Questions tagged [ssl]

SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

Filter by
Sorted by
Tagged with
0
votes
0answers
16 views

Apache SSL config not listening on 443

I am trying to setup an apache website for SSL with a self-signed cert. I setup the vhost and everything looks ok to me. But the site is not coming up and on the server itself port 443 is not ...
2
votes
1answer
62 views

Install godaddy ssl certificate on nginx, pem, bundle, crt

It's a bit unclear, by available instructions and forum posts, how to deal with the three files you'll get from Godaddy when purchasing a SSL Certificate from them. Godaddy isn't very forthright ...
0
votes
1answer
20 views

CentOS Certificate Authority increase key strength

I have a self signed CA that I have been using for several years. Certs that I sign/issue these days for our LAN are now getting warnings in Chrome due to "Weak Key". Is there a ...
0
votes
2answers
19 views

OpenLDAP : Confidentiality required for ldapmodify

I'm asking your help beacause i'm stuck since 2 days about that. After i have setting up TLS and SSL on my OpenLDAP server, it works fine but i can not execute command anymore to edit the ...
0
votes
0answers
10 views

Log or find TLS version of connected clients in an Azure App Service

Where can I find or log the TLS version used in the handshake between a client and our API hosted as an Azure App Service? On a VM you can add CRYPT_PROTOCOL as a custom field to your applicationHost....
0
votes
0answers
15 views

Mutual TLS on NGINX with 2 CAs?

I'm curious, if I have a cert and private key issued by a well-known CA such as letsencrypt to establish a secure connection, but I'm using mutual TLS on NGINX, is it possible to have only the mutual ...
0
votes
0answers
24 views

Nginx: Reverse Proxy to Docker Container with SSL

On my Ubuntu (20) server I have a Docker container running on port 3000. I have now installed NGINX on the server and point a domain via a reverse proxy to the Docker container. server { listen 80;...
0
votes
1answer
34 views

SSL with NGINX with .pem files

I need to add SSL certificate for my domain for my website on my NGINX server. My domain provider gave me a zip file to download, which contains: domain.cert.pem intermediate.cert.pem private.key.pem ...
0
votes
1answer
54 views

How to set a HTTPS communication with a AWS Balancer and X Servers?

I have a webapp installed in X windows servers, in front of that servers i have an AWS Balancer, before settings the balancer i had only one server with SSL cert on the webapp. Should the SSL be only ...
0
votes
0answers
19 views

Ldap service not running on Windows Server 2019

I have 2 windows server 2019. e.g. server1 and server2. server1 is the domain controller. server1 has below roles installed: ADDS, ADCS, DNS, FILE STORAGE, IIS. server2 is connected to that domain ...
0
votes
0answers
30 views

Custom route protection with Nginx reverse proxy

I have a few docker containers running behind an nginx reverse proxy with mutual TLS. One of these containers would be something like the postgresql login UI. I was hoping to have some middleware or ...
0
votes
0answers
21 views

Mutual TLS nginx, restricting certain users/groups?

I have a route that is restricted using client certs signed by my CA in Nginx. It's working well, but allows anyone with a cert than I sign to enter. Is it possible to restrict based on users/groups/...
0
votes
1answer
33 views

Chrome not trusting self-signed cert

I have mutual TLS enabled on my nginx reverse proxy. I can view the site only when I have the client cert and custom CA installed in my keychain. This works in Safari and Chrome. However, in Chrome it ...
0
votes
1answer
18 views

How to set a public LB route to a proxy on AWS?

I built this traffic route in a VPC. Route53->ACM(SSL)->Public ALB->EC2(Nginx proxy)->Private ALB->ECS(Internal App) The EC2's security group is allowing tcp 80 and 443. The ECS' ...
1
vote
0answers
11 views

SSL offloading with IIS and Ajp (isapi) Tomcat

I have java web application running on tomcat on a Windows 2019 server. It runs fine on port 8180. I have a IIS (10.0) running on the same server with isapi_redirector 1.2.48 configured. Now I can ...
0
votes
0answers
17 views

Multiple CA certs - How to convert them in single file (may be .pem ) and use them?

