SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

0
votes
1answer
3k views

Error code: ssl_error_rx_record_too_long on nginx ubuntu server

I have a site which was perfectly running with apache on some old ubuntu server and also has https for it. But now for some reasons i need to move to different(new ubuntu server with high ...
0
votes
0answers
8 views

Setting Plesk mail server SSL [on hold]

I host several domain in 1 VPS that using Plesk 12 with Centos 6.6 OS. Now I try to setup mail server SSL for one of the domain (for example: example.com) I already try to setup through plesk control ...
0
votes
2answers
1k views

Why isn't tomcat serving the correct SSL certificate

I configured tomcat with SSL successfully and was using a self-signed certificate. Recently an issue arose where just having the client "Accept/trust" our certificate wasn't easy. We ended up ...
0
votes
0answers
10 views

SSL with Virtual Hosts Using SNI

I am using RHEL 6, httpd-2.4.10, openssl-1.0.2a and I have setup SNI as explained in http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI Everytime I restart apache I get following message: ...
0
votes
1answer
2k views

NGINX SSL Connection Error

I've added an SSL certificate to my server. (Nginx running passenger & Rails). I created a CSR, uploaded to GoDaddy, downloaded the keys. Inside /srv/ssl I have www.mydomain.com.crt ...
1
vote
1answer
38 views

All LDAP traffic is being sent on TLSv1.1 not TLSv1.2

I have a kvm server, Centos 6.6 host with 6.6 guests. We run a php based web app that uses LDAP authentication for our clients. We just moved a client to this setup and they are reporting that all ...
-1
votes
1answer
41 views

Redirect https back to http in nginx with wildcard domain

I have a top level domain example.com with a SSL wildcard cert attached to it, and a subdomain forum.example.com that I don't want SSL to be used on. My problem is if I enter ...
2
votes
0answers
493 views

SSL connection alert hanshake failure

I'm having problem establishing the connection between the client and the Server .I'm using my own signed certificate on client and on server. I'm using the SSL ciphers SSLCipherSuite ...
3
votes
2answers
750 views

How to turn off SSL certificate verification for RedHat Kickstartfile downloading

I'm using Foreman for RedHat 6.0 booting over ipxe (but that shouldn't matter ;) The kernel parameters used for booting are: kernel http://192.168.1.5/dist/rhel/6.0/os/x86_64/images/pxeboot/vmlinuz ...
0
votes
1answer
26 views

Can't stop www. from redirecting to HTTPS://

My SSL certificate expired recently and I have been trying to disable SSL temporarily until I can get it renewed however something keeps redirecting the subdomain www. to HTTPS:// It's not the ...
0
votes
1answer
58 views

Apache Virtual Host Not Working [on hold]

I'm trying to set up Apache virtual hosts so I can host 2 different websites with 2 different domains. I've done it before with no problems, but now I'm having no luck. Since setting up the virtual ...
0
votes
0answers
27 views

Port 443 set up SSL on Nginx + Ubuntu + EC2

I've tried everything and I searched Google behind some solution, but can not configure SSL (https) in my Nginx server that is within a Ubuntu 14.04.2 LTS on Amazon EC2. My website works perfectly on ...
0
votes
2answers
710 views

HTTPS Certificate working on Chrome, not on Firefox

I've installed an SSL certificate in NginX, but it is not working on FireFox. Beneath is my nginx config, I didn't wrote it myself and I'm especially worried about the localhost server which is ...
1
vote
1answer
950 views

SSL Connection Error

I have purchased a comodo ssl cert and have submitted the Certificate Signing Request (CSR) generated by my server to the ssl management site. With the 3 files it returned me with, - ...
1
vote
1answer
27 views

SNI (SSL) support on Facebook built-in browser on Android [on hold]

This issue in the Android bug tracker seems to suggest that SNI has been part of the Android OS now for some time so I'm surprised to find that visiting our CloudFlare Flexible-SSL enabled site throws ...
1
vote
1answer
6k views

Handshake violation when trying to access one website

I have a TZ 190 Wireless Enhanced with SonicOS Enhanced 4.2.1.0-20e. Yesterday, people could access without any problems a bank website wich uses HTTPS. Today, it is imposible to access only that ...
3
votes
1answer
2k views

