SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
0answers
3 views

NGINX Loadbalancer Using SSL Termination for Node.js Sessions

How can I ensure my session is passed from a NGINX loadbalancer using SSL termination? There must be some test I can perform and logs I can read. I am unsure how to continue approaching the ...
0
votes
0answers
12 views

Wiresharking access to AWS to debug permission problems

I have a plugin which pushes files to S3. It's not my plugin and auditing what exactly it does has proved difficult. I'm trying to enable access logging on the bucket to figure out what exactly is ...
0
votes
0answers
10 views

How to prevent MITM in mobile apps

I want to make sure that my mobile app is the only one making calls to my API. How to ensure that if softwares like Fiddler generate a HTTPs certificate (man-in-the-middle) and anyone is able to ...
1
vote
1answer
112 views

How do I use a wildcard certificate with SSRS?

I am trying to setup SSRS access via SSL, and I have followed the instructions here; however, I do not receive a clickable url in the Configuration Manager to click on and test. The url shows as ...
0
votes
0answers
17 views

Debugging client certificate problems

I am trying to configure an Apache install to accept client certificates. When I work with self-signed certificate, unknown to Apache and using Firefox, it works when SSLVerifyClient set to ...
4
votes
3answers
1k views

How to view all ssl certificates in a bundle?

I have a certificate bundle .crt file. doing openssl x509 -in bundle.crt -text -noout only shows the root certificate. how do i see all the other certificates?
1
vote
2answers
22 views

How to set up TLS on hMailServer?

Complete noob here. Please be gentle :) I have a Windows 2008 server, running hMailServer. Right now all my communication is unencrypted. I want to start using TLS. So now I've got myself a SSL ...
0
votes
1answer
1k views

Zen Load Balancer HTTPS to HTTPS

I've been struggling with an issue that I am hoping someone can help with. Basically, I have setup a working Zen Load Balancer going from HTTPS to HTTP but I am struggling with getting it to work ...
0
votes
1answer
22 views

SMTP doesn't work on distinct machine [on hold]

I'm trying to setup TLS e-mail on remote machine, but it doesn't work. Trying to send e-mail on my local machine (Windows 7 x64 locale ru-ru): 16:33:18 CONNECT : Looking up host name ...
0
votes
0answers
19 views

sec_error_unknown_issuer after new ip [on hold]

Yesterday my vps provider locked down my ip during 24 hours because of an external ddos attack. I immediately purchased a new ip, set it up in the network as eth0:0 (and added the original one as ...
-4
votes
1answer
43 views

How to open Port 443 on External Firewall? [on hold]

I've been trying to configure SSL on my server for last 4 days now, with absolutely no success. I've generated a CSR file and uploaded the certificate and configured a Vhost, but nothing seems to ...
0
votes
3answers
206 views

Which CAs offer EV SSL certs with multiple domain names?

I know Comodo does. http://www.instantssl.com/ssl-certificate-products/addsupport/ssl-ev-mdc.html Any others? Thanks
1
vote
0answers
30 views

NginX dropping session data when acting as an SSL reverse proxy for a sinatra application

I'm pretty much stuck at this point. I've got a website, served up on Mizuno (A Jetty variant, I think) using Padrino (A sinatra variant), on port 8080, with Nginx listening at 80/443 to allow for SSL ...
0
votes
2answers
34 views

Redirect loop when forcing HTTPS

I am using the following to force HTTPS on my main website. ### Force SSL RewriteCond %{HTTPS} !=on RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301] If you want to view the full htaccess ...
1
vote
0answers
18 views

Nginx user uploaded SSL Certificates

I'm wondering what's the best way to let users upload their SSL certificates. I have a multitenant application based on rails/passenger/nginx and I need each user to use his own domain with his SSL ...
1
vote
1answer
62 views
+50

Change SSL Protocol in MSSQL 2012

Is there a way to change the SSL Protocol support in MSSQL express 2012 on windows 2008R2 ? I want to change the protocol from SSL3 to TLS (1.0,1.1,1.2), after hours of looking I cant find ...
1
vote
1answer
3k views

