Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ssl]

SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

0
votes
0answers
10 views

Messed the SSL certificate files of my VM

I am trying to create a new SSL certificate with openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/apache-selfsigned.key -out /etc/ssl/certs/apache-selfsigned.crt. I am ...
1
vote
0answers
13 views

haproxy tls alert decrypt error

I'm using haproxy 1.8.17 and openssl 1.1.1a from Debian unstable to serve TLS 1.2 connections with client authentication. In wireshark I observe the usual TLS messages: client->server: Client Hello ...
0
votes
1answer
20 views

Use HAProxy as https forward proxy and ssl termination

I'm trying to do something like this: Clients send HTTP request to HAProxy. HAProxy does the TLS stuff to convert the request into https and forward to a server. HTTP to the client. The server sends ...
1
vote
0answers
18 views

AWS SSL wildcard not working for subdomain

I've created SSL certificate on AWS using Certificate Manager (ACM). I included the domain and wildcard in the list of domains for this certificate: mydomain.com *.mydomain.com Then I uploaded some ...
1
vote
1answer
28 views

Encrypting LAN http traffic

I have two droplets at digitalocean. Both servers are LEMP, however one is completely blocked (http & https) with a firewall. I want to make HTTP requests between the two servers, however there is ...
1
vote
1answer
28 views

openssl verify error 2 at 1 depth lookup:unable to get issuer certificate

Openssl is telling me it can't verify my concatenated cert. I downloaded the intermediate cert from the issuer (AlphaSSL) and concatenated that with my domain cert I purchased (domain cert first, then ...
0
votes
0answers
13 views

Lighttpd Reverse Proxy with SSL/HTTPS

I am trying configure Lighttpd to redirect/handle port-specific requests to a subdomain. I can access my plex server via https://www.example.com:32400/ I would like that to be redirected to https://...
0
votes
0answers
28 views

https sometimes not working

I set up a lighttpd server (version 1.4.45) on my Debian Linux 9.0 NAT VPS on mrVM and configured the server to use SSL. I bought my SSL certificate and my domain on NameCheap and added the required ...
1
vote
0answers
14 views

BitBucket Server — running multiple server proxies?

I've got BitBucket server 5.11 I'd like to run multiple proxies in front of it, with different hostnames. So that bitbucket.corp.com as well as corp.bitbucket.com can be hosted on seperate proxies. ...
2
votes
1answer
28 views

Pass-through SSL with HAProxy and vhosts on same IP

Can i pass-through SSL with HAProxy to a vhost that shares ip with other vhosts? I try frontend https bind *:443 #ssl mode tcp default_backend port_443 backend port_443 mode tcp server web42 www....
0
votes
1answer
37 views

haproxy tls hash algorithm

I'm using HAProxy 1.7.5 and openssl 1.1.0f (from Debian 9.5 stabel) to serve TLS connections. Now there are clients offering SHA-384 and SHA-512 based signature algorithms in the client hello message. ...
5
votes
2answers
539 views

Apache allowing HTTP access when should be redirected to HTTPS

I thought I'd followed the accepted wisdom in redirecting HTTP traffic to HTTPS, but following a DNS issue today, and having to use an IP address instead of the URL, I realise something's amiss. ...
-1
votes
0answers
24 views

Https same CSR for 2 windows servers

I have 2 IIS Servers, running on Windows Server. I have 2 different subdomains: server1.mydomain.com server2.mydomain.com I want to buy a wildcard https certificate for mydomain.com I can provide ...
0
votes
0answers
32 views

Postfix TLS with Subject Alternate Name

I have setup Postfix with a purchased SSL certificate. Everything works on the mail server except that the clients perceive the SSL certificate as "invalid - identifies the wrong site". Here are the ...
0
votes
1answer
15 views

Laravel Forge/LetsEncrypt SSL error “SSL_ERROR_NO_CYPHER_OVERLAP”

Some users have complained that they cannot access our site due to a "secure connection failure" i.e. SSL. The actual error code provided is SSL_ERROR_NO_CYPHER_OVERLAP. Server is nginx with ubuntu ...
1
vote
1answer
33 views

503 proxy error and unable to establish SSL connection

I have a docker container running on my server. It's running an instance of collabora/code if that matters. I have a external subdomain that does a reverse proxy to the container URL but getting a 503....
0
votes
0answers
30 views

PHP Curl SSL returns Peer's Certificate issuer is not recognized [on hold]

