SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
2answers
4k views

How do I use IPTABLES to create a HTTPS (443) passthrough around Squid?

I've got Ubuntu and Squid running on a machine acting as a transparent proxy and a default gateway for many pc's on my network, which means all internet bound activity comes through the interface to ...
0
votes
2answers
1k views

How to configure SSL for subversion access in windows?

As the question describes, can anyone point to a good documentation or if possible give me the basic steps to configure a windows subversion server (1.4.3) please? I already have subversion, apache ...
4
votes
8answers
15k views

How to force SSL (https) on Apache Location

I'm trying to force SSL (https) on an SVN repository served by mod_dav_svn. Here's what I have: <Location /svn/projectname> DAV svn SVNPath /var/repo/projectname Require valid-user ...
0
votes
3answers
904 views

How to do IIS SSL server redirects correctly? Is meta refresh needed?

I think our backend programmer/server admin is handling our SSL redirects pretty wonky - see it in action here: www.mchenry.edu/parentorientation First off, see how it redirects to index2.asp? Is ...
2
votes
2answers
1k views

Apache and mod_ssl working with multiple remote CA for client certs

Generating client certificates by becoming your own CA with an Apache web server is trivial work and there's plenty of documentation out there on how to achieve this. My problem is slightly different. ...
1
vote
3answers
227 views

SSL certificate only valid when viewed externally

We have a SSL certificate installed on our server. When viewed externally it validates correctly, however when the website is viewed from the server it gets an invalid certificate error. We are using ...
0
votes
1answer
210 views

How do I get Windows Server 2003 IIS to play nice with SSL in Apache

I'm trying to run Apache with SSL on a Windows 2003 server and when I enabled the configuration and restart Apache I get an error: (OS 10048) Only one usage of each socket address ...
0
votes
3answers
323 views

Can I use host headers for an SSL site?

I want to apply a certificate to one of my sites on IIS. At the moment, I use a single IP address and use host-headers, to give them friendly names. Can I do this for my SSL site or do I have to use ...
7
votes
5answers
4k views

Apache - Redirect to https before AUTH

I have a development site up that requires a username and password (basic http auth) before the user can see the site. I'd like to redirect to a secure protocol first, before the user can send in the ...
1
vote
2answers
216 views

Modifying SSL / TLS certificates for local use

I am currently developing some applications on my local 'serverfarm'. I have set up ZendServer with Apache2 and PHP, which works very fine, and nothing unwanted happened until now: Now I wanted to ...
0
votes
1answer
139 views

How can I secure CISCO Radius?

Cisco offers a WLAN system that allows admins to restrict WiFi access to authenticated users. However, the following statement bothers me: Use the secure https://1.1.1.1/login.html. .... ...
0
votes
3answers
6k views

How to manually install a SSL .cer on an IIS 6 site without CSR?

Every CSR generated by my site gave an error when submitted so I made a new site and the CSR worked fine. Now I have the certificate. However I can't find a way to install it on my original site. I ...
3
votes
3answers
274 views

ssl virtualhosts with apache ip requirements

i have multiple domains i'm using ssl for on one apache install. i know i need to put each domain on a separate IP externally. does the same apply to the IPs behind the NAT? meaning, i have one ...
0
votes
1answer
953 views

Apache 2.2.14: SSLCARevocation location

I am installing a .crl in my apache config. It looks like this: VirtualHost default DocumentRoot "web" ServerName example.com SSLEngine on SSLCertificateFile "cert.crt" SSLCertificateKeyFile ...
2
votes
1answer
358 views

SSL stopped working on IIS6 after Windows Update

I have a Windows 2003 image with IIS6 installed that just installed a block of Windows Updates. This webserver was using port 443 and an SSL certificate properly up until this patch, and it will no ...
0
votes
1answer
792 views

Apache: force client side certificate authentication for internet visitor, no authentication for localhost

How I can let Apache force client side certificate authentication upon guests from the internet, but require no authentication for the localhost? Both should use https, and read the same dir, ...
7
votes
4answers
11k views

How to create a multi-domain self-signed certificate for Apache2?

