Transport Layer Security is a cryptographic protocol for encrypting and authenticating network communications, and replaces SSL. It is commonly used to secure Internet protocols such as HTTP.

learn more… | top users | synonyms

0
votes
1answer
13 views

Gmail marking self-signed certs as unencrypted

Just a quick question/answer pair to share what I've learned this morning. Gmail marks self-signed certs for TLS as unencrypted in their interface now. This is obviously wrong. How has anyone else ...
2
votes
1answer
22 views

How to properly refuse ssl connections to subdomains that don't have a certificate

I'm currently setting up a (semi-serious) server with nginx for the first time. I have a couple of domains and subdomains and want to use SSL as much as possible to keep the traffic to and from my ...
-3
votes
1answer
23 views

How to Check whether a server provides Web-mail server

In wireshark, i observed lot of serverNames(Ex:www.gmail.com,www.hotmail.com) in Client Hello packets of TLS encryption. These are some popular webmail services. Suppose now i see a name ...
0
votes
0answers
14 views

How To Log TLS Mutual Authentication Details?

Is there a way to log the low-level details of the TLS mutual authentication flow (most importantly - the challenge that is sent to the client and the signed response). Solution for any tool is ...
0
votes
0answers
33 views

Can NGINX inspect the TLS request to look for SNI like HAProxy (etc) does?

It seems that, when configuring HAProxy for hostname routing on HTTPS connections, it is crucial to include a tcp-request inspect-delay directive to "give HAProxy a chance to look into the ...
2
votes
0answers
57 views
+50

Audit RDP security layer used for each logon

I'm looking for a way to monitor the security layer used when a user log on a windows 2012 R2 server with RDP (SSL or RDP, encryption level). I haven't found anything useful in "Advanced Audit Policy ...
0
votes
2answers
40 views

Two same https websites on two different IP's

Can I have the same https website (for example https://www.example.com/) hosted on two different IPs?
4
votes
1answer
50 views

Samba TLS Setup

I'm reading this Samba Manpage and according to this, you can setup TLS. I've got 2 questions. On the Server-side, TLS options requires the path of the certificate and keys? How would that work on ...
0
votes
1answer
69 views

How to actually disable SSL3 on a ubuntu 14.04 LTS

I am running a server which has tomcat7 and apache2 on it. I issue the following command via another remote host: openssl s_client -connect my_site:443 -ssl3 This returns: CONNECTED(00000003) ...
0
votes
1answer
17 views

Generate a certificate signing request based on an existing certificate with x509v3 extensions

With openssl I am trying to generate a CSR using an existing cert that contains X509v3 extensions, in particular SAN. I am able to create the new CSR by running openssl x509 -x509toreq -in ...
1
vote
0answers
32 views

What's causing the SSL Protocol Error?

My site: https://www.notfriendly.xyz/ (disabled CloudFlare) (See CloudFlare enabled at https://host.notfriendly.xyz) is failing to connect claiming a protocol error after enabling CloudFlare. Could ...
-2
votes
1answer
47 views

Configuring OCSP stapling in NGINX

Should I concatenate all certificates(server + intermediates + root) or just(server + intermediates) for ssl_trusted_certificate directive in NGINX.
0
votes
0answers
61 views

TLS 1.2 client hello triggers TCP Reset from 2012 R2

Struggling with a PKI implementation in my lab (ADCS 2012 R2) and cannot for the life of me figure out where I have gone wrong. Got all the way to the point of being able to generate SSL/TLS certs ...
1
vote
0answers
33 views

Https: not working but :443/ work?

I don't understand (on debian) why I can access to my website using http://www.myserver.com:443/ but not directly with https://... I'm using LetsEncrypt, all my cert' are generates and works. Here my ...
1
vote
1answer
32 views

OpenLDAP TLS CA configuration

I'm currently in the process of setting up two sychronized OpenLDAP servers, access through starttls/ldaps. On the client/slave, I had problems with the TLS connection. I'm using the directory-based ...
0
votes
0answers
19 views

vsftpd server stops working after flood of connections

I have a bizarre problem where vsftpd will suddenly stop accepting any connections. This happens when the server is flooded with 4 or more connections of the same user. Afterwards, any new ...
2
votes
1answer
45 views

How do I prioritize TLS 1.2 connections on Apache/IBM HTTP Server?

