Tagged Questions

0
votes
2answers
38 views

-bash: www.mydomain.com.pem: Permission denied

I have these three files in /etc/nginx/ssl folder: www.mydomain.com.csr www.mydomain.com.key www.midomain.com.key.nopass I bought and downloaded the positive ssl certs in ...
3
votes
1answer
66 views

CHECK_NRPE: Error - Could not complete SSL handshake

I've just moved to a new nagios server and have got all the old hosts/services working. There is just one host that will not allow nrpe checks, producing an error on the nagios server as in the title. ...
1
vote
0answers
31 views

Setting up SSL on an Apache Ubuntu Server

I am setting up an SSL certificate for the first time on an Ubuntu server. I have purchased a dedicated IP address and have purchased the certificate under the subdomain of secure.example.com Port ...
0
votes
1answer
42 views

stunnel error when connecting from a news reader: SSL3_READ_BYTES:tlsv1 alert unknown ca

I'm trying to set up stunnel to provide secure access to an nntp server. Following the instructions here I created a self-signed key and certificate. The commands I ran were: openssl genrsa -des3 ...
0
votes
0answers
17 views

libmysqlclient18 Missing SSL Support on Precise?

I've been wrestling with this issue this morning... no matter what I do I cannot seem to get ssl support available through the libmysqlclient18 package on Ubuntu 12.04. I've run sudo apt-get ...
1
vote
1answer
74 views

java keystore can't validate URL

With the same url, this ends up giving a verify return code 20 (unable to get local issuer of certificate): openssl s_client -connect $URL:443 -showcerts -CAfile /etc/ssl/certs/java/cacerts This ...
1
vote
1answer
179 views

Error 102 when trying to use HTTPS

I trying to get my SSL certificate to work with apache2 on ubuntu. Chrome gives me just the error: Error 102 (net::ERR_CONNECTION_REFUSED): On this config: ServerAdmin webmaster@localhost ...
-2
votes
1answer
426 views

Unable to load certificate in openssl

In Ubuntu when i was trying to execute openssl s_server -cert server.pem -www I get the following message unable to load certificate 3074300104:error:0906D06C:PEM routines:PEM_read_bio:no start ...
1
vote
0answers
132 views

Apache cached old ssl certificate

About 2 weeks ago I bought a new wildcard SSL certificate for all of my servers, and immediately tried to set it up on a server by replacing the old self-signed certificate settings. So, I put in the ...
1
vote
1answer
99 views

Ubuntu 12.04 and 12.10 don't have new Thawte intermediary certs?

I recently swapped my sites SSL certificate over to a new Thawte 2048 bit cert. Ubuntu/libcurl doesn't seem to be able to verify it. Web browsers and OSX is fine. I had to manually update the cert ...
2
votes
1answer
203 views

BEAST (Browser Exploit Against SSL/TLS) Vulnerability on Port 25 for Postfix

I am failing a PCI Compliant scan. I have successfully used RC4 ciphers for Apache setup but my Postfix configuration is still not fixed. What TLS configuration should i use in my main.cf file. my ...
-1
votes
1answer
115 views

AWS EC2 - Installing self signed certificate

I'm trying to install a SSL certificate on my EC2 instance. I used this post as a guide. I receive an error when I perform step 5 by running the following command: cp server.crt ...
0
votes
1answer
85 views

AWS installing mod_ssl on apache

I tried installing mod_ssl,I used this command apt-get install mod_ssl to install but I got an error saying unable to locate package mod_ssl. After executing the above command, I got below output ...
2
votes
1answer
178 views

Error Setting Up Go Daddy SSL on Ubuntu Apache2

I am pretty new to linux and am attempting to configure an SSL from Go Daddy. I followed the instructions on how to generate the key to send to Go Daddy for the cert. Here is the guide I followed: ...
1
vote
2answers
252 views

Using nginx / varnish for SSL and Non-SSL pages

Disclaimer: I have posted this on Stackoverflow as well as I thought it may have fit better there. The link to the question is below if someone would like to answer there. -- I have the following: ...
3
votes
1answer
949 views

Why is my new Ubuntu 12.04 unable to verify a Verisign ssl certificate?