I am a client trying to connect to my vendor's server. I have been through dozens of sites trying to figure out what I am doing wrong... $url ="https://someurl.com"; $curl = curl_init(); ...
1
vote
1answer
41 views

Need help to establish secure ftp connection from linux to z/OS FTPS server

I need help to establish secure ftp connection from linux client to z/OS host running FTPS server. From FTPS server admin I have got following information: Host IP address, port, CA certificate file ...
0
votes
0answers
27 views

Nginx returns wrong SSL certificate

I have domains likes app.something.com app.uk.something.com There is no issue when I access https://app.uk.something.com/login or other urls with path behind, it returns the site with correct ...
2
votes
1answer
40 views

What Does “L1K” indicate on an Entrust Certificate

I was working with a teammate importing certificates into a java keystore and I noticed our intermediate certificate had the ".L1K" notation, was then about to import into our Java application's ...
0
votes
0answers
10 views

How to force SSL on all FTP connections on a VPS Windows Server 2018

I have a VPS server that is running on Windows Server 2016. I added FTP access to one site on that VPS. But every time the user tries to connect using FileZilla FTP the user is prompted with the ...
0
votes
1answer
47 views

Why does switching to secure folder (httpsdocs) break the PHP file upload function

Server version: Apache/2.4.34 (Unix) I'm trying to utilize an existing SSL certificate for several sub-directories of a domain, but the architecture for the domain separates out two directories for ...
0
votes
0answers
13 views

Implementing certificate pinning on openldap client

I am trying to find a way to get openldap (client-side, RedHat 7.6) to only accept one particular TLS server certificate for a particular server, and rejects any other certificate, even if it was ...
0
votes
1answer
22 views

IIS10 de-evolved for SSL CA Certs all appear as Issued to: localhost

I recently added a fourth SSL "COMODO RSA" cert to my IIS10 Server 2016. This is a dev server so we have one IP address and use host headers for a variety of domains in IIS. If i inspect bindings ...
0
votes
0answers
30 views

tls 1.2 handshake timeout docker container

I'm working on a fresh ubuntu 18.04.01 in which I installed Docker version 18.09.1, build 4c52b90 by following the official install guide. I'm experiencing a weird issue regarding TLS 1.2 On the host ...
1
vote
0answers
51 views

Standard practice for managing expired and revoked certificates used for signatures? [migrated]

Curious to know what the standard practice is to maintain old/revoked certificates that were previously used to sign documents that must be verified in the future. For example, suppose there is a ...
-1
votes
0answers
35 views

Apache error: Provided via SNI, but no hostname provided in HTTP request

I am pretty new to Servers and I got this message in my Apache error log: [Wed Jan 09 13:09:50.484812 2019] [ssl:error] [pid 7533] AH02031: Hostname \xad\xf95\xc4\xbb\x01 provided via SNI, but no ...
1
vote
0answers
35 views

SSL cert mismatch on redirect to sorry/maintenance website

We are trying to address an (IIS) SSL cert mismatch issue. We own dozens of domains name for various lines of business. We have multiple websites load balanced on a netscaler onsite. For example, ...
0
votes
0answers
17 views

Logstash isn't accepting the self signed certificates and throws a sslv3 alert handshake failure

I have set up an elsatic stack in my laptop and I have configured full stack (filebeat, logstash, elasticsearch and kibana) in it. But now I need to connect filebeat and logstash in a secure manner ...
0
votes
1answer
22 views

Getting dockerized roundcube to work with dockerized dovecot - plaintext not allowed

I have a server running both roundcube and dovecot, each in their own container. The server is secured with letsencrypt, all http traffic is routed to https. I have a proxy setup to route https to ...
0
votes
1answer
37 views

All sub-domains are redirecting to HTTPS

I have a root domain (https://kernl.us) that is secured via a Let's Encrypt SSL certificate. This works fine, but when I try to go to a new sub-domain (http://status.kernl.us) Chrome redirects me to ...
0
votes
0answers
20 views

Error 503 Back-end fetch failed

I have some problem with the nginx varnish configuration. When I connect https://example.com I get these messages: Error 503 Backend fetch failed Backend fetch failed I'm using hitch for ...
0
votes
0answers
33 views

How to remedy TLS handshake issue while forwarding packets between two NATs?

