SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

2
votes
1answer
3k views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.name.org port 636 with the ssl checkbox. This is on the local server itself. ...
0
votes
1answer
1k views

CentOS Apache + Tomcat SSL using mod_jk

I have Apache + Tomcat (using mod_jk) working correctly on a CentOS 6.3 machine. I am trying to set up SSL with Apache. When I browse to the site I get the following output: Forbidden You don't ...
4
votes
1answer
7k views

The OCSP response is not yet valid (contains a date in the future)

I'm getting this error when opening the site: Secure Connection Failed An error occurred during a connection to http://practiceti.me The OCSP response is not yet valid (contains a date in the ...
11
votes
1answer
18k views

Configure Nginx as reverse proxy with upstream SSL

I try to configure an Nginx server as a reverse proxy so the https requests it receives from clients are forwarded to the upstream server via https as well. Here's the configuration that I use: http ...
11
votes
3answers
6k views

How do I ensure that stunnel sends all intermediate CA certs?

A few computers, but not most, are rejecting the SSL certificate from my webserver. The problem seems to be that some computers are rejecting the CA certs. The problem seems to be manifesting on Mac ...
-5
votes
2answers
35 views

should I buy the SSL certificate with the same domain seller

I bought a domain from godaddy. If I want to buy SSL certificate should I have to buy the SSL from godaddy ? Or I can buy the SSL certificate from any seller then applied it to the domain that I ...
1
vote
1answer
8 views

Where is the TLS key after using certreq for CSR generation on Windows 10?

I tried to follow the website below for instructions on how to generate the CSR for my web server: http://www.entrust.net/knowledge-base/technote.cfm?tn=8649 However, it only generates the CSR. ...
0
votes
0answers
26 views

Change Self Signed SSL to Commercial SSL on Apache 2.4

I installed Godaddy UCC SSL to replace self signed SSL on Ubuntu 12 Apache 2.4. I have updated default-ssl.conf file in etc/apache2/sites-available: <IfModule mod_ssl.c> <VirtualHost ...
-1
votes
0answers
23 views

Cant access HTTPS on Ubuntu 12

I'm trying to install GoDaddy SSL on Ubuntu 12 Apache 2.2. I received 2 file from godaddy: 31b937c67be4ccaa.crt (renamed mydomain.org.my) gd_bundle-g2-g1.crt wget localhost:443 received response. ...
0
votes
2answers
21 views

Failed to start stunnel4 on Ubuntu 15.04

I get the following error starting stunnel4 service on Ubuntu 15.04: root@scw-d91ec7:~# service stunnel4 start Job for stunnel4.service failed. See "systemctl status stunnel4.service" and "journalctl ...
3
votes
2answers
22 views

StartSSL cert doesn't work with Dovecot/OpenSMTPD

I've an issue with my StartSSL certificate. When I try to use it to activate SSL encryption on Dovecot, I get the following error in my log when a client attempt a connection to the imap server : ...
0
votes
1answer
2k views

ssl_crtd helpers are crashing too rapidly in squid

I am using the sslBump and Dynamic SSL Certificate Generation features of squid, below is my configuration for the sslBump sslcrtd_program /usr/lib64/squid/ssl_crtd -s ...
-3
votes
1answer
29 views

redirect ssl http to https issue in apache

i am a newbie with apache. need some advise regarding redirecting http to https. It looks like everything in the ssl.conf is copasetic, once i logged on to ssl environment, every links i clicked seem ...
0
votes
1answer
968 views

Verify client certificate CN in Tomcat(APR)

I'm running a tomcat installation with the APR libraries installed (with the OpenSSL HTTPS stack that comes with it). What I'm trying to do is to lock a specific HTTPS connector down to users of a ...
1
vote
2answers
3k views

Exchange 2010 POP3/IMAP4/Transport services complaining that they can't find SSL certificate after blue screen

We have a single-server Exchange 2010 setup. In the early hours of this morning the server had a blue screen and rebooted. After coming back up the POP3/IMAP4 and Transport services are complaining ...
0
votes
1answer
32 views

Nginx proxying http to https with client certificate

We have an application that is not client-certificate aware and must consume a client-certificate authenticated web-service. To fix this, we're trying to use Nginx to reverse proxy a local (http) url ...
-1
votes
3answers
32 views