I have an IBM AIX machine running IBM HTTP Server version 8.5.5.0 which was recently configured to use TLS 1.2. Per corporate policy my server is supposed to use TLS 1.2, but for compatibility ...
0
votes
0answers
18 views

Apache2 on Ubuntu running SSL returns data after time-out reached

I am working with a server that I recently inherited from a departed developer. The server returns XML documents via a RESTful interface over an SSL port. For small documents, the data is returned ...
0
votes
0answers
33 views

How to encrypt emails sent from Windows Server 2012 SMTP IIS 6.0

I'm running an SMTP server through IIS 6.0 on my Windows 2012 Server, and would like to make delivery of emails to be encrypted. I have attached an SSL certificate to the server and set Require TLS ...
3
votes
1answer
77 views

Secure Email Settings for Email Clients & for PHPMailer

I'm trying to work out how to make my outgoing/incoming email's as secure as I can possibly make them. First of all, my domain has Wildcard OV SSL Certificates, I have copies of the .csr, .crt and ...
0
votes
0answers
28 views

TLSv1.2 enabled RDP client for Redhat/CentOS?

We have just hardened our windows servers to use TLSv1.2 for RDP. I was using freerdp and rdesktop from linux as RDP clients but both seem to not work with TLSv1.2. Any ideas regarding what Linux ...
0
votes
1answer
80 views

Using TLS in email sending

I've configured my server (Exim on Debian Linux) to send emails (with SMTP) only to email servers which accept TLS. I did this so that nobody can steal a password reminder email. Right decision? Do ...
0
votes
0answers
36 views

SSLv3 seems to be not disabled even after tomcat 6 server xml changes TLSv1

Even after setting in server.xml as sslProtocol="TLSv1" when we do vulnerability check, the below are the details of output.. # /usr/sfw/bin/ > openssl s_client -connect ipaddress:portNo -ssl3 ...
0
votes
1answer
21 views

How do I configure a whitelist of SSL/TLS protocols in uWSGI?

I can specify a list of ciphers using https = =0,x.crt,x.key,<ciphers>. Documentation for that is here: http://uwsgi-docs.readthedocs.org/en/latest/HTTPS.html#setting-ssl-tls-ciphers But is ...
0
votes
1answer
35 views

Is it possible to force TLS 1.2 on an IIS Site

I have an IIS site where I want to force TLS 1.2. I don't want client using TLS 1 to be able to connect to the site. I want to do this at the site level as there are other sites that should work ...
0
votes
0answers
24 views

certutil and pk12util fail to import distinct certificate/key to Mozilla NSS database

I am about to build LDAP access via TLS on a Centos 6.7 system. I created a CA key (CA.key) and certificate (CA.crt) in /etc/openldap/cacerts. Likewise I created server.key/server.csr and created a ...
3
votes
0answers
70 views

Schannel Error - Random

I'm currently experiencing an issue on a Windows Server 2012 R2. In the event log is an Error for the Source "Schannel". The error description is: "A fatal alert was generated and sent to the ...
0
votes
2answers
139 views

SSL config on Apache

I have an Apache/2.4.18 server with OpenSSL/1.0.1s. I used the Mozilla SSL Configuration Generator to generate the SSL config: SSLProtocol all -SSLv3 SSLCipherSuite ...
1
vote
1answer
30 views

Outgoing emails not being encrypted

I am using postfix to send email. I have mysql set up to manage domains, accounts, and aliases. I have 3 domains set up. One domain is the primary domain and when sending emails to gmail accounts ...
0
votes
1answer
42 views

How does Server remember the cipher suite negotiated in handhake in TLS?

I couldn't find a satisfactory answer to this question anywhere. Hoping to get some respite here! Client and Server engages in handshake, decides upon a cipher suite to use say X. Now, next time ...
1
vote
1answer
42 views

Stunnel “wrong version number” error with TLS-PSK

I've got Stunnel running on a Raspberry Pi which is acting as a TLS wrapper for an apache2 server. I've configured it to use TLS-PSK (correctly, I think), but the logs show the following when I try to ...
2
votes
1answer
47 views

HTTPS not working with two intermediate certificates

Iʼm trying to create my own certificate authority using the XCA software. I have successfully created the root CA (Fisir Technologies CA) and intermediate CA (Fisir Technologies Intermediate CA X1). ...
0
votes
1answer
42 views

How to test Outgoing mail from exim for proper tls configuration

Been using Exim a long time. Never setup TLS before however. I think I have it configured, but need to test that it can SEND OUTBOUND only email using TLS to a mail server. The server does not ...
0
votes
0answers
39 views

Dell iDRAC Lifecycle Controller v2.21 - Support TLS 1.2?

