Hot answers tagged

4

Maybe your admin dislikes NGINX Plusbecause it isn't open source and would accept another well maintained open source product. Then ask him to look at stunnel. It is designed for exactly your needs. Quoting an stunnel example at wikipedia (for SMTP, but this would fit alos for your needs): For example, one could use stunnel to provide a secure SSL ...


3

Do client certificate and key have to be generated with the same ca-key, as server certificates? No, the main requirement for the client certificate is that the server trusts the CA which has signed that client certificate. In theory you can even trust multiple CA's and use client certificates from completely different sources. Which CA has signed the ...


3

SSL/TLS versions are not linked to Active Directory, the ciphers supported is part of the operating system/configuration. SSL 2.0, 3.0 TLS 1.0, 1.1, 1.2 https://blogs.technet.microsoft.com/askds/2015/12/08/speaking-in-ciphers-and-other-enigmatic-tonguesupdate/ With LDAP connections to 636/3269, it may sometimes be necessary to enable the following ...


3

... I've determined that the HTTP request sent before the SSL connection dictates to the browser which IP address the domain is registered against. This is wrong. A HTTP request does not determine any relation between a URL/hostname and an IP address. This is done by DNS. But if the redirect is done to the same hostname then the same IP address will ...


1

Inbound options do not apply to PHPMailer. SSL on port 465 (SMTPS) has been deprecated since 1998, though Microsoft didn't seem to notice. Use SMTP+STARTTLS on port 587 instead, which is what PHPMailer does when you use SMTPSecure = 'tls' & Port = 587. Note that PHPMailer does opportunistic TLS, in that if you don't tell it to use TLS and you connect to ...


1

The redirect should not the problem here. Try disabling the redirect and put a static file on your old domain. Are you still getting certificate issues? Try both domains on SSLLabs and make sure there are no major issues. Both domains should have their own certificates. On very old browsers, without SNI (Server Name Indication) you will need two IPs for ...



Only top voted, non community-wiki answers of a minimum length are eligible