1
vote
1answer
46 views

Unknown SSL protocol error in connection to rubygems.org:443 from Ubuntu

I ran into this problem on two Ubuntu 12.04 instances using kernel 3.2.0-54 after upgrading to the latest OpenSSL with the Heartbleed fix. Connections to some servers over HTTPS that never timed out ...
-1
votes
0answers
15 views

Error in creating self signed SSL certificate..second time [closed]

am following all commands as described on https://help.ubuntu.com/12.04/serverguide/certificates-and-security.html at To create the CSR, run the following command at a terminal prompt: openssl req ...
0
votes
1answer
35 views

Saving SSL password for SVN in Ubuntu

I have tried to set up my SVN that way, that it saves my passwords, but for some reason it won't work. I am using a SSL certificate, for which I need to provide a password every time. I have tried ...
0
votes
0answers
21 views

Fixing nginx 1.4.6 dependency on old openssl version (libssl0.9.8)?

I'm trying to enable TLSv1.1 & TLSv1.2 on my Ubuntu 12.04 EC2 instance w/ nginx 1.4.6, but this version of nginx is dependent upon libssl0.9.8, even though the newest version of OpenSSL is ...
0
votes
1answer
48 views

Ubuntu server failing to perform SSL handshake (ssl handshake failure:s23_lib.c)

This is started as a Java issue (there's a stackoverflow question) and it turns out it's not really Java-related as I can reproduce it with wget. This happens in 3 different Ubuntu boxes. $ wget ...
0
votes
3answers
87 views

Use IP address or FQDN [closed]

I am preparing servers infrastructure consisting MYSQL , LDAP , PHP and FTP. I have all servers have static public and private IP(LAN). Now while configuring SSL i am facing problem of FQDN. For ...
0
votes
0answers
6 views

VirtualHost ignore 443 [duplicate]

I have multiple virtual hosts running on the same ip. If I had https:// to a domain that does not support ssl then I'm redirected to the one domain that does support ssl. This has become an issue and ...
-1
votes
1answer
39 views

Self-signed certificate is not “trusted” by default? [closed]

Self-signed certificate is not “trusted” by default? How can I make it trusted? I used this tutorial for generate my .crt and .key - ...
1
vote
2answers
258 views

Discrepancy in SSL Ciphers between Apache 2.2 and OpenSSL 1.0.1

I'm running up-to-date Ubuntu 12.04 LTS with Apache 2.2.22-1ubuntu1.4 and OpenSSL 1.0.1-4ubuntu5.11. I have configured Apache to use ciphersuites list from ...
1
vote
0answers
48 views

Unable to generate a Bundle of CA Root Certificates (failed to create symbolic link)

I am trying to generate a Bundle of CA Root Certificates. Similar to what Facebook has done for its PHP SDK (https://github.com/facebook/facebook-php-sdk/blob/master/src/fb_ca_chain_bundle.crt). I ...
0
votes
0answers
44 views

What is causing HTTPS handshake not to occur?

I have two systems, running an application that does web service calls over HTTPS. I run a test by trying to log in to the HTTPS over webservice and one system works with HTTPS but the other does not. ...
0
votes
0answers
106 views

Ubuntu apache reverse proxy to jboss

I hope that someone here can assist me with this problem because I am currently trying fix it for 3 weeks now and can’t seem to get it working. Well let’s start with explaining my situation. ...
0
votes
0answers
125 views

Apache 2.4 reload succeeds but restart fails when using SSL

On Apache 2.4, reload succeeds but restart fails when using SSL. Or to say it another way, the SSL configuration directives appear to work perfectly when doing a service reload but not a service ...
-1
votes
1answer
51 views

SSL only works if I add the hostname in my local /etc/hosts

For some reason, I am only able to access my site via https if I add the domain and ip in my local /etc/hosts file. Try it yourself! If I add: 192.237.249.43 familiarsolutions.com to my local ...
0
votes
2answers
116 views

NGINX SSL Certificate Not Working

I've been working on SSL stuff and getting nowhere from like 4 tutorials... I've bought an SSL for pingrglobe.com, and now trying to apply it to my servers. Here's my nginx code: http { ...
0
votes
2answers
73 views

Trying to set up virtual hosts to block access by IP, for three domains and when using SSL on one domain

So I want all this on one server: - 3 domains / websites - SSL on one of them - nothing to be accessed by an IP address (e.g. 'domain.com' is okay, but not by just typing '123.55.44.123' into the ...
0
votes
1answer
85 views

