Questions tagged [ssl]

SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

Filter by
Sorted by
Tagged with
0 votes
0 answers
7 views

Trying to forward one ip to another ip with no prior experience

I am trying to forward traffic to the domain from the server so I can get everything working properly for SSL Brief description: server ip which is another IP externally to my domain which has another ...
  • 1
0 votes
0 answers
8 views

Trying to get 100% in ssllabs.com key exchange with nginx (Oct/2022)

My site got A+ on all score fields, however, it seems ssllabs.com changed some measures, and the key exchange score is not 100% any more: screenshot My previous Nginx setting is like this: ...
  • 1
0 votes
0 answers
9 views

Google is presenting different certificates for the same Gmail API call

We are using Google's Gmail API (https://gmail.googleapis.com/gmail/v1/users/{userId}/history) in our application and the API is returning Certificate with different CNs: sometimes the CN is “google....
  • 1
0 votes
0 answers
15 views

How to intercept encrypted XMPP traffic?

I have an mobile chat application which is using xmpp protocol for messageing. I am able to intercept http traffic of Application with traditional proxy like burp suite(After bypassing ssl pinning). ...
0 votes
0 answers
21 views

301 redirect for NON-WWW to WWW using CloudFlare - I am confused as to why I can access the site via www. but not *

I am trying to set up a baby's first nginx server. I have just configured cloudflare, all working well and the site itself is 100% accessible, but only by putting the www. TLD at the beginning of the ...
0 votes
0 answers
21 views

NGINX upstream timed out while SSL handshaking to upstream

I have a problem I'm struggling understand because everything was working fine a week before (and no change to configuration has been done, so only OS patching or whatsoever may have happened) So the ...
  • 53
0 votes
0 answers
14 views

What settings do I use in the default-ssl.conf file on an ubuntu server running an Omeka installation?

I have an installation of Omeka running on an Ubuntu server with Apache. I’ve loaded an SSL certificate and it seems fine, but only the first page of the site will load now. Anything else gives a ‘URL ...
  • 1
0 votes
0 answers
10 views

Apache2 won't start after switching to using wildcard certs

I am having some trouble updating an apache2 site to use a wildcard cert. It's for a Learning Management System called Moodle which uses PHP and mysql. I started by changing the ssl.conf file to point ...
0 votes
1 answer
36 views

Let's encrypt certificates fail to verify, throw errors in a Node.js web app

I've recently started getting issues with my Let's Encrypt certificates. On the web browser I don't get any issues for the certificate, but when I run an Java web app thru NGINX using the certificate ...
  • 113
0 votes
1 answer
34 views

What are Groups in Kubernetes certificate signing requests?

In a Certificate signing request API object for a user, you have to specify a group. apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: name: myname spec: groups: ...
0 votes
1 answer
24 views

SSRS 2019 - Report Builder TLS 1.2 error

I have 2 SSRS 2019 servers, and I'm using Report Builder 15 to connect to SSAS over an OLAP https connection. The connection works fine and I'll able to successfully build a report and get results ...
  • 1
0 votes
0 answers
7 views

How to configure server for client certificate authentication?

I have seen some service providers that use certificates for client authentication, so that any browser without the certificate will be rejected. However, the browsers with trusted certificates could ...
0 votes
0 answers
14 views

Nginx Reverse Proxy, SSL Offloading, Caching, IIS, Wordpress - Redirect 301 loop

I'm trying to setup a Nginx Reverse Proxy with SSL Offloading and Caching in front an IIS 10 and WordPress with pretty links, but I'm getting an infinite redirect 301 loop. My Nginx configuration is ...
  • 1
0 votes
0 answers
8 views

Pm2 unable to access SSL cert and Key files even though I have permission to access those files

When I deployed my mern app on our server it throwed me a EAccess error saying unable to access my cert and key files of ssl however then I created a group for me and my root with adequate permissions ...
0 votes
1 answer
47 views

SSLError when running python script on Windows Server

I am trying to run a python script on my Windows server hosted on AWS. The server sits behind a proxy which directs traffic to the internet. From my account, I can pip install any packages, and it ...
1 vote
1 answer
70 views

Docker nginx ssl error

When I raise the container, I get the following errors: nginx | /docker-entrypoint.sh: Launching /docker-entrypoint.d/30-tune-worker-processes.sh nginx | /docker-entrypoint.sh: Configuration ...
  • 45
1 vote
1 answer
68 views

