Transport Layer Security is a cryptographic protocol for encrypting and authenticating network communications, and replaces SSL. It is commonly used to secure Internet protocols such as HTTP.
3
votes
3answers
2k views
SSL connection errors from Apache
I'm running a (self-signed) SSL cert site on Apache/2.2.14 on Ubuntu
10.04, but various browsers are giving errors on half the connection
attempts. Just now saw this transient error from Chrome:
...
1
vote
2answers
337 views
openvpn and TLS error
Hello
im struggling for one week to get this to work without luck
the problem seems strange though
i set up openvpn on server and configure it then create license file for client and done the rest but ...
0
votes
2answers
45 views
Nessus Security Vulnability Fix: SSL Version 2 (v2) Protocol Detection
Below, in quotes, is a medium severity issue discovered after scanning an IIS web server, with a tool called Nessus.
"Consult the application's documentation to disable SSL 2.0 and use
SSL 3.0, TLS ...
0
votes
2answers
196 views
IPTables Rule for Google Apps SMTP
I am trying to add iptables rule to allow traffic on ports 465 & 587 to google apps smtp servers. But I got not luck. My WHMCS installation works fine with google apps when I turn off iptables but ...
3
votes
1answer
460 views
How to make TLS the preferred secure connection in IIS 7
I have a mvc3 website that is hosted on a Server 2008 r2 server and I have a security certificate installed and all seems to be working ok. However if I connect to the site with Google Chrome, and ...
2
votes
1answer
527 views
VSFTPD - FTP over TLS - Upload stops after exactly 82k?
I installed a VSFTP daemon on a CentOS server, using a RSA certificate for logging in using explicit TLS. Now, I cannot upload more than 82k.
With files under that limit, there is no problem. The FTP ...
2
votes
1answer
576 views
IIS6 SMTP and TLS on outbound connections
In the options for setting up the SMTP server hosted in IIS, there exists an option to enable TLS on outbound connections which I want. However I also want it to be able to fallback to clear text in ...
1
vote
1answer
185 views
Two Exchange 2003 servers, Internet SMTP Connector using port 587 on smarthost: no longer internal connectivity between the Exchange servers
To summarize: I set things up (this is a virtual test/tutoring environment), broke internal connectivity by introducing Internet mail connectivity, figured out where the problem was, but now I'm ...
1
vote
1answer
208 views
disable Postfix TLS support for specific destination server
I am trying to configure postfix to disable TLS for a specific remote smtp server that serves for multiple recipient domains.
I have set up a policy map that already contains some entries for ...
1
vote
1answer
239 views
Plesk 10 Postfix with multiple IP adresses and SSL certificates
We are currently running a root server with Debian 6 and Plesk 10.4.4. We have some virtual hosts using one IP adress (shared) - e.g. example1.com - and another virtual host using a dedicated IP ...
1
vote
1answer
251 views
Node.js with SSL/TLS protocol v1.2
I would like to use TLS 1.2 on my node.js server. I'm currently using openssl 1.0.0e.
If I upgrade to openssl 1.0.1, do I need to rebuild node.js to upgrade to TLS 1.2? Are there configuration or ...
1
vote
1answer
129 views
Is that possible to configure TLS on cpanel
I know 1 SSL for 1 dedicated IP, yes, but now TLS technology offer a better solution by only use one port for unsecure and secure connection (like no need 443) and no need dedicated IP for each SSL. ...
0
votes
1answer
96 views
slapd 2.4.23 hangs on ldaps connections
New install of CentOS 6.3, openldap-servers-2.4.23. Generated a new certificate request, signed the cert, started slapd. ldapsearch responds on ldapi:/// and ldap:///. However, as soon as a request is ...
0
votes
1answer
670 views
postfix, TLS and rapidssl - “verify error:num=19:unable to get local issuer certificate”
I have a certificate from rapidssl. I run this command:
openssl s_client -showcerts -connect smtp.server.com:465
I get this error:
verify error:num=19:self signed certificate in certificate chain
...
0
votes
1answer
116 views
TLS with GNU Mailutils 0.6 IMAP4d
I have been fighting with the ancient GNU Mailutils 0.6 for quite a while now. I am supposed to set up the IMAP4d service from this version for an IT security exercise. I may not update the program, ...
0
votes
1answer
358 views
Can't send mail from Windows Phone (Postfix server)
Some background:
I have a Dovecot/Postfix setup to handle email for a few domains. We have imap and smtp setup on various devices (Macs, iPhones, PCs, etc) and it works no problem.
I've recently ...
0
votes
1answer
454 views
Can't send email via SMTP in Postfix/Ubuntu, but can receive it fine using IMAP/POP3
I'm running Ubuntu, have Postfix installed. Followed https://help.ubuntu.com/community/Postfix to the letter.
I can receive email via IMAP and POP3 perfectly in Thunderbird. But when I try to send ...
0
votes
1answer
147 views
Configuring sendmail to only use starttls in client mode
Is it possible to configure sendmail so that it will only connect to a remote smtp server when STARTTLS is offered there? I so - how do I do it?
0
votes
1answer
261 views
How to generate new CSRs for TLS use in sendmail?
SendMail 8.13.8 | CentOS 5.x
Hi Guys,
I'm using ca-signed TLS certificates on my sendmail server and they are up for renewal soon. Our new CA doesn't like our old CSR so I need to generate a new ...
0
votes
1answer
416 views
Windows 7 + TLS problem
We are facing a problem with many client. They are unable to access our website (which requires SSL) when they use Windows 7 and TLS 1.0 is enabled in browser (wither Firefox or IE). Website is ...