Open two sessions in the same browser using virtualhosts with apache2

My two hosts uses the Apache authentication, the first authentication with my virtualhost1 is fine but when I open a new tab for the the second host(virtualhost2), the first is ...
-1
votes
1answer
59 views

bypass ssl check for one domain

Is there any way to byepass the ssl checking for one domain from my server? The problem is when calling the url in the application. I need to call a url say ...
1
vote
0answers
133 views

Unable to install Alpha SSL certificate for Openfire

I have been issued an SSL certificate for www.mydomain.com, I have been able to successfully implement the certificate for the site and the site is working is https. However, I have not been able to ...
0
votes
3answers
257 views

Disable HTTPS for a domain that shares IP with another domain that is under HTTPS

I am running into a weird problem trying to disable HTTPS for one domain, but the other domain has HTTPS. They both are different websites running on a dedicated server, sharing the same IP address ...
0
votes
2answers
132 views

-bash: www.mydomain.com.pem: Permission denied

I have these three files in /etc/nginx/ssl folder: www.mydomain.com.csr www.mydomain.com.key www.midomain.com.key.nopass I bought and downloaded the positive ssl certs in ...
3
votes
1answer
1k views

CHECK_NRPE: Error - Could not complete SSL handshake

I've just moved to a new nagios server and have got all the old hosts/services working. There is just one host that will not allow nrpe checks, producing an error on the nagios server as in the title. ...
1
vote
0answers
49 views

Setting up SSL on an Apache Ubuntu Server

I am setting up an SSL certificate for the first time on an Ubuntu server. I have purchased a dedicated IP address and have purchased the certificate under the subdomain of secure.example.com Port ...
0
votes
1answer
362 views

stunnel error when connecting from a news reader: SSL3_READ_BYTES:tlsv1 alert unknown ca

I'm trying to set up stunnel to provide secure access to an nntp server. Following the instructions here I created a self-signed key and certificate. The commands I ran were: openssl genrsa -des3 ...
1
vote
1answer
182 views

java keystore can't validate URL

With the same url, this ends up giving a verify return code 20 (unable to get local issuer of certificate): openssl s_client -connect $URL:443 -showcerts -CAfile /etc/ssl/certs/java/cacerts This ...
1
vote
1answer
566 views

Error 102 when trying to use HTTPS

I trying to get my SSL certificate to work with apache2 on ubuntu. Chrome gives me just the error: Error 102 (net::ERR_CONNECTION_REFUSED): On this config: ServerAdmin webmaster@localhost ...
-2
votes
1answer
2k views

Unable to load certificate in openssl [on hold]

In Ubuntu when i was trying to execute openssl s_server -cert server.pem -www I get the following message unable to load certificate 3074300104:error:0906D06C:PEM routines:PEM_read_bio:no start ...
1
vote
0answers
325 views

Apache cached old ssl certificate

About 2 weeks ago I bought a new wildcard SSL certificate for all of my servers, and immediately tried to set it up on a server by replacing the old self-signed certificate settings. So, I put in the ...
1
vote
1answer
128 views

Ubuntu 12.04 and 12.10 don't have new Thawte intermediary certs?

I recently swapped my sites SSL certificate over to a new Thawte 2048 bit cert. Ubuntu/libcurl doesn't seem to be able to verify it. Web browsers and OSX is fine. I had to manually update the cert ...
2
votes
1answer
277 views

BEAST (Browser Exploit Against SSL/TLS) Vulnerability on Port 25 for Postfix

I am failing a PCI Compliant scan. I have successfully used RC4 ciphers for Apache setup but my Postfix configuration is still not fixed. What TLS configuration should i use in my main.cf file. my ...
-1
votes
1answer
221 views

AWS EC2 - Installing self signed certificate

I'm trying to install a SSL certificate on my EC2 instance. I used this post as a guide. I receive an error when I perform step 5 by running the following command: cp server.crt ...
0
votes
1answer
375 views

AWS installing mod_ssl on apache

I tried installing mod_ssl,I used this command apt-get install mod_ssl to install but I got an error saying unable to locate package mod_ssl. After executing the above command, I got below output ...
2
votes
1answer
712 views

Error Setting Up Go Daddy SSL on Ubuntu Apache2

I am pretty new to linux and am attempting to configure an SSL from Go Daddy. I followed the instructions on how to generate the key to send to Go Daddy for the cert. Here is the guide I followed: ...
2
votes
2answers
404 views

Using nginx / varnish for SSL and Non-SSL pages

Disclaimer: I have posted this on Stackoverflow as well as I thought it may have fit better there. The link to the question is below if someone would like to answer there. -- I have the following: ...
4
votes
2answers
2k views

Why is my new Ubuntu 12.04 unable to verify a Verisign ssl certificate?

