SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

learn more… | top users | synonyms

3
votes
0answers
19 views
+100

IIS 8 SSL Stops working Windows 2012 Core

Is there any known bug or cause for an IIS server to just stop serving SSL overnight? The certificate has not been changed for some time and is still valid. Same certificate works on other identically ...
3
votes
0answers
2k views

SSL verification error with git (on github) on Ubuntu 14.04

I'm trying to clone the atom repository that just went fully open-source and I've run into some trouble. Attempting to git clone the repository is producing an SSL error: wug@wugputer:/src/test$ git ...
3
votes
0answers
509 views

500 OOPS: SSL: cannot load RSA private key vsftpd

Im configuring vsfptd on debian 7.3, Im trying to use ssl. I generate de certficates using this command: openssl req -x509 -nodes -days 1925 -newkey rsa:2048 -keyout /etc/vsftpd/private/vsftpd2.key ...
3
votes
0answers
197 views

Intermediate SSL Certificates on Azure Websites

I have successfully configured an Extended-Validation Certificate on an Azure Website following this article: ...
3
votes
0answers
123 views

How do I clear cached SSL state data from schannel?

I'm trying to clear SSL state data for a normal TLS session (no client certs are involved) for Outlook when connecting to a SSL based CAS server. How do I clear the SSL state of SChannel? Does the ...
3
votes
0answers
978 views

OpenSSL SHA256 testing

I'm having an issue testing a hardened SSL configuration for pound. One of the requirements is for the inclusion of AES[128|256]-SHA256 ciphers, along with strict ordering of preference. I've ...
3
votes
0answers
462 views

IIS 6.0 SSL handshake error

Hi all I installed a trusted certificate in an IIS 6.0 server. I have the port 443 opened in the firewall and I verified the server is listening on that port. However when verifying using openssl I ...
3
votes
0answers
2k views

Apache/SSL: (70014)End of file found: SSL input filter read failed

Figured upgrading on a long weekend was a smart move... Now I'm stuck. The server is spitting out this error (loglevel info): "(70014)End of file found: SSL input filter read failed" when using the ...
2
votes
0answers
13 views

Apache reverse proxy location based access control not working

I'm running a small web server with Ubuntu 12.05.5 LTS and Apache 2.2.22 and ran into this problem recently: For an IIS server on a virtual machine I have the following reverse proxy config: ...
2
votes
0answers
249 views

I'm having issues with the SSL versions used by curl and by python ssl lib

TL;DR I'm trying to reach an URI which only takes SSLv3. If I try to access it with curl or Python requests (which uses the ssl module) it doesn't work (different errors). Some longer explanation ...
2
votes
0answers
51 views

Should load balancers ever use TLS session ID to direct traffic?

One of my vendors caused an outage today by using TLS SessionID (sent by the browser) as a way to determine which host to direct traffic to. Since SessionID can leak privacy details, and more ...
2
votes
0answers
82 views

replay decrypted ssl traffic with tcpreplay

I have an pcap format from some https traffic from one of my web-servers. So I can use the key from my webserver to decrypt the traffic in wireshark. The problem I'm now facing is that I can't get an ...
2
votes
0answers
354 views

Maven - resolving “java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors”

I am attempting to build/install this project on an Ubuntu 12.04 box: https://bitbucket.org/petermr/pdf2svg However: mvn clean install Fails to build due to getting errors like this: ...
2
votes
0answers
212 views

Internet Explorer SSL use causes segfault - Apache httpd SIGSEGV in apr_uri_parse

Recently I've had quite a large influx of the error below in the error_log. I've found out that it happens when someone browses my site using SSL https: and Internet Explorer, all other browsers are ...
2
votes
0answers
136 views

Accessing ActiveMQ's JMX via SSL

I'm trying to get SSL-enabled JMX access to ActiveMQ (5.8.0 or 5.9.0 running under java 1.6.0) but I'm not having any luck. I've dealt with SSL-enabled JMX access in the past, so I'm quite familiar ...
2
votes
0answers
112 views

How do I obtain the ssh public key from my VSphere ESXi 5.1 host hypervisor residing in vcenter with puppet-enterprise cloudprovisioner

I am using the learn puppet 3.1 vm and trying to connect to a host hypervisor. I followed the instructions to create a .fog file under root which includes a yaml hash, and I read that the yaml hash ...
2
votes
0answers
122 views

Forefront UAG with SSL/X509 auth for REST API

I'm not a network engeneer, but a software engeneer, so this theme is quite unfamiliar for me. We develop a solution, that consists of a server-side web application (with a rest api), working on java ...
2
votes
0answers
506 views

How to alias a ssl certificate common name?

