SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
1answer
728 views

Deciding on SSLRandomSeed values in Apache 2.2

What rules of thumb should you follow when choosing SSLRandomSeed startup and connect values in Apache?
0
votes
2answers
169 views

Would SSL prevent replay tampering by the authenticated user

In the context of a game (HTML5/Flash/Silverlight) which sends data to an online service to record progress (e.g. player killed an orc), would communicating with the service over SSL implicitly ...
2
votes
6answers
2k views

Basic iptables for a webserver: SSL Tomcat, postgres, ssh and that's it

This is probably as basic as it gets but I'm a developer and really have no experience with iptbles. The only connections I need opened are: eth0 (outward facing) ssh ping SSL to tomcat (forward ...
2
votes
1answer
1k views

IE and Google Chrome timeout on an IIS6 hosted SSL page that Firefox handles well

Ok, here's the scenario: Up until a few weeks ago, none of us noticed anything wrong with the corporate website. People were using it without complaint. Then, a client complained that a specific page ...
1
vote
2answers
4k views

Will I need a dedicated static IP or a unique IP is enough to SSL enable my website?

This is the first time I am dealing with SSL and Dedicated Static IP /Unique IP. Now this webhost says that they will provide Unique IP (not shared with other customers) but do NOT guarantee that it ...
4
votes
1answer
571 views

Prevent IIS7 HTTPS from binding to all SSL IP addresses

I've had this interesting problem with IIS7. I have a number of HTTPS sites in IIS7. That hasn't been a problem, until I wanted to go and set up VisualSVN Server using an SSL certificate. The ...
3
votes
2answers
585 views

Encrypt connection between apache web server and mysql server

I'm setting up a local webapp. I have a CentOS-5 box that will be the webserver (Apache 2.2). I have another box (RHEL5) that will be used only for MySQL. The data will be encrypted on the webserver ...
1
vote
1answer
4k views

curl FTPS with client certificate to a vsftpd

I'd like to authenticate FTP clients either via username+password or a client certificate. Only FTPS is allowed. User/password works, but while testing with curl (I don't have another option) and a ...
2
votes
3answers
762 views

CSR, SSL and load balancers?

do I need to generate a CSR on the load balancer or on the individual servers?
1
vote
1answer
705 views

Running HTTP and HTTPS connections for a single domain (say, www.example.com) through a Cisco ACE SSL endpoint

My web application config has a Cisco ACE load balancing across a server farm and I want to use the ACE as an SSL endpoint as well. To make this work, the network architect has come up with a design ...
0
votes
1answer
405 views

SSL certificates that works with nginx

All, After thinking about it, we are planning to buy an SSL certificate. Because an SSL certificate is quite costly, would you be able to share your experience on SSL certificate(s) that works with ...
2
votes
3answers
554 views

Partial Client Certificate request for Apache HTTP

I have an Apache HTTP Server with SSL enabled and requesting a Client Certificate. How do I set up Apache to only request the certificate when a user hits a certain part of the website? Example: ...
2
votes
7answers
347 views

What kind of website needs SSL?

What kind of website that needs SSL? Is it limited to e-commerce website, or websites that needs credit card payment only? Is there another good reason for a non e-commerce website to use SSL? ...
2
votes
2answers
1k views

VirtualHost not using correct SSL certificate file

I got a doozy of a setup with my virtual hosts and SSL. I found the problem, I need a solution. The problem is, the way I have my virtual hosts and server names setup, the LAST VirtualHost directive ...
0
votes
2answers
2k views

How ssl is usually set up on shared hosting?

I am quite unclear on how ssl is usually set up on shared hosting. I have account with justhost.com and they provided me with public_html folder and (its sibling) ssl folder. When I create ssl ...
1
vote
2answers
501 views

IIS, SSL, and Virtual Directories

I'm running a webserver on WS 2k3, IIS 6.0. Some of the content is on that server, but most is in a virtual directory linked to another server. Everything works (almost) fine when no SSL is used. ...
83
votes
4answers
90k views

how to download the ssl certificate from a website?

