SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
1answer
114 views

Renewing a certificate with Geotrust - a general question

First off, allow me to explain that I'm the middleman in the process looking for clarification. I have a client who wants to renew one of their SSL certificates (Geotrust) on a website that we host on ...
0
votes
2answers
640 views

host ssl and non ssl sites on same apache machine

I got apache and Ubuntu machine with static ip. Today I host sites via port 80, I want to able to host also sites with https. Is there a service I can buy that can make me ip pool or somehow solve ...
0
votes
1answer
94 views

Can I apply SSL to all my virtual hosts with this?

I've been wanting SSL for one portion of my website, which is one single domain name on my VPS. As most certificates look fairly expensive, I had looked at my domain name provider and had found a ...
1
vote
2answers
2k views

How to disable SSL in IIS6

So I have a server that was used by someone else to run the same website for a while. At some point, the previous developers installed an SSL certificate that expired in 7 days. When I came in, I ...
1
vote
2answers
378 views

Performing NAT via a virtual network interface

Short version: Are there any special settings for NAT to work correctly on Linux' virtual network interfaces? I am running a Linux (2.6.39-2-486 Debian build) box as NAT server. It has a real network ...
0
votes
3answers
86 views

ssl and signing request question

I need to generate an ssl csr for a wildcard certification which I can do using openssl and ssh (I don't use any web based control panels such as cPanel). Now I'll be getting a new server next week ...
3
votes
2answers
87 views

how to sign web pages

using https for websites ensures that the communication is encrypted and comes from and goes to the right server. BUT https is really slow compared to http, it also breaks the http cache protocol. ...
1
vote
1answer
988 views

Apache sending wrong SSL certificate on some connections / browsers

I have a bit of a strange problem and I hope someone can help! I have just moved servers (both Linux running Apache 2.2) and re-installed everything and pretty much everything is back up and running, ...
1
vote
1answer
211 views

rails, nginx and passenger with SSL on some paths

I'm running a standard Rails 2.3.11 install, with passenger and nginx. I've correctly installed the SSL certificates and they are confirmed to work. However, I only need SSL on two paths example.com/...
1
vote
1answer
68 views

How is a SSL certificate affected if the same domain is being hosted on 2 separate servers whilst DNS propagation is occurring?

Is there a way to mitigate any issues? What should I consider when migrating servers?
1
vote
1answer
839 views

apache2 SSL Diffie Hellman key sizes

How to make apache 2.2 in debian lenny use Diffie Hellman key exchange with keys larger than 1024bits? I found a patch that theoretically adds this ability at Apache bugzilla but can't find any ...
0
votes
1answer
556 views

Load balance Apache and a SOAP application over SSL while retaining client IP address

We are trying to find the most suitable load balancing solution that will work with our application, but I quickly found I don't know much on the subject. We were going to run Varnish Cache but we use ...
1
vote
2answers
2k views

Apache Client Certificate Authentication

How can I configure Apache 2 (on Ubuntu 10.04) to use Client Certificate Authentication where my domain (secure.somedomain.com) is secured by a third party trusted SSL certificate, and the client ...
0
votes
1answer
111 views

Redirecting all request to a specific folder, works except for SSL doesn't?

I have a folder on my server called john. Inside this folder is an application I am working on. I have a self signed cert installed. if I go to https://mydomain.com/john/signin it works. I have an ...
0
votes
1answer
2k views

getting HTTP Error 403.7 - Forbidden: SSL client certificate is required

-1 down vote favorite Created a CA using: makecert -r -pe -n CN=WingCA -sr CurrentUser -a sha1 -sky signature -cy authority -sv WingCA.pvk WingCA.cer imported it to root: certmgr -add -all -c "...
0
votes
1answer
135 views

Configure the Web Application to Require Client Certificates

I created a SelfSigned certificate for the webserver using selfssl. installed it on trusted root and personal. cretaed a selfsigned certificate for the client from clients machine, installed it on ...
1
vote
1answer
2k views

IIS website http ok but https cannot find resource (status code 404)

Afternoon, I publish an API on domainA.com and have done for several months. *http:/domainA.com/service.svc takes me to the resource (c:\inetput\wwwroot\api) *https://domainA.com/service.svc ...
0
votes
1answer
127 views

Both :443 and :80

I have some common configuration for both port 443 and port 80. But I want for port 443 some specific configuration (like turning SSLEngine On). How can I get this working?
3
votes
1answer
334 views

Should I use HTTP code 301 or 426 on port 80 of a HTTPS only server?