In short: This request fails. $ curl 'https://secure.ogone.com/ncol/prod/orderstandard.asp' -vv * About to connect() to secure.ogone.com port 443 (#0) * Trying 213.254.248.101... connected * ...
2
votes
2answers
5k views

Apache: SSLCertificateKeyFile: file does not exist or is empty

I am configuring SSL for Apache 2. My system is Ubuntu Server 10.04 LTS. I have the following settings related to SSL in my vhost configuration: SSLEngine On SSLCertificateKeyFile ...
1
vote
2answers
1k views

HTTPS is over 50 times slower then HTTP

I have a website that uses https to transmit a javascript file to the client. The website is getsimpleapps.com. It turns out that this file is loading 52 times slower with https (20.08s - 29.08s) ...
0
votes
2answers
335 views

Apache ssl proxy unwanted redirection

I'm running ubuntu server 12.04. I want to secure access to a python app via apache ssl proxy. I have sudo a2ensite erp.mydomain.com And I have in /etc/hosts 127.0.0.1 mydomain.com ...
2
votes
5answers
2k views

Setting up SSL on apache on linux ubuntu

I'm trying to get SSL to run on my apache web server. I do not have the DNS for the domain setup yet is that an issue? How do I setup SSL on my web server? When I start apache it fails. ...
1
vote
1answer
117 views

Transfered SSL Certificate to Rackspace Cloud Server - Occasional Errors

Okay, I recently tranfered my Comodo SSL certificate from my previous Bluehost account to my new rackspace cloud server. (LAMP stack) Basically I just copy pasted the server cert and key and checked ...
0
votes
1answer
912 views

Courier imap-ssl and multiple domains

I've successfully setup courier+postfix to work with multiple email domains on the same server. At the moment I have these lines in /etc/courier/imap-ssl: TLS_CERTFILE=/etc/courier/imapd.pem ...
0
votes
1answer
1k views

SSL on nginx + unicorn got “Error 102 (net::ERR_CONNECTION_REFUSED)”

I tried to deploy my app on EC2 (opened port: 22, 80, 443) App: Rails 3.2.2 Server: nginx 1.2.1 unicorn gem (latest) ubuntu 12.04 Deployer: Capistrano I tried to follow the instruction in ...
2
votes
3answers
8k views

Why is my RapidSSL Certificate chain is not trusted on ubuntu?

I have a website that works perfectly with Chrome & other browser but i get some errors with PHP in CLI mode so i'm investigating it, running this: openssl s_client -showcerts -verify 32 -connect ...
6
votes
1answer
425 views

How do I match a certificate file to a key file?

I have a SSL certificate that the former sysadmin was issued (crt file.) Searching the filesystem I found several .key files. How do I match the crt to the key file and confirm that they match? ...
1
vote
1answer
481 views

ssl not working on apache with Ubuntu Natty and multiple domains

Having some trouble getting SSL working on my server. I only need it for one of my two domains on this box. I have two IPs, and I am using A records on my DNS to point the domains to the different ...
0
votes
1answer
146 views

SSL with virtual hosts

I've 'inherited' a server setup which i don't quite understand. The server is an ubuntu box with a number of virtual hosts. I've checked out the config for each virtual host and there's no mention ...
2
votes
2answers
6k views

Ubuntu 11.10, using wget/curl fails with ssl

On a completely new install of Ubuntu I'm getting the following errors when using wget: wget https://test.sagepay.com --2012-03-27 12:55:12-- https://test.sagepay.com/ Resolving test.sagepay.com... ...
0
votes
3answers
1k views

Cannot get SSL working with Apache

Ok, so I'm trying to configure my server to accept SSL connections and I cannot get it working. I'm aware there are a lot of similar questions on the site, but each one I have come across so far ...
2
votes
1answer
645 views

Apache2 ssl + virtualhosts of the same domain

My webserver hosts several subdomains (vhosts) of a website, say sub1.example.com and sub2.example.com. The only difference between these vhosts is the documentroot. Everything else is shared across ...
-3
votes
2answers
110 views

How to use 2 SSL Certificate on same IP on ubuntu apache?

Is there a way to do it without using SNI Mod Apache? I tried many thing but no 1 them worked for me. thanks in advance.