I am using python http.client for making requests to server. I am using multiple ssl_ca certs and I specify them using the load_verify_locations multiple times. However, in python requets only a ...
0
votes
0answers
16 views

"This connection is not private" only on certain devices

I know Let's Encrypt had root certificate change on 9/30/21 and Media Temple is saying the issues we are experiencing on our WordPress Grid managed server is related to that. These issues are that ...
0
votes
1answer
201 views

Calicoctl rejecting certificate on fresh k3s install

I have a fresh install of Ubuntu, a fresh install of k3s, and a fresh download of calicoctl. I have installed it the following way. curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE="644"\ ...
0
votes
1answer
35 views

How to diagnose/fix CloudFormation/autoscaling SSL errors on file download

I have an autoscaling group that was created by AWS CloudFormation. It runs on Amazon Linux 2. Last week, it was working fine. Now, new instances throw a "certificate has expired" error when ...
0
votes
1answer
37 views

A valid Root CA Certificate could not be located, the certificate will likely display browser warnings

i'm trying to get Telegram Webhook working with my local machine but it doesn't make requests. I think it's bc of certificate issue Here's what geocerts.com/ssl-checker says: screenshot Here's my ...
0
votes
1answer
29 views

Is it secure to talk to a local API with http, when the public endpoint is https?

Context I have a server setup which looks like this: An Apache server is listening for example.com; Public port 80 is redirected to 443; Public port 443 is forwarded to a Symfony project; On the same ...
0
votes
1answer
47 views

Apache serving HTTP instead of HTTPS

I recently upgraded from Apache 2.2 to 2.4 (I know, I'm slow to upgrade, don't hate me). I have the following virtual host: <VirtualHost _default_:30000> DocumentRoot /opt/phpmyadmin ...
1
vote
2answers
163 views

Certificate problems since Let's Encrypts CA expired a few days ago

I'm running a Debian 10 server and I can't connect to other machines using Let's Enccrypt certificates anymore since LE's CA (DST Root CA X3) expired a few days ago: root#> curl -I https://example....
0
votes
1answer
41 views

how to disable certificate validation in port 443 [closed]

I am facing a certificate expiring issue on the server and I need to disable the certificate validation on port 443 and allow all connections coming to the specific port. How can I do it?
0
votes
0answers
38 views

Server supports TLS1.3 but refuses 1.2

I have the following Problem: Im hosting my website and some tools on a VServer running Ubuntu 18.04 behind an apache2. Some people told me that they can't reach my website and I tracked it down with ...
0
votes
2answers
39 views

Nginx giving precedence to subdomains based in alphabetical order of config files

TLDR: Nginx is giving precedence to subdomains in alphabetical order of the config files, and I want to know a way to prevent this from happening. This is similar to this question, but I am more ...
0
votes
0answers
26 views

TLS connection failed after server Encrypted Handshake

I am trying to fault find a TLS connection between my solar inverter and the monitoring servers that keeps failing. The solar inverter connects to my wireless AP (Ubiquiti UAP-AC-Lite), which is ...
0
votes
2answers
36 views

Use multiple dockerized Nginx behind a host Nginx

I have multiple and different dockerized applications, each one comes with its proper Nginx service which sends traffic to its containers based on some rules. I need to put those applications on the ...
-1
votes
1answer
74 views

Nginx works with IP address but not server name

I have Nginx running as a reverse proxy in front of Apache Guacamole. Everything works fine when accessing via IP address with XX.XX.XX.XX:8443. However I can't access via the server_name with "...
0
votes
0answers
13 views

TLS 1.2 Client hello resulting in TCP reset

I've been trying to set up a test environment where I have a windows service hosting an IDP. The IDP is, for legacy reasons, available using both HTTP and HTTPS. On the same host I've also deployed a ...
0
votes
0answers
28 views

Reach TimescaleDB with Hasura API: "CA certificate and CA private key do not match" when using self-signed server certificate / private key

I follow the guide at timescaleDB for APIs with Certificate authentication --> 2. Generate keys and certificates for nodes: For an SSL connection, you need four environment variables: SSL Root ...
0
votes
0answers
22 views

cert-manager on the Order: no configured challenge solver

Im trying create wildcard cert on Rancher kubernetes engine behind cloud loadbalancer. After install rancher i have a Issuer: apiVersion: cert-manager.io/v1 kind: Issuer metadata: annotations: ...
-2
votes
1answer
56 views

Cannot renew ssl certificates, notAfter never changes [closed]

Last two days I have been trying to fix ssl certificate problem in our servers. We have two servers A and B, I was able to connect A to B but B changed ssl certificate. They shared this key and we ...
0
votes
0answers
58 views

postfix MTA and SSL [duplicate]

We have some services sending information to email receivers. The services use SMTP to send the mail to postfix and then postfix delivers it to the correct domains (gmail.com, hotmail.com etc). When ...
0
votes
0answers
40 views

Bitnami AWS LAMP stack Bncert tool using new certificate for all domains

I am using the AWS Bitnami LAMP AMI on AWS to host multiple WordPress and PHP sites. I am having an issue when I generate a new SSL certificate for a domain using the BNCert tool it’s updating all the ...
0
votes
1answer
45 views

How to Enable SSL for Amazon EC2 Instance(LAMP packaged by Bitnami)?

