Questions tagged [ssl]

SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

Filter by
Sorted by
Tagged with
0
votes
0answers
3 views

Accessing instances of applications with public DNS records that resolve to private IPs

I have an instance of Hashicorp Vault running on a DigitalOcean droplet. I have set up Certbot to obtain a Let's Encrypt certificate for use with TLS. The certificate is valid for use on the domain ...
0
votes
0answers
11 views

If the certificate CN is different from a server's public DNS name, are SANs the way to go?

I am aware that hostname verification is required for an SSL handshake to be successful, and is vital for security reasons (i.e. MiTM attacks). That said, AWS automatically assigns public DNS names ...
0
votes
0answers
10 views

Apache Proxy Radius Auth Failed To Start

So i have apache2 installed and running as a proxy, now i need to add Radius auth to allow only our own users to access our servers through the proxy, this is the setup i have for apache radius auth: ...
2
votes
0answers
49 views

“Update Your Amazon RDS SSL/TLS Certificates by October 31, 2019”

I, like a lot of people, received an email saying to update my RDS instance to use the new rds-ca-2019 certificate for SSL connections (previous being rds-ca-2015 which expires March 5, 2020). Their ...
0
votes
1answer
12 views

Different SSLSocket with Radius Server

I want to make a server and client application. All clients connect to the server via wifi. I want to protect the network with SSL Certificate. I found 2 alternatives: By using SSLSocket (javax.net....
0
votes
0answers
13 views

Squid Proxy With Kibana

0 So i have kibana/ELK setup on my server and i have another server which has squid installed and running fine. BUT. for some reason when i try to https to kibana (which i can do fine without the ...
1
vote
0answers
14 views

OpenLDAP TLSv1.2 configuration

I am trying to set up my OpenLDAP to only use TLSv1.2 and better and I am trying it with this ldif: dn: cn=config changetype: modify add: olcTLSCipherSuite olcTLSCipherSuite: HIGH dn: cn=config ...
0
votes
0answers
12 views

How to list supported TLS versions on Windows Server?

By default .NET 4.7 applications now use the OS TLS default version to make web requests to SSL ressources : https://docs.microsoft.com/en-us/dotnet/framework/network-programming/tls How can I find ...
0
votes
1answer
21 views

HAProxy as TCP load balancer (SSL passthrough) not working?

i am having some trouble setting up HAProxy as a TCP load balancer (layer 4) and i would like to have your advice about it. i've been following many guides on the web and i came up with this ...
-1
votes
0answers
32 views

nginx - self-signed certificate signed by a self signed root ca is not accepted

I want to set up a CA for my local network. The root certificate should be installed on various devices (iPhone, Windows PC, MacBook). With a server certificate I want to secure the traffic between ...
0
votes
2answers
11 views

Active Directory LDAPS not working

I have a test domain with one domain controller. On it I have imported the root and issuing CA certificates to the appropriate certificate stores for the entire computer and have done that for every ...
0
votes
1answer
19 views

openssl alternative names is missing

I generated CA, with this article, and stored it in my machine. Now, I want to create a server certificate and use it in my webserver. This is my generate server certificate code: #!/bin/bash # USE: ....
0
votes
0answers
38 views

how to redirect https requests to specific port [closed]

I have create a node.js application that communicates with facebook messenger and runs on aws. For https, I use nginx; the configuration I use now is the following: server { listen 443 ssl; ...
0
votes
0answers
16 views

Squid Proxy using HTTPS

So i have squid proxy setup and running fine with HTTP but now i need it to work with HTTPS. i already have a self signed certificate using my own root CA which is installed on my pc, and a key as ...
1
vote
2answers
21 views

Can I create an openssl key for a server from a different host?

I have two EC2 instances with an ALB and I need an SSL certificate for Tomcat. I don't have shell access to the EC2 instances, I can only work them via Ansible. I have to generate a cert request but ...
0
votes
0answers
18 views

Bad Gateway after installing CA ORIGIN by Cloudflare on Nginx

I installed the CA Origin by Cloudfare on Nginx by following the instructions listed here: https://support.cloudflare.com/hc/en-us/articles/115000479507#h_30e5cf09-6e98-48e1-a9f1-427486829feb So ...
1
vote
0answers
44 views

Why is my SSL Cert/IIS Setup not working correctly?

