SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

-2
votes
1answer
11 views

What type of SSL certificate I need to create CA?

I've a task to create Certificate Authority for company use. Preferably using "valid" ( not self-signed) certificate. The goal is to issue individual certificates for subdomains, instead of wildcard, ...
0
votes
1answer
9 views

Export specific certificate from JKS using keytool

We're trying to configure Apache HTTPd to use an SSL cert from a JKS keystore file we have. Since we want only one of the certs out of the JKS (www.MySite.com) and not the others (such as ...
0
votes
0answers
19 views

Is there a standard for where to place SSL keys and certificates? [duplicate]

There's a few 'standards' for where to place website source code - /var/www/, /var/www/html/, /srv/www/ etc. Is there a similar 'standard' or 'common practice' for SSL keys and certificates? If I am ...
1
vote
2answers
98 views
+100

Should I need to provide a root certificate when setting SSL cert on nginx

In Qualys SSL test always warn me that the root certificate is an extra download and can be safely removed. However, from Comodo website, their guide on installing cert on nginx is NGINX Needed for ...
1
vote
1answer
25 views

SSL VirtualHost not using DocumentRoot

I'm trying to set up a self-signed SSL certificate between my own VPS and Cloudflare (next to Full SSL). I'm using the following VirtualHosts for this: <VirtualHost *:80> ServerName ...
0
votes
1answer
16 views

How to selectively enable or disable SSL for some URLs in Tomcat 7

I am using SSL in Tomcat 7, create a keystore and configure server.xml, and also config in web.xml as below <security-constraint> <!-- SSL enforced --> ...
2
votes
4answers
8k views

Assign CA certificate to Fortigate https WAN interface

I have a Fortigate 80C that allows remote administration via https. I access the URL and all fine but the one thing that really bugs me is that is brings up "untrusted connection" in chrome with the ...
2
votes
1answer
26 views

W2012 R2 AD certificate Services sha algorithm

So shortly after configuring an offline root CA and online AD subordiante CA with SHA512 for future proofing. We discovered a thin client vender (teradici zero client with View 6) only supports SHA1 ...
0
votes
0answers
9 views

stuck on getting ssl to work on vps with centos 6 and plesk

I ordered an ssl certicate and installed it via plesk on the vps. the private key and certificate are in txt format which i pasted in the fields in plesk. I've 2 domains hosted on the vps on 1 ip, i ...
0
votes
1answer
24 views

Transparently proxy an HTTP request using HTTPS

I have been trying to figure out how to transparently forward proxy an HTTP request to a destination with the proxy transparently sending the request over HTTPS. To give an example for clarity, client ...
1
vote
1answer
2k views

Squid SSL bump with parent proxy

Does SSL bumping work with parent proxy? squid and pf are set up like this: squid.conf: http_port 3128 intercept https_port 3129 intercept ssl-bump generate-host-certificates=on ...
5
votes
3answers
436 views

SSL certificate invalid in Chrome

For the website scirra.com (click for SSL Labs Server Test Results) Google Chrome reports the following icon: It's an EV SSL, and it seems to work fine in Firefox and Internet Explorer, but ...
0
votes
1answer
958 views

CentOS Apache + Tomcat SSL using mod_jk

I have Apache + Tomcat (using mod_jk) working correctly on a CentOS 6.3 machine. I am trying to set up SSL with Apache. When I browse to the site I get the following output: Forbidden You don't ...
1
vote
1answer
46 views

In nginx error log: “SSL_BYTES_TO_CIPHER_LIST:inappropriate fallback”

We recently changed our nginx config to support TLSv1.2 as well as a number of more secure ciphers. Since the change, our nginx error logs have been filled with the following errors: 2015/01/28 ...
1
vote
2answers
1k views

LDAPS being redirected to 389

We're trying to perform an LDAPS bind to a server which blocks 389 with a firewall so all traffic must travel over 636. In our test lab we're connecting to a test ldap (located on the same server) ...
-1
votes
1answer
61 views

ssl address mismatch on purchased ssl cert [closed]

i've bought a "Protect 1 Website" ssl from godaddy http://www.godaddy.com/ssl/ssl-certificates.aspx , and requested and downloaded a cert for domain "example.com", but when i access dev.example.com, ...
0
votes
0answers
7 views