I have a server, which has a self signed certificate, which I am trying to securely access. I've got the certificate by looking at the output from openssl s_client -connect <ip>, and copied it ...
2
votes
0answers
629 views

Redirect user on SSL authentication failure

I configured a VirtualHost with SSL enabled and SSL client authentication, all of that on apache2 2.2.8 (ubuntu server 8.04). All SSL certificates (CA, Server certificate, Client certificate, CRL) ...
2
votes
0answers
110 views

SSLv2 required on TLS-only site?

This problem has been driving me crazy for a very long time. We have three web servers, serving East, West and Central offices. We built the Central server first, imaged it, and copied the image to ...
2
votes
0answers
389 views

large javascript file not being served properly by nginx

I'm having trouble serving a large (376kb) javascript file via nginx over ssl with gzip enabled. The file is served without issue over plain old http. The file in question is ckeditor.js and is ...
2
votes
0answers
405 views

SSL connection alert hanshake failure

I'm having problem establishing the connection between the client and the Server .I'm using my own signed certificate on client and on server. I'm using the SSL ciphers SSLCipherSuite ...
2
votes
0answers
162 views

Debugging incorrect certificate with SNI for some clients

I have a number of domains with SSL certificates served by Haproxy (using Haproxy 1.5's support for SSL). For the most part the correct certificates are being served, but a particular user is ...
2
votes
0answers
2k views

The timeout specified has expired: SSL input filter read failed. - is this an error?

We have apache log level on debug as we are hunting a bug on our magento site ...
2
votes
0answers
467 views

FTP proxy with SSL support

I have a bunch of LXC containers with vsftpd daemon installed on each. I would like to forward/proxy traffic from dom0 server port 21 to particular containers based on ftp user name e.g. ...
2
votes
0answers
1k views

ProFTPd/FTPS issue: unable to accept TLS connection: received EOF that violates protocol

It took some time while I tried to find solution over the net. Nothing helped. The story: I have Ubuntu 10.10 (Amazon EC2 instance). ProFTPD Version 1.3.2e (latest via apt-get). I changed nothing on ...
2
votes
0answers
1k views

Enabling SSL for Remote Desktop

Ok so I'm trying to remove a number of my systems from our Nessus scan from having this medium vulnerability. http://www.nessus.org/plugins/index.php?view=single&id=18405 I set the following GPO ...
2
votes
0answers
1k views

Randomly getting Postfix SSL_accept error / Dovecot TLS handshaking Disconnected

I have this really weird problem since a couple of days/weeks: more and more people are reporting problems connecting to the mail servers (Dovecot IMAP and POP3 as well as Postfix SMTP) in SSL mode. ...
2
votes
0answers
231 views

How to add SSL for localhost in RAILS

I want to test my application which needs to work both with and without SSL. If it is possible to set up SSL for a local application (http://localhost:3000), please let me know some suggestions, my OS ...
2
votes
0answers
328 views

Dovecot TLS Handshake not working

I have set up my mailserver using http://workaround.org/ispmail and it worked until today, where I can not access the server using IMAP. The error I see in dovecot.log is 2012-02-09 16:37:40 ...
2
votes
0answers
2k views

Tomcat fails to find a key entry in keystore

I am installing a SSL cert in my Tomcat server, but it fails to find the key entry in my keystore file. If I don't specify keyAlias="mykey" it shows me the following error message: ...
2
votes
0answers
259 views

Apache 2.2.12, SSL and VirtualHost

I used to have multiple VirtualHost listening and same ip and port with SSL enabled. Of course only one certificate is used for every SSL connexion but this is OK for me. I have a configuration that ...
1
vote
0answers
18 views

IIS Site breaks after disabling SSLv3

I am trying to disable SSLv3 on a 2008 R2 web server that runs IIS 7.5 but as soon as I disable SSLv3 and reboot, the website is no longer reachable. I ran a packet capture with SSLv3 still enabled ...
1
vote
0answers
12 views

Disable SSL3 on tomcat4

I have a very old web application that uses tomcat4. B/c of the poodle vulnerability I need to disable SSL3 and disable a bunch of weak ciphers. My connector looks like this, but apparently ...
1
vote
0answers
5 views

Can OpenDirectory on OS X reasonably be configured to use an intermediate CA cert from an existing CA?