When a user hits my SSL/TLS only server at port 80, should I advertise Upgrade Required (426) or redirect with Moved Permanently (301)? What are the drawbacks and benefits of each approach? As far ...
0
votes
1answer
109 views

Solution needed for proxy SSL server that doesn't allow server side variables

I need to force SSL within a Wordpress website and I'm on a Network Solutions server with a private SSL and IP address. Plugins that force SSL are not working, I get into an infinite loop. Network ...
4
votes
1answer
636 views

What is the maximum strength of a wildcard SSL certificate

i had an interesting conversation with a bank IT security employee, and they raised a few questions. What is the maximum strength/bit length of a wildcard domain certificate? Are they as secure? (in ...
3
votes
1answer
478 views

how to redirect from https://www.example.com to https://example.com?

I server SSL pages from https://example.com. If a user types in https://www.example.com, I want to redirect. I've the got rewrite rule working, but chrome displays an error message because the server ...
0
votes
1answer
956 views

Self-Signed Certificate and IIS 6.0, How to generate a Client Certificate

I am looking at generating a self-signed certificate, and only allow users who has client certificate installed on my web server. I am using IIS 6.0 with selfSSL to generate my .pfx web server ...
0
votes
1answer
2k views

Securing Two Sub domains on IIS7.5 with SSL on port 443

I have two sub domains pointing at the same IP address i.e. sub1.example.com sub2.example.com Each sub domain maps to a site (let's say sub1 and sub2, respectively) in IIS 7.5 on Windows server ...
2
votes
1answer
5k views

Apache failed to start after SSL config change. No errors. Please help

Website(s) were up. I changed my config files in sites-enabled, then ran: apache2ctl configtest Got: Syntax OK Then ran: apache2ctl graceful Got returned to the command prompt. No messages. ...
0
votes
1answer
229 views

Enabling IIS to host two websites on the 443 using SSL brakes ActiveSync

I have an SBS 2003 machine to configure. I am required to host both webmail.company.com:443 & intranet.company.com:443 on the same IIS server using the one IP address and of course the same port (...
1
vote
3answers
1k views

IIS7.5 - Personal SSL certificates for multiple users

I want to get a security model implemented, but I'm not sure what terminology IIS/SSL uses in order to do that. Nor do I know how to make it happen in IIS7.5 The process I want to have ...
8
votes
2answers
9k views

How to check HTTP response code of a secured website with Nagios?

I want to create a nagios check of my secure website. All the check needs to do is login to the site with login details that I pass the script. Does anyone know of a plugin or script that will allow ...
10
votes
3answers
7k views

Can I reuse a SSL CSR?

I've generated a self certified SSL cert for testing a new web site. The time has come for the site to go live and I now want to purchase a cert from GeoTrust. Can I use the same CSR that I generated ...
1
vote
1answer
1k views

Windows Mobile 6.1: Can't access internal site via https

Whe have several Motorola Symbols (don't remember the exact model) running Windows Mobile 6.1 They are used for entering data in the field, and then at the end of shift the employees come in and "...
0
votes
1answer
988 views

Smartcard (USB Cryptostick) and Firefox

I am having a GPF-Cryptostick running on ubuntu 11.04 with firefox 5.0. Using a smartcard is such a great thing, but i did not found any good how-tos. Maybe it is just a lack of understanding. First: ...
4
votes
2answers
803 views

What is the technology behind Hostname Based SSL (multiple ssl vhosts on single IP)?

Well known PaaS provider Heroku offers multiple solutions to SSL problem. One of those is a product called Hostname Based SSL This is not SNI. They claim it works on every browser in any ...
0
votes
3answers
404 views

CentOS - Apache and SSL?

Hei all i have problem for my SSL setup, when i put SSL Engine to on my Apache will not start up, if i remove it, its work fine. i can't finde the Apache log, so i can find out of whats happen here, ...
-1
votes
1answer
892 views

How to enable SSL on Nginx reverse proxy on cPanel?