ACL at HAProxy shows NOSRV

I have 3 backends in HAProxy 1.5.10: "WEB", "API", and "SSL" for web and api. For SSL termination I'm using ACL with SNI. Here is my config: frontend ssl mode tcp bind 0.0.0.0:443 ssl crt ...
0
votes
0answers
20 views

Send apache ssl access log to syslog

I'm having an issue piping apache ssl access logs to my syslog server. I've added the following line to my apache config: CustomLog "|/usr/bin/nc -u <syslogserver> 514" "<134>%{%b %d ...
0
votes
0answers
37 views

IMAP Dovecot cannot connect [migrated]

I am trying to set up my own mail server (for 'fun'). I followed this tutorial to the bone. But I get this error message: imap-login: Disconnected (auth failed, 2 attempts in 9 secs): ...
1
vote
3answers
41 views

Does SSL need to be configured at the external load balancer if you are using one?

Using Elastic Load Balancer, it is easy enough to set up SSL at the external load balancer, and serve requests up as http to the applicaion. When running a single server, it is also possible to ...
2
votes
1answer
27 views

NginX + WordPress + SSL + non-www + W3TC vhost config file questions

I have the following questions about my server block(s) for a WordPress site running solely on https, with nginx and W3TC browser caching. Environment: Ubuntu - 14.04LTS nginx - 1.4.6 ...
-1
votes
0answers
18 views

Nginx webserver stop working after 5 minutes [on hold]

I have a digitalocean droplet running ubuntu 14.04 and nginx. Everything was working fine until yesterday when I decided to activate my ssl certificate from comodo. I had a hard time getting the ...
1
vote
0answers
26 views

HAProxy with SNI and different SSL Settings

I have HAProxy for my two sites, one of them public and one private. www.mysite.com private.mysite.com Atm, I'm using haproxy like this: frontend mysite_https bind *.443 ssl crt /etc/mycert.pem ...
0
votes
1answer
1k views

nginx unknown directive ssl_protocols

I've compiled NGINX 1.4.1 with ssl support and wanted to secure my configuation with these lines: ssl_prefer_server_ciphers on; ssl_protocols        SSLv3 TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers          ...
1
vote
0answers
17 views

jrun ssl peer not authenticated

Before I start, I should say that I've already posted this question at Code Ranch, and have not yet gotten an answer. I'll make sure both this site and Code Ranch receive the answer should I find ...
0
votes
2answers
1k views

Installing SSL certificate on JBoss

I have a server that runs JBoss. When I type bad URL to that server it gives me version like this: JBossWeb/2.0.1.GA - what version of JBoss that would be? A SSL certificate will be bought and ...
3
votes
3answers
3k views

How to fix RDP on windows server 2012?

Here is a snapshot of the RDP status. Looks good: When I go to connect from a remote machine I get an error: "This computer can't connect to the remote computer. Try connecting again. If the ...
1
vote
1answer
5k views

Handshake violation when trying to access one website

I have a TZ 190 Wireless Enhanced with SonicOS Enhanced 4.2.1.0-20e. Yesterday, people could access without any problems a bank website wich uses HTTPS. Today, it is imposible to access only that ...
0
votes
1answer
490 views

Opscenter 4.0.2 and Cassandra 2.0.4 with SSL and Auth : agent can't connect

I setup cassandra with inter-node SSL and client-to-server SSL and basic password auth. No problem using cqlsh or python to connect to cassandra with any certificate as certificate_validation is ...
3
votes
3answers
286 views

Setting up SSL on my server

I run a web server that hosts three different domains using named virtual hosts. What do I need to do to enable SSL connections (https) to these domains? EDIT: As Joel pointed out I forgot to state ...
0
votes
2answers
738 views

google recaptcha V2 on apache shared server: How to get it to work with SSL

I implemented google's reCAPTCHA V2 on non-https apache shared server and it worked 100%. I then changed the protocol to my shared server with SSL using the same script as the non-SSL script. The ...
0
votes
0answers
20 views

SSL certificate for sql-server on ec2

I have an ec2 node provisioned to host mssql server. I'm trying to request and install an ssl certificate for this node so I can securely connect to it but I can't get the certificate to appear in the ...
0
votes
2answers
24 views

vsftpd does not give a valid certificate using CA cert.

