1
vote
1answer
134 views

can't get tomcat to offer TLS_ECDHE_ECDSA_… ciphers

my tomcat (7.0.52) Connector is configured with a cipher list like ciphers="TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, ...
-1
votes
1answer
874 views

Ubuntu 14.04, OpenLDAP TLS problems

So i have set up an openldap server using this guide here. It worked fine. But as i want to use sssd i also need TLS to be working for ldap. So i looked into and followed the TLS part of the guide. ...
0
votes
0answers
407 views

Fixing TLS renegotiation vulnerability on Apache 2.2.3

On a RHEL 5.3 server, I have Apache version: Server version: Apache/2.2.3 Server built: Nov 12 2008 07:09:03 Server's Module Magic Number: 20051115:3 Server loaded: APR 1.2.7, APR-Util 1.2.7 ...
0
votes
1answer
2k views

linux ssmtp error Cannot open smtp.gmail.com:587

I can not route may emails vie gmail.com. I use ssmtp facility. My config files in /etc/ssmtp are root:yyyyy@gmail.com:smtp.gmail.com:587 maciek:yyyyy@gmail.com:smtp.gmail.com:587 and ssmtp.conf: ...
1
vote
2answers
244 views

openldap cacerts directory symbolic link to /etc/pki/tls/certs - Yes/No? Why?

Every single article/how-to/blog on openldap talks about putting the ldap cert for ldaps in the /etc/openldap/cacerts directory. I am wondering why not just put the cert(s) in /etc/pki/tls/certs and ...
2
votes
2answers
168 views

SLAPD Fails to Open TLS Certificate

I am trying to configure TLS for SLAPD, but it keeps failing with the error "TLS init def ctx failed". I was able to trace the error to the system call where the daemon tries to open the CA ...
4
votes
4answers
1k views

Server suddenly running out of entropy [solved, sort of]

Since a reboot yesterday, one of our virtual servers (Debian Lenny, virtualized with Xen) is constantly running out of entropy, leading to timeouts etc. when trying to connect over SSH / TLS-enabled ...
2
votes
2answers
576 views

Is there a way to completely disable outbound opportunistic TLS support in SendMail?

CentOS 5.x SendMail 8.14.4 An overzealous network security feature is causing TLS negotiations to fail when my Sendmail server tries to talk to external hosts. This is causing sendmail to constantly ...
1
vote
3answers
835 views

LDAP + TLS - different behaviour on two machines

machines: debian wheezy suse 11 commands: ldapsearch -ZZ -h ad.unsw.edu.au -x perl -we "use Net::LDAP; print Net::LDAP->new ('ad.unsw.edu.au')->start_tls(verify => 'require', capath ...
4
votes
1answer
1k views

Exim TLS and Secure SMTP

I'm in the process of converting an existing mail server to support encrypted SMTP for our clients, but I've run into this brick wall with very little useful log data to help me forward. Everything ...
-1
votes
2answers
99 views

Looking for a simple SMTP server that supports TLS and can run on Linux [duplicate]

Possible Duplicate: SMTP server for Linux with simple configuration I'm looking for a simple SMTP server that I can run without too much installation hastle and that which can also support ...
0
votes
2answers
454 views

How to send email from non-TLS enabled client through TLS-only Gmail account

I need to be able to send email from a client (an OKI document scanner) which is non-TLS capable. But my company's email service is provided by Gmail-Google Apps, which is configured to force TLS ...
2
votes
1answer
275 views

Resolve a many-SSL-to-one IP for clients browsers that doesn't support SNI

Whoa, acronyms :) So according to this question you can have multiple SSL subdomains on one IP address as long as your server supports TLS (which Apache 2.2x does). Another answer to that question ...
0
votes
1answer
322 views

How to generate new CSRs for TLS use in sendmail?

SendMail 8.13.8 | CentOS 5.x Hi Guys, I'm using ca-signed TLS certificates on my sendmail server and they are up for renewal soon. Our new CA doesn't like our old CSR so I need to generate a new ...
0
votes
2answers
274 views

SendMail TLS Certificate - Can it be shared for different hosts?

CentOS 5 | SendMail Can TLS certificates be shared between multiple sendmail MTAs? I'm using a CA-signed cert and would prefer to not purchase new certs for each additional sendmail host. -M
2
votes
1answer
2k views

How To Tell SendMail To Explicitly NOT Try TLS For A Domain

CentOS 5.x | Sendmail Hi Guys, I have sendmail setup to perform opportunistic TLS but would like to never use TLS when sending to a specific domain. Is there an entry I can add to /etc/mail/access ...
3
votes
1answer
2k views

Radius Certificate Based (eap) Authentication

We are currently putting in place a freeradius server that uses certificates to authenticate via a wireless connection. We have this working for 802.1x but Novell's client for Windows 7 breaks the ...
1
vote
1answer
2k views

How does pptpd (poptop) or pppd work with eap-tls and mppe-128?

To create a VPN I've installed pptpd on an Ubuntu domU (Debian domUs can also be created). MSCHAPv2 isn't a very strong authentication protocol so I'd like to use EAP-TLS. I've set up a FreeRADIUS ...