Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ssl]

SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

0
votes
1answer
17 views

What will happen if client call Apache server by IP and there are two SNI virtual hosts

We have a Apache 2.4 web server with a couple of virtual hosts with different certificates. I have set up SNI name based virtualhosts : ap.mmm.com and ac.mmm.com, it's working great. All on same IP (...
0
votes
0answers
10 views

Fortigate Firewall | Client not using SSL-VPN Tunnel IP when browsing internet through SSL-VPN as a remote user

I HAVE BEEN REDIRECTED HERE FROM NETWORKENGINEERINGSTACKEXCHANGE.COM It is possible I'm doing it wrong, thus could someone guide me how to achieve this. I'm trying for the client to access the ...
1
vote
0answers
17 views

How to configure Dovecot to disable NIST's curves and still rertain EECDH?

I am interested in configuring Dovecot's TLS so as to retain forward secrecy, but eliminate all of NIST's elliptic curves. Besides being subject to side channel attacks, in some quarters there is a ...
0
votes
0answers
29 views

How to deal with requests to domains not handled by the nginx config, or requests to the server's own IP

My main objective is to prevent a production certificate being served which would throw a browser warning referencing production.example.com typically in the certificate's SAN field, even though the ...
0
votes
1answer
97 views

My Web application gives CORS error after adding HTTPS using Let's Encrypt

This is my application : https://cfslpro.com/student_portal/ Front end is done by AngularJS and back end is done by Node.JS. Hosted in Apache server. ( Digital ocean Linux 16.04 ) You can try login , ...
0
votes
0answers
27 views

Nginx SSL configuration for multiple domains on the same IP

I'm serving multiple domains from the same IP. I enabled SSL for one of them (ssobczak.net) and now I'm getting redirected instead of reaching it. I'm getting redirected to another one: beta....
0
votes
0answers
15 views

Node.JS rest API is not accessible from outside when I added SSL to my Linux server

This is a testing application i'm doing. https://cfslpro.com/student_portal/ username : chanu password : 123456 Before adding HTTPS , this login and everything worked. But now nothing is working. ...
0
votes
0answers
13 views

Zabbix web-scenario with Authentication

I want to check service availability with zabbix. On my server I have Tomcat and java app deployed, which is contacting external server (GET request), and it is working (when the service is available)....
2
votes
1answer
33 views

How to learn more when the Windows 10 RDP client displays a “logon failed” message?

I'm attempting to RDP into a Windows 10 Enterprise desktop behind a corporate firewall while using a proprietary cross-platform endpoint client installed on my home devices to access the network ...
0
votes
0answers
11 views

Mercurial error while connectin on Bitbucket after updating TLS

So bitbucket upgade his TLS version and now I have problem pulling from bitbucket repos. I have only one server affected and I can't figure out what is wrong. The error is [SSL: WRONG_VERSION_NUMBER] ...
0
votes
1answer
25 views

NGINX using other server block as default

I´m currently configuring my nginx server and I´ve ran into a problem where I can´t seem to find the problem I did, even after hours of research. I´m running Debian 9 with PHP 7.2-fpm on NGINX. So, I ...
2
votes
1answer
40 views

Improving NGINX Throughput on a Single SSL Thread

We are configuring a file delivery server using nginx. The server will be serving large files over HTTPS. We have run into an issue where we can only achieve around 25MB/s on a single HTTPS thread. ...
0
votes
0answers
14 views

Disable SSLCompression in Apache <2.2.24 in Gentoo

Thanks a lot beforehand. I need to disable SSL Compression in Apache 2.2.16 in Gentoo in order to mitigate TLS CRIME. I've been searching for a long time and I've found out that it's possible to ...
0
votes
0answers
18 views

How to authenticate with client certificate and service certificate in php [closed]

I want to convert a code from C# to PHP. In the c# script we have a SOAP client that authenticate with both client certificate and service certificate. The client certificate has a pfx file that ...
-1
votes
0answers
28 views

Nginx built with rtmp module worked until ssl was added to server will not restart config tests good

Setup nginx with the rtmp modules in order to do video restreaming and a video player using this guide. Had no issues nginx server worked great. Next step was to put SSL on the web page and that's ...
0
votes
0answers
15 views

Apache HTTPD Memory Usage Reaching 12GB/process (CRL checking)

I'll try to keep this as concise as possible. I can post whatever settings might be helpful. The bottom line is that CRL checking is really slowing us down and I'm looking for ways to mitigate or a ...
0
votes
2answers
43 views

Port 80 on Web Server Security

Currently I'm running a web server, The server itself is using both HTTP "Port 80" and HTTPS "Port 443". I purchased an SSL certificate and installed it to the issue is the manufacturer of the ...
0
votes
2answers
42 views

Nginx PM2 NodeJS reverse-proxy with SSL gives HTTP 504

Once upon a good time, I had a good config for three NodeJs, socket.io API running on the same Ubuntu 16.4 LTS VPS server with PM2 for process managing and Nginx for reverse proxy to three different ...
0
votes
1answer
19 views

How to setup a PHP API to work over HTTPS?

