Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Join us in building a kind, collaborative learning community via our updated Code of Conduct.

Questions tagged [ssl]

SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

0
votes
0answers
16 views

Active Directory LDAPS client certificate authentication

I've a customer whose Linux server fails to connect to a remote AD server on port 636 and it appears to be due to the fact that it does not have a client certificate. Both the remote AD server and ...
0
votes
2answers
37 views

How is HTTPS secure if Private Key is able to be intercepted?

I'm not a networking guy, so I have little knowledge about internet protocols and SSL. My question is coming from a lack of understanding of how https operates. Basically in https there is a phase ...
0
votes
3answers
56 views

How to setup apache with multiple websites using one IP address, separate virtual host files and Cloudflare SSL

I'm using ubuntu 16 LAMP stack. I currently have virtual host files setup for each domain with cloudflare dns pointing to the same IP for 2 Wordpress sites. I'm using cloudflare to generate a free ...
0
votes
1answer
20 views

Configure NGINX to use Cloudflare Free (flexible) SSL [on hold]

noob here I am trying to configure NGINX for the first time and I am looking to use cloudflare's free flexible SSL ... I have been searching on the internet on how to configure NGINX to use cloudflare ...
1
vote
2answers
39 views

WIldcard certificate installed on server not hosting www subdomain

I am looking for clarification/guidance on the following. I have www.example.com installed on CMS powered by Cloudflare CDN. I want to secure subdomains used for other applications hosted on ...
0
votes
0answers
12 views

Wondering about something regarding intermediate certificates and Weechat [on hold]

I have a private server at home that runs a node.js instance and weechat. I also have my own domain, which I registered at EuroDNS, as well as an AlphaSSL certificate, also from EuroDNS. Both Weechat'...
-1
votes
0answers
36 views

SSL received a record that exceeded the maximum permissible length

Currently, our lab web page is reachable through http://w.x.y.z and web server is apache2. Now, I want to set the ssl certificate in order to use https. The configurations are 1- ports.conf Listen ...
0
votes
1answer
23 views

How to install two SSL certificates on two root websites on the same IIS server?

I have two root websites on the same IIS server. I tried to create two HTTPS bindings for each of them: (1) HTTPS, All unassigned, 443, www.site1.com, SSL issed to www.site1.com (2) HTTPS, All ...
0
votes
1answer
30 views

SSL is enabled for IPv6 only [on hold]

It seems that SSL port is open for IPv6 on my Ubuntu server. iptables show that it is open. How can I enable that for IPv4 too? # netstat -tulpn | grep 443 tcp6 0 0 :::443 ...
0
votes
0answers
16 views

Nginx - Root Not Redirecting to www Despite Records and Server Block

I am trying to redirect non-www requests to www, but it appears that either my Nginx config is not running the redirect in the below server block or the fact that SSL is enabled, but not for the non-...
0
votes
1answer
33 views

SSL Certificate installed successfully but website not accessible

I have installed Let's Encrypt SSL Certificate on a windows-server-2012-r2 machine running iis-8.5. It is an ASP.NET 4.5 website running on an Azure VM. The installation was successful and I can see ...
0
votes
0answers
38 views

How to account for full request time in nginx?

I am having trouble debugging some unreasonably slow POST requests via ssl on nginx w/ uwsgi upstream. I am successfully logging $request_time, $upstream_header_time, $upstream_connect_time, and $...
0
votes
0answers
9 views

SSL for remote access via IP on WAMP [closed]

I have been on this for hours, i am very close but no cigar. I have followed a great video on how to setup SSL on WAMP for HTTPS access. I got it to work on my machine for local access by following ...
0
votes
0answers
27 views

Is it possible to setup a reverse proxy and do mutual auth between client and backend server?

Is this configuration possible? I understand basic PKI, but adding a reverse proxy in the middle seems to pose some problems with the SSL handshake authentication step. Is it possible to do mutual ...
0
votes
1answer
14 views

Apache HTTPD MPM Worker or Event for Reverse Proxy with SSL Termination

I'm running reverse proxies with httpd 2.4.27 on RHEL 6 for various organizational reasons. The reverse proxies have to terminate SSL/TLS instead of the load balancer, which makes me want to consider ...
-3
votes
1answer
74 views

ESXi 6.5 web client mutual SSL authentication

Has anyone done it? Don't like the idea of relying exclusively on a user and password. Thanks!
0
votes
0answers
26 views

How to query LDAP via port 636 from powershell?

