SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

76
votes
5answers
46k views

Multiple SSL domains on the same IP address and same port?

This is a Canonical Question about Hosting multiple SSL websites on the same IP. I was under the impression that each SSL Certificate required it's own unique IP Address/Port combination. But the ...
2
votes
2answers
3k views

Multiple SSL domains with one IP address but different ports?

I'm using ubuntu 9.10, apache2 and php5. Is it a good idea to host multiple SSL sites on one IP address but on different ports? If yes, what ports should I be using?
10
votes
2answers
6k views

SSL site not using the correct IP in Apache and Ubuntu

I'm trying to set up an apache-ubuntu-php webserver. My webserver will host multiple SSL sites, each SSL site will have it's own IP address (unless there's a better way to do this). So I suppose the ...
1
vote
1answer
121 views

Tutorial for IP-based Virtual Hosting

I want to host multiple SSL websites on my virtual private server. I was told that in order to achieve this, I need to do IP-based virtual hosting. If this is the case, can someone recommend a newb ...
2
votes
2answers
865 views

Security Cert issue with DNS Alias for RDP

I wonder if someone can help me - I'm a complete newbie when it comes to administering servers so apologies if I'm missing something obvious... We've decided on a naming convention which uses ...
1
vote
2answers
558 views

How to handle SSL certs in a multi-master OpenLDAP setup?

I have two servers working in a multi-master mirror mode OpenLDAP setup. server-0.example.com, server-1.example.com and server-vip.example.com server-vip.example.com is a floating virtual IP that ...
4
votes
3answers
19k views

'Certificate types are not available' When creating computer certificate?

Environment Windows Server 2008 sp1 Xeon CPU E5430 @ 2.66 GHz 16.0 GB Ram 64-bit Operating System 1TB Disk Space Server Role: SQL Server Other Information: Joint to domain, Logged in user domain ...
1
vote
4answers
12k views

Any way to map WebDAV with SSL as network drive in Windows XP?

I'm trying to map WebDAV with SSL as a network drive in Windows XP. (I've been at this for several hours) I can read the share just fine using a browser and with Network Places, but it refuses to ...
5
votes
2answers
2k views

How to protect an SSL certificate (Apache/CentOS)

I currently use a server SSL certificate without a pass-phrase in order to allow Apache to start up unattended. There are signs from customers to require us to protect the SSL certificate more ...
0
votes
2answers
133 views

SSL certificate fail apache

I have setup a certificate on Apache server. When I access my site's https pages, I see the certificate flashing (in FireFox's url tab) and disappearing immediately. The browser stays in the same ...
0
votes
2answers
1k views

Lighttpd mod_rewrite and SSL

I'm trying to prevent the search engines from crawling through SSL version of the site, to prevent content duplication and canonization issues. I found the following great article: ...
0
votes
1answer
539 views

SSL ProxyPass for REST API requests

A production server uses a lot of AJAX calls and is on a different domain from the REST API server and so ProxyPass has been used successfully in httpd.conf to enable communication. There's now a ...
2
votes
1answer
241 views

SQL Server 2000 and SSL Encryption

We are a datacenter that hsots a SQL Server 2000 environment which provides database services for a product we sell that is loaded as a rich-client applicatin at each of our many clients and their ...
5
votes
2answers
3k views

Import a bunch of certificates into the correct certificate store using a script

I have a collection of certificates in a p7b file, and I would like to automatically import each certificate into the correct store depending on the certificate template. What is the best way to do ...
10
votes
1answer
10k views

Is POST data encrypted over an SSL connection?

