SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

1
vote
2answers
3k views

Problem with apache + ssl: length mismatch error and ocasional bad request

we migrated a server from slicehost to linode recently, we copied the config from one server to the other. Everything works perfectly except that we get: Occasional errors with "Bad Request", this ...
0
votes
1answer
6 views

Running Seafile with Nginx, Plesk and SSL [on hold]

I have troubles to run Seafile in combination with Plesk, Nginx and SSL. The installation is completed and Seafile runs great with Nginx - but if I set SSL in ccnet.conf and seahub_settings.py, no ...
0
votes
2answers
2k views

Passed SSL checker, but browser doesn't show secure?

I've set up my SSL certificate following the instructions at http://splittingelectrons.wordpress.com/2012/02/24/how-to-configure-an-ssl-certificate-for-apache-on-amazon-ec2/ I've checked my website ...
1
vote
2answers
3k views

How can I disable Google SSL Search so that the DansGuardian web filter will work properly?

I'm running the DansGuardian web filter (2.10.1.1) and the Squid web proxy (2.7.STABLE9) on Debian Linux "Wheezy" 7.1. DansGuardian doesn't filter Google web-search or image-search queries ...
4
votes
1answer
1k views

Safari SSL certificate 403 forbidden

I have a web application deployed onto IIS 7 (Version 7.0.6000) on a Window 2008 Server using an SSL certificate (issued by Equifax). The web application is accessible over https using IE, Firefox and ...
138
votes
8answers
136k views

How to force or redirect to SSL in nginx?

I have a signup page on a subdomain like: https://signup.example.com It should only be accessible via HTTPS but I'm worried people might somehow stumble upon it via HTTP and get a 404. My html/...
0
votes
0answers
28 views

Change of Server (IP Address) Affects Access to the server from Domain SSL Certificated by LetsEncrypt

According to many answers the Certificate is not bound to the IP address but bound to the domain. But still I can not reach the application by using the domain. Is there a way to notify the DNS that ...
0
votes
2answers
33 views

SSL wildcard pattern not working when prefixing URL with “www.”

If I have a certificate which is issued to *.abc.dk, I can get to the site with for example vm.abc.dk fine (changes automatically to https://www.vm.abc.dk) but when I try to write www.vm.abc.dk I get ...
4
votes
1answer
2k views

Squid SSL transparent proxy - SSL_connect:error in SSLv2/v3 read server hello A

I am trying to setup a SSL proxy for one of my internal servers to visit https://www.googleapis.com using Squid, to make my Rails application on that server to reach googleapis.com via the proxy. I ...
0
votes
0answers
11 views

When is start to use a reverse proxy server my ssl certificate gets invalid,do i need a second ssl certificate for the reverse proxy? [on hold]

my site is protected by cloudflare,i have a ssl certificate from comodo ca. I have a server and from now a proxy server but when i switch my proxy on than cloudflar shows me error 523 what meen my ...
0
votes
2answers
43 views

How to enable HTTPS for the public DNS route of an Ec2 instance instance?

I am working on a Facebook bot app and one of their requirements is to setup a webbook on my webserver that is returning a token, to validate my account. I quickly spin up a micro instance (Ubuntu) ...
1
vote
0answers
443 views

Configuring Nginx reverse proxy with SSL and websocket

I'm running a web app that is using websockets and have nginx as a reverse proxy for that and that works fine. I've also been able to get SSL to work without the socket. Now we're nearing the official ...
1
vote
1answer
1k views

LDAP Client Search with SSL - CentOS7

Has anybody got SSL client authentication working with OpenLDAP (on CentOS7 - which is using moznss)? I've search for the last 2 days trying to get this to work, both with a certutil database and ...
1
vote
1answer
4k views

Squid SSL bump with parent proxy

Does SSL bumping work with parent proxy? squid and pf are set up like this: squid.conf: http_port 3128 intercept https_port 3129 intercept ssl-bump generate-host-certificates=on key=/usr/local/etc/...
-1
votes
1answer
28 views

Force use of new SSL certificate?

