Questions tagged [ssl]

SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

Filter by
Sorted by
Tagged with
1
vote
0answers
18 views

TLS handshake stall with Apple push notification service

I'm deploying a PHP application on a RHEL7 server. This PHP application sends push notifications to Apple and Google. While testing the push notifications, the notifications sent to Google work fine, ...
0
votes
1answer
14 views

Where to store service certificates and their associated private key?

I created a program that gets the Let’s Encrypt certificates for my services (web sites, dovecot and smtp). I previously stored these service certificates in /etc/ssl/certs (I’m on Debian), and just ...
0
votes
1answer
60 views

How do I properly configure SSL on the backend between nginx and an app?

I am trying to configure re-encryption on a backend, so that traffic between nginx and the upstream app is encrypted separately from traffic between the user and nginx. For the purpose of a test ...
0
votes
0answers
18 views

Testing TLS1.2 support on both client and remote server (SQL)

I am trying to verify that both my linux client and windows SQL server support TLS1.2. but not quite certain what to make of the results. I am hoping for some guidance. On the linux client I am ...
0
votes
0answers
13 views

Apache as reverse proxy for NGINX - SSL certificate exists only on NGINX

A network is configured like Internet --> Apache --> NGINX --> Application NGINX is storing HTTPS certificates and is on another server. Apache doesn't have an access to certificates. ...
4
votes
1answer
241 views

'Same HTTPS binding' error using IIS

I'm an experienced developer who is relatively new to IIS. I have a VPS with a dozen websites. I previously set up an SSL certificate on one of those sites and it works fine. Today, I'm trying to ...
0
votes
1answer
47 views

Nginx wont let me use https with aspnet core

I've had this issue for a while. server { #listen 443 ssl; listen 80; server_name crm.domain.com; ssl_certificate /etc/letsencrypt/live/crm.domain.com/fullchain.pem; # managed by ...
-1
votes
0answers
16 views

import SSL Certificate to Microsoft Azzure [closed]

Dears Please we have a certificate and we tried to implement on azure but we faced a problem still our portal not secure please advice
1
vote
1answer
45 views

Is it possible to configure nginx to just handle SSL?

I have a web server written in C++ already, but it uses TCP sockets without SSL. I want to connect it to the web, but I want to use something like nginx to handle the SSL, and also basic security ...
0
votes
0answers
22 views

Cannot sign in to aws console

I'm having problems getting to the signin page of aws in Ubuntu 20.04 with latest updates. As I suspect this to be a network problem, I've tried accessing with curl and openssl. Sometimes (randomly) ...
0
votes
1answer
151 views

HAPROXY : <NOSRV> PR - TLS termination failed

I'm posting here, because I'm trying to setting up HAProxy as reverse-proxy with SSL/TLS termination and I have the following error in logs : Oct 17 12:10:03 localhost haproxy[2789]: xxx.xxx.xxx.xxx:...
0
votes
0answers
11 views

Enable TLS for SMTP in IIS6 on Windows Server 2012 R2

We have a situation where we have been advised to open ports 587 and 465 on our production server in order to receive traffic from Exchange Online to the server. However, we understand that these ...
1
vote
1answer
36 views

VirtualHost 443 seems to be doing nothing when confgiured

I'm running an Apache2 setup, and it seems that everything I put inside the <VirtualHost *:443> tag gets completely ignored in the customconf.conf which is located at /etc/apache2/sites-...
-1
votes
0answers
14 views

Unable to connect to SSL in android 4.4 with cloudflare but it works with LetsEncypt [closed]

I am using letsencrypt for my site SSL, it works well with android 4.4, but when I enable cloud flare SSL, it does not work anymore. bot of them have SSLV3.0 unsupported based on the SSLLabs. in ...
1
vote
0answers
30 views

HAProxy : SSL/TLS termination + ports forwarding

I'm writing here, because I use HAProxy as reverse-proxy with SSL/TLS termination, and I don't know how to configure it to forward HTTPS requests on specific port to the same on my HTTP backend's ...
0
votes
2answers
24 views

Why does Apache return a 400 “bad request” error when connecting to it with “openssl s_client” even though it sends TLS SNI

I have a website, accessible with HTTP over TLS. It is multi-homed, so there are several A DNS entries for the hostname. Additionally, there are several websites, with several hostnames, on the same ...
0
votes
0answers
41 views

HAPROXY : reverse proxy with TLS termination

I'm a newbie with HAProxy, and I want to use it to redirects HTTPS incoming requests to my HTTP backends servers. I know, how it is possible to do it with Nginx, like this : #SSL for all server { ...
0
votes
1answer
550 views