I've got a little private webserver where I have several virtualhosts. I know that it's impossible to assign a certificate to each individual virtualhost, because the server finds out which ...
0
votes
2answers
970 views

How to force the use of SSL for some URL of my Django Application?

I want to be sure that for some URL of my website, SSL will be use. I saw a lot of answer already on SO. http://stackoverflow.com/questions/724968/force-redirect-to-ssl-for-all-pages-apart-from-one ...
5
votes
5answers
9k views

Can I run two different secure sites using the port 443 on the same server?

Let's say I want two secure sites running from the same machine using the Apache server: 1. https://mysite.com 2. https://mysite.ca Is it possible to use port 443 for both of the above sites?
5
votes
3answers
3k views

Is there a ProxyPass equivalent for IIS?

I need to redirect one SSL site to another SSL site. For example, I control https://sitea.michael.com but I want the traffic there to be forwarded to https://siteb.notinmycontrol.com I don't control ...
5
votes
8answers
10k views

ssl certificates disappear IIS

I'm trying to import a certificate to IIS. Everything is ok on the MMC (Windows Console). I finished the wizards and seems that is all right. But, when I refresh the certificate list or move to other ...
1
vote
1answer
910 views

Getting a blue bar in Firefox with GoDaddy's SSL?

I recently purchased a TurboSSL from GoDaddy. In Firefox, the address bar goes blue for a second, but then goes back to white. Is that because some images are coming from http:// and not https:// or ...
0
votes
3answers
824 views

GoDaddy's SSL certificates and https connection

I want to buy and setup a SSL certificate one of my domain names. However, since SSL Certs involve purchases, I would like to get others opinions before I actually go out and buy something. I would ...
2
votes
2answers
409 views

HTTPS on separate domain name from HTTP

I have a single Apache 2.0 httpd instance that I'd like to host both HTTP and HTTPS. They share the same IP address and HTTP would come on port 80 and HTTPS on port 443 (standard). I have 2 domains ...
0
votes
2answers
787 views

IIS7 HTTPS Certificate Binding: Rejecting traffic to a particular subdomain?

I'm using Windows 2008 Server and IIS7. Suppose I have one SSL certificate for both foo.example.com and bar.example.com bound to port 443 of my server. I cannot change the certificate. Suppose also ...
0
votes
1answer
75 views

Need SOCKS Solution

I need a SOCKS/Proxy server that is capable of using SSL certs. Additionally, I want it to ONLY be able to connect to 2 domains. User authentication is not mandatory.
2
votes
2answers
2k views

Importing SSL certificates on Win2k3 / IIS 6.0

As part of a large site migration, I need to copy over numerous (about 50) SSL certificates for different sites. I have tried to export them on the current server and then import them on the new ...
3
votes
3answers
7k views

Upgrading OpenSSL in CentOS 5.3

I want to use one IP to host many domains with individual SSL certificates (requires SNI). In CentOS 5.3, the latest version of OpenSSL I can find an RPM for is 0.9.8e, which does not support SNI. I ...
21
votes
2answers
6k views

SSL password on apache2 restart

I setup wildcard SSL certificate from Godaddy on Apache2. Whenever the server restarts it asks for the passphrase for the SSL certificate's private key. What's the best way to remove this obstacle ...
0
votes
4answers
594 views

Exchange 2007 - how many domains do I need on my SSL cert?

I have a machine running Server 2003 R2 and Exchange 2007. When it was originally set up (before my time) a self-signed certificate was installed, however, it's about to expire and now seems like a ...
0
votes
1answer
2k views

Django running on Apache+WSGI and apache SSL proxying

I'm trying to rewrite all requests for my Django server running on apache+WSGI ( inside my local network) and configured as the WSGI's wiki how to, except that I set a virtualhost for it. The server ...
0
votes
1answer
207 views

I just bought an SSL cert… What's next?

I'm on a shared linux server with hostgator.com and I just had them install my first SSL certificate (free with the Business plan). Basically, what i want to know is: What's next? How do enable ...
0
votes
4answers
877 views

IIS 6 SSL Restore from PFX without Deleting Pending Request

I requested a new SSL certificate from a certificate authority, but until they process it my site is losing business. Before doing so, I had backed up the original certificate to a PFX file. Now ...
1
vote
2answers
168 views

Cons of renewing a production SSL on a development server?