SSL Library Error: X509_check_private_key:key values mismatch

I installed a new SSL certificate signed by our own Certificate Authority. Apache will not start, with the error: SSL Library Error: 185073780 error:0B080074:x509 certificate ...
0
votes
2answers
2k views

Problem with apache + ssl: length mismatch error and ocasional bad request

we migrated a server from slicehost to linode recently, we copied the config from one server to the other. Everything works perfectly except that we get: Occasional errors with "Bad Request", this ...
0
votes
1answer
79 views

apache ssl configuration - ssllabs how to get A+

I have this configuration SSLCipherSuite AES128+EECDH:AES128+EDH SSLProtocol All -SSLv2 -SSLv3 for apache 2.4.6, openssl 1.0.2a and on ssllabs' ssltest I get A, it suggests (warns) that I have ...
6
votes
1answer
2k views

Unable to generate certificate with Subject Alternate Name using Java 1.7 keytool utility

I'm having an issue generating a keypair with subject alternate name using the Java keytool utility from Java 1.7. I'm attempting to follow the instructions found here. An example of the command I'm ...
0
votes
2answers
846 views

Why isn't tomcat serving the correct SSL certificate

I configured tomcat with SSL successfully and was using a self-signed certificate. Recently an issue arose where just having the client "Accept/trust" our certificate wasn't easy. We ended up ...
0
votes
1answer
2k views

Page can't be displayed with IIS and SSL

I have a single site hosted in IIS 8. I have two site bindings. One is for HTTP, the other is for HTTPS. HTTP is on port 80 with All Unassigned addresses, I left host name blank. HTTPS is on port 443 ...
43
votes
9answers
4k views

Why do I need to purchase an SSL certificate when I can generate one locally?

I am having trouble understanding why we need to purchase SSL certificates when we can generate them locally using openSSL. What is the difference between the certificate I purchase and a test ...
1
vote
1answer
26 views

Enabling LDAPS: Cannot get to open port 636

I have a domain controller, which has Active Directory (AD). I want to turn on LDAPS on this AD, so that I could access the AD via secure connection. I have followed the following guide: ...
0
votes
1answer
896 views

Unable to configure haproxy with ssl

I want to make my server ssl protected, it has two parts one for website and another for application. to balance them we have used haproxy. Now we want to secure this haproxy. I have installed the ...
-2
votes
2answers
25 views

Creating a self signed certificate for demonstration purposes on Centos 7 server

I have setup my default tomcat website (tomcat 8.0.3) on a server inside my company LAN. From my work computer if I try to access the website by typing it into google chrome it is not working. The IP ...
1
vote
0answers
27 views

curl error 51 - of multiple requesting machines, only one has the issue

I have an SSL cURL request that fails from a single machine with the following error: curl: (51) SSL peer certificate or SSH remote key was not OK This error seems to have popped up overnight, and ...
2
votes
1answer
2k views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.name.org port 636 with the ssl checkbox. This is on the local server itself. ...
0
votes
1answer
24 views

Reverse proxy Apache rewrite rule doesn't work

I've an apache reverse proxy and i try to make a rules for redirects few urls of example2 to example1 but my rewrite rules doesn't work. I've try this in the vhost of example2 : ProxyPass / ...
9
votes
4answers
13k views

How do I disable SSLv3 support in Apache Tomcat?

I am trying to reconfigure my Apache Tomcat server to only use TLSv1. However, it is still falling back to SSLv3 using certain browsers. I setup the <connector> tag with the following settings: ...
8
votes
0answers
144 views

Why is Internet Explorer 11 unable to connect to HTTPS sites when TLS 1.2 is enabled?

Normally I don't use Internet Explorer at all. I use it only in design time for interface tests (development machine and with unencrypted http). Every week I run the SSL Labs server test which says ...
5
votes
2answers
1k views

How to manually create Puppet CA and certificates?

I am wondering how to manually (using openssl instead of puppet ca command) create CA that would be usable by Puppet? The goal would be to script creation of such CA's to deploy them on multiple ...
-2
votes
0answers
17 views

Certificate chain, middle certificate error

I want to save time so I go straight in to it. I have generated a root certificate by this guide, www.akadia.com/services/ssh_test_certificate.html then I have generated more certificates and signed ...
2
votes
1answer
3k views

FortiClient (Windows 7 32 bit) shows 'connected' for an SSL VPN connection but can't ping the remote server

I am trying to connect to a remote server through FortiClient for an SSL VPN connection. When I connect through the FortiClient (version 4.3.5.472) on my windows 7 32-bit system, it shows connected. ...
0
votes
1answer
19 views

Which L1K entrust certificates should be kept private?