I recently let an ssl certificate expire. I then purchased and installed a new certificate (didn't renew the old one do to the cost of renewing an ev cert vs a new basic cert). Everything works fine, ...
1
vote
1answer
31 views

Signing OpenVPN server and clients certificates by Samba4 DC auto-signed CA.pem

I installed Samba4 and configured it to be domain controller, and it auto generated ca.pem, cert.pem, key.pem. And now I want to use the same CA of samba to sign the new certificates (maybe generated ...
0
votes
0answers
25 views

tunnelblick - Chrome doesn't open HTTPS sites in office network [on hold]

I use Tunnelblick VPN client to connect to Office network. When my mac connects to mobile 3G hotspot, VPN connection works just fine. I can access HTTPS & HTTP web sites in office network. When ...
-1
votes
1answer
32 views

What permissions should I give to CA Bundle file? [duplicate]

Hi I setup an ssl certificate using godaddy and read the following article: Best location for SSL certificate and private keys on Ubuntu. I am trying to protect an aws ubuntu gitlab instance that uses ...
0
votes
1answer
22 views

ldapsearch can't connect to ldaps

I am using a Centos 6.6 and i'm trying to use ldapsearch to connect to my windows ad server and i can't connect using port 636. I exported the CA root certificate of my ad server in base64 and added ...
3
votes
4answers
4k views

SSL stops working on IIS7 after a reboot

I have a Windows 2008 Server with IIS7. Every time the server reboots, SSL stops working. Normal HTTP requests work fine, but any request to an HTTPS address gives the typical error message in the ...
0
votes
3answers
2k views

SSL Certificate Stops Working after Server Reboot on IIS7, W2K8

We recently upgraded from W2K3/IIS6 to W2K8/IIS7 and have been having problems with our SSL Certificate (Thawte 123 SSL certificate) ceasing to work after rebooting. Initially, the intermediate ...
-1
votes
2answers
11 views

Apache SSL not working in Centos 6.5

I have a simple LAMP stack with httpd/Apache installed on Centos 6.5. I've set my vhost up in /etc/httpd/sites-available/acute.conf like so: <VirtualHost *:80> ServerName acutemedical.co ...
4
votes
2answers
3k views

Google Chrome says my SSL uses outdated security settings but other site tests disagree [closed]

I installed StartSSL on my web server which is running Linux Apache on CentOS 6.5. shaaaaaaaaaaaaa.com said Nice. example.com has a verifiable certificate chain signed with SHA-2. However ...
-3
votes
0answers
25 views

Website responds slow after change to HTTPS [closed]

My website used to be run without SSL security, but after changing to HTTPS, my server reacts slow. Every page change takes a few seconds to go, but works fine... Have i mis-set a setting? CentOS ...
0
votes
0answers
261 views

Glassfish 3 unable to deactivate SSL3 for IIOP

I'm running Glassfish 3.1.2.2 and want to disable SSL3 for the IIOP ports (default 3820 and 3920). I set configs.config.server-config.iiop-service.iiop-listener.SSL.ssl.ssl3-enabled=false configs....
0
votes
0answers
10 views

3 apache config files after SSL cert install. Rewrite won't work

I used EFF Certbot to install a free SSL certificate. Now I have three config files for my website. 000-default.conf 000-default-le-ssl.conf default-ssl.conf Additionally I have some other config ...
0
votes
1answer
35 views

https not working with www and DNS redirect isn't helping

Not sure why this site is killing me as I've configured SSL on domains before without a problem - but the combination of DNS management and server configuration is hurting my head - so I'm asking for ...
0
votes
0answers
11 views

Utilizing SSL on Multi-domain, Autoscaling Elastic Beanstalk Setup

We are creating a Content Management System for our company. It is important that this CMS support dynamic domain names on a dynamic number of servers. After many hours of research we felt that Amazon'...
0
votes
0answers
11 views

OWA Issue after installation of rollup- Firefox and Chrome cannot load page, potential SSL issue

My company is using Microsoft Exchange 2010 on a 2008 Server virtual machine. It fell quite behind on regularly updates because of potential downtime conflicts, but this weekend we patched it ...
2
votes
1answer
32 views

MySQL SSL Connection

I'm trying set ssl connection with MySQL Server. I've read this and many more articles https://dev.mysql.com/doc/refman/5.7/en/using-secure-connections.html There is one thing i still don't know, ...
13
votes
7answers
27k views

Installing SSL Certificate for use in IIS7, installation “works”, but cert listing disappears

Windows Server 2008 R2, IIS7. We have an SSL cert from Go Daddy. It's a wildcard cert, so it will work across subdomains (e.g. *.domain.com). I followed the instructions located at http://support....
6
votes
10answers
15k views

ssl certificates disappear IIS

I'm trying to import a certificate to IIS. Everything is ok on the MMC (Windows Console). I finished the wizards and seems that is all right. But, when I refresh the certificate list or move to other ...
2
votes
0answers
40 views