0
votes
1answer
187 views
Using TLS-PSK on IIS
We are doing embedded device and due to low memory contraints and closed enviroment best option there would be using one of TLS-PSK ChiperSuites (pre shared key - no asymetric cryptography). As far ...
2
votes
0answers
178 views
OpenLdap TLS authentication setup
I am trying to setup openldap on ubuntu 12.04 by following this guide
https://help.ubuntu.com/12.04/serverguide/openldap-server.html
When I tried to enable TLS on the server by creating a self signed ...
2
votes
0answers
2k views
TLS (STARTTLS) Failure After 10.6 Upgrade to Open Directory Master
Environment: Mac OS X 10.6.3 install/import of a MacOS X 10.5.8 Open Directory Master server. After that upgrade, LDAP+TLS fails on our MacOS X 10.5, 10.6, CentOS, Debian, and FreeBSD clients ...
1
vote
0answers
21 views
here filtering terminate TLS in openvpn but not ssl
I have configured an openvpn sever appliance on vmware and windows 2008 R2 and set it to use port 80 for openvpn, iphone and ipad could connect to it but windows and mac could't and generated error in ...
1
vote
0answers
99 views
openSuse and openldap:ldap only login
I 've managed to setup ldap server and i can search it succefully from the server machine. i ve added to the database all info except from the fstab file and automount info. I migrated succefully the ...
1
vote
0answers
98 views
Can Subject Alternative Name accommodate multiple virtual mail domains?
I am currently running a postfix server with self signed certificates serving one mail domain, mycompany.com, the mail server is mail.mycompany.com and so is the CN of the certificate.
Now, I need to ...
1
vote
0answers
200 views
Postfix : outgoing mail in TLS for a specific domain
I am trying to configure postfix to send mail in TLS (starttls in fact), but only for a specific destination.
I tried with "smtp_tls_policy_maps".
This is the only line in my main.cf file regarding ...
1
vote
0answers
141 views
Forcing IIS virtual smtp server to verify outgoing TLS certificate
I am in a situation where a web application is using the IIS virtual SMTP server to send out email. The IIS virtual SMTP server is then configured to send all mail out through a smarthost, over TLS ...
1
vote
0answers
209 views
Dovecot TLS Handshake not working
I have set up my mailserver using http://workaround.org/ispmail and it worked until today, where I can not access the server using IMAP.
The error I see in dovecot.log is
2012-02-09 16:37:40 ...
1
vote
0answers
174 views
Exchange 2010 TLS Cert questions
I'm trying to wrap my head around with enabling TLS for a specific domain on Exchange 2010 server but I have a few questions that I'm sure you guys have an answer to.
I've gone through this guide ...
1
vote
0answers
316 views
(apache `mod_proxy`) reverse proxy - how to reuse TLS sessions to origin server
I have set up a reverse proxy which can be accessed by http only, client requests are translated to http or https communication towards the origin server. Configuration is as follows:
...
0
votes
0answers
33 views
asterisk TLS without client certificates
I have enabled TLS in asterisk
[general]
tlsenable=yes
tlscertfile=/etc/asterisk/ssl/asterisk.crt
tlsdontverifyserver=no
Everything works, tested on CSipSimple. But there is one problem: not much ...
0
votes
0answers
14 views
Disabling TLS in IIS 5 (Window 2000)
I am trying to disable TLS 1.0 in my IIS 5.0, which runs on Windows 2000. I followed the MS instructions (http://support.microsoft.com/?id=187498), but when I checked the traffic with WireShark the ...
0
votes
0answers
25 views
Combining CA's into a single PEM
I have been wondering if it is possible to combine two CA certificates into a single .pem, then use that pem to allow clients with certs signed by either CA to create TLS connections with an LDAP ...
0
votes
0answers
53 views
Postfix with aliases from ldap (over TLS)
I am trying to configure Postfix that searches for aliases from an ldap server, connecting to which over TLS.
However when I do:
ldapsearch -ZZZ -h ldapserver01 -D "cn=admin,dc=example,dc=com" -W
...
0
votes
0answers
80 views
Is it possible to tell whether a server allows TLS/SSL3 without having access to it?
I apologize in advance if this question is a little confusing, my knowledge of SSL certificates is limited.
Basically there are 2 third party servers that I would make a call to over TLS. This worked ...
0
votes
0answers
107 views
gmail IMAP - how to requiring TLS (not SSL)
gmail has an unfortunate "feature" that it will allow use of SSL 2 if the client handshaking fails with SSL 3. This isn't acceptable for our use. Thus we want to require TLS for both IMAP and SMTP.
...
0
votes
0answers
58 views
OpenLDAP: TLS init def ctx failed: -1 Ubuntu 12.04 Server
im trying to authenticate with LDAP and TLS but I keep getting TLS init def ctx failed: -1.
I've done the steps in this guide's TLS section.
My permissions:
/etc/ssl/
drwxr-x--- 2 root ssl-cert ...
0
votes
0answers
50 views
Chrome blocking my JBoss 7 content
I have a system in production, but Chrome is blocking the content. Firefox and IE works well.
The message that I see in chrome console is:
2[blocked] The page at xxxxxxxxxxxx.jsf ran insecure content ...
0
votes
0answers
160 views
pure-ftpd halts after AUTH TLS if FEAT not send first
i have a debian 6 everything up-to-date.
i compiled pure-ftpd 1.0.36 with:
./configure --prefix=/usr --with-tls --without-inetd --with-altlog --with-puredb --with-ftpwho
There is no firewall. Passive ...
