SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

3
votes
3answers
6k views

nginx as reverse proxy with upstream SSL

I'm building a proxy for an internal API to allow clients to connect without having to have the self-signed certificates installed. Clients (built, owned and used only internally) will connect over ...
0
votes
0answers
11 views

Public Key Pinning and subdomains

Shortly I have intend to install new webserver and I'd like to secure users a little bit more. I already have domain, (virtual) server and everything else that matters when configuring a server. ...
0
votes
1answer
18 views

NGINX + SSL certificate securing the connection in some browsers only

I've been strugling with this issue and I seem to be running into a dead end here without knowing what to do next... I've taken a task left by another worker who left on vacation. He was trying to ...
5
votes
1answer
4k views

New server unable to fetch configuration from Puppetmaster due to some ssl error

Three machines in the production environment had some hardware issues and were decommissioned. The infrastructure team has reinstalled them and gave them the same hostnames and IP addresses. The aim ...
0
votes
1answer
657 views

Tomcat ECDHE-ECDSA chiphers are not supported

Tomcat does not support ECDHE-ECDSA* ciphers. Configuration and version information is given below. OS is CentOS 6.5 x64 Tomcat version is 7.0.56 Tomcat native version is 1.1.30 (Loaded APR based ...
1
vote
1answer
1k views

Unable to configure haproxy with ssl

I want to make my server ssl protected, it has two parts one for website and another for application. to balance them we have used haproxy. Now we want to secure this haproxy. I have installed the ...
1
vote
1answer
1k views

Nginx SSL redirect for one specific page only

I read and followed this question in order to configure nginx to force SSL for one page (admin.php for XenForo), and it is working well for a few of the site administrators but is not for myself. I ...
0
votes
1answer
15 views

How to redirect one domain to the other with SSL?

I have two domains (example.com and example.co.uk). The .com one is the "head" and has servers behind him. What I want to do is redirect all traffic from the .co.uk to the .com domain. I looked at ...
0
votes
1answer
3k views

Page can't be displayed with IIS and SSL

I have a single site hosted in IIS 8. I have two site bindings. One is for HTTP, the other is for HTTPS. HTTP is on port 80 with All Unassigned addresses, I left host name blank. HTTPS is on port 443 ...
2
votes
1answer
23 views

Dovecot SSL: “unknown state”

Two weeks ago I set up a Mailserver using Dovecot and Postfix. It's a server for a organization with about 5000 mails per day. Everything works fine, but today I enabled verbose_ssl in ...
1
vote
2answers
1k views

SSL certificate causes VPN connection error

Everyone! My problem - when I create SSL certificate (using selfssl7 or IIS management console), my vpn connection (L2TP with certificate authentication) will not go up (I get error 789). I have to ...
1
vote
1answer
1k views

Apache: redirect to https before AUTH for server-status

I want to force https and basic auth for server-status output (mod_status). If I enable auth and user asks for http://site/server-status apache first asks for pass, then redirects to httpS, then asks ...
-3
votes
2answers
34 views

Modifiying a server securely [on hold]

I wanted to purchase a dedicated server to host my site. I am a newcomer to this and wanted to know if I hired someone to secure the server and SSH for me, will that put me at risk? Or is there an ...
0
votes
1answer
1k views

SSL Cert error after migrating to hosted exchange service

OLD SETUP SBS 2011 w/ Exchange and all clients running Office 2010 (using rpc/http as many were laptops) NEW SETUP All mailboxes and accounts moved to hosted Exchange. Local Exchange services ...
2
votes
3answers
37 views

Apache httpd reverse proxy delegate SSL to backend

Usually using Apache as reverse proxy is done to do SSL offloading and so Apache handles all the SSL stuff and the backend server just manage plain http. But is it possible to do the opposite ? I'm ...
1
vote
1answer
1k views

Connection Reset error trying to set up HTTPS locally using VS and IIS Express

I'm trying to set up Facebook authentication on my application, so I tried following the steps at this page: ...
6
votes
1answer
132 views

OCSP stapling with nginx

I'm having trouble with OCSP stapling in nginx. So I start up the openssl ocsp daemon, and then I visit my site. Then it says Invalid request. I am using a private PKI and CA. SSL key: 8192bit DH key ...
0
votes
0answers
9 views

