SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
1answer
1k views

Having many subdomains with SSL--best practices?

I have a site that has many subdomains (one for each client). The content for each subdomain will be different, pulling different data, different layouts etc, so I don't think I can just alias one ...
3
votes
2answers
299 views

Apache SSL configuration testing

When I run configtest on our Apache server, I get the following: `Syntax error on line 1023 of /www/conf/httpd.conf: Invalid command 'SSLEnable', perhaps mis-spelled or defined by a module not ...
13
votes
6answers
24k views

Installing SSL Certificate for use in IIS7, installation “works”, but cert listing disappears

Windows Server 2008 R2, IIS7. We have an SSL cert from Go Daddy. It's a wildcard cert, so it will work across subdomains (e.g. *.domain.com). I followed the instructions located at ...
3
votes
2answers
149 views

Can I have a SSL certificate for direct IP access?

Is it possible to have a SSL certificate for access directly to an IP, and not through a hostname? Eg, can I purchase an SSL certificate to make https://1.2.3.4/ work without giving a security ...
3
votes
2answers
2k views

ssl certificate for www.example.com and example.com

I used make-dummmy-cert that comes with apache 2.2 and ssl_mod to make a self-signed certificate. I tried making it for www.example.com, example.com, or *.example.com, but none of them would work for ...
1
vote
1answer
4k views

Install SSL certificate for RDP on Windows 2003?

I need to configure SSL for RDP, and am following the instructions described here: http://thelazyadmin.com/blogs/thelazyadmin/archive/2007/01/26/Configure-RDP-over-SSL-with-SelfSSL.aspx My client's ...
3
votes
3answers
990 views

apache: mix name and ip based virtual hosts and ssl

I'm trying to configure apache 2.2 so that I can use two IPs. One for name based virtual hosts which should all use the same ssl-key and the other one for just one ip based host which should be using ...
3
votes
3answers
2k views

PCI compliance: using SSL as transport layer for RDP (Terminal Service)

My client failed her PCI compliance audit. The server supports Remote Desktop (Terminal Service) but only provides encryption and not authentication. This exposes the server to Man-In-The-Middle ...
4
votes
3answers
2k views

Double Wildcard SSL Certificates

Is there a registar that offers SSL certificates for: ..domain.com or something_fixed.*.domain.com? -- M.
1
vote
2answers
4k views

Redmine subversion won't ignore certificate error even if told

I have set up a copy of Redmine through the Bitnami Redmine Stack and am having trouble accessing a remote SVN repository through https. The trouble seems to be related to the fact that I don't have a ...
0
votes
1answer
385 views

How do I get squid peers to talk SSL to each other?

How would I set up a pair of squid proxies so that one uses the other as a parent and all traffic between them is encrypted using SSL? I've read the cache_peer documentation, but it's all very fuzzy ...
0
votes
1answer
573 views

SSL certificates work fine from command line but fails in script

I'm trying to setup email notifications for my continuous integration server. I have a script which uses nail to send the email when the build works: #!/bin/bash echo "Build Worked!" | nail -A myisp ...
2
votes
2answers
798 views

Recommendation for a non-standard SSL port

On our server I have a single IP, and need to host 2 different SSL sites. Sites have different owners so have different SSL certificates, and can't share the same certificate with SAN. So as a last ...
1
vote
1answer
5k views

Debian Apache2 SSL Issues - Error code: ssl_error_rx_record_too_long

I'm setting up apache on Debian lenny and having issues with SSL. I've been through numberous tutorials and i had this working on Ubuntu server, but for the life of me can't get anywhere with Debian. ...
1
vote
3answers
532 views

IIS 6 + 7 - do subdomains secured by a wildcard SSL cert still need to be on seperate IPs

A client needs over 15 SSL certificates for various subdomains on 2 machines - an IIS 6 and IIS 7 one. They want to buy 2 wildcard SSLs (1 per box) as it'd be more cost-effective. The question is, ...
11
votes
2answers
8k views

Save Remote SSL Certificate via Linux Command Line

Can you think of any linux command-line method for saving the certificate presented by a HTTPS server? Something along the lines of having curl/wget/openssl make a SSL connection and save the cert ...
4
votes
2answers
455 views