I want to download the ssl certificate from, say https://www.google.com, using wget or any other commands. Any unix command line? wget or openssl?
2
votes
1answer
2k views

Stunnel too many clients

I'm trying to hook up stunnel and haproxy to forward https connections through to some backend servers. I've got haproxy setup right, and I seem to have stunnel set up right. Trouble is that when I ...
0
votes
3answers
334 views

Apache: Serve http traffic over https

Using apache. I have a demo of a webapp that usually uses https. However, for the demo, I want all traffic to be on http even if a user hits https. I have added the following entry and it works if ...
2
votes
1answer
3k views

Configuring OpenLDAP and SSL

I am having trouble trying to connect to a secure OpenLDAP server which I have set up. On running my LDAP client code java -Djavax.net.debug=ssl LDAPConnector I get the following exception trace ...
0
votes
1answer
328 views

Server with IIS and Apache - how to SSL encrypt Apache with IIS

I have a Windows Server 2003 box already setup and working with IIS 6. IIS is set to serve a site out over both HTTP and HTTPS connections using default ports. For various reasons I need to set ...
1
vote
0answers
1k views

Set up SSL/HTTPS in zend application via .htaccess

I have been battling with .htaccess rules to get my SSL setup working right for the past few days.I get a requested URL not found error whenever I try access any requests that does not do through the ...
1
vote
3answers
365 views

Is this a solution for having multiple SSL certificates on the same IP

I am running CentOS running on a VPS. I read some guides on having multiple SSL certificates on the same system, but I can not get the basics to work. The guide I got that makes the most sense to me ...
0
votes
2answers
4k views

Apache: rewrite port 80 and 443 - multiple SSL vhosts setup

SETUP: multiple SSL domains are configured on a single IP, by using vhosts with different port numbers (on which Apache listens) Apache 2.2.8 on Windows 2003 (no comments on this pls) too many ...
1
vote
2answers
297 views

Should I anticipate any problems trying to use the same SSL Cert on 2 computers (primary, backup)?

We have a production machine running IIS6 with a wildcard SSL certificate. The certificate that was installed is not exportable. We want to upgrade the system to IIS7. As part of this venture, ...
4
votes
1answer
420 views

MySQL replication/connection failing over SSL

I set up two MySQL servers where one is replicating from the other. They both work perfectly, but once I turn on SSL I get the following error: ERROR 2026 (HY000): SSL connection error I get the ...
3
votes
2answers
2k views

Apache https is slow

Update I switched to using a 1024 bit key, and I changed the SSLCipherSuite in my ssl.conf file. SSLCipherSuite RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP Hey, I've set apache up to use SSL with a self ...
2
votes
2answers
296 views

self-signed certificate for iis 6.0

how do i setup a self-signed certificate for multiple websites?
0
votes
2answers
338 views

How do I host multiple SSL websites using ISA inbound rules with 1 external IP address?

How do I host multiple SSL websites(all subdomains) using ISA inbound rules with 1 external IP address? I think something like option 2 in this question might work?
0
votes
5answers
7k views

Configuring IIS7 for TLS 1.0 only

I have been tasked with configuring an IIS7 server to accept TLS 1.0 HTTPS connections only. I have come up with the following list of cipher suites which I have deduced are TLS 1.0. ...
2
votes
2answers
4k views

If I re-key a SSL certificate for a 2nd/backup server, does the original still work?

We have a production server with a wildcard SSL certificate. I'm in the process of creating a backup/failover server that will host the same domains, and therefore will also need the SSL certificate. ...
4
votes
2answers
5k views

SSL setup: UCC or wildcard certificates?

I've scoured the web for a clear and concise answer to my SSL question, but to no avail. So here goes: I have a web-service requiring SSL support for authentication pages. The root-level domain ...
1
vote
2answers
98 views

Logical move of a server to UK, what do I do with the SSL certificates

I have been asked to move a rails application from the US to the UK. This involves bringing up the rails stack on Ubuntu 8.04.4; that's completed. I'm stumped with the SSL configuration though. The ...
1
vote
2answers
2k views

Validating SSL clients using a list of authorised certificates instead of a Certificate Authority

Is it possible to configure Apache (or any other SSL-aware server) to only accept connections from clients presenting a certificate from a pre-defined list? These certificates may be signed by any CA ...
0
votes
1answer
31 views

Self-requests appearing on an Apache SSL site

I have an SSL site running on Apache that seems to be recieving regular self-requests of some kind. Is this something that Apache is doing? What is the reason? (ip address) - - ...
0
votes
1answer
93 views

SubjectAltNames supported on IIS 5?