I've set up my web server to use SSL (I'm using WAMP for my staging scenario before I move it on up to public servers). The purpose of the site at hand has succeeded and I am able to use the site from ...
2
votes
1answer
363 views

Hostname error on my Slicehost Ubuntu server

Like many folks who upgraded to Rails 2.2, I got an exception raised when sending an email. This version of Rails or later does require using tls for sending emails. The message in the production log ...
1
vote
4answers
8k views

IE8 doesn't accept a valid certificate while Firefox does

When I browse my site with IE8, it gives the error below. "The security certificate presented by this website was not issued by a trusted certificate authority." But when I use Firefox, it says it's ...
5
votes
3answers
2k views

Squid authentication encryption

I use Squid and the users must authenticate. The users are authenticating in cleartext. I found tutorials about stunnel (http://www.jeffyestrumskas.com/?page_id=3), but the clients also need this ...
2
votes
1answer
1k views

Troubleshooting Apache failed connections

I am trying to troubleshoot some odd, intermittent connection failures with apache. I noticed the issue when users complained that parts of the web application we're hosting weren't working. Debugging ...
1
vote
1answer
16k views

Custom Trust and Custom Identity Keystore in WebLogic 10.3

QUESTION Having configured the Custom Trust and Custom Identity Keystores in WebLogic 10.3, anyone know why WebLogic 10.3 still persists to load the Demo key store and the JDK trust store please? ...
10
votes
4answers
38k views

How can I see what version of SSL a web server is currently using?

I believe I have disabled SSL 2.0 on my web server (Windows Server 2003). To make sure that it is now using SSL 3.0, how can I check this? What is the correct way to disable 2.0 and enable 3.0 on a ...
1
vote
2answers
448 views

SSL for PHP on Windows Server 2003

I have Windows Server 2003 R2 with Apache 2.2.4 and PHP 5.2.6. I want to access pages over https (SSL). And i get this error (Zend Framework GData): Unable to find the socket transport "ssl" - ...
2
votes
1answer
3k views

In tomcat force http connection to https

I am trying to force a connection to http://localhost:8443 to https://localhost:8443. The site works correctly if they go to https://localhost:8443. In case the user forgets the s in https I would ...
3
votes
2answers
484 views

SSL Accelerator for SSH server

I understand that web sites which run https may use SSL Accelerator to speed up the expensive public/private key encryption/decryption computations. So if I have a server that needs to support a lot ...
2
votes
3answers
994 views

applying ssl for subdomains

When I access my site by domain.com from firefox says "Connection is untrusted" and it says "the certificate is valid only for *.domain.com". But when I try to access the site www.domain.com, its ...
1
vote
2answers
645 views

Multiple SSL certificates on IIS 6 cluster

I have a 2 machine IIS 6 cluster (Windows 2003 Standard Edition) running a number of sites, only one of them has an SSL certificate. I have a number of IPs available to me on each machine, but the ...
22
votes
7answers
20k views

Wildcard SSL certificate for second-level subdomain

I'd like to know if any certificates support a double wildcard like *.*.example.com? I've just been on the phone with my current SSL provider (register.com) and the girl there said they don't offer ...
0
votes
1answer
94 views

What ports are SSL in Microsoft ISA server?

I was wondering what ports Microsoft ISA Server designates as being SSL by default? I know the standard 443, but i'm trying to find out if there are others and i don't have administrative access to ...
1
vote
1answer
803 views

configure apache for SVN SSL

I have an issue with my Apache config, specifically how it interacts with the SVN DAV mod. What I want to be able to do is have domain.com point at my website, svn.domain.com to point at my svn ...
3
votes
2answers
99 views

Secure with TLS/SSL

Is there an application to secure network traffic between any two applications with SSL? Diagram: (Host X (Application A) ) --------unsecured connection----- (Host Y (Application B) ) (Host X ...
1
vote
3answers
205 views

Which is Better Firewall

I am doing a new WAN/LAN Design and wanted to know what would be a better in terms of value, reliability, support and performance. I need to connect 3 remote office to main HQ and multiple field staff ...
1
vote
2answers
631 views

How to configure SSL for virtual host

I am having problems setting up SSL in Virtual Hosts. The setup works great on unsecure sites. And I want it to work with SSLEnabled sites. My httpd-vhosts.conf is below: NameVirtualHost 127.0.0.1 ...
1
vote
1answer
1k views

How to configure SSL for virtual host

I am having problems setting up SSL in Virtual Hosts. The setup works great on unsecure sites. And I want it to work with SSLEnabled sites. My httpd-vhosts.conf is below: NameVirtualHost ...
3
votes
2answers
3k views

How many SSL TPS will I need with this volume?