Redirects from https reverse proxy to prestashop backend (apache <-> apache)

The issue is with ERR_TOO_MANY_REDIRECTS from my Apache reverse proxy for secured connection to prestashop frontend on backend host (admin panel is reachable trough ssl correctly). I suspect the issue ...
0
votes
0answers
21 views

SSL handshake failure when EC type keystore is exchanged

I have a Spring boot (version 2.2.5.RELEASE) application which works on one-way SSL. There are 2 cases: Case 1: Client has all the RSA type ciphers (TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,...
0
votes
1answer
24 views

Install SSL certificate on AWS

I bought a SSL cert from Go Daddy and I'm hosting my website on a linux instance running nginx on AWS. I am trying to install a SSL certificate on to an instance I have on AWS This is my understanding ...
0
votes
1answer
22 views

Demand user's x509 certificate from java web application only when required

My web application authenticates the user based on user's x509 certificate. For now, I've configured tomcat for mutual authentication by setting "clientAuth=want". However, as this ...
0
votes
1answer
17 views

Cname entry for podcast.mydomain.com is resolving to the desired location cloud.podbean.com but ssl isn't working

I have a domain: mydomain.com. It is hosted in Cpanel/WHM and I installed a regular SSL certificate on the server (comodo SSL). I added a cname entry to point "podcast" to https://cloud....
0
votes
0answers
19 views

Apache is serving SSL when its not in the vhost configuration [duplicate]

We have multiple sites in our apache configuration. All of these sites are defined in their own vhost. However we have a site that is served on SSL when it is not defined in our VHOSTS: Here is the ...
3
votes
3answers
115 views

Turning an Apache http site into secure https site via Nginx reverse proxy

I have to support an old WordPress site running on Apache web server. To make things safer, this Apache server is in a Docker container, and it is accessible to the world via Nginx reverse proxy ...
3
votes
1answer
107 views

Certificate imported into personal store not appearing in MMC -> Certificates

I have a self signed certificate that was generated on a Windows 10 machine using the Powershell command: New-SelfSignedCertificate -DnsName ServerNameHere -NotAfter (Get-Date).AddYears(20) -...
0
votes
0answers
14 views

NET::ERR_CERT_COMMON_NAME_INVALID error occuring while AWS ACM certificate loaded on HTTPS load balancer for a domain created in GoDaddy

I have a node js app deployed onto EC2 instance running on port 300 and it is exposed to internet via port 80 & 443 via http load balancers. My security group allows inbound rules on 80 & 443....
3
votes
2answers
204 views

Chromium Browsers TLS1.2 Fails with ADCS issued certificate on Server 2012 R2

tl;dr: TLS 1.2 between Server 2012 R2 and Chromium based browsers fails when using AD CS issued certs. Works fine on Server 2016+, and on 2012 R2 with Firefox/IE/Cygwin-curl. We have several internal ...
1
vote
1answer
167 views

Why does my web server throw 403 Forbidden when trying to use HTTPS?

I want traffic on my web server to be served securely. I'm running Ubuntu server 20.04 with Abyss Web Server, which has native support for using Let's Encrypt certificates. I followed all the ...
0
votes
1answer
48 views

How to get Cloudflare SSL to work with IIS website on Azure virtual machine

I have an Azure virtual machine running IIS. The DNS goes through Cloudflare and I have turned SSL on there. However, when I visit https://www.reainvite.com.au I get "This site can’t be ...
0
votes
2answers
241 views

AWS Load Balancing without Certificate?

I currently have my NextJS site and my domain hosted with Vercel, which provides a SSL certificate for my domains. My web application is on mydomain.com and my backend domain is backend.mydomain.com ...
0
votes
1answer
21 views

Removing IIS10 Self-signed Certificate “WMSCV-SHA2-webserver”

On my IIS server, there are two certificates. One is issued by a real CA based on my request and is used as the SSL cert on the server's website. The other is a self-signed certificate with the name ...
0
votes
1answer
25 views

Forward shorter domain without having SSL certificate issues

Have a web application at URL: EnterpriseJazz.com I recently registered a shorter domain name: ejazz.cc in order to use as a url shortener. I configured godaddy to forward the shorter ejazz.cc to ...
0
votes
0answers
87 views

Easy AWS deployment of Spring Boot application with reasonable SSL costs

I am experimenting with deploying a standalone, executable Spring Boot JAR on AWS with SSL support. I tried using Elastic Beanstalk, which created an EC instance. It uses Route 53 with an Elastic Load ...
0
votes
0answers
66 views