I use a simple API with PHP to get some values in JSON format, it is working fine in web browser over HTTP. I enabled SSL in mariadb with the certificates, but when I try my API using HTTPS, it says ...
0
votes
0answers
16 views

I have issue on SSL AWS [closed]

I have installed proper godaddy SSL in AWS ec2 ubuntu 14.04 My issue : SSL is working perfectly for 10 mins when I restart apache 2. after 10 min SSL stop working. can anybody please help me to ...
0
votes
1answer
101 views

How to install cer and p7b certificates to use in IIS?

I have generated the CSR request on our windows server ( we need to bind our application hosted on this server for Https) using below commands in keytool: Keytool -genkey -alias <server name> -...
0
votes
0answers
24 views

Securely accessing Juju Kubernetes cluster on remote machine

I have deployed "localhost" Juju (Conjure) Kubernetes cluster to an Ubuntu machine. From that machine, the cluster API is readily accessible with kubectl config generated by conjure-up. Now I want to ...
1
vote
2answers
48 views

POSTFIX cant connect from SMTP with TLS

Thanks all for helping me :),i was working a direct bulk mail sender project, my program was running properly then it gave me an error then i've spend too much time with a lot of searching from ...
0
votes
2answers
43 views

HAProxy & Nginx SSL redirect issues

I have 2 websites, websitea.com and websiteb.com, these are hosted on two servers 10.0.0.8 and 10.0.0.12 for load balancer and I try to made it work with both HTTP,HTTPS protocol with this config. ...
0
votes
1answer
69 views

Apache https redirect only redirects port

Been banging my head on this one for a while, for some reason Apache refuses to properly implement https redirect. I have tried it using a permanent redirect as well as a mod rewrite and everything in ...
-1
votes
0answers
19 views

SSL/TLS Diffie-Hellman Modulus <= 1024 Bits (Logjam) vulnerability found even after disabling DH exchange in registry.

The vulnerability is found on port 443 where Apache Tomcat 8.5 is running. I have tried adding ciphers in server.conf as shown in the below links but the vulnerability still persists. https://...
0
votes
0answers
35 views

Why does this SSL certificate seem to be rejected by Kindle Fire?

The SSL certificate for the domain cf.geekdo-static.com seems to pass all the online test for compatibility, gets an A rating from https://www.ssllabs.com, etc. But users on Kindle Fires, (and I've ...
0
votes
0answers
17 views

Turned off SSL's in JBOSS nmap thinks different

I set my JBOS server to use TLS only with the following line in the connector sslEnabledProtocols = "TLSv1.1,TLSv1.2" but when I check the server with NMAP it shows: ssl-enum-ciphers: | SSLv3: | ...
0
votes
1answer
18 views

“com/index.php” without slash in apache

Finally I have finished install SSL Certificate and finish to config the redirect from my old site to my new one, but right now when I try to entering from the old site, it send to me to new sit but ...
1
vote
2answers
69 views

What kind of SSL certificates do I need for 2 IPs and 5 subdomains of the same domain?

I have a domain (my.com) containing 5 subdomains (www.my.com, app1.my.com, app2.my.com, app3.my.com, app4.my.com). The 4 apps are hosted on a Windows/Apache 2.4 server with a single IP using virtual ...
1
vote
1answer
58 views

Enabling SSLv2Hello causes SSL handshake failure against AWS endpoints

We are hosting on AWS, and all our endpoints use predefined security policies that do not allow TLS below 1.2 (that is, TLS-1-2-2017-01 for ELB or TLSv1.2_2018 for CloudFront). One of our customers ...
1
vote
1answer
67 views

SMTP Problems due to CN vs SNI on the Certificate?

