SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
2answers
1k views

LDAPS being redirected to 389

We're trying to perform an LDAPS bind to a server which blocks 389 with a firewall so all traffic must travel over 636. In our test lab we're connecting to a test ldap (located on the same server) ...
2
votes
0answers
11 views

Command line to set up SNI on IIS for Windows 2012

I'm trying to complete the automated build script of my web server, which runs Windows 2012 and has two SSL websites, each with its own digital certificate. I am using SNI, which works fine when I ...
0
votes
1answer
15 views

Why I have set HTTP_X_FORWARDED_PROTO and unset HTTPS on Apache 2.4?

Recently I updated my website: CMS (Drupal), it's OS (Ubuntu 14.04) and Apache (2.4.7). The situation is that when surfing on https://example.com/whatever PHP can't detect HTTPS. $_SERVER['HTTPS'] is ...
-1
votes
1answer
26 views

Which kinds of SSL certs there are?

When I visit eg. https://www.google.com, my web browser (IceWeasel) shows just a (grey) lock icon next to the URL. However, when I visit eg. https://www.cia.gov, a green lock and "Central Intelligence ...
1
vote
1answer
905 views

SSL Connection Error

I have purchased a comodo ssl cert and have submitted the Certificate Signing Request (CSR) generated by my server to the ssl management site. With the 3 files it returned me with, - ...
0
votes
1answer
1k views

NGINX SSL Connection Error

I've added an SSL certificate to my server. (Nginx running passenger & Rails). I created a CSR, uploaded to GoDaddy, downloaded the keys. Inside /srv/ssl I have www.mydomain.com.crt ...
13
votes
3answers
3k views

How to decide where to purchase a wildcard SSL certificate?

Recently I needed to purchase a wildcard SSL certificate (because I need to secure a number of subdomains), and when I first searched for where to buy one I was overwhelmed with the number of choices, ...
1
vote
1answer
5k views

Handshake violation when trying to access one website

I have a TZ 190 Wireless Enhanced with SonicOS Enhanced 4.2.1.0-20e. Yesterday, people could access without any problems a bank website wich uses HTTPS. Today, it is imposible to access only that ...
0
votes
1answer
22 views

Nginx SSL cant connect to site

I just bought a SSL certicate for my website and tried to get it working with my nginx install, but uppon connection the browser refuses the connection with the website. Here is the relevant part of ...
0
votes
1answer
21 views

Apache SSL Errors every 30 seconds

I have three load-balanced Apache 2.4.6 servers running on fresh installs of CentOS 7. The load-balancer is a Barracuda 340. I know its old, but it's more than capable of handling the traffic, and ...
0
votes
1answer
28 views

Job for httpd.service failed

after following this tutorial :https://www.digitalocean.com/community/tutorials/how-to-create-an-ssl-certificate-on-apache-for-centos-7 I have tried everything I possibly can to fix the error I have ...
3
votes
2answers
3k views

proxy:error AH00898: Error during SSL Handshake with remote server

I have a server that acts as a front-end for a cPanel mailserver in a network. The apache proxy on the front-end server ran for 152 days without fault then suddenly I now get 500/502 errors when using ...
3
votes
1answer
1k views

Trouble passing Trustwave PCI Scan due to BEAST vulnerability

I'm at my wits end with this one! I am not a CI/networking person to begin with, and so I apologize if I am asking the wrong question/giving the wrong information. I am working on trying to get a ...
3
votes
1answer
2k views

Squid SSL transparent proxy - SSL_connect:error in SSLv2/v3 read server hello A

I am trying to setup a SSL proxy for one of my internal servers to visit https://www.googleapis.com using Squid, to make my Rails application on that server to reach googleapis.com via the proxy. I ...
0
votes
4answers
56 views

How can I move certificates from 1 server to another

I'm using StartSSL which , after you proove who you say you are, provides a certificate which I can install to authenticate myself. I have some SSL certificates associated with this account. I've ...
2
votes
2answers
29 views

AD server not using cert for Active Directory LDAP + SSL

I'm trying to enable SSL for Active Directory in our domain. The problem I'm running into is that the server is failing to recognize the certificate I've made for it. Whenever I try to query the ...
0
votes
1answer
1k views

nginx unknown directive ssl_protocols

I've compiled NGINX 1.4.1 with ssl support and wanted to secure my configuation with these lines: ssl_prefer_server_ciphers on; ssl_protocols        SSLv3 TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers          ...
3
votes
3answers
39 views

What subdomains does an Exchange 2013 SSL certificate require?

