Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ssl]

SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

3
votes
1answer
66 views

NGINX SSL does not respond over IPv6

On a Debian server with nginx, I get no response from a web server over HTTPS and IPv6. HTTP works fine. netstat reports port 443 listening on IPv6 address firewall is opened, ipv6scanner.com ...
0
votes
0answers
9 views

Server 2012 R2 SMTP service not sending mail to non TLS servers

We have SMTP virtual server on server 2012 R2 server. I have configured it to use TLS connection. We do have real sertificate etc. Everything works fine except mail that is going to mail server which ...
0
votes
1answer
64 views

Wordpress Migration SSL mystery

Here's the story so far: Wordpress website is on SSL using Really Simple SSL and Cloudflare SSL I decided to move to DigitalOcean (from Hostgator) and don't want to change the domain name servers ...
0
votes
1answer
21 views

connecting to a FTP by TLS fails from one client, but succeeds from the other

Trying to connect from client2 using the following string works: client2@client2 curl -v --ssl -u 'user:password' ftp://www.example.com:21 * Rebuilt URL to: ftp://www.example.com:21/ * Trying 192....
0
votes
0answers
26 views

Load balancer & SSLs

So I'm trying to load balance 2 servers, however I'm having the following issue with SSL. My customers add their own domains via the cPanel API, they need to be on SSL. Previously with one server, ...
1
vote
1answer
28 views

Using “Let's Encrypt” TLS with a Google Load Balancer? (Kubernetes/GKE)

I've been trying to test out Kubernetes on Google Cloud, but would need HTTPS/TLS (only) exposed on the deployed application. To start, I just followed this tutorial, which worked fine for plain HTTP ...
-1
votes
1answer
24 views

HTTP/HTTPS request on the same site for same webpage [closed]

I'm using the following code to handle both the request at server. But still no success. RewriteEngine On RewriteBase / RewriteCond %{ENV:HTTPS} !on [NC] RewriteCond %{REQUEST_URI} !^/.*$ [NC] ...
0
votes
2answers
23 views

Non-WWW gets ERR_CERT_COMMON_NAME_INVALID on a wildcard certificate

I have a wildcard certificate from Let's Encrypt for a website (*.storyfortwo.com). When I go to http://storyfortwo.com or http://www.storyfortwo.com (no SSL) they are both redirected to https://www....
-2
votes
0answers
25 views

How to use Perl SSL object in RPM bin file:

I am trying to modify an RPM in linux by adding cipher list in RPM configuration file. The cipher list needs to be called by a Perl object IO:Socket:SSL in the bin file (2 files - conf file and the ...
1
vote
1answer
49 views

How to install company proxy certificate

My CentOS 7 server which is in AWS private cloud(company network), is unable to connect to some sites. After some work I managed to narrow the problem down to following problem. The following ...
2
votes
2answers
95 views

SSL/TLS handshake failure

Configuration A Windows 2008R2 RDS server RDS01 A Windows 2008R2 RDS server RDS02 A Windows 2012R2 RemoteApp server APP01 Problem Calling URL https://APP01.domain.local/rdweb : From RDS01 : ...
1
vote
1answer
91 views

Non supported SSL cipher, how to disable it?

I have a linux system with a a version of OpenSSL 0.9.8j-fips 07 Jan 2009 and an Apache Server version: Apache/2.4.27 (Unix) The Apache has issues connecting via secure LDAPS to a remote DC Windows ...
1
vote
2answers
40 views

Should assets still be available under HTTP or be force redirected to HTTPS?

Nowadays most sites redirect HTTP traffic to HTTPS for requests to their pages. However the same can't be said for assets (images, js, css). Most of the assets are available under both HTTP and HTTPS. ...
1
vote
0answers
19 views

Getting SSL to work with reverse NGINX proxy in front of two Docker containers

Been struggling with this for a couple of hours. I know I'm missing something simple here because everything works on my localhost as SSL with self-produced certs + it works totally fine on localhost. ...
2
votes
0answers
52 views

How does SSL certificate benefit a public informational website? [closed]

One networking expert posted a video today in Facebook saying that a government website (which is a subdomain of kerala.gov.in) has no SSL certificate installed. That website is actually just for ...
1
vote
0answers
15 views

Wrong(first/default) SSL certificate served Apache 2.4 - Ubuntu 18.04 muliple domain web server

