RC4 ciphers per BEAST, but I'm having trouble verifying that there are ciphers available on my FTPS ports. NMAP returns the cert on the port, but doesn't say anything about the ...
0
votes
0answers
16 views

Accessing self signed SSL website in iis remotely shows error in ie

I have created a self signed SSL in IIS for the default website. I have used the solution here to get rid of certificate error while accessing the site locally however the requirement is that the ...
0
votes
0answers
69 views

FTP protocol Extremely slow on Windows 10. What could be causing this?

I am running 2 different devices (A pc and a laptop) both on the same network, both Windows 10. The laptop has standard transfering speeds on the FTP protocol. The PC has extremely slow transfer speed ...
0
votes
0answers
73 views

SSL Error when pressing CTRL+F5 (overwriting cache) in Firefox

I have an nginx server which fails to correctly delive ssl, when a user presses ctrl+shift+r or ctrl+F5. These shortcuts reload the page and bypass the browser cache. It seems to work in Chrome and ...
0
votes
0answers
37 views

SSLv3 seems to be not disabled even after tomcat 6 server xml changes TLSv1

Even after setting in server.xml as sslProtocol="TLSv1" when we do vulnerability check, the below are the details of output.. # /usr/sfw/bin/ > openssl s_client -connect ipaddress:portNo -ssl3 ...
0
votes
0answers
33 views

certutil and pk12util fail to import distinct certificate/key to Mozilla NSS database

I am about to build LDAP access via TLS on a Centos 6.7 system. I created a CA key (CA.key) and certificate (CA.crt) in /etc/openldap/cacerts. Likewise I created server.key/server.csr and created a ...
0
votes
0answers
79 views

too many redirects when using SSL

Im having an issue with https redirects. Ive tested in chrome, firefox and safari. When i load my website using https i get the errors Firefox: "The page isn't redirecting properly" Chrome: "...
0
votes
0answers
27 views

Initial page load slow using Tornado server and Apache2 for SSL reverse proxy

I'm experiencing long delays (generally minutes, but sometimes the page never loads) for my website (en-real.com) if the site is being accessed by a new user (browser). If the new browser refreshes ...
0
votes
0answers
60 views

EssentialSSL Intermediate CA

Where can i find the EssentialSSL Intermediate CA? I downloaded the bundle from https://support.comodo.com/index.php?/Default/Knowledgebase/Article/View/979/108/domain-validation-sha-2 , then ...
0
votes
0answers
73 views

RabbitMQ SSL Configuration

I generated a letsencrypt certificate and tried to configure the cert with my rabbitmq server. I enabled both rabbitmq_management and rabbitmq_mqtt plugins with the same ssl cert configuration. My ...
0
votes
0answers
69 views

NGINX server_name configuration

I have setup my NGINX server and got the necessary ssl certificates for having a TLS/SSL connection Am working with an API that posts data to my server. For security the API requires mutual ...
0
votes
0answers
24 views

SSL Port 8443 blocked in node.js

I have node.js listening on port 8443 using SSL . net stat shows node listening and I can telnet to the port. However, access is blocked for some reason. Firewall list ports shows that the port is ...
0
votes
0answers
34 views

Azure Web App Service - Installed SSLcert from SSLs.com OK, but nothing works

I successfully deployed my .net webapplication to Azure App Services (WebApp), access to http ://mywebappAAA.azurewebsites.net and https ://mywebappAAA.azurewebsites.net are working properly. I ...
0
votes
0answers
40 views

Some (but not all) static content proxied by nginx loads successfully

I have nginx setup on my windows machine as a reverse proxy, listening on 443 over ssl. When I hit a particular url, it is supposed to serve a node js web application that I have running locally. It ...
0
votes
0answers
43 views

IIS 7.5 restore causing schannel fatal error 51

I am in a middle of a disaster recovery test. We did full disaster recovery backup (Using Novastore) of our production Win 2008R2 with IIS 7.5 and restored it to identical hardware at an off-site ...
0
votes
0answers
38 views

Trust a Self-Signed SSL Cert (RHEL) for LDAP over TLS

My Setup Mac OS X Server (El Capitan) as the OpenDirectory Server RHEL 6.5 connected via LDAP for authentication I have set /etc/sysconfig/authconfig on the RHEL server to "FORCELEGACY=yes" just ...
0
votes
0answers
36 views

trying certificate authentication with python3 - ftplib got an unexpected keyword argument 'context'

I got this error while trying to use ftplib.FTP_TLS function as described in documentation here. Here is my MWE : (I run it with python3 on debian) import sys,ssl from ftplib import FTP_TLS # only ...
0
votes
0answers
50 views

DirectAdmin ssl cache lock

strange log came out from web error log: (43)Identifier removed: AH02026: Failed to acquire SSL session cache lock (43)Identifier removed: AH02026: Failed to acquire SSL session cache lock (43)...
0
votes
0answers
44 views

Azure security HTTPS vs VPN vs ExpressRoute?