Bacula TLS negotiation failed

Problem with Bacula, the Director and storage on the same host (...151), client on another host (...139). I don't use TLS/SSL between director and client, when i run the job i get an error. How can ...
  • 11
0 votes
0 answers
26 views

Connect-ExchangeOnline get AADSTS1002016: error about TLS 1.0 and 1.1 deprecation

This is a really weird problem I encountered today. All my Powershell scripts fail when trying to issue Connect-ExchangeOnline cmdlet with AADSTS1002016 error like the image below. This is only ...
0 votes
0 answers
19 views

Certificate marked as "not trusted by CA

I have a rather surprising problem these last days on one of my certificates signed by my root CA (via AD-CS). I noticed that my browser sends me back a message that I have never seen in place of my ...
0 votes
0 answers
110 views

Error 503 Service Unavailable

We have a debian based reverse proxy server which is under testing for product scanning for a store and all of a sudden it didn't connect and started showing 503 service unavailable. The next day it ...
  • 1
0 votes
1 answer
29 views

Cretbot SSL Certificate not working properly

I tried installing cartbot SSL certificate in my ubuntu server by following the instruction on this https://github.com/antonputra/tutorials/tree/main/lessons/078 The URL where I am trying to secure is ...
0 votes
1 answer
42 views

How do I completely disable SSL on my nginx site?

I'm attempting to set up a NetBox installation. It's going to be completely internal to my network and it's going to have a internal (.local) domain. As such, I don't want to use SSL certificates at ...
1 vote
1 answer
115 views

Securing Apache Solr on an Apache TLS / SSL server

I have a SSL-only website hosted on a CentOS 7, Apache httpd based server. SSL certification is via a Let's Encrypt certificate. The domain has a HTTP Strict Transport Security (HSTS) policy. I am ...
0 votes
0 answers
24 views

Which certificates configuration with a proxy?

I want to set up a docker infrastructure for production with two web containers behind a haproxy. I want to work in reencryption mode and I want to know which certificate configuration to use. Which ...
  • 1
0 votes
1 answer
52 views

Ubuntu SSL now broken after make installing openssl

I was attempting to set up a Cisco VPN and had run into some issues, in the process of trying to correct those issues I made some changes to my certificates directory and ran several commands ...
  • 103
1 vote
1 answer
81 views

Nginx Site Redirect / Fallback

I have noticed a strange behaviour on one of my servers and I am not able to understand how is it working, and most important if such configuration is making a redirect as I am not sure how I end up ...
  • 111
0 votes
0 answers
18 views

mitmproxy as a chain proxy, without SSL decryption

I want to use mitmproxy, as a chain proxy, meaning, I want all my services to connect to mitmproxy which in turn is configured to connect to an external proxy, I did that just fine, using the upstream ...
  • 271
1 vote
1 answer
33 views

Nginx revoked Intermediate-CA from Root-CA

The certificates as given below: Root-CA -> Intermediate-CA -> Server If I revoke Intermediate-CA from Root-CA then the Server will automated revoked certificate along with the Intermediate-...
  • 56
1 vote
1 answer
38 views

Client error after installing custom certificate

I've followed (I believe) all the right steps to install a trusted certificate on my ASA firewall: install company root authority into ASA as a CA issue a certificate for the ASA's hostname install ...
  • 950
0 votes
1 answer
65 views

Apache Server security issues

our security auditor scanned our system and here is what come up on the apache server : -Server header: Apache exposed on port: 80 -Server header: Apache exposed on port: 443 Here are some lines in ...
  • 3
1 vote
0 answers
22 views

SSL certificate mismatches not using domain ssl but plesk default ssl certificate

Since last night, somehow there is something wrong with the SSL certificates. https://mail.domainfromclient.com was working fine, but now the domain try's to load the default server certificate plesk....
0 votes
1 answer
16 views

How to configure Apache Virtual Hosts with SSL SAN

I am using a multi-SAN SSL certificate. All the domains use the same document root, Rewrite Rules and other settings. So, I configured (shortened) : <VirtualHost *:443> ServerName domain-a.com ...
  • 101
0 votes
0 answers
46 views

Cipher Suites order enforced by IIS

We are trying to get approved from a vendor that requires cipher suites order to be processed in this way: TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 We use ...
's user avatar
0 votes
0 answers
49 views

Problems setting up a secure WSS connection for Sipml5

I have problems with setting up a webrts connection with sipml5 through an asterisk. When I check the status of https through the asterisk console, I get a response that it is up and running. But when ...
0 votes
1 answer
16 views