I just generated a certificate with a CN and two subject alternative names (3 differents fqdn) and i always get a handshake failure, whatever the ssl version i use: 14177:error:1407F0E5:SSL ...
0
votes
1answer
320 views

Two Tomcat SSL Providers & One FreeBSD

Versions used: JDK 1.6 Apache Tomcat 6.0.2X CryptoPro CSP 3.6 provider (www.cryptopro.ru) Question: On FreeBSD8 I need to have two opened HTTPS different ports (443 and 444, for example). In other ...
0
votes
1answer
899 views

Proxy server and ssl over non 443 port security risk

Most http proxy servers do not allow to send ssl over non 443 ports. Why is this a security risk?
2
votes
1answer
1k views

Renaming IIS Website names

I'm wanting to rename some websites in IIS for organization purposes. I assume that the name is just meta data and won't cause any errors or problems but I'm not sure. Is there anything that relies on ...
1
vote
1answer
1k views

Having many subdomains with SSL--best practices?

I have a site that has many subdomains (one for each client). The content for each subdomain will be different, pulling different data, different layouts etc, so I don't think I can just alias one ...
3
votes
2answers
302 views

Apache SSL configuration testing

When I run configtest on our Apache server, I get the following: `Syntax error on line 1023 of /www/conf/httpd.conf: Invalid command 'SSLEnable', perhaps mis-spelled or defined by a module not ...
13
votes
6answers
25k views

Installing SSL Certificate for use in IIS7, installation “works”, but cert listing disappears

Windows Server 2008 R2, IIS7. We have an SSL cert from Go Daddy. It's a wildcard cert, so it will work across subdomains (e.g. *.domain.com). I followed the instructions located at ...
3
votes
2answers
150 views

Can I have a SSL certificate for direct IP access?

Is it possible to have a SSL certificate for access directly to an IP, and not through a hostname? Eg, can I purchase an SSL certificate to make https://1.2.3.4/ work without giving a security ...
3
votes
2answers
2k views

ssl certificate for www.example.com and example.com

I used make-dummmy-cert that comes with apache 2.2 and ssl_mod to make a self-signed certificate. I tried making it for www.example.com, example.com, or *.example.com, but none of them would work for ...
1
vote
1answer
4k views

Install SSL certificate for RDP on Windows 2003?

I need to configure SSL for RDP, and am following the instructions described here: http://thelazyadmin.com/blogs/thelazyadmin/archive/2007/01/26/Configure-RDP-over-SSL-with-SelfSSL.aspx My client's ...
3
votes
3answers
1k views

apache: mix name and ip based virtual hosts and ssl

I'm trying to configure apache 2.2 so that I can use two IPs. One for name based virtual hosts which should all use the same ssl-key and the other one for just one ip based host which should be using ...
3
votes
3answers
3k views

PCI compliance: using SSL as transport layer for RDP (Terminal Service)

My client failed her PCI compliance audit. The server supports Remote Desktop (Terminal Service) but only provides encryption and not authentication. This exposes the server to Man-In-The-Middle ...
4
votes
3answers
2k views

Double Wildcard SSL Certificates

Is there a registar that offers SSL certificates for: ..domain.com or something_fixed.*.domain.com? -- M.
1
vote
2answers
4k views

Redmine subversion won't ignore certificate error even if told

I have set up a copy of Redmine through the Bitnami Redmine Stack and am having trouble accessing a remote SVN repository through https. The trouble seems to be related to the fact that I don't have a ...
0
votes
1answer
396 views

How do I get squid peers to talk SSL to each other?

How would I set up a pair of squid proxies so that one uses the other as a parent and all traffic between them is encrypted using SSL? I've read the cache_peer documentation, but it's all very fuzzy ...