SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
1answer
23 views

Lost my key file when I generated the csr

This is the first time for me dealing with ssl. I have created a csr file, but I lost the key file in this generation. The certificate was issued and I got all the crt files. Now I want to install it ...
3
votes
0answers
19 views

Curl: unable to get local issuer certificate. How to debug?

I’ve got an odd problem. Updated my LAMP dev machine (Debian) to PHP 7. Afterwards I cannot connect to a specific TLS encrypted API via Curl anymore. The SSL cert in question is signed by thawte. ...
1
vote
2answers
2k views

Unable to configure haproxy with ssl

I want to make my server ssl protected, it has two parts one for website and another for application. to balance them we have used haproxy. Now we want to secure this haproxy. I have installed the ...
0
votes
1answer
32 views
+50

Running Hudson, Sonar and HA Proxy on the same server

I am running Hudson, Sonar and HA Proxy on the same server (Doing this for the sake of a POC so do not have access to multiple servers. I am Using HAProxy to enable SSL for both servers. I can ...
0
votes
1answer
15 views

Azure Virtual Machine Images Tomcat SSL

Here's the run by, yes I have done research on all of what I am about to say. I simply wish to summarize it and hope someone with knowledge on this can let me know if something is wrong with my plan ...
0
votes
1answer
3k views

Page can't be displayed with IIS and SSL

I have a single site hosted in IIS 8. I have two site bindings. One is for HTTP, the other is for HTTPS. HTTP is on port 80 with All Unassigned addresses, I left host name blank. HTTPS is on port 443 ...
0
votes
2answers
9 views

openldap TLS error -8179:Peer's Certificate issuer is not recognized

tl;dr Does this error mean that I need to find my company's ldap server's public certificate and install it, or that my company's ldap server needs to install my public cert? If the former, how can I ...
13
votes
8answers
8k views

How to view all ssl certificates in a bundle?

I have a certificate bundle .crt file. doing openssl x509 -in bundle.crt -text -noout only shows the root certificate. how do i see all the other certificates?
-1
votes
2answers
35 views

How to install SSL certificate for Windows 8.1

I have a Windows 8.1 machine that I RDP into on a public IP (also secured by 2FA). I am getting a failing PCI scan because the default SSL cert created by Windows for RDP is using SHA1 hashing. So ...
0
votes
1answer
15 views

HTTPS not working on Tomcat 7

I am trying to add ssl configuration in tomcat 7 in ubuntu 11.10 but it is not working and there are no errors in logs. I added in server.xml this: <Connector port="8443" protocol="HTTP/1.1" ...
0
votes
0answers
11 views

HTTPS tomcat 7 working only with curl not in browser

I have added in server.xml: <Connector port="8081" protocol="HTTP/1.1" SSLEnabled="true" maxHttpHeaderSize="8192" maxThreads="150" minSpareThreads="25" ...
0
votes
3answers
2k views

Setting Access-Control-Allow-Origin in .htaccess for Https protocol

I have a site with http and https. I set in the .htaccess the following line which runs for http. Header set Access-Control-Allow-Origin "*" But with https I get this error. No ...
1
vote
1answer
25 views
+50

Galera Rsync SST Secured via SSL/SSH

Is it possible to secure Galera Cluster SST via rsync with SSL/SSH? This page suggests it is not, specifically the following quote: Unlike rsync, xtrabackup includes support for SSL encryption ...
0
votes
4answers
935 views

Can't add SSL listener, Server Certificate not found for the key

I'm am trying to set up SSL on my load balancer with a certificate I purchased from GoDaddy. When trying to upload the certificate in the console I got an error Failed to create load balancer: ...
-2
votes
2answers
44 views

redirect https://www.example.com to https://example.com in nginx [duplicate]

I have SSL issued for domain.com. Now these url works fine: http://www.example.com -> https://example.com http://example.com -> https://example.com https://example.com But when accessed with ...
0
votes
2answers
9 views

Creating local self-signed Certificate for user 'tomcat'

When I installed Tomcat 8 on my Ubuntu 15.04 I used the following command to create the user "tomcat": sudo adduser \ --system \ --shell /bin/bash \ --gecos 'Tomcat Java Servlet and JSP engine' ...
1
vote
1answer
2k views

Weblogic Mitigate POODLE vulnerability after upgrade and still use CBC ciphers

I recently upgraded my Weblogic server to 10.3.6 with java 7. So with that I have TLS1.0 - TLS 1.2 enabled via the setEnv.sh. Some of the ciphers I am using to make sure that they are compatible ...
2
votes
2answers
149 views

RHEL Nginx SSL versus non SSL performance huge difference.

