Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ssl]

SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

0
votes
0answers
8 views

MySQL SSL error: wrong version number

I'm having difficulty with MySQL and OpenSSL. I'm running MySQL 5.7 and OpenSSL 1.1.0g on Ubuntu 16.04 Regardless of what certificates I load, MySQL starts up but does not establish a connection over ...
0
votes
0answers
24 views

FreeRADIUS default vs. inner-tunnel sites and EAP-TLS workflow

I am trying to setup EAP-TLS with FreeRADIUS and an IPA backend. I understand that a typical workflow is to authorize the user against LDAP first and then to authenticate the user using a certificate. ...
0
votes
0answers
17 views

How to set TXT TTL to 1

I am trying to verify my domain ownership to Let's Encrypt by adding a TXT record to mydomain.zone located in /var/named. Let's Encrypt wants me to add it with a TTL of 1 second. However, I find no ...
-2
votes
0answers
36 views

Server configuration 1,5k ssl [on hold]

I've been trying to configure the server with... but unsuccessfully I'm using centos 7 nginx-openresty-dynamic-ssl lua-resty-auto-ssl Would it be necessary to use docker and traefik? for the ...
0
votes
1answer
23 views

How to configure https with nginx with a public ip without domain name

I have a public IP (for eg: 123.123.123.123) and I would like to install the ssl on a nginx server (for using https). I have a folder in /etc/nginx/ssl where I store my .crt and .key. Here is my nginx....
0
votes
1answer
18 views

Reverse NGINX proxy in front of two Docker containers is not working

I have this configuration: upstream frontend_upstream { # FrontEnd part based on `frontend` container with React app. server frontend:3000; } server { ... listen 80; server_name ...
0
votes
0answers
17 views

unable to update certificate(s) with update-ca-certificates

I'm trying to use UPDATE-CA-CERTIFICATES(8) (update-ca-certificates - update /etc/ssl/certs and ca-certificates.crt), yet not getting to desirable state: root@www:~# cd /usr/local/share/ca-...
0
votes
0answers
57 views

Ingress NGINX client closed connection while SSL handshaking

We have ingress-nginx running for a while and about 10% of requests ending up with some SSL handshake problem. Here is an example of a failing connection: 2019/02/14 10:15:35 [debug] 237#237: *4612 ...
0
votes
1answer
27 views

Forward messages encrypted

I have an rsyslog server at front and need to forward certain facilities to a remote server. I created a template for transport as HTTP body: template(name="syslogforward" type="list") { constant(...
0
votes
1answer
39 views

nginx: Upstream SSL, how is it encrypting on the backend?

I've been researching this question, and cannot find a definitive answer. I am really trying to get a grasp on this before deploying to production, and most nginx resources I've found aren't very ...
1
vote
1answer
16 views

TLS 1.2 support in SQL Server 2014 Express Edition (12.0.2000.8)

I'm trying to find out information about Microsoft SQL 2014 Express Edition ( version 12.0.2000.8). I need to know if it has support for TLS 1.2. I'm trying different .UDL tests using SQL Native ...
0
votes
0answers
8 views

Service bus gives error after upgrading to TLS 1.2

Due to security vulnerabilities, we recently decided to remove TLS 1.0, TLS 1.1 and SSL 3.0 from web and database servers. Due to this change, we had to upgrade Service Bus 1.0 to its higher version ...
0
votes
0answers
12 views

IIS: The loghttp module in the worker process with id 'm' removed custom log data for 'n' request(s) which was not claimed by the W3C Logging Service

Please note, this is a copy/cross-post from forums.iis.net. On various IIS 10.0 web servers (build 14393 and 17763), we have enabled customFields for "to help identify weak TLS usage" For a couple ...
0
votes
1answer
32 views

TLS Encryption with Azure WAF and AKS

I am currently working on the topic AKS behind a WAF. We already have an AKS running. The requests are already secured by the WAF. Now I would like to encrypt the connection from WAF to AKS and the ...
0
votes
0answers
35 views

Connection Closed after switching IPs with new SSL Certificate

I recently installed a couple SSL certificates on a few domains, and generally they work, but whenever I switch IP addresses I get an ERR_CONNECTION_CLOSED error. If I refresh a few times, it will ...
1
vote
0answers
16 views

DSC Resource for SSL and TLS and Ciphers

I need to ensure that servers have been properly configured to prevent the usage of SSL2/3 and TLS1.0/1.1 and ensure that only TLS1.2 is enabled. In addition I need to ensure that certain ciphers are ...
0
votes
0answers
13 views

