SSL (the predecessor of TLS) is a cryptographic protocol designed to provide communications security over a computer network. It is the S in HTTPS, IMAPS, SMTPS, etc.

learn more… | top users | synonyms (1)

0
votes
0answers
15 views

sudo update-ca-certificates always add new cert

When I run sudo update-ca-certificates on debian 8 it is always add one new cert. it is normal behavior? What's can be wrong? ar@work:/tmp$ sudo update-ca-certificates Updating certificates in ...
-1
votes
2answers
23 views

I cannnot find ssl.conf for TLS1.2 install

I have a dedicated server with CENTOS 6.7, Apache/2.4.20 php 7 and i want to enable TLS1.2 for paypal payments. From this I understand that i need to add extra lines in ssl.conf I looked for it in ...
0
votes
0answers
16 views

What does it mean “Gateway Proxy Failure” in Squid?

While browsing one of HTTPS sites, I got the following message in browser: Gateway Proxy Failure A non-recoverable internal failure or configuration problem prevents this request from being ...
0
votes
0answers
25 views

OpenLDAP 2.4: How to correctly implement TLS (ldaps) on CentOS 6.7

My environment: CentOS 6.7 / OpenDLAP 2.4 slapd -VV @(#) $OpenLDAP: slapd 2.4.40 (Nov 10 2015 09:41:16) $ ...
0
votes
0answers
17 views

haproxy serving wrong SSL certificate for a subdomain

I have a Server that runs haproxy to redirect incoming traffic to the correct process based on the subdomain. haproxy is configured to use different SSL certificates depending on the subdomain. The ...
4
votes
3answers
123 views

How to check for sslv2 from a remote server?

I have a server which I want to check if it supports sslv2. from a remote machine I do the following: openssl s_client -ssl2 -connect something.somethingcool.com:443 But this returns: unknown ...
1
vote
1answer
18 views

SSLSNIFF on CentOS 7

I tried to install sslsniff 0.8 on CentOS 7 but I can't install the following dependencies since they can't be found when I execute the "yum" command: libboost1.35-dev, libboost-filesystem1.35-dev, ...
1
vote
1answer
49 views

Changing IPTables to Allow FTP over TLS Using Passive Ports

I am using Arch Linux. I followed a tutorial to change /etc/iptables/iptables.rules to allow only the basic ports for my web server. I also used /etc/modules-load.d/nf_conntrack_ftp.conf to enable ...
0
votes
0answers
31 views

Squid filters some of Bugzilla HTTPs URLs

I am trying to finetune web filtering with squid, but meeting ununderstandable behaviour (for me). For example, if I open the following address: https://bugzilla.mozilla.org/ It goes fine. But if I ...
1
vote
0answers
19 views

How to set Exim with TLS on a server with several domains?

I have a Debian Linux server with Exim. I want this server to use TLS when sending emails to supporting SMTP hosts, if a email is created by software on my server (for example with mail or sendmail ...
2
votes
1answer
89 views

Unable to use a self-signed certif. on localhost

I created a self-signed certificate for localhost for testing as follows: openssl genrsa -out key.pem 2048 openssl req -new -key key.pem -out certificate.csr openssl x509 -req -in certificate.csr ...
0
votes
0answers
29 views

Installing Plone 5-on-RHEL 7-fails-unable-to-find-libssl-or-openssl-ssl-h

sudo ./install.sh --target=/home/admin/Plone --build-python zeo Error: Unable to find libssl or openssl/ssl.h. libssl and its development headers are required for Plone. Please install your ...
2
votes
1answer
36 views

Does linux verify server certificate against crl by default?

Let assume that I have a Linux based server running apache or tomcat with a web server certificate created by a trusted authority. The certificate has embedded distribution point of the crl. The ...
0
votes
1answer
17 views

wget TLSv1 behaves the same as TLSv1_2

I used wireshark to compare curl --tlsv1.0 vs --tlsv1.2 The server handshake obediently uses TLSv1.0 for servers that support it (the point is to check to validate they don't): wget url ...
0
votes
0answers
6 views

SSL of domain redirecting to plesk panel default screen

I have plesk setup on my linux server, where we have a subscription setup for a website 4ti.co.uk We are getting a strange error where if you go to the domain using https://4ti.co.uk it directs you ...
1
vote
0answers
173 views

TLS on vsftpd in browser does not exist: 530 Non-anonymous sessions must use encryption

I have installed vsftpd on debian 8 and I configured it in /etc/vsftpd.conf like so: listen=YES pam_service_name=vsftpd use_localtime=YES anonymous_enable=YES anon_root=/var/ftproot/anonymous ...
1
vote
1answer
66 views

curl: (77) pbm with the SSL CA cert (path? access rights?)