I need to order a SSL certificate for an Exchange 2013 server. I am going to order an UC Certificate from Comodo Group Inc. I understand that I need to specify the below subdomains whilst ordering: ...
0
votes
0answers
11 views

Dynamics CRM 2015 Outlook Client not connect

My Outlook CRM client don't connect to the crm 2015 server, not in the LAN nor the Internet. The error is: Authentication failed. The network is a test environment with virtual machines, installed ...
2
votes
1answer
25 views

configuring ssl on nginx - is this ciphers list up to date?

I have bought a certificate from Comodo and I'm following an article on their site on how to configure the certificate on my nginx. The question is, is this configuration, mainly the ciphers list, up ...
0
votes
2answers
744 views

how to redirect from “https://www.example.com” to be “https://example.com”?

I want to know: How to redirect from .. https://www.example.com to be https://example.com via .htaccess or CPanel? As the SSL only installed on the one without "www", and when I visit the ...
0
votes
1answer
12 views

ELB Https with HTTP on backend using Tomcat without nginx or haproxy

I want to setup ELB to terminate SSL at load balancer and communicate with backend instances over HTTP. I have uploaded valid certificate on ELB. When I set up following configuration ELB - HTTPS ...
-2
votes
3answers
337 views

Accidently removed localhost.crt SSL in Centos 6 - what can i do?

So I just got my certificate issued from Digicert, and since there was other unused/old files in /etc/ssl/ i marked and removed, and accidently also removed localhost.crt. Now I cannot start my web ...
0
votes
1answer
5k views

upstream prematurely closed connection while reading response header from upstream

I am having issues setting up SSL for my Jenkins CI server. I use Jenkins behind nginx for a reverse proxy. I am getting these upstream prematurely closed connection while reading response header from ...
6
votes
2answers
5k views

How to check HTTP response code of a secured website with Nagios?

I want to create a nagios check of my secure website. All the check needs to do is login to the site with login details that I pass the script. Does anyone know of a plugin or script that will allow ...
0
votes
0answers
24 views

CURL & SSL failing on a specific site [duplicate]

I can't get curl to download https://www.sicdm.caixa.gov.br/cadmut/login_internet_form.do on a CentOS 6.2 server. The command curl -v -k -3 ...
1
vote
2answers
1k views

SSL certificate causes VPN connection error

Everyone! My problem - when I create SSL certificate (using selfssl7 or IIS management console), my vpn connection (L2TP with certificate authentication) will not go up (I get error 789). I have to ...
1
vote
1answer
31 views

SSLRequire - file function

I'm having trouble with Apache 2.2 and the small documentation that I can find for the file function of SSLRequire. I'm trying to check the email property of the client certificate in a request using ...
1
vote
1answer
51 views

nginx: How to log TLS error (if unsupported ciphers / protocol)

I'm in the progress of switching to 100% https. Server is running nginx+libressl. Before going https:100% I'm interested in seeing which clients would no longer be able to connect to my site. E.g. ...
0
votes
2answers
1k views

How ssl is usually set up on shared hosting?

I am quite unclear on how ssl is usually set up on shared hosting. I have account with justhost.com and they provided me with public_html folder and (its sibling) ssl folder. When I create ssl ...
0
votes
2answers
2k views

Problem with apache + ssl: length mismatch error and ocasional bad request

we migrated a server from slicehost to linode recently, we copied the config from one server to the other. Everything works perfectly except that we get: Occasional errors with "Bad Request", this ...
0
votes
1answer
30 views

Apache refused to include TLS1.2

I was running openssl0.9.8 for a long time and suddenly my SSL gave me a red X. From the company that I purchased the ssl, they told me that i need to update my server config to include tls1.2 and ...
0
votes
0answers
18 views

Lync Server SSL Cert

I have a cert issued by the domain CA. The cert subject is the name of the server. The subject alternative name contains sip.domain sip.domain2 dialin, meet, admin, and the auto discover for ...
0
votes
1answer
54 views