Background: We have migrated 2 old webservers to 2 new, more robust servers- Ubuntu 17.04 and 18.04. We purchased Thawte SSL certificates for the domains we host(about 20) to use on 2 servers. Each ...
0
votes
0answers
9 views

IIS redirecting SSL requests to another server

I have two servers, one is Microsoft with Exchange 2010, and the other is Debian with Apache web server, so both of them need 443 port. Exchange needs it for Outlook Anywhere, and Apache needs for ...
3
votes
1answer
30 views

How to configure nginx + ssl with an encrypted key in .pem format

I would like to set up ssl for an existing nginx server. I got handed both a certificate and the corresponding (encrypted) private key. Both are in .pem format (each in its own file). About all ...
1
vote
1answer
36 views

Vendor asking for SSL certificates for an internal API

We are installing a new program that the vendor says will require two SSL certificates (Both internal): Servername.Domain and ServernameAPI.Domain I'm using our own CA for the cert, and I have ...
0
votes
0answers
15 views

Non deterministic slow nginx connection

I try to download static file. Nginx is configured to proxy traffic to this server according to the following configuration: worker_processes 32; pid /run/nginx.pid; worker_rlimit_nofile 20480; ...
0
votes
1answer
32 views

Certificate validation error with Bareos and TLS

I have Bareos 17.2.4-9 installed on Debian Jessie. It was built from the source using the --with-openssl switch. It works perfectly WITHOUT TLS enabled, however when I try to configure it to use TLS,...
0
votes
0answers
10 views

Cannot find build log for bareos_17.2.4-9 Debian Jessie

I'm attempting to add TLS encryption to Bareos 17.2.4-9.1 by rebuilding it with the --with-openssl option. However, I can't find the ./configure options. Bareos was originally installed and setup ...
0
votes
1answer
25 views

Certificate validation ignoring common name and only checking alternates?

I have a certificate, that has CN=*.some.domain and then alternate names DNS:*.sub1.some.domain, DNS:*.sub2.some.domain (2 more like this). I provided the certificate to an nginx-ingress in ...
1
vote
1answer
23 views

Troubleshoot SSL handshake for LDAPS protocol

I have a situation where an apache web server tries to connect to a remote Windows 2016 LDAP via SSL. I have access only to the Linux machine on which the apache server is situated. There are no ...
1
vote
0answers
15 views

Should TLS separate the Finished messages?

I'm a bit stumped by what I'm seeing in wireshark. I am attempting a TLS session resume from a client 10.66.128.10 to server 10.26.0.196, and am seeing an unexpected event - the client is sending the ...
0
votes
0answers
11 views

What ports do I need to use in iptables for ftps and vsftpd?

The answers in this question aren't working for me. Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere ...
1
vote
1answer
27 views

Nginx: redirect non-www https to https://www

I'm having some issues when trying to redirect https://example.com to https://www.example.com. It simple gives me a redirect loop. This is my site's nginx configuration I had prior to the changes I ...
0
votes
1answer
38 views

Manually completing certificate chain for server

I have a certificate, signed by Active Domain Certificate Services. The certificate itself looks fine, I successfully converted it from DER to PEM. However, it says X509v3 CRL Distribution Points: ...
0
votes
0answers
26 views

Nginx redirect without using a port

I am using a nginx to redirect from several http services with IP:PORT to a https domain. Now I need the nginx to redirect only: http://IP to https://DOMAIN and open it in Browser with: https://...
0
votes
3answers
67 views

TLSv1 Not Turning Off in Apache

What is the best way to see where my SSLProtocols might be overridden on a CentOS 7 server? Apache 2.4.6 (realizing this is quite old as well so i'll have to update this off hours and see if it fixes ...
0
votes
0answers
19 views

how does TLS encryption work on traffic flows which are routed via a (reverse) proxy

I do not understand how encryption works in this particular case. The scenario is the following: Server A (Interface partner) --> Server B (Apache reverse proxy) --> Server C (weblogic application ...
0
votes
2answers
75 views

Can a wildcard SSL certificate secure host names of various depths? [duplicate]

I discovered recently that my *.domain.com cannot be used on server1.apps.domain.com because it will only "wild" the one level, not two. The questions are thus twofold: Is there such a thing as a *.*...
0
votes
1answer
102 views

nginx “ERR_TOO_MANY_REDIRECTS” after add ssl

After i add Let's Encrypt certificate to my website with CertBot i get ERR_TOO_MANY_REDIRECTS when i try to visit the domain of my website. some info : -mywebsite build with django, nginx and ...
0
votes
0answers
20 views