Restricting Kibana to TLSv1.2

What is the setting that needs to be set in the kibana.yml file (or other file) to restrict Kibana to TLSv1.2 over HTTP? I believe that it uses TLSv1.0, TLSv1.1, and TLSv1.2 by default. I need to ...
  • 1
0 votes
0 answers
45 views

Unable to configure ssl on mariadb using certbot generated certificates and private key

I'm using certbot to generate a certificate for mariadb server and client ,but it's not working. sudo certbot certonly -d mariadbserver -d mariadbuser This is the command that i've used to generate ...
  • 1
0 votes
0 answers
65 views

smtp: SSL_CTX_load_verify_locations: No such file or directory

Debian GNU/Linux 11.4 (bullseye), Linux 5.10.0-17-amd64 Installed OpenSMTPD 6.8.0p2-3 amd64 (including opensmtpd-extras 6.7.1-2 amd64) and tried to test sending a mail, but every smtp call (except ...
  • 1
1 vote
0 answers
124 views

SSL configuration issue - "SSL received a record that exceeded the maximum permissible length"

We are trying to setup SSL on our application running on Wordpress, PHP, Apache. After doing the necessary configuration changes, we get the following error on curl command - [root@www ~]# curl https:/...
0 votes
0 answers
30 views

nginx proxy_pass to other server to index.html

I have two node with corresponding domain names: server1.test.mydovps.net server2.test.mydovps.net. I want to proxy_pass with upstream from server1.test.mydovps.net to server2.test.mydovps.net and see ...
1 vote
0 answers
31 views

Connection to Apache server dont pass from openVPN tunnel

I working with two VMs in virtualbox. Both of them are in one Subnet 10.0.2.0. On first VM I run client.conf and on other VM run server.conf and startup Apache Server. OpenVPN tunnel established ...
0 votes
0 answers
39 views

Wildcard SSL for subdomains that don't exist

If I have undefined subdomains, and there is a wildcard subdomain defined for the domain (via the hosting account at JustHost), is it possible to have a wildcard SSL certificate for subdomains that ...
0 votes
1 answer
50 views

Can't load Web API with SSL (ERR_SSL_PROTOCOL_ERROR)

So I can't get my head around this problem, and looked everywhere on the internet but did not found any working solution. 1.1. I have an apache server running as virtual host. In the initial situation,...
  • 1
0 votes
0 answers
39 views

How to convert SSL certificate to PFX if the certificate does not allow private key export

I have an SSL certificate that I need to convert to PFX file. I have the following info .crt file .pem file .p7b file The CSR and the Private key. I tried to follow the direction listed here which ...
  • 101
0 votes
1 answer
375 views

How to debug OpenSSL SSL_read: error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure, errno 0

We have a nginx setup with client certificate authentication running on docker, we are only using these ssl settings: ssl_protocols TLSv1.2; ssl_ciphers HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:...
  • 155
0 votes
0 answers
41 views

Apache Reverse Proxy behind port forwardind : 503 - Service Unavailable

Here is my situation, I have two reverse proxy servers, A and B. Reverse proxy A directs the request to a hidden IP with a port number to the second server. Reverse proxy server B redirects the ...
  • 3
0 votes
1 answer
46 views

How can I run TLS on Apache2 Proxy behind port forwarding

I have a problem with apache2 proxy in TLS using port forwarding. I manage to make it work correctly in HTTP, but as soon as I try to make it work in HTTPS, Apache shows the message Service ...
  • 3
0 votes
0 answers
77 views

SSL certificate not working

I'm going to put an application on a new server (after upgrading it from PHP 7 to PHP 8). I can connect to the server(Red Hat) only using VPN (pulse). my purpose is to run the application on the ...
1 vote
1 answer
76 views

How to setup the OCSP responder

I have generated the certificates as given below: Root-CA -> Intermediate-CA -> Server Root-CA: rootca.key rootca.crt Intermediate-CA: intermediateca.key intermediateca.crt Server: server....
0 votes
1 answer
55 views

VSFTPD does not work with SSL

I am trying to enable ssl on my vsftpd server, it works without SSL, but when I try to install this certificate it gives me the following error: Process: 1314 ExecStart=/usr/sbin/vsftpd /etc/vsftpd....
  • 1
1 vote
0 answers
80 views

How to configure more than one version TLS is used for JMX over SSL?

I want to configure JMX communication for TLSv1.2 and TLSv1.3. I added the java vm argument Dcom.sun.management.jmxremote.ssl.enabled.protocols=TLSv1.2 and checked whether it would work for version ...

1
2 3 4 5
137