SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
2answers
957 views

Using SSL with Openfire

I'm having a rough time getting SSL configured properly on an Openfire install. Quite honestly, I just don't know what to do. It seems convoluted on the steps necessary to get a cert imported. Has ...
0
votes
3answers
1k views

How long should I make my SSL cert valid for?

* sgsax hates ssl certs < Landon> indeed < Landon> next time my servers cert expires I'm just going to make one for 100 years or something ridiculously long Is there ...
0
votes
1answer
693 views

SSL/HTTPS proxy for apache virtual host

I currently have an application running on Apache. It uses subdomains to distringuish between user-accounts. I'd like to add SSL support (wildcard). A solution which is quite common seems to be the ...
1
vote
2answers
2k views

MySQL Replication Error

I recently updated my master server to 5.1.41 and noticed that the slave was no longer replicating. It was returning this erorr: 091208 12:53:31 [ERROR] Slave I/O: error connecting to master ...
2
votes
1answer
138 views

Moving ssl on another server

few questions, I am moving to another hosting provider. In IIS, when I create the request CSR, do i have to enter the EXACT same information for it to work with the response certificate I got via ...
0
votes
1answer
126 views

Publish a WordPress blog at one URL, do administration on another

Let's say I want to have my blog display at blog.example.com, but I own a SSL/TLS cert for example.com only. I want to have authenticated users transparently redirected from blog.example.com to ...
2
votes
3answers
468 views

Configuring a Unified Communications Certificate for many virtual hosts running in Jetty

I have a single IP with Jetty serving up X sites on port 80. Basically you can sign up for our service, then point your domain www.mycompany.com to that IP, and Jetty will serve up your custom site. ...
11
votes
5answers
6k views

Do any well-known CAs issue Elliptic Curve certificates?

Background I've seen that Comodo has an elliptic curve root ("COMODO ECC Certification Authority"), but I don't see mention of EC certificates on their web site. Does Certicom have intellectual ...
3
votes
2answers
1k views

SharePoint MOSS - Serve HTTP content on an HTTPS page without Mixed Content Warning?

Our "portal-like" SharePoint site is served using HTTPS/SSL. So a user goes to https://web.company.com and sees content and different Web Parts. So far, no problem. The desire now is to have new ...
2
votes
2answers
1k views

SSL / HTTP / No Response to Curl

I am trying to send commands to a SOAP service, and getting nothing in reply. The SOAP service is at a completely separate site from either server I am testing with. I have written a dummy script ...
0
votes
1answer
996 views

SQL Reporting Services with SSL exclusively

I know how to add an SSL cert to SSRS 2008. Is there a way to force SSRS to use SSL (port 443) exclusively? Right now it will respond to both encrypted and unencrypted requests. IIS has the Require ...
1
vote
3answers
4k views

Firefox is very slow when establish SSL sessions

Using wireshark, I discovered that Firefox v3.0 gets stuck every time before "client key exchange, change cipher spec" stage when establishing a SSL session. Specifically, it takes 0.8~1.8 second ...
4
votes
3answers
1k views

Is it still necessary to turn off SSL keepalive, etc. in Apache for all MSIE?

Apache's default configuration includes something like this in ssl.conf: SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0 Do newer IE still ...
1
vote
2answers
7k views

https timeout while http works

I've set up SSL for my domain and it works from Apache perspective. The problem is that accessing my domain over HTTPS sometimes results in timeouts. When it doesn't work, it takes some time to ...
1
vote
2answers
130 views

Changing to a new certificate authority for existing website

We have a website certificate issued that will expire soon. The current certificate issuer is charging us too much and we would like to change to a new company. If we get a new certificate from ...
1
vote
4answers
1k views

Internet Explorer won't load site

Internet Explorer (versions 6 and 8, on XP) refuse to load https://theveeb.com, giving a server not found error. http://wiki.theveeb.com works, so it can talk to the apache2 server I have running ...
4
votes
2answers
961 views

ssl certificates for *.subdomain.example.com

I plan on getting a wildcard certificate for my domain like *.example.com, but I've heard varying reports about whether it will also work with second-level subdomains like *.subdomain.example.com -- ...
1
vote
2answers
658 views