I'm in the process of setting up an Nginx 1.8 reverse proxy. In short - Serving HTML content HTTP traffic is up to 50x faster than HTTPS. Serving ProxyPass HTTP traffic is up to 7x faster than ...
1
vote
1answer
1k views

Install SSL Certificate on Azure Cloud Service (VM)

I have an SSL certificate for domain example.com and I want to access my Azure Cloud Service exampleserver.cloudapp.net as https://server.example.com. I am using Virtual Machine to access this Cloud ...
3
votes
1answer
1k views

Problems with disabled ssl version 2 in ubuntu server. Can I also disable ssl version 3 to solve problems?

I recently set up a Ubuntu 12.10 server for a service which I used to run on a 12.04 machine. Since Ubuntu 10.10 SSLv2 seems to be disabled because of known security reasons. If i run curl against ...
3
votes
1answer
24 views

Bluehost claiming that an SSL certificate needs to be a wildcard certificate to cover a single subdomain?

I am new to SSL certification, and have just purchased a standard SSL certificate for a single sub-domain; however, when my server administrator installed it using cPanel on the main domain, HTTPS ...
24
votes
3answers
25k views

SSL Certificate Location on UNIX/Linux

Is there any standard or convention for where SSL certificates and associated private keys should go on the UNIX/Linux filesystem? Thanks.
3
votes
1answer
7k views

Handshake violation when trying to access one website

I have a TZ 190 Wireless Enhanced with SonicOS Enhanced 4.2.1.0-20e. Yesterday, people could access without any problems a bank website wich uses HTTPS. Today, it is imposible to access only that ...
0
votes
1answer
27 views

Apache configuration using SNI and mix of SSL certs

Up to this point I've been using SNI in my ssl.conf file with Apache 2.2.31 I'm serving up different sites all in the same document root. For example: NameVirtualHost *:443 <VirtualHost *:443> ...
2
votes
1answer
98 views

What would be a less-known SSL certificate attribute to look out for?

I'm looking for a simple domain SSL certificate for our company's website and I'm a little confused. A lot of them seems to offer the exact same features, yet at price ranges going from 5$ / year to ...
0
votes
0answers
22 views

Set up IIS as forward proxy for HTTPS requests

Is it possible to set up IIS as a forward proxy for HTTPS requests? My use case is this: I have some process running locally on the IIS machine which is able to make HTTP calls, but not HTTPS calls. ...
0
votes
0answers
14 views

SSL in aws ec2 windows running node js

I have a domain via namecheap (say example.com) and server is a aws ec2 windows instance. There's a node js server listening at 443 , with following code require('https').createServer({ key: ...
0
votes
0answers
14 views

Adding SSL to Virtual Host takes down all sites [closed]

First question on here. Not fantastic with server side stuff but I have had to take it over at work. One of our servers has site that needs an SSL certificate. Now I have gone through all the ...
-1
votes
2answers
41 views

Will CSR become invalid

I have a domain registered with namecheap and server instance is aws ec2 (windows machine running node js) , cname record pointing to ec2 instance's public ip. Now i want to configure ssl on it , I ...
1
vote
1answer
2k views

ssl_crtd helpers are crashing too rapidly in squid

I am using the sslBump and Dynamic SSL Certificate Generation features of squid, below is my configuration for the sslBump sslcrtd_program /usr/lib64/squid/ssl_crtd -s ...
8
votes
3answers
7k views

Oops, no RSA or DSA server certificate found for 'server.host.name:0'?