Chrome on Android random red HTTPS

When I'm using Chrome on my desktop, the address bar is always green. However, on my Android phone the address bar is usually green, but sometimes red. It says that I'm using a certificate signed ...
0
votes
0answers
40 views

KeepAlive in Apache 2.4 interfering with form submissions

I have just upgraded a server to Debian Jessie, which includes Apache 2.4.10 (was 2.2), and PHP 5.6. Now, SSL sites won't submit forms in some circumstances on IE11 and iPad Safari (not sure about ...
4
votes
2answers
2k views

Moving SSL Certificate from one Apache server to another

I just moved hosts and I looked for a decent guide on how to move my SSL certificate from my old host to the new one. I am amazed on how many 'guides' or 'tutorials' which are simply useless are out ...
13
votes
3answers
27k views

Installing SSL on a Windows Server 2012 with IIS 8.0

We are in the process of moving a website from a machine with Windows Server 2008 R2/IIS 7.5 to a machine with Windows Server 2012/IIS 8.0 as we want to take advantage of the new SNI feature. This ...
2
votes
1answer
5k views

FortiClient (Windows 7 32 bit) shows 'connected' for an SSL VPN connection but can't ping the remote server

I am trying to connect to a remote server through FortiClient for an SSL VPN connection. When I connect through the FortiClient (version 4.3.5.472) on my windows 7 32-bit system, it shows connected. ...
0
votes
2answers
92 views

Can I apply SSL to all my virtual hosts with this?

I've been wanting SSL for one portion of my website, which is one single domain name on my VPS. As most certificates look fairly expensive, I had looked at my domain name provider and had found a ...
-1
votes
2answers
756 views

Disable support for LOW encryption ciphers for glassfish port no 3920

Qualis team found a vulnerability with our glassfish with port no 3920 . glassfish version :- glassfish-3.1.2.2 Port no :- 3920,3820 Below are the details from Qualis Messages ...
2
votes
1answer
224 views

Apache alternatives with per-directory SSLVerifyClient

My application requires per-directory verification of SSL client certificates (i.e. when user requests /foo we require they have a client certificate and verify it, but when they request /bar we don't ...
0
votes
1answer
18 views

SSLVerifyClient require in Cloudflare DNS

I've done setup my new domain name on Cloudflare but I have a problem while I'm setting up SSL certificate. In detail, I want ask visitors who are want to see my website content a valid certificate. ...
5
votes
2answers
2k views

How to manually create Puppet CA and certificates?

I am wondering how to manually (using openssl instead of puppet ca command) create CA that would be usable by Puppet? The goal would be to script creation of such CA's to deploy them on multiple ...
0
votes
1answer
2k views

SChannel errors after enabling SSL on a Windows Server 2012 R2

I have a Windows Server 2012 R2 instance on Azure. For a new website I have ordered a certificate by GlobalSign. After getting the certificates from them I have completed the certificate request in ...
2
votes
0answers
81 views

HaProxy giving - 503 Service Unavailable

I am using below configuring for performing loadbalancing for two Tomcat servers. And I configured HAProxy to perform SSL/TLS bridging/re-encryption. ...
-1
votes
0answers
7 views

GCE SSL https apache2 scripts install GoDaddy [closed]

I dont get it. Please teach me how to install ssl on my Google cloud vm server. A step by step walk through would be much appreciated. Thank you before hand.
10
votes
3answers
5k views

Why is Internet Explorer 11 unable to connect to HTTPS sites when TLS 1.2 is enabled?

Normally I don't use Internet Explorer at all. I use it only in design time for interface tests (development machine and with unencrypted http). Every week I run the SSL Labs server test which says ...
0
votes
0answers
56 views

SunOne Webserver 6.1 support for SHA2

I have sunone webserver 6.1SP19. Just like to check whether the certutil option -Z supports SHA256. I searched from examples and so far, what I see is -Z SHA1. I would like to create a CSR with SHA2 ...
0
votes
1answer
58 views

SSL: Issued SSL for www.domain.com but only works for https://domain.com

Last week about an SSL Certificate issued by RapidSSL and my hosting MediaTemple, you can see the order details at RapidSSL here: http://i.imgur.com/s5XHcPH.jpg And SSL details on my panel at ...
-1
votes
2answers
18 views

How to generate .key and .crt file from JKS file for httpd apache server

I have the mycert.jks file only. Now i need to extract and generate .key and .crt file and use it in apache httpd server. SSLCertificateFile /usr/local/apache2/conf/ssl.crt/server.crt ...
3
votes
1answer
1k views

Safari SSL certificate 403 forbidden

I have a web application deployed onto IIS 7 (Version 7.0.6000) on a Window 2008 Server using an SSL certificate (issued by Equifax). The web application is accessible over https using IE, Firefox and ...
0
votes
0answers
21 views

Windows 2012 with nginx

I'm planning on upgrading my server to windows 2012. One thing I'm trying to wrap my head around is how to get things working together with nginx. Question: I'm planning on making use of both vpn ...
0
votes
1answer
9 views

HAProxy: Unable to set chipper list - possible bug?