How can I remove the default host header for SSL requests in IIS6

I have multiple sites setup on IIS 6 with host headers. One of those sites has an SSL certificate installed. So now if any of the non-SSL-enabled sites is requested with HTTPS it loads the ...
0
votes
3answers
3k views

website uses an invalid security certificate (Error code: ssl_error_bad_cert_domain)

I am running IIS 7 on Windows Server 2008. I have two websites: www.website01.com www.website02.com I have an SSL Certificate for each website. When I access a secured page on www.website02.com I ...
2
votes
1answer
339 views

Some clarifications on an SSL certificate

I currently have a secured site running at https://current.example.ca and the certificate is bound to current.example.ca. I also have a new version of the site running at https://new.example.com. If ...
2
votes
4answers
1k views

Multiple SSL Certificates Running on Mac OS X 10.6

I have been running into walls with this for a while, so I posted at stackoverflow, and I was pointed over here... I am attempting to setup multiple IP addresses on Snow Leopard so that I can develop ...
0
votes
2answers
667 views

Problem deleting host ssl certs in IIS with httpcfg ssl delete

Long story short, I have a website on a IIS server in which SSL stopped working. Removing and adding the SSL cert did not resolve the issue. I found this blog and verified I had the same problem. ...
0
votes
1answer
1k views

sec_error_untrusted_issuer with new certificate from CACert.org

I have a server certificate from CACert.org since two years. I have added CACert's root certificate to my browser. Everything worked fine, until my certificate expired. So I renewed my certificate on ...
2
votes
2answers
594 views

Is there a workaround for SSL Renegotiation Attack?

I read that the theoretical weakness in SSL has been proven real. Is there a workaround that we can apply as users or admins to protect our users/selves?
0
votes
4answers
128 views

SSL Port Check on Mac

I have a MacBook Pro, and I want to see if a particular port, 8181, is indeed open and running SSL, as I have set in my GlassFish server. Is there a command I can issue to see what is serving on ...
12
votes
5answers
7k views

GoDaddy SSL Certificate Issues With Safari

We just got a new SSL certificate from GoDaddy. And, while all browsers are fine with the certificate, Safari gives the following error: This certificate was signed by an unknown authority. ...
21
votes
2answers
40k views

Apache ProxyPass with SSL

I want to proxy requests from an SSL site via a non-SSL site. My Apache httpd.conf looks like this: <VirtualHost 1.2.3.4:80> ServerName foo.com ProxyPass / https://bar.com/ ...
1
vote
1answer
154 views

Can I get a CA-signed SSL cert for a host accessed by IP address?

I have a server which is accessed by IP address over a LAN. The IP address is sometimes changed, and it is never accessed with a DNS hostname. Is it possible to get a CA-signed certificate which ...
1
vote
2answers
451 views

IIS, single UC cert, multiple sites and host headers. How does it all work together?

Let me start off my saying, IIS is not a strong point of mine. I had asked THIS question here, because i was trying to use 2 different certs on different sites. Scratch all that now, there is a new ...
1
vote
3answers
1k views

Apache SSL New Domain Redirect

We just switched domain names from www.olddomain.com to www.newdomain.com. We have a number of short cuts on desktops to https://wwww.example.com. I have setup Rewrite rules in both vhosts and the ...
0
votes
1answer
442 views

UCC SSL with Cpanel/WHM [closed]

Is it possible to setup Cpanel/WHM with a UCC certificate? If so, how do I go about doing that?
4
votes
5answers
45k views

convert .p7b key to a .pfx

I have an SSL certificate in .p7b format that I need to convert to .pfx. If I try this through the windows certificate managment the option to expert as a .pfx is disabled. Trying with openssl I ...
3
votes
2answers
2k views

Can I be an intermediate certificate authority?