Does Dell iDRAC Lifecycle Controller v2.21 support TLS 1.2? You should be able to (supposing default iDRAC and browser settings), in just a moment, get the answer by pointing your browser to the web ...
3
votes
1answer
35 views

Making a trusted TLS connection from Postfix client

I'd like to relay outgoing email from my MTA through a 3rd party server (outbound.mailhop.org) for final delivery. I'm wondering how to make the secure connection between the machines 'trusted'. ...
0
votes
0answers
15 views

Postfix mail always in spam [duplicate]

I've installed and configured postfix trying to find the best way on the web. This is postfix main.cf: smtpd_tls_security_level = may smtpd_tls_received_header = yes smtpd_tls_session_cache_timeout ...
1
vote
0answers
50 views

Checking HTTPS setup on Apache/Nginx before using

You have just got a new HTTPS (SSL/TLS) Certificate, and what you hope is the correct Intermediate Certificates. This is setup in Apache with: SSLCertificateKeyFile /etc/ssl/www.example.com.key ...
1
vote
1answer
20 views

blue zone ftp: change protocol from SSLv3 to TLS

If one is changing the ftp protocol from SSLv3 to TLS, are there changes to the command line for individual ftp transfers? Or is it done using certificates only, and if so, are there any known ...
1
vote
0answers
12 views

Identifying UserAgent strings that don't support TLSv1.1

I've created a tally from IIS logs of the last 18 months by User Agent string and created some Excel formulas to extract # of visits from XP/Vista machines using Internet Explorer. Could someone ...
1
vote
0answers
61 views

Having issues with SSLv3 handshake failed

I use positiveSSL from comodo. I have two servers Simple node.js server Darwin Calendar Server (caldavd) Both servers are running on same physical machine I installed certificates on server ...
2
votes
0answers
72 views

gmail this message was not encrypted [closed]

I just moved my site to another hosting provider. I use SSL/TLS for connection security and port 995. It sends my messages but the problem is that gmail shows This message was not encrypted red flag. ...
2
votes
2answers
62 views

Gracefully Killing Off SSL 2&3

In the light of POODLE we have an urgent requirement to turn off SSL2/3 and TLS 1.0 on our public-facing webservers. However we're a public sector body and around 5-10% of visits to our sites are made ...
0
votes
0answers
33 views

Trust a Self-Signed SSL Cert (RHEL) for LDAP over TLS

My Setup Mac OS X Server (El Capitan) as the OpenDirectory Server RHEL 6.5 connected via LDAP for authentication I have set /etc/sysconfig/authconfig on the RHEL server to "FORCELEGACY=yes" just ...
0
votes
1answer
51 views

Postfix error 5.7.0 : Must issue a STARTTLS command first

I have a problem on sending mail to my domain from an external address (I suspect more particularly the Exchange servers). The error is: myaddress : mail.mydomain.com #<mail.mydomain.com #5.7.0 ...
0
votes
2answers
44 views

rsyslog TLS on AIX

I am trying to forward logs with rsyslog (8.4.2) on AIX 7.1 and I need to encrypt with TLS. However it seems I need rsyslog-gnutls package. I can't seem to find this package anywhere for AIX. Best I ...
1
vote
0answers
54 views

Configuring OpenLDAP over TLS for RHEL/CentOS 6.5

i've been banging my head against the wall with something that seems to be a simple concept. I have two RHEL 6.5 servers. One will be acting as the OpenLDAP server, and one will be a client ...
1
vote
1answer
85 views

What SSLCipherSuite should I use to remove these Suites?

My current commands: SSLProtocol -ALL -SSLv2 -SSLv3 -TLSv1 +TLSv1.1 +TLSv1.2 SSLHonorCipherOrder On SSLCipherSuite ...
0
votes
1answer
78 views

Nginx TLS Performance Optimization

I switched a busy site to TLS-everywhere and HTTP/2 last week. Performance hasn't improved as much as hoped. In fact, depending on how you measure it, you can argue it has degraded. There is plenty ...
-3
votes
1answer
48 views

I get other website's tls certificate when visiting my website [closed]

i have a weird issue while visiting my website using https... I can't track how often this happens, but sometimes T get a TLS certificate of another website.... and the browser warns me that the ...
0
votes
1answer
41 views

Configuring postfix to work with TLS (mediawiki)

I have a couple of questions regarding postfix config. First of all I need TLS as of the pear smtp plugin mediawiki uses, forces TLS authentication. Will it work on 25? Or what's the advised port? ...