When setting up vsftpd we have problems with it not providing a trusted connection us a basic pem certificate container using just our private key and certificate. We created our pem file with the ...
4
votes
3answers
121 views

Displaying a remote SSL certificate details using CLI tools

In Chrome, clicking on the green HTTPS lock icon opens a window with the certificate details: When I tried the same with cURL, I got only some of the information: $ curl -vvI https://gnupg.org * ...
0
votes
1answer
2k views

nginx - 403 Forbidden

I've trouble to get aliases working correctly on nginx. When i try to access the aliases, /pma and /mba (see secure.example.com.conf), i get a 403 Forbidden but the base url works correctly. I read ...
0
votes
1answer
28 views

OpenSSL PositiveSSL certificate untrusted connection

I bought a SSL certificate and I cannot get it to function. I get a This Connection is Untrusted error in Firefox. I do believe it's due to my .crt file being incomplete/wrong all together. My .crt ...
0
votes
0answers
13 views

haproxy client certificate authentication signed by 'common' CA

I am setting up haproxy as an SSL terminator/load balancer in front of an API that we need to expose over the internet to a customer. The plan was to use mutual (2-way) SSL/HTTPS to verify that both ...
0
votes
3answers
107 views

SSL Site Sudden Performance Issues

I have a linux box running an ecommerce store. Everything is fine until the user goes to checkout. Once the user clicks checkout the system moves the user to the https service. Images and page load ...
0
votes
1answer
72 views

Domain changes required for SSL integration

Currently my site supports regular payment options (User is taken to Payment Gateway/PG website). Now I'm trying to implement "seamless" PG integration. I need SSL for this. I'm having a dedicated ...
2
votes
2answers
280 views

PCI Compliance for average e-commerce website in the cloud

I am creating an "average" e-commerce website (using drupal and ubercart if that matters). I've read about pci compliance in the past, and that's why I'm wondering how I can see what applies to my ...
5
votes
2answers
1k views

How to protect an SSL certificate (Apache/CentOS)

I currently use a server SSL certificate without a pass-phrase in order to allow Apache to start up unattended. There are signs from customers to require us to protect the SSL certificate more ...
-1
votes
2answers
47 views

Can one domain have 2 or more SSL certificates?

I have googled and found this post: http://security.stackexchange.com/questions/46988/is-it-technically-possible-to-configure-two-different-ssl-certificates-for-the-s If it actually is possible, then ...
28
votes
5answers
2k views

Is a Self Signed SSL Certificate a False Sense of Security?

Is a Self Signed SSL certificate a false sense of security? If you are being eavesdropped, the user will simply accept the certificate like he/she always does.
0
votes
1answer
869 views

NGINX SSL Connection Error

I've added an SSL certificate to my server. (Nginx running passenger & Rails). I created a CSR, uploaded to GoDaddy, downloaded the keys. Inside /srv/ssl I have www.mydomain.com.crt ...
3
votes
3answers
7k views

How do I limit SSL/TLS connections to at least 128-bit encryption?

When I'm ordering an SSL cert for my public web server, how can I be sure that the web server (IIS 6 in my case) will only allow SSL/TLS client connections supporting our corporate standard of at ...
3
votes
1answer
1k views

IIS7 Not sending Intermediate SSL Certificate

We have a GlobalSign Domain certificate for our domain. I've installed the certificate into IIS and added the GlobalSign Domain Intermediate certificate to the Intermediate certification authorities ...
1
vote
2answers
127 views

Changing to a new certificate authority for existing website

We have a website certificate issued that will expire soon. The current certificate issuer is charging us too much and we would like to change to a new company. If we get a new certificate from ...
0
votes
3answers
54 views

Redirect Naked Domain to SSL

I have a wildcard SSL certificate and I want to redirect all http requests to their equivalent https. My server is a Debian (wheezy) and I am running Apache 2.2.22 I have added the following at the ...
0
votes
1answer
1k views

Page can't be displayed with IIS and SSL

I have a single site hosted in IIS 8. I have two site bindings. One is for HTTP, the other is for HTTPS. HTTP is on port 80 with All Unassigned addresses, I left host name blank. HTTPS is on port 443 ...
0
votes
2answers
2k views

Problem with apache + ssl: length mismatch error and ocasional bad request

we migrated a server from slicehost to linode recently, we copied the config from one server to the other. Everything works perfectly except that we get: Occasional errors with "Bad Request", this ...