Transport Layer Security is a cryptographic protocol for encrypting and authenticating network communications, and replaces SSL. It is commonly used to secure Internet protocols such as HTTP.

learn more… | top users | synonyms

-1
votes
3answers
616 views

Does SSL encrypt the IP [closed]

I am building a personal server. I want to be able to access this server from anywhere, and I don't want this server to get blocked. It is my understanding that HTTPS encrypts my traffic, but I also ...
11
votes
3answers
9k views

Fixing BEAST vulnerability on Apache 2.0 running on RHEL 4

I have a web server running Apache 2.0 on RHEL4. This server recently failed a PCI scan. Reason: SSLv3.0/TLSv1.0 Protocol Weak CBC Mode Vulnerability Solution: This attack was identified in 2004 and ...
0
votes
2answers
327 views

What's the difference between Postfix SMTP server and client in regards to TLS Support?

I need to implement TLS tunneling in my Postfix so that when needed it can use TLS certification (when trying to send mails to the domain xxxx.xx, their servers will ask mine to establish a TLS ...
4
votes
4answers
1k views

Server suddenly running out of entropy [solved, sort of]

Since a reboot yesterday, one of our virtual servers (Debian Lenny, virtualized with Xen) is constantly running out of entropy, leading to timeouts etc. when trying to connect over SSH / TLS-enabled ...
2
votes
1answer
459 views

Opportunistic TLS for incoming mail with masked SMTP banner

I have a mailserver with opportunistic TLS enabled (Postfix smtpd_tls_security_level = may), however the SMTP banner is being masked by SMTP fixup on our FWSM. Before I disable this masking, is the ...
1
vote
2answers
7k views

Postfix Send Error: Must Issue STARTTLS command

Running Ubuntu 12.04 and trying to configure postfix to relay send and receive through GMAIL. Am running into connection issues particularly with TLS. Have tried a bunch of troubleshooting solutions ...
4
votes
1answer
468 views

Apache won't upgrade connection to TLS

I have written a IPP server in PHP running under Apache. With the standard IPP clients it works just fine. But when I try to print from an iOS device the connections breaks when the client tries to ...
3
votes
1answer
1k views

How to make TLS the preferred secure connection in IIS 7

I have a mvc3 website that is hosted on a Server 2008 r2 server and I have a security certificate installed and all seems to be working ok. However if I connect to the site with Google Chrome, and ...
7
votes
4answers
8k views

Disable SMTP AUTH on Port 25

Due to PCI-DSS, we are required to disable plaintext authentication. We've achieved this by encapsulating communications between our mail server and clients with TLS on port 465. The problem lies in ...
1
vote
1answer
204 views

TLS with GNU Mailutils 0.6 IMAP4d

I have been fighting with the ancient GNU Mailutils 0.6 for quite a while now. I am supposed to set up the IMAP4d service from this version for an IT security exercise. I may not update the program, ...
4
votes
1answer
710 views

Securing MONGO with TLS (and mutual TLS)

Following instructions outlined in MongoDB SSL encryption and Spring's Driver, I got 2.1.0 and after building it, it says it doesn't recognize sslOnNormalPorts, sslPEMKeyFile or sslPEMKeyPassword. ...
2
votes
1answer
6k views

SASL PLAIN authentication failed: another step is needed in authentication

I have one host (rhea) where I have installed a postfix to relay the emails from my home server (tronics24), which is on a DSL connection. I have generated self-signed certificates: (on rhea) touch ...
0
votes
1answer
213 views

Configuring postfix to use TLS for a particular server?

Running kubuntu 10.04 on my host, let's call it alpha. I've got postfix as my system MTA. I've got crons running on alpha that need to send email to a remote host, let's call it mailhost. I cannot ...
1
vote
1answer
493 views

Using Microsoft CA to create TLS key/cert for Postfix

I'm trying to configure a postfix mailserver to use TLS encryption for SMTP (and IMAP with dovecot, but I haven't gotten to that point yet). It's running on a Fedora 14 machine and I'm using webmin to ...
0
votes
1answer
892 views

Can't send mail from Windows Phone (Postfix server)

Some background: I have a Dovecot/Postfix setup to handle email for a few domains. We have imap and smtp setup on various devices (Macs, iPhones, PCs, etc) and it works no problem. I've recently ...
0
votes
1answer
105 views

sasl and tls with dns load balancing

I am using DNS load balancing in my centOs 5 server.The mail sent to the load balancer server are balanced by sending them to 4 more servers who then pass the mails to their destinations in the ...
0
votes
1answer
829 views

obtaining nimbuzz server certificate for nmdecrypt expert in NetMon

I'm using Network Monitor 3.4 with the nmdecrypt expert. I'm opening a nimbuzz conversation node in the conversation window and i click Expert-> nmDecrpt -> run Expert that shows up a window where i ...
0
votes
1answer
169 views

sasl and tls postfix

Can anyone suggest me a proper tutorial to configure postfix SASL and tls in my centOs 5 server. I need this to authenticate clients on a different network to send mail from my mail server and prevent ...
2
votes
1answer
553 views