I work Tech. Support at a web design company. Many of our past clients are hosted by another company ("Company X") but they renew their SSL certificates through us. We sell QuickSSLs from GeoTrust. ...
0
votes
1answer
141 views

Can you install a single domain certificate in IIS 6 with mutlple ip host headers?

If i have the A record in the dns pointed to a unique ip on our server, but have mutiple ip addresses associated with the host headers, will this cause an issue?
1
vote
1answer
680 views

BES 5.0 SSL Certificate

I have recently installed BES 5.0 on a Hyper-V (i know it's not officially supported) 64-bit Server 2008 box with a remote SQL 2005 database. I successfully installed and was able to access the ...
2
votes
4answers
2k views

Open Source project that does SSL Inspection

I've been assigned to research out and spec replacing our old and decrepit http content filtering system. There are several open source filtering packages available but I've not come across one that ...
4
votes
3answers
2k views

SSL/HTTPS help with regards to Mongrel?

I have been looking all over and either I can't find anything or I can't find anything that works... so here I am. How can I go about setting up SSL/HTTPS with regards to Mongrel? Thanks in ...
35
votes
5answers
36k views

Does each server behind a load balancer need their own SSL certificate?

If you have 5 web servers behind a load balancer (such as haproxy) and they are serving up content for the same domain, do you need SSL certificates for all the servers, or can you use the same ...
4
votes
3answers
884 views

Make firefox more accepting of self-signed SSL certs

Is there any plugin or setting for firefox that can simplify the invalid SSL certificate process to a single click, or even not put up any errors and just display a warning indicator? Working on a ...
2
votes
3answers
12k views

Peer's Certificate has been revoked

I just upgraded our web server with a renewed cert as our current cert expires later this week. When I browse to our site via FF it is throwing this error: Secure Connection Failed An error ...
1
vote
1answer
2k views

mod_ssl: SSL handshake interrupted by system [Hint: Stop button pressed in browser?!] (System error follows)

in my error_log I'm getting following msg [error] mod_ssl: SSL handshake interrupted by system [Hint: Stop button pressed in browser?!] (System error follows) IE wouldn't even load page, yet ...
13
votes
3answers
15k views

IIS 7.0 - SSL certificate - renew or new?

One of my SSL certificates (simple domain verification only) is about to expire on windows 2003 IIS 7.0 server. I got better offer from another vendor, and the guys who originally issued my ...
0
votes
2answers
294 views

IE security alert on SSL

We have a website hosted on IIS 6.0 with SSL. When we visit the website, it alerts the user with the usual security warning with "Yes" "No" and "View certificate" button. we click "Yes" and view the ...
0
votes
3answers
1k views

Migrating security certificate from IIS 6.0 to IIS 7.0

We have a security certificate configured in IIS 6.0 on our old server. We are migrating to a new server. How do I migrate the security certificate of our website from IIS 6.0 to IIS 7.0?
4
votes
9answers
834 views

Must have SSL Cert Providers? [closed]

I am looking into getting an SSL certificate and was wondering what the best providers are? Please base your answer on price and supported browsers. I am shopping around for the best deal, but also ...
0
votes
2answers
625 views

Cisco CSM-S (with SSL) secure and non-secure service for the same IP/hostname?

We have a Cisco CSM-S content switch with SSL. Currently our website is behind this switch, which performs load balancing for the HTTP and SSL sites. The http and https sites use different hostnames ...
1
vote
1answer
3k views

How to pass Apache SSL traffic trough nginx proxy?

I want to setup nginx 0.6.33 on Fedora 8 as a load balancer for backends running Apache. I had no problems to configure it for default http port 80, but I don't know how to do it for SSL (443). I ...
0
votes
2answers
1k views

Log into GMail without SSL

Since the 443 ports for HTTPS is filtered in Iran, is there any alternative method of logging into GMail which does not require the use of this port?
0
votes
1answer
1k views

ssl/tls jabber web client

does anyone know of a web-based (ie flash, java, etc) jabber client that supports SSL connections, either via socket or http-bind? preferably http-bind, but ill take what i can get at this point. ...