SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
5answers
17k views

Why is https not working?

I am trying to redirect just the root of my site to https. Although the rewrite happens, https does not yield anything. The browser says. connecting to thinkingmonkey.me... and stagnates. ...
19
votes
2answers
813 views

How do Suche.org's SSL settings work?

For those that don't know what Suche.org is, it is a website that has a perfect A+ rating on SSL Labs in every category: (Suche.org SSL Labs result). I became aware of this website when I opened ...
4
votes
1answer
2k views

Squid SSL transparent proxy - SSL_connect:error in SSLv2/v3 read server hello A

I am trying to setup a SSL proxy for one of my internal servers to visit https://www.googleapis.com using Squid, to make my Rails application on that server to reach googleapis.com via the proxy. I ...
2
votes
1answer
78 views

What's causing the SSL Protocol Error?

My site: https://www.notfriendly.xyz/ (disabled CloudFlare) (See CloudFlare enabled at https://host.notfriendly.xyz) is failing to connect claiming a protocol error after enabling CloudFlare. Could ...
1
vote
3answers
35k views

Any problems usinga GoDaddy SSL certificate on a Cisco ASA firewall?

I need to purchase and install a SSL certificate on my Cisco ASA firewall. This will allow my VPN users to connect to my ASA without receiving the certificate error from the untrusted self assigned ...
0
votes
1answer
36 views

“SSL_ERROR_INTERNAL_ERROR_ALERT” Using Let's Encrypt & Nginx

I've been running my Nginx web server for almost a week and all of the sudden, it started throwing this error (using HTTPS only) & redirecting to /defaultsite when using HTTP. The website link is ...
1
vote
1answer
4k views

Squid SSL bump with parent proxy

Does SSL bumping work with parent proxy? squid and pf are set up like this: squid.conf: http_port 3128 intercept https_port 3129 intercept ssl-bump generate-host-certificates=on key=/usr/local/etc/...
21
votes
7answers
39k views

Restrict Apache to only allow access using SSL for some directories

I have an Apache 2.2 server with an SSL certificate hosting several services that should be only access using SSL. ie: https://myserver.com/topsecret/ should be allowed while http://myserver.com/...
1
vote
1answer
2k views

LDAP Client Search with SSL - CentOS7

Has anybody got SSL client authentication working with OpenLDAP (on CentOS7 - which is using moznss)? I've search for the last 2 days trying to get this to work, both with a certutil database and ...
-2
votes
0answers
18 views

is it good idea to pass jboss outbound connections through a web server? [closed]

We are trying to integrate Jboss application to make Web services calls, so was wondering is it a good practice to make the web services call go through a web server always instead of handling SSL ...
1
vote
0answers
29 views

Fortinet SSL VPN Client Setup Without GUI on Linux (Ubuntu)

When I use ./forticlientsslvpn_cli --server 172.17.97.85:10443 --vpnuser forti to connect to the vpn, (using Forticlient SSLVPN 4.4.2329-1 64bit & Forticlient SSLVPN 4.4.2327-2 64bit) it shows ...
2
votes
2answers
5k views

Persuading openldap to work with SSL on Ubuntu with cn=config

I simply cannot get this (TLS connection to openldap) to work and would appreciate some assistance. I have a working openldap server on ubuntu 10.04 LTS, it is configured to use cn=config and most of ...
2
votes
2answers
3k views

How to set up TLS on hMailServer?

Complete noob here. Please be gentle :) I have a Windows 2008 server, running hMailServer. Right now all my communication is unencrypted. I want to start using TLS. So now I've got myself a SSL ...
12
votes
6answers
42k views

SSH issues: Read from socket failed: Connection reset by peer

I compiled OpenSSH_6.6p1 on one of our server. I am able login via SSH to the upgraded server. But I am not able to connect to other servers running OpenSSH_6.6p1 or OpenSSH_5.8 from this. While ...
-1
votes
0answers
24 views

Moving from a Lenny Debian server to a newer machine [on hold]

Hi I am looking for a "To do List" to migrate my old Debian Lenny version VPS to a newer system either a newer Debian (which I believe will go out of service next year anyway) - or another type of ...
0
votes
0answers
10 views

Stunnel 4 error

getting an error when trying to start up stunnel4. What im trying to do is route traffic from port 443 (https) to port 1935 which is the red5 port. This is the error code: stunnel4.service - LSB: ...
0
votes
2answers
35 views