CloudFront alias for https site

Our website is completely configured on SSL and all links of images and others are coming via https://www.example.com/.. This is one of the requirement of site Now, if I need to setup the CloudFront ...
0
votes
0answers
14 views

Nginx, SSL and websockets on different port

I user Nginx as a server proxy and use it with SSL connections for whole website. All is fine, except I do not know how I can add for this websockets. I found some info on internet and with it ...
2
votes
1answer
3k views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.name.org port 636 with the ssl checkbox. This is on the local server itself. ...
0
votes
1answer
1k views

CentOS Apache + Tomcat SSL using mod_jk

I have Apache + Tomcat (using mod_jk) working correctly on a CentOS 6.3 machine. I am trying to set up SSL with Apache. When I browse to the site I get the following output: Forbidden You don't ...
4
votes
1answer
7k views

The OCSP response is not yet valid (contains a date in the future)

I'm getting this error when opening the site: Secure Connection Failed An error occurred during a connection to http://practiceti.me The OCSP response is not yet valid (contains a date in the ...
11
votes
1answer
18k views

Configure Nginx as reverse proxy with upstream SSL

I try to configure an Nginx server as a reverse proxy so the https requests it receives from clients are forwarded to the upstream server via https as well. Here's the configuration that I use: http ...
11
votes
3answers
6k views

How do I ensure that stunnel sends all intermediate CA certs?

A few computers, but not most, are rejecting the SSL certificate from my webserver. The problem seems to be that some computers are rejecting the CA certs. The problem seems to be manifesting on Mac ...
-6
votes
2answers
38 views

should I buy the SSL certificate with the same domain seller [on hold]

I bought a domain from godaddy. If I want to buy SSL certificate should I have to buy the SSL from godaddy ? Or I can buy the SSL certificate from any seller then applied it to the domain that I ...
2
votes
1answer
11 views

Where is the TLS key after using certreq for CSR generation on Windows 10?

I tried to follow the website below for instructions on how to generate the CSR for my web server: http://www.entrust.net/knowledge-base/technote.cfm?tn=8649 However, it only generates the CSR. ...
0
votes
2answers
28 views

Failed to start stunnel4 on Ubuntu 15.04

I get the following error starting stunnel4 service on Ubuntu 15.04: root@scw-d91ec7:~# service stunnel4 start Job for stunnel4.service failed. See "systemctl status stunnel4.service" and "journalctl ...
3
votes
2answers
30 views

StartSSL cert doesn't work with Dovecot/OpenSMTPD

I've an issue with my StartSSL certificate. When I try to use it to activate SSL encryption on Dovecot, I get the following error in my log when a client attempt a connection to the imap server : ...
0
votes
1answer
2k views

ssl_crtd helpers are crashing too rapidly in squid

I am using the sslBump and Dynamic SSL Certificate Generation features of squid, below is my configuration for the sslBump sslcrtd_program /usr/lib64/squid/ssl_crtd -s ...
-3
votes
1answer
32 views

redirect ssl http to https issue in apache

i am a newbie with apache. need some advise regarding redirecting http to https. It looks like everything in the ssl.conf is copasetic, once i logged on to ssl environment, every links i clicked seem ...
0
votes
1answer
971 views

Verify client certificate CN in Tomcat(APR)

I'm running a tomcat installation with the APR libraries installed (with the OpenSSL HTTPS stack that comes with it). What I'm trying to do is to lock a specific HTTPS connector down to users of a ...
1
vote
2answers
3k views

Exchange 2010 POP3/IMAP4/Transport services complaining that they can't find SSL certificate after blue screen

We have a single-server Exchange 2010 setup. In the early hours of this morning the server had a blue screen and rebooted. After coming back up the POP3/IMAP4 and Transport services are complaining ...
0
votes
1answer
34 views

Nginx proxying http to https with client certificate

We have an application that is not client-certificate aware and must consume a client-certificate authenticated web-service. To fix this, we're trying to use Nginx to reverse proxy a local (http) url ...
-1
votes
3answers
34 views

Chrome on Android random red HTTPS

When I'm using Chrome on my desktop, the address bar is always green. However, on my Android phone the address bar is usually green, but sometimes red. It says that I'm using a certificate signed ...
0
votes
0answers
53 views