MySQL 8.0 self generated SSL certificates error : SSL_CTX_set_default_verify_paths failed

I've generated self signed SSL certificates for mysql server 8.0 on Red Hat Enterprise Linux 7.5. I've followed the following tutorials https://access.redhat.com/solutions/68098 I've getting the ...
0
votes
0answers
14 views

SSL Encryption with Azure WAF and AKS [on hold]

I am currently working on the topic AKS behind a WAF. We already have an AKS running. The requests are already secured by the WAF. Now I would like to encrypt the connection from WAF to AKS and the ...
0
votes
0answers
27 views

SSL on custom domain for nodejs-express app deployed on heroku

I have a nodejs app deployed to Heroku. I want to add a custom domain with SSL to this app; however I am confused about how some of it works. I already have a custom domain and i want to add a ...
1
vote
0answers
21 views

NGINX - Client-side authentication continues working even after USB token has been removed

I have a website running on apache2, on which the client is authenticated by a SSL certificate stored on a USB drive. Between the client and the web server, there is a NGINX reverse proxy. ...
0
votes
1answer
37 views

Nginx 1.15.8 need load 1k+ ssl cert

erro -> nginx: [emerg] BIO_new_file("/etc/letsencrypt/live/$sslwww/fullchain.pem") the configuration with map or with if are not working what I can do for them to work? do not just find the path ...
0
votes
2answers
47 views

Chrome show https invalid, but says that the certification is valid

Chrome show https invalid, but says that the certification is valid What is the problem with the certificate?
1
vote
1answer
42 views

SSL rollout best practices?

Recently, we tried to make our artifactory https. We followed the usual steps, placed it behind nginx and also had another nginx to help with http to https redirect [the usual return 301 and redirect]...
2
votes
2answers
37 views

SQL Server 2014 setup fails: SSL Provider, error: 0 - The token supplied to the function is invalid

I am attempting to install SQL Server 2014 Standard edition on a new Windows Server 2016 set up as a domain controller that replaces a retired DC. (I know it's not recommended, but we are a small ...
0
votes
0answers
16 views

Wildcard SSL Certificate Breaking Tomcat 8

I'm attempting to configure a wildcard SSL certificate with Tomcat 8. I've added the root, two intermediates, and server .crts to the keystore, and made the necessary changes within the server.xml ...
0
votes
0answers
8 views

modern installation of Tomcat with SSL on port 443

In the computer course I'm writing I'm using Tomcat for the server. (Students learn how to set up CentOS and everything from scratch. Currently the course has them using Tomcat running on port 8080.) ...
1
vote
1answer
24 views

How to disable TLS 1.0 without losing HTTPS connectivity on Server 2003?

I have a legacy product in our inventory that is running on Server 2003, Standard edition. It is due to be refactored to run on a more modern platform, however this will not happen before Q3 of this ...
1
vote
0answers
7 views

JMX: How to select one Key of a Java-Keystore

To enable SSL at different JVM instances and also for other security related purposes I use different Java keystores at different hosts. Until now I put each key into one keystore. For security and ...
0
votes
0answers
19 views

Java-Keystore for Tomcat: CATALINA_OPTS vs. server.xml

To enable SSL for a Tomcat, it's well known, that you configure the property "keystoreFile" of the relevant connector in server.xml. So I always maintained server.xml for SSL by this simple way. On ...
0
votes
1answer
24 views

unable to get local issuer certificate

I have a SSL certificate that is valid for *.example.com. I have been able to set up this SSL certificate on IIS correctly for subdomain.example.com. But I'm having problems on ubuntu 16.04 server ...
0
votes
0answers
19 views

Tomcat Configuration with openssl Failed

I am trying to configure Tomcat with openssl (ssl ). I have generated Keystore by name serverde**.jks My config With server.xml Is: <Connector port="8443" protocol="HTTP/1.1" ...
2
votes
0answers
37 views

Wired 802.1x on Windows 10 1803 isn't utilizing cache

So I’ve been trying to resolve 802.1x Wired authentication issues for quite some time now with limited success. The environment is based on Server 2012, Enterasys NAC using EAP-TLS1.2, with a ...
0
votes
1answer
35 views

can't bring https protocol to running

I have a wordpress website, hosted on Windows Server 2012. http is working, but https is not! I got a SSL certificate from the provider (via digicert), and installed in into the Certificate Store in "...
1
vote
1answer
33 views

Can't access to admin console after forcing wildfly 14 to use ssl on the port 443