Digital signatures and encryption in GMail

I just wonder if there is a way to use SSL certificates or PGP keys for signing my email. At the moment I have to setup S/MIME in Outlook (or another thick client) to send signed messages via SMTP. ...
3
votes
1answer
757 views

IIS requesting certificates even though set to ignore

I have a web site in IIS 6 with directory security set to Require secure channel (SSL) and Require 128-bit encryption. Also, the Client certificates setting is set to "Ignore client certificates". ...
0
votes
1answer
494 views

MySQL query (over SSL) fails in IIS 7 using default AppPool identity

I am trying to run a website locally in Windows 7 under IIS 7. I have the AppPool configured to use "Classic" mode, but connecting to a MySQL DB that requires SSL fails. If I change the identity to my ...
0
votes
2answers
997 views

SSL in IIS 7 on a subdomain in a web farm

I have been having one of the most frustrating days in my entire IT career. I am trying to install an SSL certificate on a subdomain in a web farm. http://shop.mydomain.com needs to ALWAYS be forced ...
3
votes
2answers
128 views

Securing an SVN only server

Everything's running off of self-secured https. Aside from setting up user authentication, what steps should I take to be sure we're secured?
0
votes
2answers
555 views

Bugzilla with SSL

I have an install of Bugzilla I'm trying to implement SSL on. When I go into the parameters screen and edit SSLBASE adding in the full url: https://foo.com/bugzilla/ the editparams.cgi times ...
0
votes
3answers
544 views

Can I have HTTPS and HTTP for a single instance of an application?

I'm planning a web application that will have its own server behind the corporate firewall. There will be two sets of users, internal and external to the organisation. Internal users will be located ...
0
votes
1answer
580 views

Does Mac address base restriction is possible over Internet?

I want to restrict the access into my server on MAC Address base over internet... does it possible??? or there any other way of restriction over internet instead of IP address possible?? (My users ...
3
votes
2answers
11k views

https not working… binding set, certificate installed

I've installed the certificate and set the https bindings. However, when I load the site on https it does not load. I've looked at all the settings but everything seems correct. I've restarted the ...
20
votes
9answers
14k views

Multiple domains with SSL on same IP

I know that a dedicated IP is needed for setting up SSL. What happens if we add SSL for domains sharing an IP ? (Namevirtualhost)
0
votes
1answer
702 views

Mixing SSL and non-SSL content in an Apache2 virtual host

I have a (hopefully) common scenario for one of my sites that I just can't seem to figure out how to deploy correctly. I have the following site and directories for example.com: These need to ...
1
vote
1answer
2k views

How to set CA cert file for LDAP backend server in smbpasswd configuration

I am having a problem with smbpasswd, an LDAP backend server and SSL/TLS certificates. The client machine that I run smbpasswd on is a Debian Etch machine, and the Ldap server is Sun DS running on ...
15
votes
4answers
1k views

SSL certificate selection based on host-header: is it possible?

Is it possible for a web server to select an SSL certificate to use based on the host-header of the incoming connection, or is that information that is only available after the SSL connection is ...
1
vote
2answers
780 views

403.4 won't redirect in IE7

I have a secured folder that requires SSL. I have set it up in IIS(6) to require SSL. We don't want the visitors to be greeted with the "must be secure connection" error, so I have modified the 403.4 ...
0
votes
1answer
208 views

How to use SSL for some pages and not for others?

We are building an application where we want anything the following to be SSL: secure.ourapp.com -> all pages must be SSL (can this be done with a Vhost in apache?) www.ourapp.com/signup -> SSL ...
5
votes
5answers
390 views

What is the least expensive way to obtain 1,000s of public IP addresses?

What is the least expensive way to obtain 1,000s of public IP addresses? I'm needing to serve secure (https) pages for 1,000s of SSL certificates, and need a separate IP address for each SSL cert. ...
0
votes
1answer
1k views

502 Bad Gateway with nginx + apache + subversion + ssl (SVN COPY)

I've asked this on stackoverflow, but it may be better suited for serverfault... I'm having a problem running Apache + Subversion with SSL behind an Nginx proxy and I'm hoping someone might have the ...
2
votes
2answers
766 views

mod_rewrite redirect from SSL to HTTP not working

I want to use mod_rewrite to ensure that certain pages are served with SSL and all others normally, but I am having trouble getting it to work This works (redirect to SSL when request uri is for ...
0
votes
3answers
3k views

Help me set up ssl.conf for multiple domains (name-based vhosts in ssl.conf?)