In short: This request fails. $ curl 'https://secure.ogone.com/ncol/prod/orderstandard.asp' -vv * About to connect() to secure.ogone.com port 443 (#0) * Trying 213.254.248.101... connected * ...
1
vote
2answers
1k views

Apache: SSLCertificateKeyFile: file does not exist or is empty

I am configuring SSL for Apache 2. My system is Ubuntu Server 10.04 LTS. I have the following settings related to SSL in my vhost configuration: SSLEngine On SSLCertificateKeyFile ...
1
vote
2answers
664 views

HTTPS is over 50 times slower then HTTP

I have a website that uses https to transmit a javascript file to the client. The website is getsimpleapps.com. It turns out that this file is loading 52 times slower with https (20.08s - 29.08s) ...
0
votes
1answer
297 views

Apache ssl proxy unwanted redirection

I'm running ubuntu server 12.04. I want to secure access to a python app via apache ssl proxy. I have sudo a2ensite erp.mydomain.com And I have in /etc/hosts 127.0.0.1 mydomain.com ...
0
votes
0answers
125 views

Setting up SSL on Ubuntu for Name Based VirtualHost

I have setup an SSL certificate on a EC2 instance running Ubuntu before but I have never done it when there was a NameBased VirtualHost setup. Normally after getting the certificate installed, I just ...
2
votes
5answers
1k views

Setting up SSL on apache on linux ubuntu

I'm trying to get SSL to run on my apache web server. I do not have the DNS for the domain setup yet is that an issue? How do I setup SSL on my web server? When I start apache it fails. ...
1
vote
1answer
87 views

Transfered SSL Certificate to Rackspace Cloud Server - Occasional Errors

Okay, I recently tranfered my Comodo SSL certificate from my previous Bluehost account to my new rackspace cloud server. (LAMP stack) Basically I just copy pasted the server cert and key and checked ...
0
votes
1answer
608 views

Courier imap-ssl and multiple domains

I've successfully setup courier+postfix to work with multiple email domains on the same server. At the moment I have these lines in /etc/courier/imap-ssl: TLS_CERTFILE=/etc/courier/imapd.pem ...
0
votes
1answer
728 views

SSL on nginx + unicorn got “Error 102 (net::ERR_CONNECTION_REFUSED)”

I tried to deploy my app on EC2 (opened port: 22, 80, 443) App: Rails 3.2.2 Server: nginx 1.2.1 unicorn gem (latest) ubuntu 12.04 Deployer: Capistrano I tried to follow the instruction in ...
2
votes
3answers
5k views

Why is my RapidSSL Certificate chain is not trusted on ubuntu?

I have a website that works perfectly with Chrome & other browser but i get some errors with PHP in CLI mode so i'm investigating it, running this: openssl s_client -showcerts -verify 32 -connect ...
6
votes
1answer
250 views

How do I match a certificate file to a key file?

I have a SSL certificate that the former sysadmin was issued (crt file.) Searching the filesystem I found several .key files. How do I match the crt to the key file and confirm that they match? ...
1
vote
1answer
337 views

ssl not working on apache with Ubuntu Natty and multiple domains

Having some trouble getting SSL working on my server. I only need it for one of my two domains on this box. I have two IPs, and I am using A records on my DNS to point the domains to the different ...
0
votes
1answer
140 views

SSL with virtual hosts

I've 'inherited' a server setup which i don't quite understand. The server is an ubuntu box with a number of virtual hosts. I've checked out the config for each virtual host and there's no mention ...
2
votes
2answers
4k views

Ubuntu 11.10, using wget/curl fails with ssl

On a completely new install of Ubuntu I'm getting the following errors when using wget: wget https://test.sagepay.com --2012-03-27 12:55:12-- https://test.sagepay.com/ Resolving test.sagepay.com... ...
0
votes
3answers
766 views

Cannot get SSL working with Apache

Ok, so I'm trying to configure my server to accept SSL connections and I cannot get it working. I'm aware there are a lot of similar questions on the site, but each one I have come across so far ...
2
votes
1answer
518 views

Apache2 ssl + virtualhosts of the same domain

My webserver hosts several subdomains (vhosts) of a website, say sub1.example.com and sub2.example.com. The only difference between these vhosts is the documentroot. Everything else is shared across ...
-3
votes
2answers
105 views

How to use 2 SSL Certificate on same IP on ubuntu apache?