My company has grown to the point where we're interested in being an intermediate CA for our customers, and would like to issue certificates to customers. Among other uses, we wish to issue SSL ...
0
votes
1answer
609 views

Help me configure Coldfusion MX 7 to connect to LDAPS

I need to replace two web servers with IIS 6 and Coldfusion MX Enterprise, but I'm having trouble connecting to LDAPS with the replacement servers. I followed the instructions at ...
7
votes
2answers
638 views

Difference between SSL products

I'm looking into getting a few SSL certificates for domains to cover the following: autodiscover.example.com remote.example.com www.example.com Wildcard certificates are too expensive, so I'm ...
3
votes
2answers
3k views

How can I test if an SSL is valid, hasn't expired, or been revoked?

Aside from receiving plenty of emails well in advanced from my PKI telling me one of my certificates is about to expire, how can I setup an alert that checks the health of an SSL? What I want to ...
0
votes
4answers
150 views

Custom domain names for hosted service with SSL

I have a hosted service and have been issuing domain names to clients in the form clientxyz.ourdomain.com. Now we want to offer clients the ability to specify their own domain and Alias (CNAME) it to ...
1
vote
2answers
2k views

How to configure JBoss for SSL using F5 Load Balancer

I am having troubles configuring JBoss for a secure environment. Here's our environment: We have an F5 Loadbalancer which has our domain's wildcard certificate. I have several applications running ...
4
votes
2answers
2k views

Multiple SSL Certificate on Apache

I know that you need multiple IP addresses if you want to use multiple SSL certificate with Apache. Assuming I have 2 IPs on my VPS (let's name them 1.1.1.1 and 2.2.2.2), I was wondering if the ...
4
votes
4answers
2k views

Multiple Sites with SSL on IIS6

This may sound a little stupid, but I'm more of a dev guy than a server admin and I am incredibly boneheaded when it comes to IIS. So please bear with me here. I currently have a client that has a ...
6
votes
2answers
6k views

Can the same wildcard SSL certificate be used on different IP addresses and/or boxes?

Example: Wildcard SSL certificate for *.example.com installed on two different boxes. hostEU.example.com A 60.70.80.90 hostUS.example.com A 200.210.220.240 I assume this is a perfectly valid ...
0
votes
1answer
636 views

Multiple SSL services using single IP address or multiple DHCP on single interface

So, in the world of SSL/https you can just bind a new static public IP address to the firewall internet interface and use one SSL service (like an https://site, Outlook Anywhere or something like RDP ...
0
votes
4answers
417 views

Error with ONE server under a wildcard certificate

We are having one user who is having an issue connecting to one of our servers. we have a wildcard cerificate : *.ourdomain.com user can go to d.ourdomain.com and have no certificate error in the ...
1
vote
2answers
5k views

IMAP over SSL - Exchange 2003 Configuration

Tried to configure my Exchange 2003 IMAP4 Virtual Server to accept SSL (993) connections (installed on Windows 2003 Standard R2 server). I can send/receive using the normal IMAP (143) port. While ...
0
votes
3answers
348 views

secure methods to upload files to apache?

I 'm a web developer and I need to know which are the most popular and secure methods to upload my files to an Apache production server? I guess that ftp remains out of the list as the password is ...
2
votes
1answer
162 views

How do I restrict SSL to 3.0 only in apache?

How do I restrict SSL to 3.0 only in apache? I want to allow connections over SSL 3.0, but not older versions of the SSL protocol. How do I do this in Apache 2?
2
votes
4answers
3k views

How to enforce/redirect http to https

I've been hosting a domain on a Win2003 server for the last 3 or 4 years but I now need to make this domain accessible only via https. I've installed the certificate correctly and it works fine (the ...
0
votes
2answers
264 views

How do I make it so that people can use “https://” on my domain?

When I put the 's" at the end of http for my domain name...this is what I see: This Connection is Untrusted You have asked Firefox to connect securely to mydomain.com, but we can't confirm that your ...
0
votes
4answers
305 views

how to set up https?

i heard that http is not good. for instance i do a basic http authentication, and that some hackers can figure out the password by snooping (i dont know what this is ). so i was advised to install ...
1
vote
1answer
715 views

Integrated Windows Authentication with IIS

We have a few intranet applications currently using Integrated Windows Authentication in IIS 6.0 that we are considering making available externally (employees would be able to log in from home on the ...