Nginx unexpected end of file

I have nginx set up in a docker container (https://hub.docker.com/r/aptalca/nginx-letsencrypt/). Some changes were made (adding the last location block) and now nginx fails to start. Using the nginx ...
1
vote
1answer
41 views

Redirecting HTTPS traffic without certificate errors

I have a captive portal that I'm attempting to redirect HTTPS traffic to my portal - preferably without the certification warning from redirecting https traffic. E.G User attempts to access https://...
0
votes
0answers
25 views

How can i do redirect from mail.example.com to httpS://example.com [closed]

My website work on CSM Joomla 3.6 and have subdomain mail.example.com which can duplicating content. I need to redirect it to mane page .htaccess is includes #Redirecting http://www.example.com and ...
4
votes
2answers
672 views

OCSP server suggests trying again later

I am using Firefox to access my site secured with a free StartSSL certificate. I am sending an HSTS header (though now for testing I have it set to 15 seconds!) and I have enabled OCSP stapling. ...
0
votes
0answers
21 views

Tomcat 8.5 w/Java 8 and openssl 1.0.1: Can't get port 8443 to respond

Hoping for some help getting the SSL 8443 port to accept https connections. Have the following setup: CentOS: 2.6.32-220.el6.i686 Java: 1.8.0-openjdk-1.8.0.91-3.b14.el6_8.i386 OpenSSL: 1.0....
0
votes
0answers
9 views

Jboss eap 6.2 not sending certificate in SSL web service call

I am a newbie in Jboss configuration and i am trying to make an API call from Jboss with Two way TLS configuration in my jboss and i am unable to do so till now and getting below error. javax.net.ssl....
0
votes
0answers
12 views

Galera/Mariadb won't start WSREP: handshake with remote endpoint ssl://x.x.x.x:4567 failed

I am trying to set up a galera cluster. I am running RHEL7.2. I have my master running but when I try to start mariadb on one of my slaves like so ... # /usr/bin/systemctl start mariadb ... it ...
0
votes
0answers
15 views

Apache presenting wrong ssl certificate

We have a website set-up that uses multiple sub domains per client: a.yyy.com b.yyy.com etc. We also have this working with a wildcard SSL certificate so they are all secure, works a treat. We also ...
0
votes
1answer
9 views

“Error: Could not complete SSL handshake. 5” in syslog of otherwise fine Nagios monitored host

I have a nagios server on ubuntu that monitors many other ubuntu servers. They have configured with chef, and they are correctly monitoring things over NRPE (i.e. the NRPE checks work. When something ...
1
vote
1answer
616 views

504 Gateway Timeout on HTTPS but not HTTP

I configured an AWS Load Balancer. It is working find on HTTP, but when I try over HTTPS I get a 504 Gateway Timeout Error. I tried all the suggestions on AWS's help page (increase idle timeout), but ...
1
vote
1answer
2k views

Weblogic Mitigate POODLE vulnerability after upgrade and still use CBC ciphers

I recently upgraded my Weblogic server to 10.3.6 with java 7. So with that I have TLS1.0 - TLS 1.2 enabled via the setEnv.sh. Some of the ciphers I am using to make sure that they are compatible (...
7
votes
2answers
17k views

Puppet agent certificate verify failure

I have a Puppet Master/Agent set up, and have successfully signed the certificate for the agent on the master. However, when I run puppet agent --test I get a failure that looks like this: Warning: ...
2
votes
1answer
34 views

Allow SSL connection on port 8081 with nginx

I have a problem to acces to the port 8081 in https. Here you will find my configuration in nginx: server { listen 443 ssl default_server; server_name _; ssl on; ssl_certificate /...
1
vote
1answer
32 views

Install Comodo SSL Cert for AWS Elastic Beanstalk Instance

I purchased a wildcard SSL cert from Comodo SSL, but am really confused on how to install it to use with my AWS Elastic Beanstalk instance. The files they sent me are: STAR_setheroapp_com.crt ...
7
votes
2answers
3k views

How to manually create Puppet CA and certificates?

I am wondering how to manually (using openssl instead of puppet ca command) create CA that would be usable by Puppet? The goal would be to script creation of such CA's to deploy them on multiple ...
1
vote
1answer
732 views

How does one send Sonicwall firewall logs via gmail?

