Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ssl]

SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

0
votes
0answers
6 views

How to configure ELK on one server and Filebeat on another server?

I have 2 servers with Ubuntu 18.04 : monitoring.example.com with ELK www.example.com with my site in production and Filebeat Here is the configuration of the ELK server : https://docs.google.com/...
0
votes
0answers
11 views

Uploading a Python Flask App to an existing Apache2 Server and making it listen on a different port

Quick context: I have a Ubuntu 14.04 LAMP Server that's been hosting my ExtJS Website for a pretty long time. Recently, I've had the opportunity of tinkering with DialogFlow, and I've also made a ...
0
votes
0answers
4 views

Cyclos Docker SSL Impelementation for tomcat

I have configured tomcat inside docker container as follows <Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol" maxThreads="150" SSLEnabled="true"> ...
0
votes
1answer
34 views

Is it possible to “restrict” https configurations?

I have my application on an apache webserver with no HTTPS configuration. However you can reach it only by passing from another webserver with https configured, I have no control on this webserver. ...
0
votes
1answer
17 views

Apache2: error in SSLv2/v3 read server hello A

Without any reason my Apache2 Webserver on Ubuntu stopped working. Every HTTPS site i want to open I get "SSL_ERROR_RX_RECORD_TOO_LONG". When I call on my server 'openssl s_client -connect www.kosa-...
1
vote
1answer
21 views

Using e-mail on malware infected computer/network

I have an important (+10 outlook accounts) but very ignorant client who refuses to accept that there is malware on the company's computers. Malware that steals Outlook data to send and receive spam. ...
0
votes
1answer
21 views

Google is indexing urls from another site hosted on the same VPS

We have a VPS hosting 2 websites. WebsiteA.com has SSL. WebsiteB.com doesn't have SSL but google indexes WebsiteB.com with HTTPS URLS from WebsiteA.com Example: https://www.websiteB.com/url-from-...
0
votes
0answers
26 views

How can I repair damage after a Let's Encrypt update?

After some domains were not being installed from my Let's Encrypt cron job, I manually ran some domains. This has had the effect that the effective DocumentRoot for https://cjshayward.com has been ...
1
vote
1answer
24 views

Make trusted self-signed certificate not register as “self-signed” (i.e. trusted) on private network

I'm currently implementing a private Docker Registry server with nginx configured to forward https traffic securely to the running Docker Registry (i.e. docker-compose) instance on a private network (...
1
vote
1answer
18 views

SNI for a SMTP server

Let's say I have a dedicated server with some IP (IP1). I'm redirecting multiple domains (say example.com, example.net) to that IP via DNS. I've a single nginx server running here, and I've set up SNI ...
0
votes
0answers
23 views

Default config 000-default-le-ssl overriding vhosts

Initially I had only 1 domain so I had it as a default site in 000-default-le-ssl.conf. I then added vhosts for each subdomain with no issues. Now I have added another domain and I do not want any ...
-2
votes
0answers
20 views

Https not working on all ISP [on hold]

I have a website which is hosted on a windows VPS and DNS is on Cloudflare. yesterday I installed SSL on my VPS for my site and in Cloudflare set full(strict) for SSL settings. The problem is Https ...
1
vote
1answer
136 views

Why SSL does not work between my 2 servers?

I have 2 servers with Ubuntu 18.04: monitoring.example.com (with ELK on a single server) www.example.com (with Filebeat) on the server ELK Create directories to store SSL certificates $ sudo mkdir ...
0
votes
0answers
17 views

haproxy timesout with ssl forward+centos7

I have 3 VPS(All of them Centos 7.6) running. 2 VPS(App) with nginx + ssl installed and tested. 1 VPS(Loadbalancer) with haproxy, I added the 2 servers in haproxy.cfg. But every time I get an ...
0
votes
0answers
24 views

How to configure NGIX to do not overwrite SSL certificate of Apache

I need to proxy HTTP requests over NGnix. However I would like that SSL is managed only by Apache server. Is it possibile to configure NGINX to don't act asterminal endpoint of SSL and just being "...
0
votes
0answers
12 views

Firefox not trusting HTTPS certificate on Mac [closed]

About a year ago my school started using an HTTPS Proxy that requires a certificate. I have downloaded Firefox and it won't trust that certificate. The certificate is set on Always trust. Thanks ...
1
vote
0answers
20 views

How to make aplication acessible using apache [closed]

I have an aplication in my server run in https://localhost:5010 and I want to make it acessible and certificated in https://tsf.amadeuantunes.com/ Here is my apache config: <VirtualHost 46.101....
0
votes
0answers
35 views

cannot trust development https self-signed certificate in ubuntu 18.04.2 LTS

I created a rest api project and I'm tring to access the https endpoint using curl like this: $ dotnet new angular $ curl -I -X GET 'https://localhost:5001/api/SampleData/WeatherForecasts' curl: (60)...
0
votes
0answers
19 views

Confusion over OCSP support from a web-site? Openssl vs Broweser Information? Which one to believe?