I am in root in my directory on CentOS release 6.6 and I want to do the following in order to install mysql in upper version on centOS: rpm -Uvh ...
1
vote
1answer
161 views

Use HAProxy to tunnel SSH through https

I have a server with Apache webserver on it and many websites running on http (port 80) and https (port 443). I would like to use a proxy on port 443 in between Apache and the user. In this page, ...
1
vote
1answer
111 views

apache2 no listening sockets available, but nothing listening on the port

I'm trying to setup SSL on an ubuntu server. I've generated a key and certificate with the following commands openssl genrsa -out mydomain.key 1024 and openssl req -new -key mydomain.key -x509 -out ...
0
votes
0answers
29 views

How can I configure TLS1.1 on LFTP?

Could you please help me with the steps to configure TLS1.1 for lftp?Also how can I check which version of TLS is running on my Redhat Linux OS ?
4
votes
2answers
95 views

OS X Postfix no TLS found

I'm working on OSX El Capitan. About week ago everything worked fine, but then I changed my gmail password and now I can't send emails any more. Additional configuration for /etc/postfix/main.cf is: ...
1
vote
0answers
16 views

Rebuild pki directory and associated changes

Let me preface this with, "I am not looking for a free lunch." I royally screwed up my cert storage recently and during my attempt to repair I made things worse. I am looking for a thorough ...
1
vote
1answer
183 views

How to fix curl sslv3 alert handshake failure on Gentoo?

I'm trying open a website with cURL like this: $ curl -vH "Accept: application/json" https://www.rocketleaguereplays.com/api/replays/-1/ The output is: * Trying 104.24.114.83... * Connected to ...
2
votes
0answers
1k views

Uninstall all changes made by Letsencrypt

I installed Letsencrypt during the beta, following the instructions in the email, and now it seems broken on my debian jessie server. I try to uninstall letsencrypt and want to start over with my ...
0
votes
0answers
68 views

Enabling SSL on ubuntu with apache2

I'm trying to get SSL working on my ubuntu VM. I'm going through the steps in this link but when I got to reload the apache service after enabling default-ssl.conf I'm getting errors in the log: ...
2
votes
1answer
325 views

What do I do if I can't find ssl.conf file in a CentOS server?

I'm preparing a new CentOS Linux server, one of many. When I try to configure SSL on this server, I noticed there is no ssl.conf file. Not in /etc/httpd/conf.d/ssl.conf and not in ...
0
votes
1answer
92 views

This organization's certificate has been revoked. error on IE and Chrome Browser

Server type: Apache/2.2.15 (CentOS) DAV/2 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips mod_qos/10.24 No problem on Firefox browser. on IE and Chrome it displays: This organization's certificate has been ...
1
vote
0answers
26 views

How to decrypt data buffer in kernel level before read/recv [closed]

Before reading contents from socket file descriptor using read/recv(), can we preprocess/modify(e.g. decryption) data buffered in kernel level? I have server&client programs written in C, and I ...
5
votes
2answers
524 views

Let' encrypt - nginx - OCSP stapling

I would like to enable OCSP stapling in my nginx server. I'm using nginx version: nginx/1.6.2 debian Let's Encrypt certificate I'm really unexperienced in this matter, so it might be a trivial ...
0
votes
0answers
41 views

How do I get a manifest to run from my Puppet Master server to a Puppet Agent node?

I am trying to run a Puppet manifest for the first time on two new servers. But I keep getting errors. I recently set up two CentOS v7 servers. They have passwordless SSH between them. Ports 22, ...
0
votes
1answer
35 views

openSSL Key and Certificate

As far I know, in an authenticated SSL connection, both the client and server have private keys and provide their certificates (with the corresponding public keys) across the connection before ...
2
votes
2answers
231 views

Cannot connect to localhost on port 4430

I am running vagrant from a virtual box with CentOS and Nginx installed. I've created a reverse tunnel from the vagrant box to a remote server but when I am trying to connect to my localhost on port ...
0
votes
1answer
24 views

Apache Listening Port

I need for some help. I'm trying to set-up a web interface for a cloud system and I have used this conf (provided by the vendor) <VirtualHost *:443> ServerName sxweb.foo.com ServerAdmin ...
0
votes
1answer
200 views