Let's say I have an application that allows clients to create an account and put a form on their site that allows people to create tickets. With 475 clients who have websites with forms. They get ...
0
votes
1answer
1k views

SSL Re-negotiation rejected by MS client when keepalives disabled in apache

One of our partners is using Microsoft Web Services 2.0 to connect to our webservices through Apache HTTPD 2.0 reverse-proxies. The resource they're POSTing to requires client (mutual) ssl ...
1
vote
1answer
149 views

SSL certificate and domains

I have a web service on address example.com and I add some functionality to it using completly separate web application set on different host. I want to set a subdomain another.example.com to open my ...
0
votes
1answer
406 views

ssl certificate for subdomains on different servers

I have a wildcard SSL from godaddy. I had https://site1.mysite.com working good on a server. I added DNS A record to route site2.mysite.com to IP of another server and got certificate from godaddy ...
0
votes
1answer
260 views

Using TLS-PSK on IIS

We are doing embedded device and due to low memory contraints and closed enviroment best option there would be using one of TLS-PSK ChiperSuites (pre shared key - no asymetric cryptography). As far ...
0
votes
3answers
355 views

SSL Problems with new Root & Intermediate CAs

One of our SSL provider's root certificate expired on 29 Dec 2009. They have a new one that expires in 2029. Unfortunately, the website that uses the SSL certificate now throws an SSL error, ...
0
votes
2answers
260 views

Can the same wildcard SSL be used for site1.mysite.com and site2.mysite.com when they are hosted on different servers IPs

I have godaddy 5 subdomains certificate. Currently its used for site1.mysite.com. I have CNAME DNS record that directs site2.mysite.com to another server (on another HOST). can I use the certificate ...
1
vote
3answers
2k views

Exchange Autodiscover, SSL Cert. Issue

I've ran through the tests at http://testexchangeconnectivity.com/ and The ActiveSync test is passing, but with warnings. This is the warning I get: Only able to build certificate chain when ...
1
vote
2answers
1k views

Trouble switching Apache to use a new SSL certificate

I currently have a website running Ubuntu Linux and Apache 2.0 that uses an SSL certificate issued by GoDaddy. Since I've been generally unimpressed with GoDaddy, I decided to get an SSL certificate ...
1
vote
2answers
529 views

IPSec VS ssl/tls?

I'm currently working on a VPN solution who use IPSec connections, but I'm asking myself about the different VPN possibilities. First point, according to me IPsec is more secure and Open on the ...
1
vote
3answers
1k views

How to log invalid client SSL certificate in SSL

I have a IIS web site which requires client certificate. I have turned off CRL checking. The client is unable to access the web site - he gets 403.17 (certificate expired) error. I would like to log ...
1
vote
1answer
379 views

Unified Communications SSL Certificate (SAN)

Are Unified Communications SSL certificates (aka Subject Alternative Name / SAN) suitable for securing a CMS website in IIS, which serves lots of different secured websites for various clients each on ...
1
vote
2answers
982 views

Webkit does not work with GoDaddy SSL certificates

Web purchased an ssl certificate from GoDaddy and installed it correctly. But, on any webkit browser it says that the site is not trusted. Does anyone have any idea why webkit would not like GoDaddy ...
1
vote
1answer
330 views

Self-Signed SSL Cert in Lighttpd Causing 404s

Hey guys, I wanted to try out SSL on my server so I decided to create some self-signed SSL certificates as outlined here. After going to the document-root, firefox did indeed allow me to accept the ...
14
votes
0answers
8k views

How to disable SSL 2.0 on IIS 7.5? [duplicate]

I've seen this KB Article which Microsoft put out covering how to remove SSL 2.0 on IIS 7.0 and earlier, but I can't find anything advising on how to do the same on IIS 7.5. The registry keys ...
3
votes
1answer
347 views

Self-signed server certificate question

If I sign someone else's server certificate will it allow them to avoid the whole "untrusted certificate" thing that browsers give when you use a self signed cert?
17
votes
4answers
29k views

Does HTTPS use TCP or UDP?

Does HTTPS use TCP or UDP?