In my httpd.conf: If I have my virtual host configured as: NameVirtualHost *:80 <VirtualHost *:80> ServerName foo.com ServerAlias www.foo.com Include conf.d/foo.conf ...
3
votes
1answer
556 views

What kind of SSL cert do I need for this vhost configuration?

If I have my virtual host configured as: <VirtualHost *:80> ServerName foo.com ServerAlias www.foo.com Include conf.d/foo.conf </VirtualHost> Can I get by with a single domain ...
1
vote
2answers
230 views

first time setting up ssl, tutorials haven't been too helpful

This is my first time trying to set-up an ssl for one a site, and I'm running it on a server that has 3 other sites already hosted. I'm running apache2.?? and the install came with an ssl.conf page. ...
0
votes
2answers
1k views

Issues with SSL key on CentOS

When trying to install a SSL key on my centos server, apache refuses to restart and I see the following errors in my log. [Tue Mar 16 22:32:58 2010] [error] Init: Private key not found [Tue Mar 16 ...
1
vote
1answer
102 views

How to pass only one repository SVN to SSL?

How to create a second virtual host for SVN repositories who are passed to SSL? I passed only one SVN repository to SSL (not others) by using SSLRequireSSL: SSLRequireSSL (... snip all the SVN ...
3
votes
3answers
1k views

Apache wont start after attempting to install SSL

Below is what my VirtualHosts look like in httpd.conf <VirtualHost *:80> # Admin email, Server Name (domain name) and any aliases ServerAdmin support@mydomain.com ServerName mydomain.com ...
2
votes
1answer
2k views

How Can I Force SSL in nginx?

I need to redirect all traffic from http://mydomain.com to ? What is the right way to do this in nginx?
2
votes
2answers
939 views

Different file locations for http v https on IIS?

We have a server running IIS and have some folders running under https, but most are open. The problem I'm having is when someone is directed from a page in the secure section of the site, the ...
2
votes
2answers
319 views

What kind of SSL certificate do I need?

I want to install HTTPS on my server and I wonder what kind of certificate I will need and where I can buy it. The site is a web application that demands high security by it's users since they store ...
2
votes
2answers
1k views

IIS 6 windows 2003 help installing SSL cert

I requested a new ssl cert from godaddy which has been issued. When try to install it in iis through the website directory security tab i get a "the pending certificate request for this response file ...
0
votes
1answer
611 views

Problem installing SSL on centos 5.2 with plesk

I'm trying to install an ssl certificate to a dedicated centos 5.2 server. I followed the hosting company's instructions but the ssl is not working. When I try to access my website using https, ...
5
votes
3answers
4k views

Can you import a SSL certificate from another Windows IIS 7 server?

Usually I re-request the CSR and install the certificate when I move servers. Was hoping if there was a faster way, where I can just export/import a SSL certificate when I move my website to another ...
2
votes
1answer
1k views

What is involved in upgrading from SSL 2.0 to SSL 3.0 in IIS 6?

I am using a site security testing suite and it says SSL 2.0 has known vulnerabilities and I should change it to SSL 3.0. Will my current certificates still work once I switch to SSL 3.0? How do I ...
8
votes
5answers
35k views

cURL or SSL problems, how to solve?

I keep getting this error: No cURL data returned for https://XXX.XXXX.XXX:XXXX [0] SSL certificate problem, verify that the CA cert is OK. Details: error:14090086:SSL ...
2
votes
1answer
922 views

Proxy SSL from load balancer

A server admin who is setting up a load balancer asked me if I wanted to: Host SSL certs directly on web servers or, Proxy SSL from the load balancer I've only done the former implementation. Can ...
2
votes
1answer
612 views

Passenger not working with SSL on Apache 2

I have a Rails app running on Passenger; It works as expected over unencrypted connections. I also have a working Apache SSL setup; I can access any static file available via http with https. When I ...