SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
1answer
59 views

Which SSL certificate would I need for external AND internal domain names?

This is a school-network. Official (outside reachable domain name) is bgschwechat.ac.at (www.bgschwechat..., mail.bgschwechat... and ftp.bgschwechat..) Internally the windows domain is named ...
0
votes
2answers
24 views

Cannot set up https on microsoft azure VM

For over a week now I am trying to set up https to work with my owncloud hosted on a Microsoft Azure virtual machine (ubuntu server 14.04). I am using apache2. I have gone through every single ...
1
vote
1answer
23 views

How to Disable TLSv1.0 and TLSv1.1 in Nginx

I'm trying to figure out how to disable TLSv1 and 1.1 Nginx and ONLY allow connections on 1.2. This is for testing reasons more than in production use and for the life of me cannot figure out why ...
0
votes
2answers
21 views

SNI for multi tenant load balancing in 2015

We're a multi-tenant service and terminate our SSL at our load balancers (HAProxy + Apache for SSL termination), this has caused growing pains due to dedicated IP requirements. But times have changed ...
-1
votes
0answers
5 views

Disabling SSL on Openshift PHP Gear

Is it possible to disable SSL on my Openshift server? If so, How? I am using openshift with my own domain, so when I connect, it uses the existing certificate for *.rhcloud.com which is incorrect ...
9
votes
3answers
11k views

How do I disable SSLv3 support in Apache Tomcat?

I am trying to reconfigure my Apache Tomcat server to only use TLSv1. However, it is still falling back to SSLv3 using certain browsers. I setup the <connector> tag with the following settings: ...
1
vote
0answers
19 views

Disabled SSLv3 in Tomcat, but Still Showing POODLE Vulnerability

I have a Windows 2008 server with Tomcat 7.0.59 & Java 8u31 & I am trying to ensure that SSLv3 is disabled. Looking at the changelog for Java, SSL3 should no longer be supported and the Java ...
0
votes
0answers
18 views

Apache Tomcat for Windows - cannot get https to work

Environment: Windows 2003 Server 64-bit Running on VMWare ESX 5.5 8GB of Ram Apache Tomcat 6.0.36 Server D:\Program Files\Java\jdk1.6.0_26\jre\bin\server\jvm.dll JDK 1.6 update: 26 Have been able ...
0
votes
1answer
1k views

nginx unknown directive ssl_protocols

I've compiled NGINX 1.4.1 with ssl support and wanted to secure my configuation with these lines: ssl_prefer_server_ciphers on; ssl_protocols        SSLv3 TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers          ...
1
vote
1answer
5k views

Handshake violation when trying to access one website

I have a TZ 190 Wireless Enhanced with SonicOS Enhanced 4.2.1.0-20e. Yesterday, people could access without any problems a bank website wich uses HTTPS. Today, it is imposible to access only that ...
-2
votes
0answers
15 views

SSL give page not available whe we roll out to production [duplicate]

We configured HTTPS in one of our servers running apache XAMPP (on windows server 2008 platform). Everything looks good when we run SSL checker tool we get an A Qualification, so we switched it to ...
-2
votes
1answer
14 views

how many SSL certificate can be listed in SSLServercert?

I wanted to list more than one certificate in SSLServercert, so that websites can use either one of these certificates. i will use "SSLServercert label1 label2" in httpd.conf file. label1 has IP based ...
0
votes
1answer
2k views

Redirect non-www to www over SSL with Nginx

I'm having an error when trying to redirect https://example.com to https://www.example.com. When I go to https://example.com, it doesn't redirect and returns the page/200 status. I don't want this, ...
1
vote
2answers
901 views

Disabled SSLv3 to combat Poodle now cannot connect to SQL “Connection forcibly closed by remote host”

I have disabled SSL3 on my web server to combat the Poodle Vulnerability and now I am unable to connect to my SQL server using SQL Authentication. I just get "Connection forcibly closed by remote ...
1
vote
1answer
26 views

If a non-SSL-enabled domain is requested via https will Apache serve a different, SSL-enabled domain on the same server?