Squid SSL transparent proxy - SSL_connect:error in SSLv2/v3 read server hello A

I am trying to setup a SSL proxy for one of my internal servers to visit https://www.googleapis.com using Squid, to make my Rails application on that server to reach googleapis.com via the proxy. I ...
0
votes
1answer
2k views

nginx unknown directive ssl_protocols

I've compiled NGINX 1.4.1 with ssl support and wanted to secure my configuation with these lines: ssl_prefer_server_ciphers on; ssl_protocols        SSLv3 TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers          ...
2
votes
5answers
261 views

slow SSL apache server

I have a problem with a slow Apache server with SSL 256bit cert ab -n 500 https://example.com/ Time per request 29 ms ab -n 500 http://example.com/ Time per request 10 ms 52 Bytes is sent in both ...
1
vote
1answer
1k views

Nginx SSL redirect for one specific page only

I read and followed this question in order to configure nginx to force SSL for one page (admin.php for XenForo), and it is working well for a few of the site administrators but is not for myself. I ...
2
votes
1answer
48 views

When shoud I use ssl_session_cache paramter in nginx ssl settings

What do I benefit from ssl_session_cache set in nginx.conf when I using https? See here.
0
votes
2answers
2k views

Problem with apache + ssl: length mismatch error and ocasional bad request

we migrated a server from slicehost to linode recently, we copied the config from one server to the other. Everything works perfectly except that we get: Occasional errors with "Bad Request", this ...
0
votes
0answers
10 views

OCS Inventory Agent Peer certificate cannot be authenticated with known CA certificates

I have configured OCS Inventory server for our helpdesk department. Few days ago they asked me to help them with OCSAgent configuration. They agents don't want to connect to server via ssl when ...
0
votes
0answers
5 views

SunOne Webserver 6.1 support for SHA2

I have sunone webserver 6.1SP19. Just like to check whether the certutil option -Z supports SHA256. I searched from examples and so far, what I see is -Z SHA1. I would like to create a CSR with SHA2 ...
2
votes
1answer
246 views

nginx SSL with bare domain and wildcard

This is turning out to be an annoying problem that I'm hoping someone can help me with. To start, I run my own CA, so I'm doing self-signed certs; I can do anything I need with them using openssl. I ...
5
votes
2answers
2k views

nginx proxy + ssl +clr “400 bad request” error

Here's the situation - there's a trasnparent nginx proxy that handles SSL certificates and does it well until we decide to add a revocation list management, required for security reasons. This is when ...
0
votes
2answers
37 views

Port 443 “listening” but “not open”

I am running Apache/2.2.15 on Centos 6.6. I have a Verizon router and checked the port forwarding and saw WorkstationName 192.168.1.6 HTTPS TCP Any -> 443 All Broadband Devices Active ...
1
vote
1answer
15 views

CISCO SSL VPN (multiple Sites) [on hold]

I'm having a small issues and I'm sure it's NAT related. Our Users connect to SSL VPN in Ft. Worth. We also have a site up in Dallas. There is a current Site to Site connection there with full ...
0
votes
1answer
24 views

Redirect Subdomain That is Not on SSL

I have a SSL certificate that is installed on the server that only covers the domain, not subdomains All traffic is redirected using apache config file When I set up the subdomain to redirect a ...
2
votes
1answer
120 views

WARNING: None of the ciphers specified are supported by the SSL engine

I have a working web service running through Apache Tomcat 7 with the following connector element in server.xml: <Connector port="443" protocol="org.apache.coyote.http11.Http11Protocol" ...
1
vote
2answers
1k views

SSL certificate causes VPN connection error

Everyone! My problem - when I create SSL certificate (using selfssl7 or IIS management console), my vpn connection (L2TP with certificate authentication) will not go up (I get error 789). I have to ...
-1
votes
3answers
42 views

Wildcard SSL cert warning of insecure content across sub domains [closed]

I have a wildcard SSL certificate installed on various servers for different sub-domains. When looking at any pages or other content directly all browsers are happy with the certificate. But if I ...
1
vote
1answer
962 views

squid3 ssl bumping server-first with signed certificate

I'm trying to get Squid3.4 to do SSL Bumping with the server-first method. I followed this guide in alpinelinux. I'm working in explicit mode (browser configurer to Go to the proxy) and that works ...
0
votes
1answer
2k views

Page can't be displayed with IIS and SSL

I have a single site hosted in IIS 8. I have two site bindings. One is for HTTP, the other is for HTTPS. HTTP is on port 80 with All Unassigned addresses, I left host name blank. HTTPS is on port 443 ...
0
votes
0answers
17 views