We're getting ready to release a Web API and I'm confused about the best way to secure it. Users will request data like: Browser -> HTTPS -> On-premise nginx -> ??? -> Azure worker -> Azure MSSQL ...
0
votes
0answers
944 views

Ignore certain endpoints in nginx SSL rewrite rule

I am currently redirecting all traffic on my site to https using the following rewrite rule: if ($ssl_protocol = "") { rewrite ^ https://$host$request_uri? permanent; } I would like ...
0
votes
0answers
59 views

using keystore in nginx configuration

Im new to using NGINX and keystore. Kindly forgive my ignorance. I'm working with an API that posts data to my server. The API requires mutual authentication to be done. So we I have a signed ...
0
votes
0answers
111 views

Magento NGINX SSL ERR_TOO_MANY_REDIRECTS

Im having an error ERR_TOO_MANY_REDIRECTS Im implement the ssl and i get the errors In Magento i have the sites with ssl web/unsecure/base_url https://pontebuso.com/ web/secure/base_url ...
0
votes
0answers
18 views

force mysql cleint to start SSL/TLS immediately without server's plaintext handshake

I am trying to get HAProxy to do the SSL for a MySQL Proxy in front of a MySQL Server, however my problem is the mysql client is waiting for the Initial Handshake Packets from the server, and the ...
0
votes
0answers
50 views

Installing a SSL certificate to a Domain Hosted in AWS

I have domain example.lk hosted in Amazon AWS. And I want it to be accessed (only) using HTTPS. In other words I want to redirect all my traffic to the website http://example.lk to https://example.lk ...
0
votes
0answers
124 views

nginx reverse proxy for gerrit breaks with http_ldap and ssl

I am trying to get nginx to ssl reverse proxy gerrit with http_ldap authentication. Here are my tests: nginx operating as an https proxy and gerrit using ldap auth -- works nginx operating as an ...
0
votes
0answers
55 views

setting up ssl on amazon ec2 linux instance

I have been struggling to setup ssl on my amazon ec2 server from 2 days. I have gone to aws docs for setting it up. I have generated private key and csr and got ssl certificate from www.ssl.com. I ...
0
votes
0answers
58 views

Python/Django/WSGI/Apache webserver gateway timeout with outgoing SSL connections with urllib2/urllib3/requests

I have a webserver serving Django through Apache 2.4 with mod_wsgi and Python 2.7 on Ubuntu 14.04. Outgoing connections with any of urllib2, urllib3, or requests, connections to non-SSL (on port 80) ...
0
votes
0answers
136 views

Changing SSL-version for curl

I have been trying for hours to change the SSL Version for curl from NSS to OpenSSL because I have a web application that's dependant on it. I'm running RedHat RHEL 6.7 on a 64-bit system. I have ...
0
votes
0answers
93 views

How to run PowerShell ActiveDirectory command Get-ADObject over SSL

To query AD DS or AD LDS, I can successfully run the following Powershell commands: get-adrootdse -server 'localhost:389' get-adobject -server 'localhost:389' -searchbase 'dc=test,dc=com' -...
0
votes
0answers
41 views

Disable SSL verification on Hsts

When i try to run openssl s_client -connect www.merdincz.com:443 -debug command i'm getting; SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error On SSLLabs https://www.ssllabs.com/...
0
votes
0answers
33 views

Amazon ec2 apache needs to restart frequently

I launched a new instance on amazon ec2 (Frankfurt availability zone) and installed apache server (php & MySQL) and an SSL certificate. The website is not launched yet so there is no traffic. ...
0
votes
0answers
11 views

Add Site Certificate for Java system wide

I have a server that uses java and if we try to access it complains about the certificate. The best approach is to download the cert and add it into Java's certificate exception list. This is being ...
0
votes
0answers
57 views