I use adsi to connect to AD and measure the latency of the connection. For same query when i replace server with server:636 , it fails. What is the easiest way to do a ldap "find" through 636 port?
0
votes
0answers
95 views

Enabling TLS 1.1/1.2 on Windows Server 2008 SP2 still not possible

first for those of you, who might think, this question has been asked so many time before so it is a useless duplicate... I cannot (yet) comment on other questions, so my only option on this is to ...
2
votes
4answers
128 views
+50

Terminating SSL at Cloudflare level. Do I get performance gains?

I saw in a post that terminating SSL at Cloudflare level and HTTP only traffic from Cloudflare to origin gives a performance boost since SSL is negotiated only at the edge. I run a website (mostly ...
0
votes
0answers
17 views

Can .NET1.1 framework use TLS1.2? [closed]

I am trying to figure out if I can get .NET 1.1 framework's client to use TLS1.2? I understand the .NET1.1 has no way to control the SSL/TLS protocol version, but if I disable all other SSL and TLS ...
-1
votes
0answers
25 views

Untrusted SSL certificate [closed]

It's me again, so as I have been answered in my question here: Redirect https to http using node I let go with my idea to redirect https requests to http. I managed to use Let's Encrypt and to ...
0
votes
2answers
40 views

How to get Nginx to refuse SSL/TLS connections where host is an IP or doesn't match a server_name

For our PCI complicance we've starting getting the below failure: We use Nginx for our web server. When accessing the webserver using any of our domain names, we have the correct server_name values ...
0
votes
0answers
4 views

Tomcat hangs after setting the certificates

I'm trying to set up some certificates on Tomcat for using SSL. After a few failures using Apache APR, I decided using NIO. After settinng the file name and its password, tomcat starts correctly and ...
0
votes
0answers
35 views

Why is tcpdump not capturing TLS packets on port 443?

I am using the following command: sudo tcpdump -vvv -A -XX -i any -w dump.pcap I can see several TCP packets coming or and going to the expected IP addresses on port 443. Nevertheless, I am not able ...
0
votes
0answers
2 views

How secure is using sslpassdialog for skipping manual pass input on [Apache]?

When using ssl with apache, restarting apache requires us to manual passphrease input by default. This is time-consuming. Apache prepares the option as follows: SSLPassPhraseDialog exec:...
0
votes
1answer
25 views

The requested URL was not found on this server

I am trying to enable SSL for port 4100 for an Amazon EC2 Instance. When I access the site https://test.example.com:4100/login, I get an error as follows - The requested URL /login was not found on ...
-3
votes
1answer
38 views

Failed to set Up SSL on Tomcat 9 on AWS EC2

I am following this guide to setup ssl on my Tomcat 9 hosted on AWS EC2 (Ubuntu 16.04.5 LTS). Version: java-8-oracle , apache-tomcat-9.0.10 Key created at /home/ubuntu : ubuntu@ip-x-x-x-x:~$ sudo ...
0
votes
0answers
27 views

Can't get nginx caching to works over https reverse proxy

As title, i can't get nginx caching to works on mine reverse proxy. Here is mine nginx's server block configuration: proxy_cache_path /opt/cache/nginx/cache2.xxx.net levels=1:2 keys_zone=test_zone:...
0
votes
0answers
20 views

Apache2 VirtualHost SSL isn't working

I have debian 8 VPS, with apache2. I have some website, that is on 1803 port of my server. I need https, for some works I am doing on this website. I do not have domain for it. So i tried to create ...
1
vote
1answer
38 views

Websphere MQ 7.0.1-14 - able to add missing ssl cipher suites?

I have to connect to a MQ 9 QMGR, which does not allow the available Cipher Suites I can choose from in MQ Explorer that is part of my 7.0.1-14 installation (Linux x86_64). Can I add the needed ...
0
votes
1answer
53 views

How can I generate a self signed certificate that will not fire a SSL_ERROR_BAD_CERT_DOMAIN?