Is there a way to do it without using SNI Mod Apache? I tried many thing but no 1 them worked for me. thanks in advance.
5
votes
1answer
223 views

Automatic management of SSL certificate on multiple servers…good or bad

We're using puppet to manage a group of Ubuntu boxes and will shortly require each of these servers to share a common SSL certificate, in order to serve a site over HTTPS. Naturally, we'd like to use ...
1
vote
0answers
295 views

Ubuntu apache ssl issues

I am a little confused about what is going on here. I've tried to diagnose the situation with Google to no avail. I want to get this working as well as understand what is wrong. Basically I am trying ...
6
votes
1answer
390 views

Ideal way to deploy SSL to blades/chassis

I have about 14 Dell M1000e chassis and corresponding 224 blades. I just received a wildcard SSL cert, but don't want to manually visit each administrative page to upload the cert/key. I understand ...
0
votes
2answers
1k views

Can't get SSL to work

I'm trying to get Apache 2 to use SSL for one of many domains on a server. I don't care about any of the other domains running SSL on the server. I'm trying to do this for a Facebook app. Nothing on ...
1
vote
3answers
1k views

How to change libcurl SSL backend from gnutls to openssl on Ubuntu server

I am getting gnutls specific errors in my Tornado webserver while processing Google OpenID SSL responses. One of the suggestions I got from Tornado mailing list is to try OpenSSL backend instead of ...
-2
votes
1answer
2k views

How to allow port 8443 in iptables?

In order to allow input from port 8443, I have inputed the iptables rule: -A INPUT -i eth0 -p tcp --dport 8443 -j ACCEPT However, when I type: $ netstat -a There is no reference to https or ...
-2
votes
3answers
259 views

Untrusted Connection issue when running my site in https

I'm using cloudflare to manage my DNS. When I visit my site under https:// it displays an "Untrusted Connection". Is this most likely due to a DNS issue? Or, could it be happening because of a ...
-4
votes
1answer
104 views

KNow nothing about ssl , how to setup apache to run with ssl? [closed]

I have an ubuntu server with apache installed i run a game on the server and want to integrate it to facebook but it is required to be through HTTPS :s how can i move the game to run on https ? i ...
1
vote
1answer
68 views

SSL for a single website on a server hosting multiple websites (Ubuntu and Apache2)

I have SSL set up on an Ubuntu server. This server is running Apache 2 with multiple Virtual Hosts. I've read that you need a single IP for each application running SSL. My questions are: If only ...
1
vote
1answer
110 views

Port 443 unresponsive, certificate installed correctly though (I think)

System specs: Ubuntu 10.04 Apache 2 Installed an SSL cert from GoDaddy, checked that it works by issuing the following on the server itself: openssl s_client -showcerts -connect localhost:443 ...
3
votes
1answer
752 views

How to self-sign an SSL certificate for a specific domain?

I've followed these steps to create and sign my own SSL certificate: openssl genrsa -out server.key 1024 openssl req -new -key server.key -out server.csr openssl x509 -req -days 365 -in server.csr ...
1
vote
1answer
124 views

help needed to setup ssl in ubuntu lucid server

I am provided .csr , .key and .crt file to setup ssl in Ubuntu Lucid Server, but i am having troubles setting it up. Can anyone help me set it up and make it working for my server ? I tried it by ...
1
vote
1answer
1k views

Persuading openldap to work with SSL on Ubuntu with cn=config

I simply cannot get this (TLS connection to openldap) to work and would appreciate some assistance. I have a working openldap server on ubuntu 10.04 LTS, it is configured to use cn=config and most of ...
4
votes
2answers
317 views

Best practices for placing SSL certificates for use in Apache 2?

In an environment where a handful of Apache servers are running a bunch of sites using SSL certificates for HTTPS, where should these certificates be placed? In Debian or Ubuntu, should all relevant ...
0
votes
2answers
813 views

Apache2 can't start: ssl.load Permission Denied

I'm setting up an HTTPS server on an Ubuntu 10.04 LTS Server. After configuring everything, when I try to start the server I get: root@dns2:/etc/apache2# /etc/init.d/apache2 start * Starting web ...
3
votes
1answer
1k views

SSL 3.0 warning in Chrome on Ubuntu 10.04LTS

I'm running Apache2 with SSL on Ubuntu 10.04LTS. Chrome gives me this annoying warning when I inspect the certificate: The connection had to be retried using SSL 3.0. This typically means that ...
3
votes
3answers
1k views

Problems with multiple SSL on same IP, but only in select clients

I know there are tons of posts about multiple SSL on same IP, but I promise I'm not beating a dead horse. My question is very clear. First, a little background... Our organization has several ...
0
votes
2answers
941 views

RDP client error using Cisco SSL VPN

I am using a Cisco SSL VPN client to connect from a 32-bit Ubuntu 11.04 computer to a 32-bit Windows 7 computer. When I request an RDP session from the SSL VPN site, the properJavaRDP plugin fires up, ...

1 2