Reputation
1,390
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
6 9
Newest
 Yearling
Impact
~59k people reached

Mar
6
awarded  Yearling
Mar
1
awarded  Revival
Jun
12
answered SSL certs or intermediate for DMZ
Mar
6
awarded  Yearling
May
22
comment In IIS 7, can you bind more than one SSL certificate to a single website / IP address / port number?
@NickW, I don't know why anyone would want to do this either but I was curious whether the point about binding multiple SSL certs was for supporting multiple CA certs using the same www.mydomain.com name or multiple certs using different names. Just to satisfy my curiosity.
May
22
comment In IIS 7, can you bind more than one SSL certificate to a single website / IP address / port number?
Do the multiple SSL certs all have unique common names, (i.e. site.domain1.com, site.domain2.com, etc)?
Apr
13
comment Apache vs Tomcat configurations
Can you also post the mod_proxy_ajp-relevant portions of your httpd.conf
Mar
6
awarded  Yearling
Feb
19
comment Unable to link IIS8 and Tomcat7 by ISAPI on Windows Server 2012
Sure. I'd like to know what you did to get it working.
Feb
14
comment Tomcat configuration for accepting connections from Safari on iPad vs an SSL connector with JSSE ciphers
Can you post the ssl listener portion from your server.xml file? Also, the two ssldump captures above look identical. Are they the same dump?
Feb
8
comment can't access both tomcats from apache
Can you add your server.xml ajp connector info for the port 18009 instance?
Jan
21
answered How to make Tomcat 7 log debugging info?
Jan
21
answered Apache Tomcat getting restarted
Jan
21
answered nginx HSTS with https only on admin subdirectory
Jan
21
comment Load balancing multiple PHP sites and JSP sites using Apache Server
Are you looking to route requests to apache OR to tomcat depending upon uri in the request?
Jan
19
answered Unable to link IIS8 and Tomcat7 by ISAPI on Windows Server 2012
Jan
16
comment Exchange certificate not accepted in intranet
There are specific certificates you can buy that make use of the subject alternative name field embedded inside the cert. You buy a certificate with common name "x.y.z" and list additional alternate names like "a.b.c", "d.e.f", etc. They usually contain the term "Unified Communications" or "UCC" in the product name and most Certificate Authorities sell them.
Dec
12
comment Problems with disabled ssl version 2 in ubuntu server. Can I also disable ssl version 3 to solve problems?
Not for nothing but -1 doesn't imply sslv1 but tlsv1. TLSv1 is the successor to SSLv3. Also, I suspect that the OpenSSL message you're getting is from your client, not from your server. Unless your clients are quite old, you should be fine with sslv3/tlsv1 only, (ignoring all the vulnerabilities in those protocols for the sake of this discussion). I would focus on fixing whatever issues those java clients are experiencing with ssl3/tls1 over bringing ssl2 back.
Dec
12
answered How to enable mod_info in Apache?
Dec
11
comment SSL connection alert hanshake failure
What version of openssl did you compile into your apache distribution and do you have any errors being written into your ssl_error log?