I need to generate a self signed certificate for my application and I want to be able to make it valid if a self generated root certificate have been added to the web browser manually. The problem is ...
0
votes
1answer
27 views

How to debug Chrome SSL issue [closed]

I have a site secured with SSL. It's a single page application. The application communicates with a back-end REST service using mostly POST operations. The application loads perfectly fine but ...
0
votes
0answers
12 views

Export Multiple or all SSL certificates IIS

Is there a way to use appcmd, MMC or perhaps some other tool to export all IIS SSL certificates and then import them in on another server? I've used appcmd to export the bindings and the application ...
0
votes
1answer
115 views

nginx cpu consumption for ssl termination with rtmp stream

Here is my nginx config file user nginx; worker_processes auto; error_log /var/log/nginx/error.log error; pid /var/run/nginx.pid; events { worker_connections 1024; } stream { ...
0
votes
1answer
24 views

DDOS attack protection HAPROXY SSL

I'm trying to protect my server from DDOS attacks, my server always have a redirection to the SSL/HTTPS protocol. but I'm using the next configuration and it's not working frontend http-in bind *...
1
vote
0answers
30 views

Security layer issue

I have a collection of two RDS virtual servers RDS01 & RDS02 under Windows Server 2008 R2 and one RDS/REMOTEAPP virtual server APP01 under Windows Server 2012 R2. RDS01 & RDS02 has the same ...
1
vote
1answer
23 views

e-mail encryption during transfer

for the sake of simplicity i want to visualize the dangers of sending an unencrypted e-mail. I'm just not sure WHO can read unencrypted e-mails. Lets say i'm using Office365 as mail provider and i ...
0
votes
1answer
22 views

vsftpd fails to start (status=2)

The problem is that the vsftpd service fails to start after transferring a working configuration from another server. Of vsftpd's configuration files, only these were modified: /etc/vsftpd....
0
votes
1answer
45 views

Let's Encrypt 404 error on Google Cloud - Compute Engine - VM Instance

I'm setting up my Ubuntu 16.04 VM on Google's Compute Engine. I have Apache installed & it's already hosting my domain on HTTP, and I'd like to enable HTTPS. Steps taken so far: change the IP ...
0
votes
0answers
45 views

Nginx redirect HTTP to HTTPS on AWS ELB

I'm having difficulty redirecting http traffic to https on nginx. Currently i can access the site via both http and https. I'll like all traffic to be forwarded to https. The domain is hosted on ...
0
votes
0answers
20 views

Apache virtual host proxy - ssl error

I've a couple of conf files. first site: <VirtualHost _default_:443> SSLEngine On SSLCertificateFile /etc/ssl/certs/domain_com.crt SSLCertificateChainFile /etc/ssl/certs/domain_com....
1
vote
1answer
38 views

Ideal Setup of Apache for multiple SSL certs with SNI on a single IP

I'm looking for the most efficient way to achieve this setup on Apache 2.4.33 in the Amazon Linux Distro: a single server instance (here: AWS EC2) a single associated IP two (or more) domains, each ...
0
votes
2answers
61 views

Working with port 443 only and blocking port 80

We're trying to harden firewall settings for a computer. We allowed only port HTTPS (443), NTP (123) and DNS (53). Now we fail to send POST requests to a web api application unless we open port 80. ...
0
votes
1answer
19 views

Cloudfront GoDaddy DNS - SSL Certificate Issues

I have a CloudFront distribution setup and working correctly. I also have an SSL certificate issued using ACM. My GoDaddy DNS has a CNAME entry for www which points to the cloudfront distribution ...
0
votes
1answer
21 views

Install trusted Certificate on stunnel

I would like to be able to use a trusted certificate on Stunnel proxy, The default one does not seem to allow me to do this. Is there a way to do this please? Would need to be free.
1
vote
1answer
70 views

Why does nginx require default ssl server to have a certificate?

I have a testing site with 2 domains and I want to enable SSL for both. Also, I want to have a default server to display an error page if a client is accessing some page out of those 2 domains. This ...
0
votes
1answer
57 views

curl - SSL peer does not support certificates of the type it received

Trying to send a request with a client certificate to an Apache server, I have the following request and error: $ curl -X POST https://my-server.com/dummy/user -H 'Cache-Control: no-cache' -H '...
0
votes
1answer
38 views

Openldap and SSL certificate chain validation

I just set up TLS for slapd on one server, using a simple PKI, like this one: ldap cert < intermediate CA cert < root CA cert In order to connect to the ldap server using TLS from a client, I ...
0
votes
1answer
22 views

Gitlab Verify return code: 21 (unable to verify the first certificate)

I'm having some problems that I hadn't before with Gitlab and Git. I updated my SSL on my Debian server as I usually do each year and git doesn't work as intended anymore Apache Web Server and ...
-1
votes
0answers
23 views

HAProxy: retrieve http information from SSL connection

I am curious is it possible to make a such trick with HaProxy. I have a multi-user application with static public IP address. My application generates requests to some kind of external services, ...