We changed our privacy policy. Read more.

Questions tagged [ssl]

SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

1,753 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
9
votes
0answers
454 views

Can Asterisk's phoneprov module be used securely?

I'm using Asterisk 13.1.0 as packaged by Ubuntu Server 16.04 to run a pure-VoIP phone system. Asterisk has a module – phoneprov – that allows it to template out configuration files for ...
8
votes
1answer
1k views

Utilizing SSL on Multi-domain, Autoscaling Elastic Beanstalk Setup

We are creating a Content Management System for our company. It is important that this CMS support dynamic domain names on a dynamic number of servers. After many hours of research we felt that Amazon'...
7
votes
1answer
32k views

TLS Error 70 issues

I have a web application (IIS 8) on one server (Windows Server 2012) connecting to SQL Server Reporting Services 2012 on another server (Windows Server 2008) that until recently was working fine. ...
7
votes
0answers
6k views

Apache/SSL: (70014)End of file found: SSL input filter read failed

Figured upgrading on a long weekend was a smart move... Now I'm stuck. The server is spitting out this error (loglevel info): "(70014)End of file found: SSL input filter read failed" when using the ...
7
votes
1answer
188 views

What would be involved in moving a site like stackoverflow to https?

I've seen a lot of requests in the SO Meta asking for StackOverflow to be moved over completely to https. I've never run a site as large as Stack Overflow, so enabling SSL/TLS has always just meant ...
6
votes
1answer
925 views

IIS 6.0 SSL handshake error

Hi all I installed a trusted certificate in an IIS 6.0 server. I have the port 443 opened in the firewall and I verified the server is listening on that port. However when verifying using openssl I ...
5
votes
1answer
635 views

How to debug failed checksums/flipped bits in TCP packets?

A web application we maintain recently encountered a very weird problem: three out of four virtual machines on two physical hosts had trouble connecting to the server of our payment provider via HTTPS....
5
votes
2answers
1k views

Checking HTTPS setup on Apache/Nginx before using

You have just got a new HTTPS (SSL/TLS) Certificate, and what you hope is the correct Intermediate Certificates. This is setup in Apache with: SSLCertificateKeyFile /etc/ssl/www.example.com.key ...
5
votes
1answer
5k views

NGINX does not prompt for client ssl certificate

On our setup we want to promt a user for a client ssl certificate. All certificates are issued by StartSSL. The problem is that even though ssl_verify_client on; is set 'on', the website / browser ...
5
votes
1answer
22k views

Enable TLS 1.2 in Windows Server 2012 running Exchange 2013 via IIS 8.0

I got some issues getting the TLS 1.2 protocol running on one of our Windows Server 2012 machines. I checked this using ssllabs.com by Qualys and also tested with a powershell script and the linux ...
5
votes
0answers
5k views

LDAP with TLS: connect error(-11)

I configured OpenLDAP and today I've configured the TLS for more security following these guide lines: Configure OpenLDAP with TLS=required Modifying the cn=config.ldif with config file: dn: cn=...
5
votes
1answer
2k views

Outlook refusing to display HTTPS images from server using internally-signed cert

We are currently transitioning our site to use HTTPS everywhere, and this includes the emails that we send to customers. On our internal testing environments, we are using IIS with SSL certificates ...
4
votes
0answers
467 views

Unable to RDP into Server 2016 after adding custom RDP certificate

We have a Server 2016 running AD Certificate Services. Our team was asked to create a new RDP certificate so that the self-signed certificate errors would go away when RDP'ing into the system. Went ...
4
votes
0answers
12k views

SSL certification exception- error:0909006C:PEM routines:get_name:no start line

I am using LDAP authentication in Tomcat. But I'm getting the exception SEVERE: Failed to initialize end point associated with ProtocolHandler ["http-apr-4001"] java.lang.Exception: Unable to ...
4
votes
0answers
3k views

haproxy ssl password protected private key

Usage: Haproxy as SSL termination Requirement: Our private keys are password protected and we are not allowed to remove the password for the private key Problem: If i run the following command ...
4
votes
1answer
224 views

Sha1 deprecation 2017

SHA1 is depcrecated as of january 1st this year - at least on browsers. I have not switched my ironport certificate yet, and not my intra exchange certificate (the external ones are replaced). Will I ...
4
votes
2answers
192 views

SSL on both ELB and server

I configured my ELB to be able to serve ssl pages by putting my certs in the ELB itself. Say the ELB serve requests from www.example.com. At the same time i need to use ssl outside the ELB and serve ...
4
votes
0answers
356 views

What process on a SonicWall Security Appliance Checks the DPI-SSL Client Inspection?