We're trying to set up OpenDirectory. It seems to want to create its own CA, and then an intermediate CA with a certificate signed by its own CA. I'd prefer to generate an intermediate CA certificate ...
1
vote
0answers
62 views

How to replace Zentyal CA certificates and key with an already existing CA

The context: we're using a CA which is deployed on all our client machines, and a lot of hosts and web servers. It seems that Zentyal CA module only allows to issue a new CA using the GUI, but not to ...
1
vote
0answers
27 views

Lighttpd to include IP address in error.log

I have lighttpd/1.4.31 (ssl) on Debian 7.6 and I would for the standard error.log to include the IP address of the host which caused the error. Is it possible? The accesslog.format directive allows ...
1
vote
0answers
49 views

Apache access log format does not record SSL_PROTOCOL for all connections

We're trying to track the ssl protocol used by clients to our site/web services, the connections could be by browser, or, for the web services all sorts of soap libraries etc. I've created a custom ...
1
vote
0answers
37 views

“invalid security certificate” (ssl_error_bad_cert_domain) after PFX uploaded to Azure

My SSL certificate (purchased on godaddy) on Azure stopped working all of a sudden. I am running a standard Azure website and I previously uploaded a .pfx file and bound my custom domain to it. ...
1
vote
0answers
35 views

Attach certificate to remote desktop connection - not gateway services

I have a Windows server that I want to attach a 3rd party signed certificate for remote desktop connections. This is not a remote desktop services server, i.e. it is just remote desktop ...
1
vote
0answers
88 views

Can I use tshark to write SSL-decrypted packets to a file?

I have a PCAP file containing SSL-encrypted HTTP traffic and the private key from the relevant web server. I'd like a PCAP file that contains the decrypted HTTP traffic to feed into a different tool. ...
1
vote
0answers
78 views

jsonrpc service nginx ssl configuration

I have a python jsonrpc service running in the server on port 8082. I want to reach it with php jsonRPCClient. (and have to be https) My nginx server looks like: server { listen 443; ...
1
vote
0answers
433 views

Apache SSL redirect loop

We are trying to redirect our site from http to https only. Everything we have tried in .htaccess has resulted in a redirect loop. If we manually type the "https://" in front of the url, our page ...
1
vote
0answers
337 views

Client SSL fails with GlusterFS 3.5

I'm running GlusterFS 3.5 from the official Ubuntu packages on Ubuntu 12.04 and when I enable client.ssl, mounting starts to fail. The error I'm getting is: [2014-06-13 10:33:52.690770] E ...
1
vote
0answers
41 views

Can I pass_proxy over https?

Is it possible to have something like this in my local nginx.conf? pass_proxy https://mybackend.com:443; If not, how do I make my local nginx request and return my remote backend API over SSL?
1
vote
0answers
252 views

SSL Returning Blank Page, No Catalina Errors

This is my second, maybe third, time configuring SSL with Tomcat. Earlier I had created a self signed, which worked, and now using my signed is proving fruitless. I am using Tomcat, operating from ...
1
vote
0answers
354 views

SNI error over SSL on some Android devices

I am getting an SNI error: Hostname X provided via SNI, but no hostname provided in HTTP request On some Android phones when making SSL requests to my domain. This is despite ensuring that the Host ...
1
vote
0answers
290 views

Configure custom SSL certificate for RDP on Windows Server 2012?

I have been trying to get an installation of Remote Desktop Services deployed using Server 2012. I have now run into a problem where I need to use a certificate other than the self-signed cert from ...
1
vote
0answers
388 views

ldapmodify TLS: certificate is not valid - error -8179:Peer's Certificate issuer is not recognized

In trying to connect to an MS active directory server over ssl, I am trying to run this: ldapmodify -vv -H 'ldaps://abc.def.com:636' -D 'cn=user,cn=Users,dc=abc,dc=def,dc=com' -f test.ldif -w ...
1
vote
0answers
126 views

OpenSSL always shows “unsupported” for all subjectAltName “otherName” UTF8 values

It seems like OpenSSL is broken when trying to read back subjectAltName/otherName/UTF8 values that were written by itself: The relevant openssl.cnf configuration (using an official but random OID): ...