Apache ssl redirect with virtualhost hot working

I've set up my Apache server with a reverse proxy to forward requests onto my backend Node.js server (port 8080 for http and 4430 for https). The below works fine if someone comes in on http://...
0
votes
1answer
10 views

Apache2 config to redirect wildcard secure domains

I own secure site https://example.com. I want to redirect all URLs http://whatever.example.com and https://whatever.example.com to the correct URL https://example.com. This is my apache2 config: &...
0
votes
0answers
18 views

Error 525 when trying to use SSL through CloudFlare

I have a subdomain set up (on a different server to my primary server) and I also have SSL set up in cloudflare, with both the key and certificate files on both servers. The following is my apache2 ...
0
votes
1answer
40 views

URL Redirection to different, secure site

This was originally posted to StackOverflow: https://stackoverflow.com/questions/52538874/url-redirection-to-different-secure-site I'm looking for some help with URL Redirection. I am hosting a ...
1
vote
0answers
50 views

ECDSA certificates fail validation with curl and Firefox

I've been stuck on a problem for 2 days regarding certificates where some clients connect and some other fails the certificate validation. I'm working on CentOS 7.3 and Nginx 1.15.4. I have 3 levels ...
0
votes
1answer
28 views

Add or do not add WWW hostnames to SAN certificate

My setup is as follows: 100+ websites Each website has two host headers any.com and www.any.com Requests for www.any.com are redirected to any.com without changing protocol Some of these websites ...
-2
votes
1answer
7 views

Point own subdomain to Heroku app through HTTPS

I have a domain, let's say mywebsite.com bought on NameCheap. I have pointed it's primary and secondary DNS to my hosting provider, so I can view my website and manage the subdomains there. I also ...
0
votes
0answers
16 views

cipher suite returned from TLS ServerHello is not shown in openssl ciphers

ServerHello of a TLS handshake returned the following ciphersuite: Cipher Suite: TLS_DHE_RSA_WITH_AES_128_CBC_SHA (0x0033) But when I used openssl to list the ciphers on the server, it seemed a ...
0
votes
0answers
10 views

Webpack server and Express server with self signed cert works with localhost but not with IP

OS: MAC Env: DEV I've created two Self Signed Cert CN=localhost one for the webpack server and one for my express server. I've added the certs to the keychain, took me a while to get over this: ...
0
votes
0answers
111 views

Apache 2.4 updated, now throws: Cannot define multiple Listeners on the same IP:port

I've just updated Apache to 2.4.3 on my AWS instance (running Linux AMI). After the update finished, Apache crashed with the following: Starting httpd: AH00526: Syntax error on line 5 of /etc/httpd/...
0
votes
1answer
42 views

Trouble configuring https with nginx on centos

I've got a node.js project running locally with http2 and https. Everything is running great, I generated a self signed cert and running the app serves everything up correctly. So now i'm trying to ...
0
votes
0answers
24 views

Certification authority limited to a domain

we generate test environments on demand. We're using Let's Encrypt to provide SSL certificates. Each of the test environments needs around a dozen domain names in the form <part>.<...
0
votes
1answer
31 views

How to make right redirect from www ssl to non-www ssl using NGINX? [duplicate]

I'm using NGINX and I have ssl cert for example.com And I don't have ssl cert for www.example.com. In brief: I tried to configure NGINX to redirect from all the www requests to non-www (from **http**:...
0
votes
1answer
40 views

Generate LetsEncrypt Certs to NFS share

Im trying to generate a letsencrypt wildcard cert to use on various websites (one FQDN, multiple subdomains). The plan is to save those certs on a NFS share I have to easily access them on various ...
0
votes
0answers
30 views

Unable to locally verify the issuer's authority

I have bought the SAN SSL certificate and I am getting the error after implementation the SSL in apache web server. While wget its throwing this error. ERROR: cannot verify example.com's certificate, ...
1
vote
1answer
10 views

FTP over TLS, with multiple sites hosted on the same server

Is it possible to have FTP over TLS on a server that hosts multiple websites (domains) ? I can get certificates for any of the domains, but the problem is that I have no way of knowing to which ...
0
votes
0answers
37 views

How to secure an insecure device on an untrusted network, via a web proxy?

Here's my situation: I've got a network-based device with a web-page interface, and the developers of this device, in their wisdom, did not include any kind of access-control or encryption for the ...