I am looking at a website in Google Chrome, according to an article that I read online in order to check if a website supports OCSF you can look at the Certificates>Details>Extensions and then see if ...
-1
votes
1answer
44 views

Nginx redirect without a server name [closed]

I'm serving a webpage from an embedded linux box that may or may not be connected to the internet. The idea is, a user enters the IP of the machine and the page comes up. I want to redirect all non-...
0
votes
1answer
22 views

If I'm redirecting port 80 to 443 with ssl set up in nginx and proxy to my application on port 5000 do I still need to set up Spring boot to use SSL?

Sorry if this should go into stackoverflow or security, it's kind of a middle of the road question. I have nginx on an elastic beanstalk instance which is set to redirect 80 to 443 and is proxying ...
0
votes
0answers
45 views

How to download Window Server 2008 R2 hotfix

when I enable SSL for my ftp site (running on Windows Server 2008 R2 and IIS 7.5) and try to upload a file (FileZilla) it keeps uploading same file again and again with following message, 550: The ...
-2
votes
1answer
40 views

Nginx letsencrypt certbot ssl page will not load over https but will load over http

I am trying to set up a digital ocean server using this tutorial https://www.digitalocean.com/community/tutorials/how-to-set-up-django-with-postgres-nginx-and-gunicorn-on-ubuntu-16-04 The site is ...
0
votes
0answers
17 views

how run Nginx+ssl on multi port

ive run nginx on port 80 and 443 with lets encrypt ssl license and it work perfectly without any problem. ive run docker for our front with nginx on same server, now backend and front are run on http ...
0
votes
0answers
22 views

SSL for multiple ports with single domain - ubuntu with nginx

I'm trying to setup SSL for multiple ports in Ubuntu with nginx. I have a domain wpdev1.tk. Currently it is working on with and without SSL. I have another web application which is running on same ...
0
votes
0answers
37 views

Connect to Redis through Haproxy (or maybe stunnel) skipping TLS

I need to access to AWS Elasticache (redis) from outside the VPC. To do that, I'd want to proxy the AWS redis server with haproxy on an EC2 instance and it seems to work well. Now I've to enable AUTH ...
0
votes
1answer
64 views

Why am I unable to make OCSP Stapling work with my nginx, libressl on FreeBSD 12.0-STABLE setup?

After hours of trying I have to get help for my issue. I am trying to get OCSP stapling to work with my setup, but am not successful in doing so. Here is my nginx configuration, without any non-...
0
votes
1answer
72 views

Getting error error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure on jmeter

I am having issue with Jmeter Curl, I have .sh file which contain curl command, and that sh file calling using OS Process Samplerenter image description here .sh command contain curl -kvH "Accept: ...
0
votes
0answers
40 views

nginx ssl error, no “ssl_certificate” is defined in server listening on SSL port while SSL handshaking

when i add comodo ssl to nginx server on centos 7 i got this error 6925#0: *1045 no "ssl_certificate" is defined in server listening on SSL port while SSL handshaking, client: 2.89.238.146, server: ...
0
votes
0answers
22 views

openLDAP modify error 80 configuring TLS

when I try to modify LDAP with the following code: dn: cn=config add: olcTLSCACertificateFile olcTLSCACertificateFile: /etc/pki/tls/certs/cacert.pem - replace: olcTLSCertificateFile ...
1
vote
0answers
11 views

Set Apache2 to deny SSL connection to vhost without cert

Currently when a host is pointed to it that doesn't have a vhost entry, Apache will try to serve a certificate for the wrong host (which happens to be the first alphabetical). This is in spite of the ...
0
votes
1answer
27 views

Use iptables to filter HTTPS (with known key)

I need to filter an HTTPS URL using iptables, on servers where I have access to the keys involved in the SSL communications with the client. I have found lots of resources saying that this can't be ...
0
votes
2answers
56 views

vsftpd error: 530 Login incorrect (and various others when trying other solutions on this website)

I know this question has been asked countless times already, but I feel like I've tried every possible solution and none seem to work. Some articles I've read and tried to use: vsftpd error 530 ...
1
vote
1answer
30 views

Unable to get certificate expiry date

Unable to get certificate expiry date using below command. Command: openssl s_client -servername www-abcecommerce.com -connect www-abcecommerce.com:443 2>/dev/null | openssl x509 -noout -...
0
votes
1answer
27 views

setting up ssl for cname only subdomain

I've looked on for an answer on google and other forums for this question but couldn't get a solution or a hint for the scenario that I have. I've a domain, say abc.com, which is live with ssl on ...
0
votes
2answers
64 views

How can I use Apache as a reverse proxy for https?