Apache SSL mod_wsgi only getting directory listing

I'm trying to setup SSL with Apache and mod_wsgi (flask app). The http version of the site works fine, and I've tried duplicating the virtual hosts section minus the WSGIDaemonProcess statement, plus ...
0
votes
0answers
43 views

HTTPS tomcat 7 working only with curl not in browser

I have added in server.xml: <Connector port="8081" protocol="HTTP/1.1" SSLEnabled="true" maxHttpHeaderSize="8192" maxThreads="150" minSpareThreads="25" enableLookups="false"...
0
votes
0answers
179 views

Set up IIS as forward proxy for HTTPS requests

Is it possible to set up IIS as a forward proxy for HTTPS requests? My use case is this: I have some process running locally on the IIS machine which is able to make HTTP calls, but not HTTPS calls. ...
0
votes
0answers
54 views

SSL in aws ec2 windows running node js

I have a domain via namecheap (say example.com) and server is a aws ec2 windows instance. There's a node js server listening at 443 , with following code require('https').createServer({ key: fs....
0
votes
0answers
21 views

SSL's don't work on both www. and non www. when using SNI in IIS

I am trying to migrate some ASP websites from a Windows 2008 environment where each host using an SSL is on a separate IP. I would like to move these websites to a Windows 2012 environment where each ...
0
votes
0answers
31 views

OpenVPN with IPSec

OpenVPN with IPSec We are using OpenVPN to connect multiple devices. The customer requires using IPSec, but OpenVPN is SSL VPN. Their website says this OpenVPN's security model is based on using ...
0
votes
0answers
49 views

ssl (https) for https://my.example.com resolves to https://example.com ip address

I have a server my.example.com with ip address 111.111.111.222 I have a server example.com with ip address 111.111.111.111 I created an ssl certificate with letsencrypt for my.example.com However, ...
0
votes
0answers
57 views

Windows Server 2008 R2 with IIS7 - RC4/SSL3 disabled, but still flagged for having them

According to IIS Crypto, my RC4 and SSL3 items are disabled; however, ssllabs still rings up the site as failing. SSLLabs result IIS Crypto results: IIS Crypto results Same settings on server and ...
0
votes
0answers
35 views

Single certificate for postfix/dovecot mail server with multiple domains

I have a single IP-address and thus one mail server (postfix+dovecot on CentOS 7). I have one main domain name and each client has their own domain name on which they want to receive mail. All A and ...
0
votes
0answers
41 views

Custom Error Page doesn´t work with SSL

I have a custom 404 error page but unfortunatly when I install the HTTPS on my server and set everthing up so that https works the error page doesn´t work. When I enter a wrong url I just get a ...
0
votes
0answers
50 views

Squid3 + HTTPS Authentication issue

I've successfully setup Squid3 to work as a transparent proxy for HTTP and HTTPS, installed the CA on the machines. Everything works OK, but there is this corporation site I work for where Squid does ...
0
votes
0answers
46 views

Analyzing SSL Encryption Alerts

I have captured the traffic between my machine and my server using Wireshark, trying to find why some SSL requests fail. I've read this and this post about debugging SSL entries, and I'm able to find ...
0
votes
0answers
55 views

LetsEncrypt adding new Cert without killing Service

I use Let's Encrypt for my HTTPS certificates and every time I add a new cert or update a existing one I must stop my HTTP server on port 80 and start the Let's Encrypt script. I want to add new ...
0
votes
0answers
180 views

HTTPS Content Filtering without de-crypting traffic using squid?

I am attempting to terminate https traffic based on ACLs using ssl_bumping WITHOUT de-crypting the traffic in intercept/transparent mode. Has anyone got this to work before? I have copied my ...
0
votes
0answers
66 views

How to setup YouTrack over SSL in Windows

I installed YouTrack 6.5 issue tracker as MSI distribution in Windows Server 2008 Virtual Machine hosted in Azure. It runs in 80 port well, but I cannot find how to apply SSL. I read YouTrack ...
0
votes
0answers
57 views

How to use keystores and trust stores in linux & nginx

I am a newbie to implementing some of these concepts.I have a few questions to ask. I have read about keystores and trust stores using various links. The one that makes sense is this https://docs....
0
votes
0answers
68 views

Windows server 2012 R2: Adding support on new cipher

Environment Description I have a VM (hosted in Azure) cluster (one of many identical machines) that I'm using for running my application. I have noticed that some webpages are cannot be loaded in ...