I have a scenario where I'm using a shared mail server (cPanel) for SMTP on multiple domains for several clients. I hit an issue where Ruby's OpenSSL library complains that the hostname "smtp.domain2....
0
votes
0answers
22 views

postgres large query fails on local machine only with sslv3 error

Server: Heroku postgres hobby On my old laptop that I have right now and is currently working I can do pg_dump command: "C:\Program Files\PostgreSQL\10\bin\pg_dump.exe" -n public --verbose --host=...
1
vote
0answers
38 views

Apache SSL reverse proxy to a node server using websockets

Browsing to a root domain like https://sub.example.com and navigating through pages such as https://sub.example.com/page1 works. But only if I start my initial connection at the root. If I refresh ...
0
votes
0answers
22 views

alias name [myname] does not identify a key entry

I received certs from the company when I create a keystore from the cert and use that in my spring boot application I get an error that: alias name [myname] does not identify a key entry my key ...
0
votes
0answers
27 views

SSL connection error but works if you telnet port first

I'm troubleshooting a connection to an application (Citrix Netscaler), between several countries in a complex network. There are definitely firewalls along the route. Machine is pingable tracert is ...
-2
votes
2answers
29 views

Error setting SSL ubuntu

i have some problem here, i have .key and .crt file for the webserver that i need installed manually. done adding this in apache2/sites-enabled/default-ssl.conf SSLCertificateFile /etc/ssl/...
1
vote
0answers
648 views

SSL issues “Peer's certificate issuer has been marked as not trusted by the user.”

We have a public facing development server that requires SSL for a particular function. Yet EVERYTHING that uses SSL in any form returns curl: (60) Peer's certificate issuer has been marked as not ...
0
votes
2answers
62 views

Hostname myweb.intweb.net provided via SNI and hostname mysecondweb.intweb.net provided via HTTP are different

I have been having an SSL website in one of my servers for a while without have any issues, then I had to add a second SSL website in the same server using the same port (4433). My configuration looks ...
0
votes
0answers
20 views

Windows, Custom CTL for TLS client authentication (command line)

Trying to configure TLS user certificate authentication process in windows. For this i need to configure list of trusted certificates that TLS server sends to client. I need CTL identifier for this ...
0
votes
1answer
24 views

Custom Certificate Authority not recognised on Windows server / Cert shows as “self signed”

Scenario: We run our own Certificate Authority for internal server to server TLS connections. Created a new SSL certificate for a web server. Deployed to server, SSL works.... Send CA public key and ...
0
votes
2answers
29 views

Is it possible to set up nginx as a reverse proxy that also forwards the proxied server's certificates?

I'm having a bunch of virtual hosts served behind a nginx reverse proxy. At the end of each there is a server that has valid certificates for the given virtual domain. E.g. api.example.com -> ...
0
votes
1answer
60 views

How to forward packets at TCP level by using iptables?

Suppose I have two local machines A and B(Ubuntu), and there is also a remote server C. Originally, through RESTful API, I can call GET https://domain_of_C/resources directly from machine A to get ...
2
votes
0answers
45 views

Do any reputable mail servers require STARTTLS encryption for SMTP delivery?

Are there any large, reputable MTAs (like gmail, hotmail, icloud, etc) that will bounce mail or otherwise fail to deliver if the receiving MTA doesn't support STARTTLS? Put another way, will ...
1
vote
1answer
58 views

TLS v1.3 active despite not being enabled in Nginx config

Relevant config: ssl_protocols TLSv1.2; When I test the server at SSL Labs, the test reports that TLS 1.3 is available and lists the default ciphers and other results as if TLSv1.3 were included in ...
0
votes
0answers
25 views

Debugging an issue with the Yahoo email proxy

Around 7 days ago, Yahoo Mail made a breaking change to the way they handle images in emails. For example, this image: https://jonnyjordan.com/wp-content/uploads/2018/03/magento-image-upload-button-...
0
votes
1answer
36 views

multiple SSL cert on same apache host results in wrong cert presented

I have configured an Ubuntu host with Apache 2.4 and multiple domains (a.com and a default of no domain name specified, just an IP). The httpd.conf file contains entries for a default web site (no ...
0
votes
1answer
20 views

Using proxy to remove SSL overhead from client

I know many application uses reverse proxy to reduce SSL overhead from the application, where handshake and encryption/decryption are between the client and proxy, and the back-end app get the ...
0
votes
1answer
42 views

Degraded performance with NGINX SSL reverse proxy

We have a Java Spring Boot application that is behind a NGIX reverse proxy. Everything works as expected when the using HTTP - the API responds times are quit fast. Once the protocol is switched to ...
0
votes
0answers
17 views

Certificate Chain Issues in Draytek Vigor Router 2862

I have a Draytek Vigor 2862 that I am trying to configure SSL on. I have imported the Comodo Cert in as a Local Certificate, added the intermediate certificates as trusted certificates and then ...