There is a local network with Wifi router working as NAT server, which is connected to an ISP. It's needed to place a firewall between the router and ISP which filters incoming and outcoming traffic, ...
-2
votes
0answers
17 views

Nginx Varnish Configuration issue

I'm trying to install varnish with ssl from this link: https://www.linode.com/docs/websites/varnish/use-varnish-and-nginx-to-serve-wordpress-over-ssl-and-http-on-debian-8/ I did everything like post ...
0
votes
0answers
12 views

nginx: Most efficient non-WWW/WWW/SSL redirect? [duplicate]

Say, I have two domains for one virtual host: primary.tld and secondary.tld. Both sites need to be reached with or without www. in front. Eventually all traffic should be redirected to www.primary.tld....
0
votes
0answers
20 views

browser times out over https on mobile network

When accessing oletymeshop.com from wifi, evrything works fine on http and https. When accessing over mobile network (4g / lte) http works, but https times out and nothing ever shows in the httpd ...
2
votes
2answers
98 views

NGINX Proxy pass to WebSocket and PHP not working with SSL

I'm trying to route requests in Nginx in the following way: Requests made to / should go to a PHP script (proxy.php, which itself is a proxy) Requests made to /websocket should be proxied to http://...
0
votes
0answers
43 views

Squid Access Denied on SslBumpAndSplice

I have configured Squid as a transparent HTTP Egress Proxy, filtering outgoing web traffic based on a whitelist of known good URLs. I am now trying to get it working with HTTPS using the instructions ...
0
votes
0answers
35 views

SSL Medium Strength Cipher Suites Supported in hyperkube

I have the SSL Medium Strength Cipher Suites Supported vulnerability on port 10250. Hyperkube is running there: root 13127 1 22 2018 ? 3-00:40:16 /opt/kubernetes/hyperkube kubelet --...
-1
votes
1answer
45 views

Must I setup SSL certificate if my server is listening on only port 443 with Nginx?

I am using Amazon Load Balancer to receive requests on Port 443. Then I am sending off these request to my EC2 server on port 80. If I try to send the request on port 443 to EC2 nginx error.log file ...
0
votes
0answers
19 views

SSL Issue - Mixed Content Error between Front-end and Back-end in the same server [closed]

I have a server (an instance of EC2 from AWS) with a frontend (Html + CSS + Javascript) and a backend (C #) hosted by IIS. Both communicate through HTTP requests, with the frontend on port 3000 and ...
1
vote
1answer
55 views

nginx 1.15.8 loses TLS 1.3 after gcc 8 installation

I run a centos 7.6 server with nginx. Centos repos do not have latest nginx, so I compiled manually using instructions from here. This left me a nginx binary: nginx version: nginx/1.15.8 built by ...
1
vote
1answer
45 views

What CN name should I use when I want to setup SSL on port other then default 443?

I have server that runs both my public web server, and local one. Local server is on port 333, and I used invalid certificate for it for a long time, but I want it to be properly configured, so I made ...
0
votes
2answers
57 views

Can I specify multiple hostnames in a single certificate?

I have a cloudera managed Hadoop cluster where I had installed SSL certificates on all servers. Unfortunately, the host name on the servers are not the same as the one configured over dns. When run ...
0
votes
2answers
34 views

Is AWS certificate manager the one in charge for HTTPS connection?

I am confused about AWS Certificate Manager and the SSL certificates it provides: If I use it, will my website that's hosted on an EC2 instance have the green lock with https connection? I am ...
0
votes
0answers
6 views

How to make nginx to send early data in POST method [duplicate]

I am testing TLS 1.3 and 0 RTT in a local nginx web server. It works fine with GET methods. But when I use POST methods to send early data, it does not succeed. I think the cause is the ngnix server....
-1
votes
0answers
42 views

Multiple SSL Certificates Kubernetes

I am running a web service that can be accessed from my company's domain name. I have setup automatic SSL certificates with Lets Encrypt as seen below. apiVersion: extensions/v1beta1 kind: Ingress ...
-1
votes
1answer
43 views

Generate SSL certificate files from text file

I have generated a free SSL from zerossl.com through their wizard, and finally I got a pure text file containing pure text with two BEGIN and END. I want to know how to generate .crt and key from ...
0
votes
0answers
18 views

How can I add 497 redirect and listening directives to existing NGiNX config [duplicate]

I have a NGiNX reverse proxy that has a configuration set for a local server. I want it to listen on port 32400, enforce SSL on that port and pass on the traffic to the local server as needed. My ...
0
votes
1answer
34 views

How to check if letsencrypt ssl certificate is installed? [closed]

I installed Lets Encrypt plugin in my WHM and run for one of my site but it when I'm checking to sslshopper site to confirm that certificate is installed or not it shows : Common name: example.io ...