I'm setting up a new web server that hosts a dozen virtual hosts on Ubuntu 12.4 using Apache 2.2.22 with one config file per site. I created all the configuration files all at once and ran a2ensite * ...
0
votes
1answer
1k views

Apache forward proxy HTTP requests to arbitrary AWS S3 buckets over HTTPS

This is a rewrite of my original post. I still banging my head trying to figure out how to get a custom client (Windows service that only speaks HTTP, does not support HTTPS) to upload files to Amazon ...
1
vote
0answers
16 views

HTTP to HTTPS redirect not working!? - Tried multiple methods

I purchased a Standard UCC SSL Up to 100 pack from Godaddy. I have installed all the required files on my server, and going to https://www.example.com works fine, but http://www.example.com is NOT ...
2
votes
1answer
1k views

Nginx SSL redirect for one specific page only

I read and followed this question in order to configure nginx to force SSL for one page (admin.php for XenForo), and it is working well for a few of the site administrators but is not for myself. I ...
0
votes
0answers
16 views

SSL's don't work on both www. and non www. when using SNI in IIS

I am trying to migrate some ASP websites from a Windows 2008 environment where each host using an SSL is on a separate IP. I would like to move these websites to a Windows 2012 environment where each ...
0
votes
1answer
24 views

Geotrust SSL certification issue

I have an issue with curl (Centos 6 env) does not recognize Geotrust intermediary certificate: * Trying 192.168.6.6... connected * Connected to composer.graymatter.co.uk (192.168.6.6) port 443 (#0) ...
1
vote
2answers
3k views

Exchange 2010 POP3/IMAP4/Transport services complaining that they can't find SSL certificate after blue screen

We have a single-server Exchange 2010 setup. In the early hours of this morning the server had a blue screen and rebooted. After coming back up the POP3/IMAP4 and Transport services are complaining ...
0
votes
0answers
13 views

OpenVPN with IPSec

OpenVPN with IPSec We are using OpenVPN to connect multiple devices. The customer requires using IPSec, but OpenVPN is SSL VPN. Their website says this OpenVPN's security model is based on using ...
0
votes
1answer
17 views

WSREP: Bad value for 'socket.ssl_key'

I am attempting to initialize a new MariaDB Galera cluster with SSL-encrypted replication. I have followed this guide to the letter, specified different details for CA, Server, and Client ...
1
vote
1answer
1k views

Exchange TLS Receive Connector Cert

We are using Securence incoming filtering in front of our Exchange 2010 server. It's basically a spam filter. I'm trying to get TLS communication between Securence and our server on incoming ...
-2
votes
1answer
28 views

aws windows apache24 multiple subdomain

i have two subdomains api.domain.com with A record xx.xx.xx.xx // elastic ip address user.domain.com with A record xx.xx.xx.xx // elastic ip address apache httpd-ssl.cnf Listen 443 ...
0
votes
0answers
34 views

ssl (https) for https://my.example.com resolves to https://example.com ip address

I have a server my.example.com with ip address 111.111.111.222 I have a server example.com with ip address 111.111.111.111 I created an ssl certificate with letsencrypt for my.example.com However, ...
0
votes
1answer
1k views

Nginx: Disable gzip-compression for http only

Because of the BREACH vulnerability I'd like to disable gzip compression for TLS traffic, but not for regular HTTP traffic. I could split up every Nginx server section into two separate TLS- and ...
9
votes
5answers
4k views

Free SSL Certificate authority I can trust

Can anyone point me to a free SSL Certificate authority I can trust?
2
votes
2answers
1k views

Apache: redirect to https before AUTH for server-status

I want to force https and basic auth for server-status output (mod_status). If I enable auth and user asks for http://site/server-status apache first asks for pass, then redirects to httpS, then asks ...
-1
votes
2answers
42 views

SSL encryption with CNAME redirect

Here is my current architecture: I have a simple site hosted in the cloud that needs to be served from my company. Thus, mysite.com has a CNAME redirect to 1234.cloud.com. I understand that the SSL ...
0
votes
1answer
22 views

Preloading Strict Transport Security (HSTS)

I configured my webserver to use Strict Transport Security (HSTS). I more or less used a configuration as in this manual. But I get the following in my SSL-report if I run a test on Qualys SSL LABS: ...
3
votes
4answers
15k views

curl succeeds on an https request, wget does not

When I run curl from the command line curl "https://example.com" It succeeds immediately, returning the result of the request. When I run the same wget command wget https://example.com It ...
91
votes
5answers
55k views

Multiple SSL domains on the same IP address and same port?

This is a Canonical Question about Hosting multiple SSL websites on the same IP. I was under the impression that each SSL Certificate required it's own unique IP Address/Port combination. But the ...
2
votes
2answers
1k views

Optimizing HAProxy SSL Termination (with Nginx backend on Ubuntu)

How can I optimize HAProxy with SSL Termination to Nginx backends on Ubuntu? The setup works fine and routes properly. However, when I perform SSL Termination with HAProxy, theres a huge performance ...