I'm interested in determining if there is high CPU usage on a SonicWall Security Appliance, but I don't know which process to check for high CPU usage. There are various options for this in the UI ...
4
votes
0answers
556 views

Schannel Error - Random

I'm currently experiencing an issue on a Windows Server 2012 R2. In the event log is an Error for the Source "Schannel". The error description is: "A fatal alert was generated and sent to the ...
4
votes
0answers
9k views

How is TLS_FALLBACK_SCSV supported on Windows Server?

According to the last SSL Labs report, everything is green on my server, except support for TLS_FALLBACK_SCSV. Not currently possible with IIS it seems I've read everywhere that this is not ...
4
votes
0answers
377 views

Sophos firewall default settings do not allow HTTPS from Java 6 clients

Our current (default) Sophos firewall (Apache reverse proxy) settings does not allow Java 6 clients to connect over HTTPS. The ssltest result shows that the reason is "Client does not support DH ...
4
votes
1answer
822 views

Multiple Client Certificates in SSLProxyMachineCertificateFile

Here is my use case. I want to learn how to setup Apache, so this is just for learning. Feel free to suggest better alternatives. I'm using Apache 2.4 in RHEL5. I want to use a ProxyPassMatch to ...
4
votes
0answers
1k views

rabbitmq-shovel amqps connection handshake failure

I fail to setup a rabbitmq shovel over amqps. The same shovel works fine over amqp. my (edited) uri: amqps://un:pw@myhost.example.com:5679?cacertfile=/etc/ssl/certs/example.com.cacert.crt&...
4
votes
1answer
5k views

IIS SMTP TLS encryption issue

I enabled TLS in IIS SMTP Virtual Server with a self-signed server certificate. Made sure that the certificate has the FQDN of the server. Checked the TLS encryption checkbox in Virtual SMTP > ...
4
votes
0answers
295 views

How can I explicitly disable TLS when sending to one specific recipient?

I have a SendMail 8.14 server deployed in the middle of an SMTP workflow (Outbound mail looks like Exchange -> SendMail -> Appliance -> Internet) I have TLS configured for the first three hosts. ...
4
votes
1answer
6k views

Configuring client certificates on IIS8 - Error 403.16

I am trying to implement client certificate authentication on IIS 8. I have deployed my configuration on a development machine and verified it working as expected there. However after setting up on ...
4
votes
1answer
991 views

Linux forward proxy for client authentication

I need to use a simple HTTP forward proxy proxy for Linux to do mutual SSL authentication. The proxy needs to attach a client certificate to HTTP request and then upgrade HTTP to HTTPS. I have tried ...
4
votes
3answers
23k views

OpenSSL connection Error called stream_socket_enable_crypto()

in my php coding i have following line which uses by SWIFT MAILER Class if(!stream_socket_enable_crypto($this->smtp_conn, true, STREAM_CRYPTO_METHOD_TLS_CLIENT)) { return false; } however ...
4
votes
0answers
1k views

How do I clear cached SSL state data from schannel?

I'm trying to clear SSL state data for a normal TLS session (no client certs are involved) for Outlook when connecting to a SSL based CAS server. How do I clear the SSL state of SChannel? Does the ...
4
votes
1answer
2k views

Apache2 not sending installed SSL certificate

I've spent hours and hours researching this problem and before I do something drastic like redoing all of the relevant configs I thought I'd ask for help. I'm a student sys-admin at a college and we'...
4
votes
0answers
4k views

OpenSSL SHA256 testing

I'm having an issue testing a hardened SSL configuration for pound. One of the requirements is for the inclusion of AES[128|256]-SHA256 ciphers, along with strict ordering of preference. I've ...
4
votes
2answers
2k views