I deployed wildfly to my server on a subdomain and Nginx is a reverse proxy.To secure my connection I forced wildfly to use https through 443 with a letsencrypt ssl certificate : In the standalone....
0
votes
0answers
23 views

replace fake k8s certificate and point domain to the LBR IP

k8s cluster configured with Ingress (nginx) controller certs installed from let's encrypt. using helm/fission serverless framework I have added my certs but it's showing the default k8s fake ...
0
votes
0answers
10 views

TLS communication: client did not receive “server key exchange” message but server got the ack

Recently, we have found that our web page occassinally could not be opened. Then we have captured the data packets on both client side and server side and found a very strange phenomenon. In a TLS ...
0
votes
0answers
22 views

Haproxy requests per seconds dropped after enabling SSL

I am using Apache Benchmark for load testing with the same backend, for ssl I am using a self signed 2048 key http ab -n 10000 -c 10 http://127.0.0.1:80/ Requests per second: 1185.35 [#/sec] (...
0
votes
0answers
63 views

Why did client side send alert message (close notify) to server in TLS 1.2

We have found that occassinally our web page could not be opened on mobile devices. We use tcpdump to analyze the data packets and found the issue maybe has something to do with the TLS. There is a ...
-1
votes
1answer
31 views

Are front and back-end SSL certificates the same? [closed]

I'm trying to set up and API on https and I get the following error : NET::ERR_CERT_AUTHORITY_INVALID I have generated the certificate using a IP address because I dont have any domain name for ...
0
votes
0answers
15 views

Internal Server Error after installing LetsEncrypt SSL certificate and uninstalling it again

Following the directions given here, I tried to install a LetsEncrypt certificate on my Ubuntu 14.04 apache virtual private server with SSH (root) like this: apt-get install certbot python-certbot-...
3
votes
1answer
58 views

TLS Implementation/RFC interpretation

Does the Server Hello break the RFC? There seems to be contradiction in RFC. A customer claims our device (Citrix Netscaler) returns Extension (ec_point_formats: EC point format: uncompressed) when ...
1
vote
1answer
29 views

Why does firewall-cmd throws error “ALREADY_ENABLED” but is the port not listed when calling firewall-cmd --list-ports?

Using CentOS 7, I am trying to use firewall-cmd --zone=public --add-port=443/tcp --permanent to add 443 to my allowed ports. Unfortunately this throws error ALREADY_ENABLED: 443:tcp. But when I use ...
0
votes
1answer
22 views

Access API hosted in IIS with wildcard cert via IP

I have an API hosted in IIS using a wildcard cert provided by a client. The Cert is for *.myclient.com. However they want me to connect via the public IP address. When I attempt to call my API, I'm ...
0
votes
1answer
23 views

Disable weak Cipher ubuntu 16

I have started security scanning my network and have issues with Ubuntu 16 and weak cipher suites. I think I found the sshd config. but everything I read on the TLS for apache tells me to go to /etc/...
1
vote
0answers
14 views

Could not create secure SSL/TLS Channel to the API after shifting server

My application installed in IIS 7 was using SSL connection to a bank API. Recently I had shifted my web application to IIS 8 on different server. After that we couldnt create secure SSL/TLS connection ...
-1
votes
1answer
21 views

Which server create CSR if there's multiple forwards

My server environment: I have a website call abc.com. I've created subdomain call demo using Advanced DNS Zone Editor via cPanel and it's point to my static IP 123.123.123.123 demo.abc.com => 123....
0
votes
0answers
16 views

Trying to set up SSL on Apache with minimal web experience

I have pretty much 0 experience with web development but I'm trying to get apache set up with SSL on Docker. The first thing I did was confirm that my apache set up worked properly from the get-go ...
0
votes
0answers
8 views

Mariadb TLS does not enable

I am trying to enable MariaDB (10.3.12) tls with certificates but it stays Disabled. I am working under centos7. I have tried this with ubuntu 18.04 and mysql and it worked, so I wonder what is wrong ...
-1
votes
1answer
39 views

Many domains with SSL in Nginx

I have many domains like hello1.com, hello2.com ... hello101.com All of them having SSL Certificates by Let's encrypt. All of this domains need to be proxied to this URI http://127.0.0.1:8000 (django ...
0
votes
1answer
25 views

SSL Enabled Geonode Service

Recently I have installed geonode on apache tomcat8 in an Ubuntu 16.04 droplet on digitalocean . Everything worked without any issue. The service was up and running. Then I tried to enable SSL for ...