Node.js with SSL/TLS protocol v1.2

I would like to use TLS 1.2 on my node.js server. I'm currently using openssl 1.0.0e. If I upgrade to openssl 1.0.1, do I need to rebuild node.js to upgrade to TLS 1.2? Are there configuration or ...
3
votes
2answers
199 views

Security of a self-signed certificate

If I verify the fingerprint of a self-signed SSL certificate on the client, can a man-in-the-middle attack still occur?
2
votes
2answers
3k views

Postfix: Allow unauthenticated incoming mail, but only authenticated outgoing mail?

I'm new to the world of mail server's and have been working on setting up my own via Postfix on Ubuntu 11.10. So far, I have SASL authentication working over TLS so that's good; I'm worrying about ...
2
votes
1answer
1k views

Connect to a Windows Server 2008R2 using php, ldap, tls fails if server has NPS service

Servers: DALCON2 (Windows 2008R2, DC, NPS) DALCON3 (Windows 2008R2, DC) DALCON-WWW (Ubuntu server) Goal: From DALCON-WWW, using adLDAP with TLS to connect to a domain controller LDAP service If ...
5
votes
2answers
2k views

SSL/TLS Cipher Priority

I am working on trying to make sense of what is required for both PCI DSS compliance as well as FIPS compliance in relation to SSL/TLS cipher suites. I have been reading the guide here and here. ...
0
votes
1answer
822 views

Apache mod_ssl TLS channel dying in 5 seconds - how do I extend that timeout?

I'm an IIS admin. I've done the best I can with mod_ssl documentation, google, etc, and can't find anyone else who's even experienced my problem, much less found a solution. That, of course, makes me ...
2
votes
1answer
2k views

After reading lots of articles on sendmail relay tls port 587 gmail, still having problems

Environment is Amazon EC2, running Amazon Linux (Centos-like) with sendmail 8.14.4 and Cyrus sasl 2.1.23. The machine has an elastic IP address that is the target of a domain name, and reverse DNS is ...
2
votes
0answers
262 views

Forcing IIS virtual smtp server to verify outgoing TLS certificate

I am in a situation where a web application is using the IIS virtual SMTP server to send out email. The IIS virtual SMTP server is then configured to send all mail out through a smarthost, over TLS ...
2
votes
0answers
354 views

Dovecot TLS Handshake not working

I have set up my mailserver using http://workaround.org/ispmail and it worked until today, where I can not access the server using IMAP. The error I see in dovecot.log is 2012-02-09 16:37:40 ...
1
vote
1answer
3k views

ProFTPD - Failed to retrieve directory listing while using TLS

I have problem with my ProFTPD server. When I try to connect to the server using TLS then I get timeout after MLSD command. It only happens whenI use TLS - without it it works perfectly. I checked ...
1
vote
1answer
176 views

Wildcard SSL certificate with automatic subdomain forwarding

I have a server where, as part of the service, users are given their own personalised subdomain, i.e. username.servicename.com. It's not particularly feasible to generate personalised vhost entries ...
1
vote
1answer
1k views

Set default TLS SNI vhost for Apache 2.2 on CentOS 6

I have a CentOS 6 server with Apache (httpd-2.2.15-15.el6.centos.x86_64). Now I configured TLS SNI using OpenSSL and that was pretty easy. Now I have two TLS vhosts on the same ip and I want to ...
0
votes
1answer
117 views

Why is the SMTP service locking the files for several hours?

We are currently using the SMTP service in IIS 6.0 to send mails. All incoming relay mails are monitored by another service which processes the relay mail and deletes/moves it. It works fine! We have ...
2
votes
2answers
713 views

Is there a way to completely disable outbound opportunistic TLS support in SendMail?

CentOS 5.x SendMail 8.14.4 An overzealous network security feature is causing TLS negotiations to fail when my Sendmail server tries to talk to external hosts. This is causing sendmail to constantly ...
0
votes
1answer
2k views

ldapsearch reads cert and lies about it, won't connect as a result

I'm pulling my hair out over ldap playing well with SSL/TLS. I can confirm that the server is listening AND responding on port 636 to SSL request. openssl s_client -connect freia.fqdn:636 -showcerts ...
1
vote
1answer
182 views

Apache2's Multiple SSL hosts configuration (with different keys)

Well, this problem is relatively hard to describe. I installed Webmin+Virtualmin in a server. I have multiple IP addresses in the server (two NICs bonded). Let's assume that the network is ...
2
votes
2answers
2k views

Can you connect to a TLS FTP site using the Windows command line FTP client?