I have two machines running with similar configuration. Both have an HAProxy installed. Now I want to enable native SSL Termination. This works perfectly on Server one. Now on Server 2 I cant get it ...
4
votes
3answers
2k views

Double Wildcard SSL Certificates

Is there a registar that offers SSL certificates for: ..domain.com or something_fixed.*.domain.com? -- M.
0
votes
0answers
21 views

IIS ARR UrlRewrite - Preserve original protocol and port of incoming requests

I'm trying to setup a reverse proxy using IIS with ARR and url rewrite modules. The destination web server host has a website that has multiple bindings for different sites: VM 1 site A - https:443 ...
1
vote
1answer
20 views

Changing SSL Certificate

We are currently deploying a security solution for one of our clients and we require their SSL cert in PEM / PKCS12 format. However, they told us that they have "Lost" their CSR and wouldn't be able ...
0
votes
2answers
39 views

automate generation of SSL certificates

How I can automate the generation of self signed certificates when I know the domain name ? This works, but it asks me on the command line prompt certain questions. How I should change it to ignore ...
0
votes
1answer
43 views

Enforcing RC4 cipher and testing enabled ciphers with openSSL

I am trying to enable and enforce RC4 cipher on apche 2.4 and I checked the http://httpd.apache.org/docs/trunk/ssl/ssl_howto.html It says RC4 cipher can be enabled in below 2 ways 1. SSLCipherSuite ...
84
votes
5answers
49k views

Multiple SSL domains on the same IP address and same port?

This is a Canonical Question about Hosting multiple SSL websites on the same IP. I was under the impression that each SSL Certificate required it's own unique IP Address/Port combination. But the ...
12
votes
4answers
5k views

SSL Handshake negotiation on Nginx terribly slow

I am using Nginx as a proxy to 4 apache instances. My problem is that SSL negotiation takes a lot of time (600 ms). See this as an example: http://www.webpagetest.org/result/101020_8JXS/1/details/ ...
0
votes
0answers
35 views

Tomcat two way SSL with APR loses client certificate after a few requests

I found that when accessing a web application that uses client certificate authentication run on Tomcat/APR (on Windows) with Firefox or Chrome, the client cert is "lost" after a short while. To the ...
2
votes
0answers
17 views

SSL - Apache and Node.js on the same Amazon EC2 instance

I hosted my website on an EC2 instance, using Apache. SSL was also set up properly, running on HTTPS, port 443. Currently, I just added a chat application to the website using Node.js + socket.io. ...
1
vote
1answer
3k views

Squid SSL bump with parent proxy

Does SSL bumping work with parent proxy? squid and pf are set up like this: squid.conf: http_port 3128 intercept https_port 3129 intercept ssl-bump generate-host-certificates=on ...
0
votes
0answers
11 views

Mutual Authentication - Allow from IP range without client certificate

Is it possible to set SSLVerifyClient: Require but, also allow IP range for users who do not have the client cert? Possibly to use: Order deny,allow Deny from all Allow from xxx.xxx.xxx.xxx ...
0
votes
2answers
1k views

how to install ssl on tomcat 7?

I know this question might sound too easy and I should had read all docs available on internet, the true is that I did, and I had no luck, its kinda confusing for me, I have installed many times this ...
0
votes
2answers
2k views

Hostname and SSL (apache) issue on Debian

I have been trying to setup SSL virtual host ServerAdmin webmaster@mts.com ServerName moclm.tap.pt DocumentRoot /var/www/tapme/ <Directory /> Options ...
-2
votes
5answers
642 views

Installing Apache [closed]

I am installing Apache 2.2.15 with --enable-ssl=shared option. I get following error. checking for SSLeay_version... no checking for SSL_CTX_new... no checking for ENGINE_init... no checking for ...