We have a Sonicwall TZ215 that allows configuration of the logs and alerts to be sent to admin addresses. However, we only have gmail/google accounts available to us and there is no option for ...
0
votes
1answer
24 views

Wildcard self signed SSL cert across many hosts

I would like to be able to communicate over SSL with several different devices each which is running a web service. To expand, on a local network there may be many devices (Raspberry Pi units) which ...
0
votes
1answer
1k views

Allow Google apps and block consumer Google accounts using squid proxy

In my organisation, I am trying to allow the Google apps account and block consumer Google accounts using squid proxy. According to this link, Google says we can do it using following steps: 1. ...
0
votes
0answers
16 views

server certificate does NOT include an ID …, but CN is same as ServerName in config

Setting up a local test server. Getting a log error on httpd -k restart. Message in log: sl:warn] [pid 11684:tid 348] AH01909: localhost:443:0 server certificate does NOT include an ID which matches ...
0
votes
1answer
1k views

SSL handshake failed with nginx

I have a web server behind nginx and everything works well except for one thing. I'm trying to confirm an amazon SNS Subscription which needs to post some parameters (with a confirmation url) to my ...
0
votes
3answers
43 views

Multiple domains on VPS with SSL for mail

I've setup a VPS server with multiple domains all pointing to the same server. The multiple domains are: www.maindomain.com www.seconddomain.com etc. For the main domain i've disabled the mail ...
0
votes
1answer
35 views

The request was aborted: Could not create SSL/TLS secure channel

I have seen a few of these questions around but they are related to IIS or something similar. I am using Apache with Nginx reverse proxy and cloudflare enabled with full (strict) SSL and the PEM and ...
0
votes
1answer
4k views

Page can't be displayed with IIS and SSL

I have a single site hosted in IIS 8. I have two site bindings. One is for HTTP, the other is for HTTPS. HTTP is on port 80 with All Unassigned addresses, I left host name blank. HTTPS is on port 443 ...
6
votes
11answers
16k views

ssl certificates disappear IIS

I'm trying to import a certificate to IIS. Everything is ok on the MMC (Windows Console). I finished the wizards and seems that is all right. But, when I refresh the certificate list or move to other ...
0
votes
1answer
32 views

mysql php ssl connect certificate verify failed

I have followed this steps to add mysql ssl support on Server A: # Generate a CA key and certificate with SHA1 digest openssl genrsa 2048 > ca-key.pem openssl req -sha1 -new -x509 -nodes -days ...
0
votes
0answers
22 views

Private Docker Registry (with TLS certificate)

I'm trying to setup a private docker registry based on the documentation of https://docs.docker.com/registry/deploying/#running-a-domain-registry. I'm using StartSSL as certificate issuer, downloaded ...
4
votes
2answers
4k views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.example.org port 636 with the ssl checkbox. This is on the local server itself. ...
-2
votes
0answers
18 views

Missing trailing slash after tld breaks ssl redirection from external link [duplicate]

I have changed my website to ssl. It is working ok and all links internal to the website work but external links to ther http version are broken becuause the trailing slash at the end of the domain ...
0
votes
1answer
22 views

SSL Handshake Optimisation

My server seems to take a very long time (half the time of page load) to go through the initial ssl handshake process. I've tested the SSL load times using https://www.wormly.com/test_ssl it's telling ...
0
votes
0answers
14 views

Haproxy: how to configure backend to talk with a https server? [duplicate]

We have in our LAN a nginx server configured in https. In front, we have Haproxy with SSL and we need to establish a connection SSL from backend to nginx server. Is it possible to do this? Client -> ...
3
votes
1answer
5k views

Add SSL certificate after curl error: “unable to get local issuer certificate”

I'm trying to access a partners SOAP API, for that goal I made a CSR and received a CRT. I've made a PEM file with my key and the CRT: cat mycert.crt mykey.key > mycertandkey.pem When I try to ...
0
votes
0answers
13 views

mod_rewrite enabled but does not working (with letsencrypt)

I know this has been asked a dozen times, but I searched in all the similarly named threats for a solution for hours now. As I did not found one, I will ask again. I have mod_rewrite enabled, but it ...
0
votes
1answer
16 views

nginx serves content/ssl from a different host via HTTPS

I have the latest nginx version on a Ubuntu Server 14.04. I host a few domains and I am now trying to implement letsencrypt on all of them. I already have one domain with a comodo certificate, let's ...
2
votes
1answer
4k views

Unknown SSL protocol error in connection to rubygems.org:443 from Ubuntu

I ran into this problem on two Ubuntu 12.04 instances using kernel 3.2.0-54 after upgrading to the latest OpenSSL with the Heartbleed fix. Connections to some servers over HTTPS that never timed out ...