PHP cURL call returning error 56 with NSS error -12195

I have an internal server (internal to my network) to which I make a REST API call from my external server. I don't know if it helps but the external server is running php 5.3.6 with cURL 7.19.7. To ...
0
votes
0answers
25 views

AWS cloudfront with SNI + ELB with 443 to 80 redirection to EC2 issue

I have configured web server front ending with AWS ELB and CloudFront. I have deployed SSL certificate on load balancer (ELB) for HTTPS connection. We have set up 2 listener protocols: Source -> 80 ...
3
votes
2answers
36 views

Firefox sec_error_unknown_issuer after renewing root CA certificate [on hold]

For our corporate network we use an internal CA, which directly signs some intranet server certificates. Now the root certificate is about to expire. I tried to renew it with the following OpenSSL ...
2
votes
1answer
587 views

Node.js with SSL/TLS protocol v1.2

I would like to use TLS 1.2 on my node.js server. I'm currently using openssl 1.0.0e. If I upgrade to openssl 1.0.1, do I need to rebuild node.js to upgrade to TLS 1.2? Are there configuration or ...
0
votes
1answer
1k views

Zen Load Balancer HTTPS to HTTPS

I've been struggling with an issue that I am hoping someone can help with. Basically, I have setup a working Zen Load Balancer going from HTTPS to HTTP but I am struggling with getting it to work ...
0
votes
1answer
43 views

Best way to manage multiple domain with SSL in single droplet?

Firts of sorry about my poor english, but I'll do my best. Currently I manage 2 domain on my $5 DigitalOcean droplet and have use Cloudflare as my DNS manager with Flexible SSL configuration, ...
0
votes
1answer
16 views

Nginx forward ssl to ISPConfig lxc container

I am having issues with https connexions to the ISPConfig admin panel (port 8080). My setup is relatively standard. I own a physical host, which routes all traffic on common ports to an LXC container ...
0
votes
3answers
174 views

Why does Chrome on 1 computer say my certificate is invalid/insecure? [duplicate]

I have a wildcard domain certificate from StartSSL for a site (https://later.webblocks.nl/). When I check it in any browser on my home PC, it's all good. (Green lock in Chrome.) When I check it in ...
0
votes
0answers
18 views

haproxy get ssl interrupt error, how haproxy tell server to close ssl or tcp?

I use haproxy 1.5 and a windows server build site. my site work under the https protocol, so for haproxy I use tcp mode since I think the ssl can not work on http mode. my problem is the ssl ...
0
votes
2answers
975 views

Why isn't tomcat serving the correct SSL certificate

I configured tomcat with SSL successfully and was using a self-signed certificate. Recently an issue arose where just having the client "Accept/trust" our certificate wasn't easy. We ended up ...
0
votes
1answer
965 views

Unable to configure haproxy with ssl

I want to make my server ssl protected, it has two parts one for website and another for application. to balance them we have used haproxy. Now we want to secure this haproxy. I have installed the ...
0
votes
1answer
31 views

SSL connection to server ip address

I have a server which equipment at remote locations on private networks connect to via the internet using SSL. An SSL Certificate for the domain name of the server is installed. I have a number of ...
1
vote
1answer
896 views

Connection Reset error trying to set up HTTPS locally using VS and IIS Express

I'm trying to set up Facebook authentication on my application, so I tried following the steps at this page: ...
2
votes
1answer
865 views

SNI error over SSL on some Android devices

I am getting an SNI error: Hostname X provided via SNI, but no hostname provided in HTTP request On some Android phones when making SSL requests to my domain. This is despite ensuring that the Host ...
12
votes
5answers
15k views

How do I Install Intermediate Certificates (in AWS)?

I have installed private key (pem encoded) and public key certificate (pem encoded) on Amazon Load Balancer. However, when I check the SSL with site test tool, I get the following error: Error ...
0
votes
0answers
31 views

Machine cannot connect to SSL website [migrated]

I have two machines that I use to submit data to a secure HTTPS website using a C# program. One of them has no trouble, but the other one fails handshake. I've noticed that the working machine sends a ...
0
votes
2answers
33 views

HAProxy backend with TLS stopped working

I'm having trouble with one of our HAProxy-Servers that uses a backend with TLS. When starting HAProxy the backend will report all servers as down: Server web_remote/apache_rem_1 is DOWN, reason: ...