We setup vsftp on an Ubuntu server for our customers. We had a few customers ask for a secure option, so we setup explicit FTP over TLS and we removed the ability to connect unsecured. Now we are ...
7
votes
1answer
3k views

Postfix TLS over SMTP - RCPT TO prompts renegotiation then 554 5.5.1 Error: no valid recipients

I've setup ispconfig3 on my debian six server, and here is a little smtp over ssl: The server is postfix AUTH PLAIN (LOL!) 235 2.7.0 Authentication successful MAIL FROM: lol@lol.com 250 2.1.0 Ok ...
1
vote
4answers
2k views

SSH / TLS support for midnight commander?

Does anyone know if Midnight Commander could support FTP over TLS / SSH? One of our clients use Midnight Commander and we since we recently switch to explicit FTP over TLS (for security reasons) she ...
5
votes
2answers
1k views

detect weak encryption and outdated protocols

I'm looking for software that helps detecting applications that use weak encryption or outdated protocols in a central place. Sorry if that sounds vague. Maybe an example will help. Let's take a ...
2
votes
1answer
1k views

Outbound Email Cipher Strength

Is it possible to select a specific cipher strength for outbound mail using TLS in Exchange 2010? I need it to use cipher strength AES256-SHA instead of AES128-SHA. What's strange is that my inbound ...
1
vote
2answers
846 views

slapd with STARTTLS only doesn't work

I'm using slapd under Debian/Squeeze and trying to configure the system to only allow TLS-encrypted connections using STARTTLS on port 389. So I've configured my /etc/default/slapd to listen on port ...
1
vote
3answers
894 views

LDAP + TLS - different behaviour on two machines

machines: debian wheezy suse 11 commands: ldapsearch -ZZ -h ad.unsw.edu.au -x perl -we "use Net::LDAP; print Net::LDAP->new ('ad.unsw.edu.au')->start_tls(verify => 'require', capath ...
1
vote
0answers
210 views

Exchange 2010 TLS Cert questions

I'm trying to wrap my head around with enabling TLS for a specific domain on Exchange 2010 server but I have a few questions that I'm sure you guys have an answer to. I've gone through this guide ...
2
votes
2answers
248 views

How does a SSL Accelerator work, esp in regard to TLS Session IDs?

There is a theory that the TLS Session ID might mitigate the BEAST attack, and one of the comments at the IETF mention that SSL Accelerators may alter this ID. Can someone explain to me (or tell me ...
2
votes
1answer
576 views

Exchange Server 2007 - Verifiying TLS Authentication

I'm new to TLS Authentication but have read and followed the following document with fine detail: http://technet.microsoft.com/en-us/library/bb266978(EXCHG.80).aspx I have configured this in a ...
6
votes
1answer
3k views

Third Party Wildcard Certificates for use with Microsoft NPS / RADIUS / PEAP

I want to replace the SSL certificate that is used for PEAP on our NPS server that is doing RADIUS authentication for our Cisco WLCs. The current certificate is a SSL certificate that does Client ...
7
votes
1answer
3k views

Safest ciphers to use with the BEAST? (TLS 1.0 exploit) I've read that RC4 is immune

Now that the BEAST is public knowledge, TLS 1.0 is NOT safe to use (nor is SSL 3.0). I have seen reports that the RC4 cipher is unaffected (and is widely supported). Is that true? I know that TLS 1.1 ...
11
votes
1answer
19k views

How to enable TLS 1.1, 1.2 in IIS 7.5

We want to support web browsers utilizing TLS 1.1 and 1.2, which has been apparently implemented by Microsoft, but is turned off by default. So I went searching on Google and discovered some pages ...
0
votes
2answers
828 views

SSL/TLS Version in Nginx

I installed Nginx and enabled SSL. server { server_name vorb.de; listen 443; root /var/www/vorb.de/pub; ssl on; ssl_certificate cert.pem; ssl_certificate_key ...
-1
votes
1answer
600 views

Can't send email via SMTP in Postfix/Ubuntu, but can receive it fine using IMAP/POP3

I'm running Ubuntu, have Postfix installed. Followed https://help.ubuntu.com/community/Postfix to the letter. I can receive email via IMAP and POP3 perfectly in Thunderbird. But when I try to send ...
4
votes
1answer
1k views

Exim TLS and Secure SMTP

I'm in the process of converting an existing mail server to support encrypted SMTP for our clients, but I've run into this brick wall with very little useful log data to help me forward. Everything ...