Client sends “FIN, ACK” instead of “Client Hello” | Connection closed during SSL handshake | Haproxy

I am trying to establish SSL connection between the .NET WebSocket Client and my server by calling "wss://domain.xyz". Haproxy is handling the SSL handshake and once that is done it connect ...
0
votes
0answers
58 views

VSFTPD SSL Error Ubuntu Server

Hi i create an vsftpd server in Ubuntu Server 20.04.1 LTS and i have a error, this is my confing file, the error and the comanand who i created the ssl keys. (sorry for my english, its so bad) My ...
0
votes
1answer
121 views

SSL error: No path found from the leaf certificate to any root. Maybe an intermediate certificate is missing

I've setup a personal mail server using postfix, postfix-saslauth, courier (mysqlauthd, imap, pop) plus some well practices like SPF, DKIM and DMARC. This set up has been working fine for the last 10 ...
0
votes
0answers
20 views

CDN SSL Authentication reliablity

I was having SSL on my main domain. which is let say , "example.com" & it only showed lock/HTTPS icon on "example.com" not any subdomain eg. abc.example.com , xyz.example.com ...
0
votes
0answers
21 views

How to setup nginx sites-available for aspnet core?

I've successfully hosted an ASPNET Core webapp using HTTP passing the proxy_pass http://localhost:5000; to nginx, right now I'm having issues setting up the HTTPS, I've done sudo certbot --nginx -d ...
0
votes
0answers
25 views

Caddy “CSR doesn't contain a SAN short enough to fit in CN”

The Common Name (CN) in a TLS certificate is documented to have a limit of 64 chars. The trick when issuing a cert for a so long subdomain is to set the CN to something else (shorter) and have the ...
0
votes
1answer
22 views

KONG/NGINX pass down certificate information to APACHE

We have the setup with Kong API gateway (that runs NGINX on the background) where one of the upstream is an apache server where we want to do a client certificate validation. I'm running my tests ...
0
votes
1answer
35 views

Cannot to connect to my website in local network IIS (SSL) with another PC

I'm working to a project ASP.NET core, I have created an SSL certificate for HTTPS and it's working, but only on my PC. I have created a "fake" DNS so if on my PC I write my.site.com:7001 it'...
0
votes
1answer
53 views

Apache HTTPD not hosting on port 443

I have an Apache 2 web server using TLS certificates from Let's Encrypt (installed using CertBot). The OS is Amazon Linux 2. I cannot access the website using port 443. It only works on port 80 ...
3
votes
0answers
112 views

Email headers in o365 showing MAPI

I'm reviewing email headers to determine if an email sent via SMTP is using TLS 1.2. Depending on where I send the email, it goes 3-5 hops to different servers. The first connection appears to be ...
0
votes
0answers
34 views

Where to find the file location of an SSL certificate? (Windows)

I'm trying to setup self-signed certificates on multiple servers inside our Windows domain. I tried a few different ways before finding this excellent guide to setting up a root CA using OpenSSL. ...
0
votes
1answer
40 views

Unable to generate SSL certificate using letsencrypt

I am trying to generate an SSL certificate for a subdomain that was purchased using Wordpress. Both the domain and subdomain were purchased from Wordpress. For the subdomain created using Wordpress, I ...
0
votes
0answers
35 views

How do I configure Squid3 url_regex along with ssl_bump, so that I can partially proxy Python's pypi.org?

I am trying to proxy https://pypi.org using Squid 3.5.27. Since pypi.org requires SSL, and I want to restrict which packages are available, I have enabled ssl_bump. I have also constructed an ACL ...
0
votes
1answer
23 views

Organizational SSL - Creator ID

We have an organizational level SSL that exist on one of our testing servers. Is there a way to find who created it or to see if an application is bound to it?
-3
votes
0answers
44 views

How to link website to GSM Modem machine via the Internet to see and use USSD Code

By any protocol, I can connect my TOP UP site to GSM Modem machine.. And what is the best GSM Modem machine version that supports sending USSD Code via the Internet . As you can see, I am trying to ...
0
votes
0answers
35 views

(certbot) How to fix Failed authorization procedure

I am running Ubuntu 18.04 with nginx and I am getting the following error when I try to generate a ssl certificate for my server using certbot: Failed authorization procedure. irfreeman.ubuviz.com (...
0
votes
0answers
16 views

Failed to load resource: the server responded with a status of 502 (Bad Gateway) [duplicate]

I recently added a reverse proxy to my website to make websockets connections over SSL, however, I am experiencing a 502 Bad Gateway issue. Whenever I open the website, css files, js and images are ...

1
2 3 4 5
139