I have 2 domains that are pointed to the same website in IIS 8.5 on Windows Server 2012, domaina.com and domainb.com. Domaina.com is the primary website and domainb.com is the secondary site. Right ...
0
votes
1answer
42 views

GCP load-balancer ssl certificate resets itself after change

So I need to change an expired SSL certificate. Unfortunately, the one responsible for this task has passed away suddenly. I have no experience with google cloud, kuberneted or ingress. If I go to ...
0
votes
1answer
141 views

MikroTik EAP-TLS WiFi Config using Certificates

What are the upsides and downsides of using EAP-TLS authentication with certificates for WiFi client connections? How is this superior than just using standard WPA2 password authentication? How do I ...
1
vote
2answers
50 views

SSL passthrough vs SSL termination + HTTPS

I understand that when configuring an HTTPS load balancer, SSL termination is generally more favored for speed and the ability to inspect the data and perform actions such as add headers, whereas SSL ...
2
votes
1answer
44 views

HTTPS:// is not working on Nginx

My domain is: http://indiasaplings.com/ I ran this command: sudo certbot --nginx -d indiasaplings.com -d www.indiasaplings.com It produced this output: IMPORTANT NOTES: Congratulations! Your ...
0
votes
3answers
50 views

Installing HTTPS/SSL on Windows servers that have no access to the Internet

We have some Windows servers that are behind a firewall, and have no access to the Internet. Some of them are Web Servers (for intranet), and some are application servers, database, file, etc. Some ...
1
vote
1answer
76 views

Installing LetsEncrypt SSL on Amazon Linux with Nginx + PHP-FPM gives “The connection was reset” error

It's been a while since I needed ServerFault, I hope someone can help me. I am trying to secure my Laravel (PHP) application running on Amazon Linux with LetsEncrypt free SSL. Using certbot-auto, I ...
0
votes
0answers
15 views

Intermittent TLS negotiation issue

We've been having an intermittent issue with 2 servers communicating with each other over a TLS 1.2 connection. The client has a 5 second timeout. I can increase the timeout to 15 seconds and it'll ...
0
votes
0answers
37 views

Filezilla Server - AUTH TLS timeout and Server sent unsorted certificate chain in violation of the TLS specifications problems

I have Filezilla Server (0.9.6 beta) setup on a Windows 2008R2 server. Until recently it was running fine but lately, we've been receiving reports of connection errors. The two most common reports ...
2
votes
1answer
63 views

Enable SSL compression in nginx server

I've been trying to do a demo of the CRIME attack, which requires both a browser and server with SSL compression enabled. I've procured such a browser, and I've set up an nginx HTTPS server on ...
0
votes
1answer
34 views

Getting CA signed SSL certificates for Windows servers on internal network

I'm hitting a wall here so need some help. I am currently involved in a project that will require use of a third party software installed on one of our internal servers. The software in question ...
0
votes
1answer
98 views

error:14004438:SSL routines:CONNECT_CR_SRVR_HELLO:tlsv1 alert internal error

I have tried searching for this, and I have found things that are close, but I have not found anything that helps so far. I apologize in advance if this is already asked. I have a service which is ...
0
votes
1answer
28 views

Force Redirection from http to https nginx to a specific port

I've a service running in 9000 port and setup ssl using letsencrypt. I would like to forward all request from http to https. http://demo.mydomain.com -> https://demo.mydomain.com http://www.demo....
0
votes
0answers
29 views

nginx DNS over TLS proxy IP transparency

I currently have nginx set up to forward DNS over TLS requests to my private local DNS server with the following configuration: stream { upstream dns-servers { server 127.0.0.1:53; ...
0
votes
0answers
19 views

SSL Connection Closed on one load balancer node

We're running a group of websites behind a rackspace HTTPS load balancer. We have two servers, with the exact same apache2 (httpd 2.2 on RHEL6) configuration. SAN certificates were generated by ...
0
votes
1answer
46 views

2 TLS record layers in the same packet

I am analyzing some packets from a smart cam, and I found that a single IP packet includes 2 TLS records as shown here I thought that one IP packet can include only one data segment. Can someone ...
0
votes
1answer
30 views

Constant SSL handshake errors from random IP's on fresh server

I just set up a new server from, I've got as far as the following: Secured it (no root or password logins, UFW etc) Installed a LEMP stack. After tailing the nginx error log, I'm seeing constant ...
1
vote
0answers
31 views

How to add checks for multiple specific ssl_client_fingerprints in Nginx configuration?