One of our client has made an update to his SSL certificate and he did send us a procedure to update the certificate on our side. They also provided the L1Kchain.txt (that should be converted to a ...
0
votes
0answers
35 views

nginx config - pass all to https apart from one folder

I've been banging my head on this for 3 days day and I'm getting nowhere. I transferred the whole site over to ssl and that change over didn't go too bad and the site was only down for about 30 min. ...
0
votes
1answer
14 views

Apache Reverse Proxy with SSL handling

I am trying to use apache as a reverse proxy, and to off load SSL processing from the underlying Node Js application. I have the configuration defined but it doesn't look as though the system is ...
0
votes
0answers
22 views

Server returning 404 for only Baiduspider

I recently updated my website to enforce HTTPS for all requests. Everything appears to be working well after this change but Baidu's web crawler (Baiduspider) is receiving a 404 for all requests. ...
2
votes
1answer
40 views

logging SSLv3-handshaking failure on nginx

I have website server by Nginx in FreeBSD. Last week we decided to drop support for SSLv3 connection for our site. However I wondering if nginx has logs of all client who can't do SSL-handshake ...
8
votes
2answers
417 views

Is this SSL certificate chain broken and how to fix it?

For the SSL cert on the domain example.com, some tests tell me that the chain is incomplete and since Firefox keeps its own certificate store, it might fail on Mozilla (1, 2, 3). Others tell me it is ...
1
vote
1answer
2k views

How do I transfer an SSL certificate from an Apache server to an NGINX server

How do I transfer an SSL certificate from an Apache server to an NGINX server? Any help is much appreciated.
1
vote
1answer
2k views

MS SQL Server configured for secure (SSL) connection allows non-secure connection from JDBC Client

I need to connect to the MS SQL Server 2008 r2 using the secure communication. I have been able to do the same using the following connection string: jdbc:sqlserver://<<db server ...
0
votes
3answers
1k views

Chef Server 11.4 SSL certificate failure when bootstrapping a node [closed]

I'm trying to bootstrap a RHEL 5 server with Chef 11 Chef-Client using my Chef 11 Work station through a Chef Server 11.4. However, I am receiving the error below. ...
1
vote
0answers
33 views

nginx: Redirection from http://*.example.com to https://example.com showing strange behaviour

I have an SSL certificate being only valid for example.com (not valid for subdomains) and therefore want to redirect both http://example.com and http://www.example.com to https://example.com using ...
5
votes
2answers
2k views

nginx proxy + ssl +clr “400 bad request” error

Here's the situation - there's a trasnparent nginx proxy that handles SSL certificates and does it well until we decide to add a revocation list management, required for security reasons. This is when ...
0
votes
1answer
26 views

How to health check hosts over HTTPS behind the load-balancer?

I have NGINX serving my site over HTTPS on EC2 hosts behind Elastic Load Balancer. I need to set up a proper health-check in ELB. However, I cannot use https://www.example.com because I need to ...
6
votes
9answers
5k views

Multiple private SSL certificates on a single shared hosting plan?

Recently I contacted my shared hosting provider about setting up private SSL for a few of my sites. I have several sites hosted under the same plan (the plan allows for unlimited domains). However, ...
0
votes
1answer
14 views

Signed SSL certificates on Zyxel USG60 web interface?

I know that you can add SSH certificates for client/server authentication for the web interface and SSL VPN, but is there a way to change the SSL cert that the web interface sends to the browser just ...
7
votes
2answers
77 views

Forward proxy for webservices with SSL client certs

I have lots of servers which access various external webservices, most of which use SSL, some of which require client certificates. I would like to centralize the configuration of client certs and ...
-2
votes
0answers
13 views

Using ssl on open vpn server

So I'm getting crazy annoyed with the following problem. I have a Ubuntu 14.04 Server with OpenVPN acces server running on sub.domein.com . Now I can request different folders from the server with ...