Nginx SSL redirect for one specific page only

I read and followed this question in order to configure nginx to force SSL for one page (admin.php for XenForo), and it is working well for a few of the site administrators but is not for myself. I ...
4
votes
0answers
5k views

ProFTPd/FTPS issue: unable to accept TLS connection: received EOF that violates protocol

It took some time while I tried to find solution over the net. Nothing helped. The story: I have Ubuntu 10.10 (Amazon EC2 instance). ProFTPD Version 1.3.2e (latest via apt-get). I changed nothing on ...
4
votes
0answers
435 views

How to add SSL for localhost in RAILS

I want to test my application which needs to work both with and without SSL. If it is possible to set up SSL for a local application (http://localhost:3000), please let me know some suggestions, my OS ...
3
votes
0answers
50 views

Upgrading command line tools to support TLS1.3 on Amazon Linux 2

A server I need to communicate with only allows TLS1.3 traffic. I have thus updated the version of OpenSSL bundled with Amazon Linux 2 to OpenSSL 1.1.1c. Following this guide I am now able to use TLS ...
3
votes
1answer
122 views

How can I remove a self signed root certificate?

I'm using bitnami wordpress on GCP. I'm new to server networking. There is this root signed certificate that I can't changed. I have not installed any SSL on the server. I've searched through the ...
3
votes
1answer
172 views

Configuring mailiers in Phabricator

After a clean installation using the bitnami image I followed the instructions to set up the mailers. It looks like this: [ { "key": "stmp-mailer", "type": &...
3
votes
0answers
699 views

Email headers in o365 showing MAPI

I'm reviewing email headers to determine if an email sent via SMTP is using TLS 1.2. Depending on where I send the email, it goes 3-5 hops to different servers. The first connection appears to be ...
3
votes
0answers
327 views

Haproxy same port for http and https

I want my webapplication run only on port 4443. So i added this port to my docker container on haproxy. Now i want to inspect the incomming request and if it is not https, it should redirect to it. ...
3
votes
0answers
153 views

Optimizing IIS for serving static content over TLS

I am trying to fine tune an IIS 10 web server for the sole purpose of serving static files. I've disabled session state, disabled managed code, added all necessary public cache control headers with ...
3
votes
1answer
1k views

How to create an SSL certificate for an AWS application load balancer without a domain

I am trying to create a Cloudformation stack that can be provisioned by anybody (basically I want to share it either in the marketplace, or make it public in GitHub), which includes a set of EC2 ...
3
votes
1answer
982 views

Why is the ssl session cache ( ssl_session_cache) disabled by default in nginx?

In nginx, the ssl_session_cache directive has a default of 'none'. ref However, in the documentation for configuring HTTPS server, it's advised to turn on the ssl session cache, as it explains that ...
3
votes
0answers
1k views

Trying to use an openLdap docker image for SSL

I'm trying to use docker to create a openldap server than I can connect to over our intranet. I've set it up to run as host so that it doesn't cause any network issues and we can use the network DNS. ...
3
votes
1answer
2k views

nginx config using variable in ssl_certificate path throws permissions error

The nginx configuration server block: localhost:/etc/nginx$ cat nginx.conf | grep -B 3 -A 6 '$ssl_server_name' server { listen 443 ssl http2 default_server; ssl_certificate /etc/...
3
votes
1answer
6k views

openssl verify error 2 at 1 depth lookup:unable to get issuer certificate

Openssl is telling me it can't verify my concatenated cert. I downloaded the intermediate cert from the issuer (AlphaSSL) and concatenated that with my domain cert I purchased (domain cert first, then ...
3
votes
0answers
397 views

BAD REQ 400 when trying to enable HAProxy ssl?

http works but can't connect via secure connection. The haproxy log file error: {} <BADREQ> 400 mainssl/<NOSRV> <ip> 187 -1 output of socket show errors: frontend mainssl (#3): ...
3
votes
0answers
347 views

Apache TrafficServer as reverse proxy gives empty cipher list

I am trying to setup Apache Trafficserver as a reverse proxy. (Debian Stretch, ATS 7.0.0 (also tried 7.1.2 from backports), openssl 1.1.0f) Everything went fine so far, until I came accross ...

1
2 3 4 5
36