KeepAlive in Apache 2.4 interfering with form submissions

I have just upgraded a server to Debian Jessie, which includes Apache 2.4.10 (was 2.2), and PHP 5.6. Now, SSL sites won't submit forms in some circumstances on IE11 and iPad Safari (not sure about ...
4
votes
2answers
2k views

Moving SSL Certificate from one Apache server to another

I just moved hosts and I looked for a decent guide on how to move my SSL certificate from my old host to the new one. I am amazed on how many 'guides' or 'tutorials' which are simply useless are out ...
13
votes
3answers
27k views

Installing SSL on a Windows Server 2012 with IIS 8.0

We are in the process of moving a website from a machine with Windows Server 2008 R2/IIS 7.5 to a machine with Windows Server 2012/IIS 8.0 as we want to take advantage of the new SNI feature. This ...
2
votes
1answer
5k views

FortiClient (Windows 7 32 bit) shows 'connected' for an SSL VPN connection but can't ping the remote server

I am trying to connect to a remote server through FortiClient for an SSL VPN connection. When I connect through the FortiClient (version 4.3.5.472) on my windows 7 32-bit system, it shows connected. ...
0
votes
2answers
92 views

Can I apply SSL to all my virtual hosts with this?

I've been wanting SSL for one portion of my website, which is one single domain name on my VPS. As most certificates look fairly expensive, I had looked at my domain name provider and had found a ...
-1
votes
2answers
759 views

Disable support for LOW encryption ciphers for glassfish port no 3920

Qualis team found a vulnerability with our glassfish with port no 3920 . glassfish version :- glassfish-3.1.2.2 Port no :- 3920,3820 Below are the details from Qualis Messages ...
2
votes
1answer
224 views

Apache alternatives with per-directory SSLVerifyClient

My application requires per-directory verification of SSL client certificates (i.e. when user requests /foo we require they have a client certificate and verify it, but when they request /bar we don't ...
0
votes
1answer
20 views

SSLVerifyClient require in Cloudflare DNS

I've done setup my new domain name on Cloudflare but I have a problem while I'm setting up SSL certificate. In detail, I want ask visitors who are want to see my website content a valid certificate. ...
5
votes
2answers
2k views

How to manually create Puppet CA and certificates?

I am wondering how to manually (using openssl instead of puppet ca command) create CA that would be usable by Puppet? The goal would be to script creation of such CA's to deploy them on multiple ...
0
votes
1answer
2k views

SChannel errors after enabling SSL on a Windows Server 2012 R2

I have a Windows Server 2012 R2 instance on Azure. For a new website I have ordered a certificate by GlobalSign. After getting the certificates from them I have completed the certificate request in ...
2
votes
0answers
84 views

HaProxy giving - 503 Service Unavailable

I am using below configuring for performing loadbalancing for two Tomcat servers. And I configured HAProxy to perform SSL/TLS bridging/re-encryption. ...
-1
votes
0answers
7 views

GCE SSL https apache2 scripts install GoDaddy [closed]

I dont get it. Please teach me how to install ssl on my Google cloud vm server. A step by step walk through would be much appreciated. Thank you before hand.
10
votes
3answers
5k views

Why is Internet Explorer 11 unable to connect to HTTPS sites when TLS 1.2 is enabled?

Normally I don't use Internet Explorer at all. I use it only in design time for interface tests (development machine and with unencrypted http). Every week I run the SSL Labs server test which says ...
0
votes
0answers
56 views

SunOne Webserver 6.1 support for SHA2

I have sunone webserver 6.1SP19. Just like to check whether the certutil option -Z supports SHA256. I searched from examples and so far, what I see is -Z SHA1. I would like to create a CSR with SHA2 ...
0
votes
1answer
61 views

SSL: Issued SSL for www.domain.com but only works for https://domain.com

Last week about an SSL Certificate issued by RapidSSL and my hosting MediaTemple, you can see the order details at RapidSSL here: http://i.imgur.com/s5XHcPH.jpg And SSL details on my panel at ...
-1
votes
2answers
19 views

How to generate .key and .crt file from JKS file for httpd apache server

I have the mycert.jks file only. Now i need to extract and generate .key and .crt file and use it in apache httpd server. SSLCertificateFile /usr/local/apache2/conf/ssl.crt/server.crt ...