“crypto failure” error when running various commands

I'm finding that a few commands (for now dig and nslookup) that fail no matter what with the following output: 19-Jan-2016 15:01:50.219 ENGINE_by_id failed (crypto failure) 19-Jan-2016 15:01:50.219 ...
1
vote
3answers
219 views

Apache 2.4 SSL Config - Server rejects requests with HTTP 400

I'm running into some trouble with my Apache 2.4 config. Accessing https://subdomain.my-domain.com always returns this http 400. Bad Request Your browser sent a request that this server could not ...
0
votes
0answers
18 views

Apache 2 Debian SSL Certification not exist

I'm not really good with Apache and that is the reason why I'm writing to you. I have installed a web server in SSL following some indication from the software vendor. When I restart the service I ...
3
votes
1answer
33 views

What are the drawbacks of using policy_any in openssl.cnf?

As given in this document, we may use policy_any to ignore most of the fields of subject in certificate request. There must be some drawbacks of ignoring such fields, would it may lead to some ...
0
votes
0answers
27 views

Apache and SSLVerifyClient

Please excuse any dumb statements regarding this. I am very new to Apache and to HP-UX. I am a SQL Server DBA and ended up on this project. I am working to try and implement SSL with Client Verify ...
0
votes
0answers
139 views

TLSv1.2 support in CentOS 5.8

Right now I can't access HTTPS site from PhantomJS headless WebKit browser because of TLSv1.2 In my CentOS 5.8 I have following OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 verison installed. I think I ...
0
votes
1answer
194 views

curl hangs after client hello

When I execute the following command in Ubuntu: curl -v --insecure -XGET 'https://user:pass@IP_ADDR:PORT/SOME_FILE.php' I get this output: * Hostname was NOT found in DNS cache * Trying ...
2
votes
1answer
133 views

Is it possible to use TLSv1.3 in Apache 2.4

Is it possible to use TLSv1.3 in Apache2.4? As of October 2015, TLS 1.3 is a working draft, i.e. TLSv1.3.
-1
votes
1answer
38 views

Puppet agent certificate error after rebuilding openstack instance

I have an open-stack instance vm , and puppet agent was working fine on it. By running the command puppet agent -t, it was good. But for some reason i had to rebuild the instance by using the ...
0
votes
2answers
270 views

How to configure SSL for Apache2 on OpenSuSE 13.1

I have OpenSuSE installed on a virtual hosted Server, running multiple virtual websites. On normal http everything works fine. I now would like to run one of my virtual sites on https in addition to ...
0
votes
1answer
322 views

invalid SSL_version specified at /usr/share/perl5/IO/Socket/SSL.pm line 368

SMTP SEND CRITICAL - invalid SSL_version specified at /usr/share/perl5/IO/Socket/SSL.pm line 368 I am using a nagios script /usr/lib/nagios/plugins/check_smtp_send that sends an email using gmail. ...
1
vote
0answers
60 views

Turning SSLEngine on causes ERR_CONNECTION_REFUSED

I am trying to configure my SSL certificate on a new installation of Ubuntu 15.10. I have installed the certificate files and the private key in the required directory: SSLCertificateFile ...
0
votes
2answers
94 views

TLS with syslog-ng 3.2.5

Does syslog-ng 3.2.5 from EPEL 6 (for CentOS 6) support TLS? I cannot get it to work at all; here is what I'm using: source s_network { tcp(ip(0.0.0.0) port(514) tls( ...
0
votes
0answers
134 views

Configure stunnel for smtp imaps of Gmail

hope someone could help me, i'm trying to configure stunnel on Debian system for get access to my gmail account. I have read a lot and it's seem simple but i can't figure it out. I have install and ...
1
vote
0answers
97 views

Hosting Dovecot and Postfix Behind nginx?

So I'm looking at setting up postfix and dovecot on a server that is currently hosting some web-sites via nginx, and I've stumbled upon the mail {} configuration option for nginx, but I'm having a ...
2
votes
1answer
369 views

Do I Need to Restart Nginx if I Renew My Security Certificate(s)?

So I'm setting up an nginx server with SSL enabled with a server definition something like: server { listen :80; listen [::]:80; server_name example.org; root /foo/bar; ssl on; ...
2
votes
1answer
249 views

HTTPS not working on CentOS Apache 2.4

I have created a key and self-signed certificate and moved them to /etc/httpd/conf/ My ssl.conf is here: http://pastebin.com/gsQbKY67 The ssl_module (shared) is there when I try httpd -M Output ...