How can I let my clients use their own SSL on my SaaS

We run a service that lets our clients run their own CMS. Our clients want to use their own SSL Certificate, wether it's self signed, or signed by another company. Our application runs PHP. I was ...
-1
votes
0answers
17 views

Create a certificate request failed in domino server

I had a problem when I was setting up a Domino CA so that we can use IBM verse by SSL. I referred to the IBM redbook about domino certification authority and SSL Certificate and followed it step by ...
0
votes
0answers
30 views

Disabling TLS 1.0 prevents Client HELLO packet

We have an application that we are trying to get to communicate to Paypal. We noticed that communication failures were occurring, so we routed everything through Charles as a proxy. When we routed ...
2
votes
3answers
1k views

SSLRequire syntax problems

I'm trying to use SSLRequire to ensure that only certificates with an email from a specific domain are accepted. This is my SSLRequire statement, inside a .htaccess file: SSLRequire %{...
5
votes
1answer
2k views

HTTPS and Certification for dummies

I had never used https on a site and now want to try it. I did some research, but not sure that I understood everything. Answers and corrections are greatly appreciated. Here we go: To use https I ...
3
votes
3answers
129 views

Using an SSL certificate in multiple locations

I have a website hosted in the UK and I also have an organisation in South Africa hosting my company application online for web access. I want to implement SSL for both servers, as it requires login ...
1
vote
1answer
30 views

Security of SSL certs on AWS ELBs / SSL offloading

I have some concerns about security and am wondering how AWS will store an SSL certificate deployed to an ELB. I have a wildcard SSL cert for my domain that I want to make sure doesn't persist ...
2
votes
1answer
63 views

DL380 G6 iLO2: Upgrade SSL connection

I've got a HP DL380 G6 with ILO 2.29 installed. Now after upgrading the certificates to a AD-signed one (to get rid of the pesky warnings) we're stuck with one last one, only showing up on Google ...
7
votes
2answers
3k views

How to manually create Puppet CA and certificates?

I am wondering how to manually (using openssl instead of puppet ca command) create CA that would be usable by Puppet? The goal would be to script creation of such CA's to deploy them on multiple ...
0
votes
1answer
107 views

SSL initial connection painfully slow in Chrome

Our customer has a PrestaShop based Webshop (https://www.hoerschiff.at) and now his hoster installed a SSL Cert. We updated the configuration of PrestaShop, so all pages are forced to be delivered via ...
1
vote
0answers
23 views

Internal EV SSL From A Windows Server 2012 R2 Root CA Shows Up As A Normal Certificate

I am trying to setup an internal ev ssl server for all of my internal applications giving ie the little green bar and chrome displaying my company name. It works fine in IE displaying the green bar as ...
0
votes
1answer
1k views

Allow Google apps and block consumer Google accounts using squid proxy

In my organisation, I am trying to allow the Google apps account and block consumer Google accounts using squid proxy. According to this link, Google says we can do it using following steps: 1. ...
0
votes
1answer
4k views

Page can't be displayed with IIS and SSL

I have a single site hosted in IIS 8. I have two site bindings. One is for HTTP, the other is for HTTPS. HTTP is on port 80 with All Unassigned addresses, I left host name blank. HTTPS is on port 443 ...
0
votes
0answers
7 views

Disabling TLS1.0 in mod_proxy

We are using apache http server 2.2.29 and jboss 6.4. We are using Mod proxy for communication between web server and jboss application server. We are planning to disable TLSv1.0 in mod proxy ...
1
vote
1answer
2k views

Weblogic Mitigate POODLE vulnerability after upgrade and still use CBC ciphers

I recently upgraded my Weblogic server to 10.3.6 with java 7. So with that I have TLS1.0 - TLS 1.2 enabled via the setEnv.sh. Some of the ciphers I am using to make sure that they are compatible (...
0
votes
1answer
26 views

[SOLVED]: HTTPS access to phpmyadmin DOWNLOADS INDEX.php instead of opening phpmyadmin

When I open phpmyadmin without encription, everything goes fine. however, if I switch to https, the browser downloads the index file. apache 000-default.conf as <VirtualHost *:80> ...
4
votes
2answers
4k views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.example.org port 636 with the ssl checkbox. This is on the local server itself. ...
12
votes
2answers
40k views

what is .crt and .key and how can I generate them?

SSLEngine on SSLCertificateFile /etc/httpd/conf/login.domain.com.crt SSLCertificateKeyFile /etc/httpd/conf/login.domain.com.key SSLCipherSuite ALL:-ADH:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP