Transport Layer Security is a cryptographic protocol for encrypting and authenticating network communications, and replaces SSL. It is commonly used to secure Internet protocols such as HTTP.

learn more… | top users | synonyms

1
vote
1answer
23 views

OpenLDAP TLS CA configuration

I'm currently in the process of setting up two sychronized OpenLDAP servers, access through starttls/ldaps. On the client/slave, I had problems with the TLS connection. I'm using the directory-based ...
0
votes
0answers
9 views

vsftpd server stops working after flood of connections

I have a bizarre problem where vsftpd will suddenly stop accepting any connections. This happens when the server is flooded with 4 or more connections of the same user. Afterwards, any new ...
0
votes
1answer
20 views

How do I prioritize TLS 1.2 connections on Apache/IBM HTTP Server?

I have an IBM AIX machine running IBM HTTP Server version 8.5.5.0 which was recently configured to use TLS 1.2. Per corporate policy my server is supposed to use TLS 1.2, but for compatibility ...
0
votes
0answers
13 views

Apache2 on Ubuntu running SSL returns data after time-out reached

I am working with a server that I recently inherited from a departed developer. The server returns XML documents via a RESTful interface over an SSL port. For small documents, the data is returned ...
0
votes
0answers
25 views

How to encrypt emails sent from Windows Server 2012 SMTP IIS 6.0

I'm running an SMTP server through IIS 6.0 on my Windows 2012 Server, and would like to make delivery of emails to be encrypted. I have attached an SSL certificate to the server and set Require TLS ...
1
vote
1answer
34 views
+50

Secure Email Settings for Email Clients & for PHPMailer

I'm trying to work out how to make my outgoing/incoming email's as secure as I can possibly make them. First of all, my domain has Wildcard OV SSL Certificates, I have copies of the .csr, .crt and ...
0
votes
0answers
25 views

TLSv1.2 enabled RDP client for Redhat/CentOS?

We have just hardened our windows servers to use TLSv1.2 for RDP. I was using freerdp and rdesktop from linux as RDP clients but both seem to not work with TLSv1.2. Any ideas regarding what Linux ...
0
votes
1answer
25 views

Using TLS in email sending

I've configured my server (Exim on Debian Linux) to send emails (with SMTP) only to email servers which accept TLS. I did this so that nobody can steal a password reminder email. Right decision? Do ...
0
votes
0answers
29 views

SSLv3 seems to be not disabled even after tomcat 6 server xml changes TLSv1

Even after setting in server.xml as sslProtocol="TLSv1" when we do vulnerability check, the below are the details of output.. # /usr/sfw/bin/ > openssl s_client -connect ipaddress:portNo -ssl3 ...
-2
votes
0answers
29 views

How do I update a verisign SSL certificate for a website running on Apache for windows server?

The site has an SSL cert signed by verisign which expires in four days. Webserver is a windows server 2008 running Apache 2.2. There's an Apache2.2/conf/ssl/verisign folder that has all the certs ...
0
votes
1answer
15 views

How do I configure a whitelist of SSL/TLS protocols in uWSGI?

I can specify a list of ciphers using https = =0,x.crt,x.key,<ciphers>. Documentation for that is here: http://uwsgi-docs.readthedocs.org/en/latest/HTTPS.html#setting-ssl-tls-ciphers But is ...
0
votes
1answer
24 views

Is it possible to force TLS 1.2 on an IIS Site

I have an IIS site where I want to force TLS 1.2. I don't want client using TLS 1 to be able to connect to the site. I want to do this at the site level as there are other sites that should work ...
0
votes
0answers
11 views

certutil and pk12util fail to import distinct certificate/key to Mozilla NSS database

I am about to build LDAP access via TLS on a Centos 6.7 system. I created a CA key (CA.key) and certificate (CA.crt) in /etc/openldap/cacerts. Likewise I created server.key/server.csr and created a ...
3
votes
0answers
47 views

Schannel Error - Random

I'm currently experiencing an issue on a Windows Server 2012 R2. In the event log is an Error for the Source "Schannel". The error description is: "A fatal alert was generated and sent to the ...
0
votes
2answers
93 views

SSL config on Apache

I have an Apache/2.4.18 server with OpenSSL/1.0.1s. I used the Mozilla SSL Configuration Generator to generate the SSL config: SSLProtocol all -SSLv3 SSLCipherSuite ...
1
vote
1answer
29 views

Outgoing emails not being encrypted

I am using postfix to send email. I have mysql set up to manage domains, accounts, and aliases. I have 3 domains set up. One domain is the primary domain and when sending emails to gmail accounts ...
0
votes
1answer
11 views

How does Server remember the cipher suite negotiated in handhake in TLS?

I couldn't find a satisfactory answer to this question anywhere. Hoping to get some respite here! Client and Server engages in handshake, decides upon a cipher suite to use say X. Now, next time ...
1
vote
1answer
30 views

Stunnel “wrong version number” error with TLS-PSK

I've got Stunnel running on a Raspberry Pi which is acting as a TLS wrapper for an apache2 server. I've configured it to use TLS-PSK (correctly, I think), but the logs show the following when I try to ...
2
votes
1answer
43 views

HTTPS not working with two intermediate certificates

Iʼm trying to create my own certificate authority using the XCA software. I have successfully created the root CA (Fisir Technologies CA) and intermediate CA (Fisir Technologies Intermediate CA X1). ...
0
votes
1answer
29 views

How to test Outgoing mail from exim for proper tls configuration

Been using Exim a long time. Never setup TLS before however. I think I have it configured, but need to test that it can SEND OUTBOUND only email using TLS to a mail server. The server does not ...
0
votes
0answers
29 views

Dell iDRAC Lifecycle Controller v2.21 - Support TLS 1.2?

Does Dell iDRAC Lifecycle Controller v2.21 support TLS 1.2? You should be able to (supposing default iDRAC and browser settings), in just a moment, get the answer by pointing your browser to the web ...
3
votes
1answer
32 views

Making a trusted TLS connection from Postfix client

I'd like to relay outgoing email from my MTA through a 3rd party server (outbound.mailhop.org) for final delivery. I'm wondering how to make the secure connection between the machines 'trusted'. ...
0
votes
0answers
15 views

Postfix mail always in spam [duplicate]

I've installed and configured postfix trying to find the best way on the web. This is postfix main.cf: smtpd_tls_security_level = may smtpd_tls_received_header = yes smtpd_tls_session_cache_timeout ...
1
vote
0answers
49 views

Checking HTTPS setup on Apache/Nginx before using

You have just got a new HTTPS (SSL/TLS) Certificate, and what you hope is the correct Intermediate Certificates. This is setup in Apache with: SSLCertificateKeyFile /etc/ssl/www.example.com.key ...
1
vote
1answer
20 views

blue zone ftp: change protocol from SSLv3 to TLS

If one is changing the ftp protocol from SSLv3 to TLS, are there changes to the command line for individual ftp transfers? Or is it done using certificates only, and if so, are there any known ...
1
vote
0answers
11 views

Identifying UserAgent strings that don't support TLSv1.1

I've created a tally from IIS logs of the last 18 months by User Agent string and created some Excel formulas to extract # of visits from XP/Vista machines using Internet Explorer. Could someone ...
1
vote
0answers
55 views

Having issues with SSLv3 handshake failed

I use positiveSSL from comodo. I have two servers Simple node.js server Darwin Calendar Server (caldavd) Both servers are running on same physical machine I installed certificates on server ...
2
votes
0answers
62 views

gmail this message was not encrypted [closed]

I just moved my site to another hosting provider. I use SSL/TLS for connection security and port 995. It sends my messages but the problem is that gmail shows This message was not encrypted red flag. ...
2
votes
2answers
55 views

Gracefully Killing Off SSL 2&3

In the light of POODLE we have an urgent requirement to turn off SSL2/3 and TLS 1.0 on our public-facing webservers. However we're a public sector body and around 5-10% of visits to our sites are made ...
0
votes
0answers
28 views

Trust a Self-Signed SSL Cert (RHEL) for LDAP over TLS

My Setup Mac OS X Server (El Capitan) as the OpenDirectory Server RHEL 6.5 connected via LDAP for authentication I have set /etc/sysconfig/authconfig on the RHEL server to "FORCELEGACY=yes" just ...
0
votes
1answer
38 views

Postfix error 5.7.0 : Must issue a STARTTLS command first

I have a problem on sending mail to my domain from an external address (I suspect more particularly the Exchange servers). The error is: myaddress : mail.mydomain.com #<mail.mydomain.com #5.7.0 ...
0
votes
2answers
35 views

rsyslog TLS on AIX

I am trying to forward logs with rsyslog (8.4.2) on AIX 7.1 and I need to encrypt with TLS. However it seems I need rsyslog-gnutls package. I can't seem to find this package anywhere for AIX. Best I ...
1
vote
0answers
46 views

Configuring OpenLDAP over TLS for RHEL/CentOS 6.5

i've been banging my head against the wall with something that seems to be a simple concept. I have two RHEL 6.5 servers. One will be acting as the OpenLDAP server, and one will be a client ...
1
vote
1answer
69 views

What SSLCipherSuite should I use to remove these Suites?

My current commands: SSLProtocol -ALL -SSLv2 -SSLv3 -TLSv1 +TLSv1.1 +TLSv1.2 SSLHonorCipherOrder On SSLCipherSuite ...
0
votes
1answer
72 views

Nginx TLS Performance Optimization

I switched a busy site to TLS-everywhere and HTTP/2 last week. Performance hasn't improved as much as hoped. In fact, depending on how you measure it, you can argue it has degraded. There is plenty ...
-3
votes
1answer
46 views

I get other website's tls certificate when visiting my website [closed]

i have a weird issue while visiting my website using https... I can't track how often this happens, but sometimes T get a TLS certificate of another website.... and the browser warns me that the ...
0
votes
1answer
34 views

Configuring postfix to work with TLS (mediawiki)

I have a couple of questions regarding postfix config. First of all I need TLS as of the pear smtp plugin mediawiki uses, forces TLS authentication. Will it work on 25? Or what's the advised port? ...
0
votes
0answers
32 views

using keystore in nginx configuration

Im new to using NGINX and keystore. Kindly forgive my ignorance. I'm working with an API that posts data to my server. The API requires mutual authentication to be done. So we I have a signed ...
3
votes
0answers
54 views

Nginx - SSL forward secrecy and iOS9 support

I'm trying to bring a couple of Linux web servers into line with the current recommendations for SSL - in particular for allowing iOS9 to connect. One server is CentOS 7, the other CentOS 6.4. I have ...
0
votes
1answer
106 views

NGINX : How to configure mutual authentication for TCP Upstream?

The particular feature I am interested about about SSL termination for TCP Upstream. I am evaluating both NGINX Open Source and NGINX Plus. We have an application which accepts messages (TCP) over ...
1
vote
1answer
448 views

proftpd tls internal connection works, external connection fails

I am trying to secure my proftpd server but I cannot see what I do wrong. My tls.conf <IfModule mod_tls.c> TLSEngine on TLSLog ...
5
votes
1answer
108 views

Postfix “Trusted TLS connection established” but “Server certificate not verified”

I´m using a Postfix TLS Policy to enforce TLS for outgoing email. Unfortunately in some cases the certificate verification fails and I don´t know why. For instance, this is an excerpt of my TLS ...
0
votes
0answers
15 views

Configure Postfix to relay mail to another server ONLY if TLS fails for the original destination?

Currently, Postfix is set up to send encrypted email using TLS, but not all destinations support TLS encryption. I assume it's possible to configure Postfix so that it securely relays the mail to ...
0
votes
2answers
179 views

Postfix as SMTP server for Gmail. (“Send mail as” google option)

I have a vps on ovh.com runing debian 7. I want to set up my gmail account to send, and recieve mail on (for example) myname@mydomain.com address. I searched google for hours and couldn't find a ...
1
vote
1answer
93 views

client SSL certificate verify error: (27:certificate not trusted)

I'm having some difficulty with nginx's client authentication while using an intermediate CA (self-created). Although the same certificate bundle (intermediate + root certificates in a single .pem ...
2
votes
1answer
80 views

Stunnel TLS authentication with multiple Authorities

I am trying to secure a rethinkdb cluster behind stunnel. The service needs to support multiple Certificate Authorities (CA). Currently I concat the accepted CAs into one file (/certs/ca.pem) but it ...
0
votes
1answer
37 views

haproxy, TLS termination, wildcard cert, additional “www” prefix

I have a working haproxy setup that is doing TLS termination for multiple tenant domains. Today I added a wildcard cert (call it *.foo.com) to my cert pool. haproxy is properly picking this cert ...
0
votes
0answers
233 views

Utilizing TLS 1.2 on CentOS 5.11 for use with Paypal IPN

Our current web stack is installed on a CentOS 5.11 server with Plesk. We are using PHP 5.4, cURL 7.47.1, and openSSL 0.9.8e-fips-rhel5 01 Jul 2008. I am trying to run Paypal IPNs using code based off ...
0
votes
3answers
89 views

How to trust a self signed certificate with different issuer?

I have a certificate and private key files which are created by my colleague. There are placed in Apache /etc/apache/ssl directory and all the configurations set properly. I opened the site with ...
1
vote
0answers
76 views

Why is a TLS handshake taking *forever* (20 seconds) on a VPS?

I have a server that generally works fine, but gets stuck for 20 seconds when trying to connect with SSL (either SSH or HTTPS display the same pattern.) I tried various connections without SSL, such ...