I launch an EC2 instance with an AMI from the marketplace, which is called LAMP packaged by Bitnami. After the instance is launched, I find I can only access its DNS name or IP via HTTP, not HTTPS. It ...
0
votes
0answers
151 views

Why the certificate Authority always failed the temporary challenge file created by Certbot?

i'm using jonasal/nginx-certbot image for letsencript certificates generate. docker-compose.yml: version: '3' services: nginx: image: jonasal/nginx-certbot:latest restart: unless-stopped ...
0
votes
0answers
22 views

Use NGINX as a proxy to terminate SSL and forward request to target with HTTP

Assumptions Client requests target websites using HTTPS NGINX server is passed as HTTP proxy for said requests Client and NGINX server can share an SSL certificate Objective Allow NGINX to decrypt ...
0
votes
1answer
27 views

Can't use Certbot to SSL for Nginx with reactjs app and laravel subdirectory in subdomain

I have domain at 1 IP and subdomain at other IP. I had config nginx url for FE: http://subdomain/ and for BE: http://subdomain/api. And I need ssl for subdomain use Certbot, at this I have react app ...
0
votes
1answer
65 views

ns-cloud-e2.googledomains.com returns REFUSED

I have been trying to implement HTTPS on a kubernetes cluster on Google Cloud Platform. I cannot understand what else I need to check or look for. I am using a Google Managed certificate. dig output ; ...
0
votes
0answers
28 views

Can I have specify TLS configurations in a template?

I am trying to set this up for SIEM ingestion on RHEL 8. I have this configuration below, however, the normal non-tls TCP doesn't work. I know the problem is because I have gtls globally and in my ...
-1
votes
1answer
28 views

How can I increase my server space? [closed]

My website looks like this..(html version) is it an issue of space? it maybe full. Can you take a look and let me know what needs to be done? https://wizkidsclub.com/books/
1
vote
1answer
93 views

Postfix is getting "TLS Is required, but was not offered by host"

I've searched every forum, every article, every serverfault.com post for this issue. I'm using a fresh setup of Postfix. It is managed by Virtualmin. Whenever I try to send mail via TLS, I get the ...
0
votes
0answers
31 views

Will NGINX break any active connection when I revoke a specific client certificate with CRL?

Let's assume I have a client (e.g. IOT1) connecting to MQTT broker behind NGINX instance (terminating TLS is nginx's job) and I want to revoke that specific (IOT1) client, but what will happen with ...
2
votes
1answer
340 views

What process does certbot run as on Linux?

I'm guessing certbot must operate as a continual running service on Linux however using ps on a server that uses Let's Encrypt certificate auto-renewal, I'm not seeing any obvious process for certbot. ...
2
votes
2answers
89 views

Error Hostname DOES NOT VERIFY - Test certificates TLS Exchange 2016 cu21

Practicing with the certificates, in let's encrypt win-acme normal is created, I send and receive normal mail, https in owa and the other services Testing with checktls, it gives me an alert message : ...
0
votes
0answers
21 views

How to prevent origin IP Server behind Cloudflare/Sucuri with Shodan, Censys

When i use shodan/censys to scan my domain (behind with cloudflare/Sucuri) they can show my IP server with SSL. Example with Shodan: https://www.shodan.io/search?query=blogchiasekienthuc.com 103.99....
0
votes
3answers
186 views

How to automate SSL certificate to page builder site?

I created Page Builder Application for my clients but I am facing difficulties in SSL creation because of users counts is too large (more than 1000). I know its not right procedure SSL certificate ...
0
votes
1answer
31 views

mod_tls missing on proftpd

I am trying to enable TLS on Proftpd server (ProFTPD Version 1.3.7a, Debian version: 11) However, after completing all the steps and restarting the proftpd I am getting the below error. mod_dso/0.5: ...
0
votes
1answer
46 views

Verify two pfx certificates are not the same without the password

I need to verify that two pfx files are indeed different certificates, and not the same data pasted two times. My constraints are: I don't have access to the certificate password, therefore I cannot ...

1
2 3 4 5
145