I am hosting several websites on an Apache server (e.g. http://www.example.com), only one of which has an SSL certificate (e.g. https://www.example.net). Is it possible to set up Apache so that an ...
1
vote
1answer
819 views

Apache: getting proxy, rewrite, and SSL to play nice

I'm having loads of trouble trying to integrate proxy, rewrite, and SSL altogether in Apache 2. A brief history, my application runs on port 8080 and before adding SSL, I used proxy to strip the 8080 ...
1
vote
1answer
21 views

Serving http with Apache on port 443 behind SSL terminator

Our network ops folks have set up SSL termination, then reverse-proxy the request to us. Their requirement is that, if they saw the input on port 443, we must serve the content on port 443, so we are ...
1
vote
0answers
5 views

IIS bindings keep being removed

I'm having a problem where the security certificate for a site is being periodically unbound from port 443 and replaced with another certificate which is sitting on the server. So whenever a user ...
0
votes
0answers
12 views

External clients get a certificate mismatch - but internal clients do not

I have a scenario where external clients are receiving a certificate that is different than the one that is bound to the IIS site. This is Win2008R2 / IIS, in the following configuration: ...
0
votes
0answers
8 views

How to make a client's pkcs12 bundle if only server pkcs12 bundle is present

I've got a linux box with openvpn installed on it, openvpn is configured to use pkcs12 certs: dh server.dh pkcs12 server.p12 crl-verify server.crl I'd like to add more vpn clients, but I ...
0
votes
1answer
1k views

NGINX SSL Connection Error

I've added an SSL certificate to my server. (Nginx running passenger & Rails). I created a CSR, uploaded to GoDaddy, downloaded the keys. Inside /srv/ssl I have www.mydomain.com.crt ...
1
vote
1answer
243 views

Plesk is delivering incorrect SSL certificate when accessed through OpenSSL cli, but correct in browser [on hold]

I have a Plesk setup with several sites. When accessed in the browser, Plesk serves the proper SSl cert just fine. But then when I go to access it through openssl using openssl s_client -connect ...
3
votes
1answer
1k views

Squid SSL transparent proxy - SSL_connect:error in SSLv2/v3 read server hello A

I am trying to setup a SSL proxy for one of my internal servers to visit https://www.googleapis.com using Squid, to make my Rails application on that server to reach googleapis.com via the proxy. I ...
0
votes
1answer
128 views

PCI compliance and SSL certificates on a CentOS VPS [on hold]

looking for a bit of advice please. We've been battling with a PCI compliancy project for the last couple of days and we've managed to eliminate most of security warnings. What we're left with now is ...
-2
votes
2answers
855 views

Wamp won't start after installing SSL [duplicate]

I installed SSL using this guide but after I finished, I was unable to start up WampServer. I made sure to follow everything correctly in that guide (replacing the paths given in the guide with the ...
1
vote
2answers
109 views

What Files Should I Set Up for Clean Apache Configuration [duplicate]

I am not new to Apache but nor am I an expert (by any means). I've run sveral versions of WAMP and XAMP server set-ups. Most of my Apache configurations are simple. I usually run a default master ...
0
votes
0answers
30 views

SSL stops working randomly and often with no changes made prior

Searched this site for a while and couldn't find anything the same as this. Most point to signet which I don't see. SSL site was working great for the last two years. All of a sudden it went down ...
0
votes
0answers
114 views

Install an SSL certificate for a subdomain on a server that already has an EV SSL certificate (CentOS 5.11) [on hold]

I am maintaining a site on a server that is currently running: CentOS release 5.11 (Final) Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 PHP/5.3.28 The server is ...
0
votes
0answers
47 views

How to Flush NginX's SSL buffer mid-request for Server Push

I'm writing an app that uses long polling to push messages to clients. It doesn't end the request when it finishes sending a message though: it just flushes. It works fine, even when I proxy it ...
0
votes
1answer
13 views

How to exclude some path/page from client certification in Apache 2

I am trying to set up an Apache server with client certification enabled. So that the customers could access the content with a valid client certificate. Let's say, I have the server running as ...
0
votes
0answers
20 views

SHA1 cipher detection on Apache

I have a Windows Server 2008 R2 server running Apache 2.4 that acts as a proxy for all of our websites and we have a wildcard certificate installed. Right now the cipher used is SHA1 and the plan is ...
0
votes
0answers
67 views

setup SSL with CA for multiple local sites in Apache and authenticate in a specific location (Error code: ssl_error_handshake_failure_alert) Ubuntu

i'm trying to implement SSL (HTTPs) on my local web-server to protect specified directories on Apache's websites where a user log's-in, combining SSL and HTTP Authentication Basic. I have follow ...
0
votes
1answer
32 views

Two https virtualhosts on same server: same port, different subdomains

I've tried searching for this scenario, but can't seem to find exactly this setup. I want to have something along the lines of the following: I want to have two subdomains redirect to different ...
0
votes
0answers
52 views

HTTPS request works to Linux, not to Mac, sometimes

I have two sites, say mac.example.com and linux.example.com. I'm using the same wildcard SSL cert, obtained from RapidSSL. If hit up either of the sites in a browser, hosted either in Linux (on ...
0
votes
2answers
2k views

how to unblock my https website when its blocked by a specific country?