In addition to usual CA chain validation, I would like Nginx server section to permit specific client certificate thumbprints only. I could find how to check for single fingerprint, but I'm not sure ...
0
votes
0answers
24 views

CA certificate suffix

I'm trying to deploy a container and I have to use TLS. I've generated a certificate request and using OpenSSL. What is confusing me is that I need to provide three value for the parameters which are:...
3
votes
1answer
67 views

Are there any problems using “openssl ca”?

I'm trying to create private CAs and saw many tutorials using openssl ca command for achieving the task. However, in the man page, I see these lines: sample minimal CA application The ca utility ...
0
votes
1answer
22 views

LetsEncrypt/CertBot Installed, Chrome Still Not Secure

hopefully this is pretty open and shut, but here's the situation. I used LetsEncrypt and CertBot to set my website www.blueprintstats.com up with an SSL certificate. Now, I realized after the fact ...
0
votes
0answers
69 views

HAProxy - Dynamically updating SSL certs without a reload

We currently use HAProxy to manage TLS termination for thousands of domains, all of which have Let's Encrypt certs getting rotated on a regular basis. The relevant config looks like this: frontend ...
1
vote
0answers
51 views

IIS SSL Problems During Heavy Server Use

My IIS web server farm (Windows 2008 R2) is experiencing heavy server use and SSL requests are timing out on what appears to be the TLS negotiation (500+ Get Requests/sec with over 20K Current ...
0
votes
1answer
23 views

Unable to get Client Certificate Chain from apache

I'm trying to get the client certificate chain and root from apache to my Java backend. This is the relevant part of my apache config: SSLOptions +StdEnvVars +ExportCertData RequestHeader set "...
1
vote
0answers
48 views

HTTPS site is not loading in NGINX web server

Below is my NGINX configuration. My website is deployed on AWS EC2 instance. I have checked the firewall settings and port 443 is open for public access. I'm able to access my website from http://...
0
votes
0answers
16 views

Certificate not validated - Ubunut 16.04 LTS and Cloudflare

I am running a webserver on Ubuntu 16.04 LTS. My CMS relies for updates on a site hosted with a Cloudflare certificate. My problem is that is started recently to be not accessible anymore. When I ...
0
votes
1answer
47 views

IIS 7 multiple sites, 1 in many sites still serves the old SSL certificate

My server run IIS 7 with multiple sites. It uses 1 wildcard SSL certification for domain and subdomains (SAN SSL). It were working fine. Then I installed new SSL certificate (the same type like old ...
0
votes
0answers
10 views

Setting up iptables for a proxy which acts as a man in the middle and resides on the same machine as the client

I have a proxy server (squid) which acts as a man in the middle for ssl traffic. The proxy setup and fake ssl certificates for the clients are working well, but I can't seem to get the iptables config ...
0
votes
0answers
34 views

Trying to use an openLdap docker image for SSL

I'm trying to use docker to create a openldap server than I can connect to over our intranet. I've set it up to run as host so that it doesn't cause any network issues and we can use the network DNS. ...
0
votes
0answers
30 views

How to check if Windows Server 2008 R2 is using TLS 1.2 for communications?

I've been trying to figure out if my IIS server is using TLS 1.2 for communication since an API I connect to is disabling access for TLS 1.1 next month. Everything I've found on the web is telling me ...
0
votes
0answers
52 views

nginx+gunicorn+django SSL not working, on Chrome it gives ERR_SSL_PROTOCOL_ERROR, which is “This site can't provide a secure connection.”

I've just finished setting up an nginx+gunicorn+django web server (after having virtually the same problem with apache2+wsgi+django), and confirmed it works perfectly over http. After running ...
-2
votes
0answers
28 views

APACHE Two way ssl authentication with check user cert by OCSP server

I config two way ssl authentication and it works but i have problem to force apache server to send request to the ocsp server. I have: Offline root CA (Windows Server 2016), Enterprise intermediate ...
0
votes
0answers
32 views

How to use OpenConnect without blocking port 443?

I've migrated a Windows 10 machine to Ubuntu. On Windows 10 I connected to a Cisco VPN through the Cisco AnyConnect client. It worked fine and allowed me to use port 443 while connected to the VPN (...
-1
votes
1answer
41 views

Secondary SSL Certificate on same IIS application

On Azure web apps, there is a default SSL certificate signed by Azure. If you add a custom domain and a certificate for that domain the Azure certificate still exists and it is visible with ssl ...