Setting up SQUID 3.5 with SSL Support

I’m setting up a SQUID 3.5 server with SSL support and managed to successfully configured HTTP with SQUID proxy. However, my HTTPS connection is not working. SSL configuration was carried out using ...
0
votes
0answers
38 views

CentOS Postfix/Dovecot status deferred conversation with 127.0.0.1[127.0.0.1] timed out while receiving the initial server greeting

Linux Kernel: Linux 2.6.32-504.16.2.el6.i686 on i686 RAM: 6GB OS: CentOS 6.6 Postfix 2.6.6 Dovecot 2.0.9 Relay Host Verizon Stunnel through 127.0.0.1:2525 Webmin 1.750 Virtualmin 4.17.gpl Multiple ...
1
vote
1answer
24 views

Remove www from subdomains in Apache

I have a domain domain.org I am adding SSL, unforunately a lot of subdomain where created as "www.subdomain" and it is way more expensive to create certificate to multiple 3 level subdomains. Is it ...
0
votes
0answers
12 views

Nginx with proxy_protocol is not accpting requests from haproxy in TCP mode with send-proxy

I have haproxy and nginx. I want make this setup accept HTTPS connections and I want HTTPS request being decrypted on nignx, not haproxy. In haproxy I've created frontend and backend for HTTPS ...
2
votes
1answer
984 views

SNI error over SSL on some Android devices

I am getting an SNI error: Hostname X provided via SNI, but no hostname provided in HTTP request On some Android phones when making SSL requests to my domain. This is despite ensuring that the Host ...
0
votes
1answer
38 views

Arguments not transfered when nginx rewrite the url to https

I have nginx frontend and tomcat backend. Now I need to encryt the specific url end with .do from client to nginx server using ssl. And js/css could be requsted with http. In order to avoid mixed ...
2
votes
4answers
502 views

is wildcard ssl insecure?

Is there anything inherently more insecure about using a wildcard SSL certificate over a regular SSL certificate? We are looking to implement a subdomained web application (a la FreshBooks and ...
35
votes
8answers
59k views

On IIS, how do I patch the SSL 3.0 POODLE vulnerability (CVE­-2014­-3566)?

How do I patch CVE­-2014­-3566 on a Windows Server 2012 system running IIS? Is there a patch in Windows Update, or do I have to do a registry change to disable SSL 3.0?
-2
votes
1answer
190 views

How can I create a free certificate for HTTPS with Apache / Ubuntu? [closed]

I have been presently muddling with StartSSL and have found it something of a challenge. Most recently I had, I thought, created and downloaded a private key, and a certificate... but they don't ...
-1
votes
1answer
31 views

HAProxy with Rapid SSL Certificate

I'm using HAProxy version 1.5.2 on Centos. I received 3 certificates from GeoTrust/Rapid SSL CACertificate-1.cer CACertificate-2.cer ServerCertificate.cer All of the above certificates start with ...
0
votes
1answer
1k views

Unable to configure haproxy with ssl

I want to make my server ssl protected, it has two parts one for website and another for application. to balance them we have used haproxy. Now we want to secure this haproxy. I have installed the ...
0
votes
1answer
1k views

Zen Load Balancer HTTPS to HTTPS

I've been struggling with an issue that I am hoping someone can help with. Basically, I have setup a working Zen Load Balancer going from HTTPS to HTTP but I am struggling with getting it to work ...
0
votes
0answers
17 views

Windows Home Server 2011 and SSL certificates

I am running a home server with Windows Home Server 2011 and have set up Remote Web Access and Remote Desktop. I also have a valid SSL certificate from PositiveSSL which is set up on IIS. But whenever ...
29
votes
7answers
21k views

Wildcard SSL certificate for second-level subdomain

I'd like to know if any certificates support a double wildcard like *.*.example.com? I've just been on the phone with my current SSL provider (register.com) and the girl there said they don't offer ...
-1
votes
0answers
13 views

Creating PEM public key for Google App Engine [closed]

I am running a small company and unfortunately my IT support just quit :( I am running a site on GAE. My SSL expired and I ordered a new one, receiving the following files: 3 .cer files in an SHA-1 ...
0
votes
1answer
17 views

My Windows server 2008 does not have ssl3.0 or tsl

Developing some app I got a error about ssl and tsl things, the fix I found on the internet tell me about enable ssl3 o tsl on my host, but when I come to find that on the regedit I found this ...