I am running cPanel/WHM 11.30 on CentOS 5.6, Apache 2.2 and Nginx Admin 2.5 (as reverse proxy). The Nginx bit is reasonably new to me so the following question may be somewhat noob. I want to secure (...
0
votes
1answer
67 views

SSL Certificate with any webhost

Is it possible to buy an SSL certificate from verisign or comodo for exapmle, and use it with my shared webhosting in another company? if yes, how?
0
votes
1answer
365 views

Creating an MS Certificate Authority using CA Root Certificate created with OpenSSL

Using the guide here: http://www.davidpashley.com/articles/cert-authority.html I have create a certificate authority using OpenSSL. However I would now like to use the Microsoft CA instead. The ...
0
votes
1answer
767 views

How to add SSL Binding in IIS 7.5

I had the Default Web Site running on localhost port 80 smoothly. I wanted to enable SSL on it so I first created a Self Signed Certificate in Server Certificates section of IIS Management Console. ...
0
votes
1answer
1k views

Using several SSL certificates on same IP with IIS 7

I've got several domains (different sites with different domains. not sub-domains) which need SSL. I couldn't find a way to make it work - so that each domain will have its SSL certificate, but use ...
6
votes
2answers
22k views

Setup IIS 7.5 with multiple website bindings and SSL?

On IIS 7.5 I am trying to achieve this with two websites: Default Web Site is bound to: (blank host header port 80 - http) (blank host header port 443 - https) go.example.com www71.example.com the ...
-3
votes
2answers
266 views

Can one website be accessed via multiple domains with ssl?

Can a website on a vps with a dedicated ip be accessed via multiple domain names and use ssl where needed? How would this be done on IIS 7.5 WIndows R2 2008
1
vote
1answer
320 views

Apache2: How to split out the SSL configuration?

In Apache2, I'd like to separately define my SSL-related stuff once, and in a separate file from the rest of the configuration. This is mostly a matter of taste, but it also allows me to include the ...
1
vote
2answers
999 views

Exchange 2003 SMTP SSL and various email clients

This Exchange 2003 server sits behind a firewall with a virtual SMTP server listening on port 465 and attached an SSL certificate from Comodo to the virtual server. However, when trying to send from ...
1
vote
2answers
3k views

Unable to set up SSL support for Apache 2 on Debian

I am trying to set up ssl support for Apache 2 on Debian. Versions are: Debian GNU/Linux 6.0 apache2 2.2.16-6+squeeze1 I followed a lot of how-tos for days but I couldn't make it work. Here are my ...
0
votes
3answers
71 views

Securing data sent to an unencrypted WiFi AP

The business plan of a project I'm involved in assumes selling certain WiFi-enabled devices to end users. All these devices originally have an unencrypted connection and a standard SSID. The problem ...
1
vote
2answers
2k views

Force SSL on one page via .htaccess without looping

Okay, I have this code: RewriteCond %{HTTPS} off RewriteCond %{REQUEST_URI} ^/borrowing/ill/request\.php$ RewriteRule ^.*$ https://%{HTTP_HOST}%{REQUEST_URI} [R,L] The way I would expect this to ...
0
votes
1answer
1k views

Supermicro IPMI SSL

I have a Supermicro X9SCA-F serverboard and I'm trying to secure Super Doctor III IPMI by using SSL. I generated my own certs (done this many times before), uploaded via the web interface, then it ...
2
votes
4answers
298 views

Is there a provider that offers free SSL certificates that don't give a warning in Firefox 4?

I am looking to install SSL certificates for frequently used https services. I used to use StartSSL for this, but they "temporarily" stopped offering their services. I wonder if there are any other ...
0
votes
1answer
226 views

Measuring Apache request processing times

I want to measure performance of my server. The architecture is Apache2 talking to Tomcat over mod_jk. Requests are over HTTPS with mutual authentication. The client does not reuse connections, ...
0
votes
2answers
6k views

ssl_error_rx_record_too_long error on IIS - site was working, suddenly stopped

I am suddenly getting this error connecting to localhost IIS on my development machine. It has been working fine for ages, and now suddenly has this error in Firefox: Secure Connection Failed An ...
0
votes
1answer
74 views

Configuring apache with SSL

I am trying to configure apache with SSL. I am facing 2 issues: 1) If typed www.example.com it doesn't redirect to https://example.com (Though, i have written the rewrite rule). 2)And while running ...