My company uses a CMS system hosted in the cloud. We want to create internally DNS-aliases to make it easier for developers to remember. Reading the documentation for mod_proxy_connect I do think it ...
0
votes
2answers
101 views

TLS Setup of Crucible Fisheye Server

For the past few days we have been attempting to setup Fisheye with TLS setup. We have gone through the process of setting up our TrustStore with our companies internal CA and setting up a seperate ...
1
vote
0answers
49 views

TLS handshake times out for a few users only

A few of my clients are unable to visit any of my HTTPS-enabled websites. The browser spends a lot of time negotiating the TLS handshake. Ultimately, a timeout occurs. The server: Apache2 on Ubuntu, ...
0
votes
0answers
49 views

OpenVPN: TLS handshake failed AND how to kill second tunnelling deamon instance

i am new to OpenVPN and also new to serverfault. I am trying to set up a OpenVPN Server with username and passwort authentification. and so far i managed to install and configure on my own. but now i ...
-1
votes
1answer
52 views

AWS EC2 SSL error: Getting 'ERR_SSL_PROTOCOL_ERROR' and 'ERR_CONNECTION_REFUSED'

The EC2 instance is working fine and accessible with http and via the public IP address. I am using LoadBalancer with Amazon issued public certificate. LoadBalancer is listening to HTTP at 80 and ...
1
vote
0answers
27 views

LetsEncrypt TLS Cert invalid? “EVP_MD_size:message digest is null”

I am finding this in my logs for postfix, I'm using a LetsEncrypt certificate but I'm unable to find any useful information online about it. Does anybody know if this is a problem or something that ...
1
vote
1answer
109 views

Possible reverse proxy issue with Apache from HTTPS (external) to HTTP (internal)

I have a server running Ubuntu 18.04 with .NET Core 2.1, Kestrel and Apache2. I am using LetsEncrypt for SSL and the domain was set up with SSL. Prior to installing .NET Core and hosting the project ...
1
vote
0answers
94 views

Configure Firewalld for SSL on Fedora 29 Workstation

I'm battling with firewalld and SSL on Fedora 29 workstation. I get a connection refused / can't Connect to server when I try and open an SSL connection to nginx. If I stop firewalld with: sudo ...
-1
votes
0answers
25 views

Why do SSL/TLS certificates need to be obtained from a third party? [duplicate]

I can generate an RSA public/private keypair on any computer and this will provide asymmetric encryption similar to HTTPS. I cannot do this with SSL certificates, I need to either buy a certificate ...
0
votes
0answers
39 views

Would this setup provide adequate security?

In the following scenario, I'm looking to see if I can provide adequate security as is or if there would be any tangible benefit to re-architecting things (like changing it so that the service in ...
0
votes
0answers
23 views

Does SoapUI Open Source 5.4.0 require that you upgrade to the Pro version for HTTP Monitor proxy with SSL?

When I have the HTTP Proxy radio button selected instead of the HTTP Tunnel one, all of the text boxes on the Security tab are disabled, and I can't set an endpoint for the HTTP Tunnel I don't ...
1
vote
2answers
43 views

RHEL 7 Server Network not working after Install Python3.6 from Source

I have a RHEL server which by default was running Python2.7 and Python3.4 I needed to use Python3.6 so I downloaded it and built it from source. However, now I seemed to have broken my network ...
0
votes
0answers
13 views

Minimal Postfix relay configuration accepting only TLS connections of authenticated users

I have a mail (and web) server running Debian 7 with Postfix 2.9. Currently Postfix is essentially used as a mail forwarder; there is only one mailbox (root) which is accessed locally with the "...
0
votes
1answer
98 views

GCP Managed SSL Certificate stuck on FAILED_NOT_VISIBLE

I've followed GCP's guide to creating a managed SSL certificate for my subdomain <subdomain>.<domain>.dev. My domain registrar is configured with the NS records: ns-cloud-d1....
0
votes
1answer
32 views

Timeout connecting to OpenManage after updating to version 9.2 - possible SSL issue?

I updated my server to OpenManage version 9.2 (from version 9.1 which was working fine), apparently with success. I can run the CLI commands without problems. My problem is connecting to the OMSA ...