I have a website, more like a webservice that serve some applications, my service has been blocked in a specific country, only the https version is blocked. i need to keep using the ssl certificate ...
0
votes
1answer
24 views

Is it normal for the identity of a host to change after enabling SSL?

I logged in to a known host - ssh username@example.com. I did a2enmod ssl and I generated a CSR to enable SSL on one of the virtual hosts on the server. From a separate terminal tab, I tried to do an ...
0
votes
1answer
2k views

Page can't be displayed with IIS and SSL

I have a single site hosted in IIS 8. I have two site bindings. One is for HTTP, the other is for HTTPS. HTTP is on port 80 with All Unassigned addresses, I left host name blank. HTTPS is on port 443 ...
0
votes
2answers
2k views

Problem with apache + ssl: length mismatch error and ocasional bad request

we migrated a server from slicehost to linode recently, we copied the config from one server to the other. Everything works perfectly except that we get: Occasional errors with "Bad Request", this ...
0
votes
1answer
839 views

Unable to configure haproxy with ssl

I want to make my server ssl protected, it has two parts one for website and another for application. to balance them we have used haproxy. Now we want to secure this haproxy. I have installed the ...
0
votes
2answers
59 views

Wget, self signed cert and --no-check-certificate not working

I recently installed a self signed SSL cert on one of our nginx webservers. If I attempt to wget a file with --no-check-certificate I receive the errors below. You can reach the site with a browser, ...
-1
votes
0answers
16 views

how to Disable sslv3 and tlsv1 of ejabberd

to remove these protocols vulnerable I did the following in my file ejabberd.cfg {s2s_use_starttls, required}. %% %% s2s_certfile: Specify a certificate file. %% {s2s_certfile, ...
0
votes
3answers
39 views

How to force a own set of ciphers in Postfix 2.11?

I would like to force a own set of TLS cipher suites rather than use the Postfix built in ones. My desired set of ciphers is (taken from nginx configuration): ...
1
vote
1answer
48 views

How to disable SSLv3 in Postfix 2.11?

I just noticed (by some online check tools) that my mailserver may allow SSLv3 and updated my configuration. My current config in Postfix 2.11.2: # inbound smtpd_tls_security_level = may ...
1
vote
1answer
3k views

SSL Library Error: X509_check_private_key:key values mismatch

I installed a new SSL certificate signed by our own Certificate Authority. Apache will not start, with the error: SSL Library Error: 185073780 error:0B080074:x509 certificate ...
0
votes
1answer
3k views

Apache SSL error after reboot: Error 107 (net::ERR_SSL_PROTOCOL_ERROR)

Google Chrome shows: "Error 107 (net::ERR_SSL_PROTOCOL_ERROR)" everytime I reboot my server. However, if I restart apache(# service apache2 restart), everything works great. Nothing appears on Apache ...
0
votes
1answer
1k views

Zen Load Balancer HTTPS to HTTPS

I've been struggling with an issue that I am hoping someone can help with. Basically, I have setup a working Zen Load Balancer going from HTTPS to HTTP but I am struggling with getting it to work ...
6
votes
3answers
7k views

How to Disable SSLv2 for Apache httpd

I just tested my site on https://www.ssllabs.com/ and it said SSLv2 is insecure and I should disable that along with weak Cipher Suites. How can I disable that? I tried the following but it isn’t ...
2
votes
1answer
22 views

How to serve multiple SSL certificates for the default virtual host on NGINX?

I have a static app on Amazon S3 that is served through a NGINX proxy. The purpose I use a proxy is to allow users to point their domains to my Amazon EC2 instance (via CNAME record pointing to ...
1
vote
0answers
31 views

Nagios check_http gives 'HTTP/1.0 503 Service Unavailable' for HAProxy'd site

I asked this on stackoverflow, but I think it's better suited for here. Can't figure this one out! OS: CentOS 6.6 (Up-To-Date) I get the following 503 error when using my nagios check_http check ...
0
votes
0answers
23 views

Node + PM2 - How to securely read SSL private key with non-root user?

I'm looking for a way to run node via PM2 whilst reading an SSL private-key that is placed in a secure directory. Details: Bitnami LEMP stack with Node permissions for /etc/ssl/private: drwx------ ...