SSL (the predecessor of TLS) is a cryptographic protocol designed to provide communications security over a computer network. It is the S in HTTPS, IMAPS, SMTPS, etc.

learn more… | top users | synonyms (1)

0
votes
0answers
6 views

Getting SSL errors when trying to set up Galera cluster

I am trying to set up a galera cluster. I am running RHEL7.2. I have my master running but when I try to start mariadb on one of my slaves like so ... # /usr/bin/systemctl start mariadb ... it ...
0
votes
2answers
29 views

When FTP Requires FTP over TLS is it FTPS?

After reading through this tutorial I still have a persistent question. In the beggining of the article the writer says: Warning: FTP is inherently insecure! Consider using SFTP instead of FTP. ...
0
votes
0answers
16 views

Can't pipe contents of a file but can do more [duplicate]

I am trying to transfer SSL certificates from my server to a docker container running on the same server. Permissions on the file: $ sudo ls -al live/my.server.com/cert.pem lrwxrwxrwx. 1 root root ...
1
vote
0answers
69 views
+50

HTTPs connections to github times out randomly on different machines

I checked the status on git-hub , there is no issue like DDOS , their server is 100% operational , but cloning of repos at different Jenkins slaves times out randomly , sometimes it does and sometimes ...
0
votes
0answers
12 views

Debug CalDAVs sync failures with network sniffer, how to be display prettyprinted traffic in terminal

I need to debug some unsuccessful CalDAV synchronization requests. I have functioning clients, so I can compare working vs broken. The traffic is SSL-encrypted, but I have the key. I have root on a ...
0
votes
1answer
40 views

Where to find SSL private key on a CentOS server

I am running a server on CentOS, and I would like to decrypt and view the SSL traffic. However, I cannot locate any of the keys necessary to do this. My /etc/pki/CA/private folder is empty, and my /...
0
votes
0answers
13 views

Enabling HTTPS for pentaho bi-server - Tomcat

We are setting up Pentaho which is a BI tool. This uses Tomcat as the webserver. We tried following the below link but were not successful. http://wiki.pentaho.com/display/ServerDoc1x/01.+Enabling+...
0
votes
0answers
46 views

Unable to access CUPS /admin page. A TLS fatal alert has been received

We have several servers where the CUPS /admin interface is utilized. It was brought to my attention that several of them are no longer functional. The config is fairly simple and I cannot find a ...
0
votes
0answers
11 views

SSL error with rvm and ruby 2.2.2

I am getting the below error while doing a api call from one app to another: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed We are using using rvm ...
1
vote
0answers
26 views

cyrus-imapd & SSL

I have an IMAP server running on Fedora (cyrus-imapd-2.4.18-1.fc23.i686) with the following configuration: $ cat /etc/imapd.conf configdirectory: /var/lib/imap partition-default: /var/spool/imap ...
2
votes
1answer
31 views

Apache Reverse Proxy - How to disable SSL frontside but allow SSL backside

I have an Ubuntu 14 LTS / Apache 2.4 server with mod_proxy/mod_rewrite configured for use as a reverse proxy. One of the servers on the backside is too old to support TLS. I would like to disable ...
0
votes
0answers
22 views

Do you need to disable SPDY to block SSL websites with Squid?

If a computer connects to squid, and squid does ssl-bump or peek-n-splice or DynamicSslCert to block access to certain HTTPS websites at certain times of day should SPDY be disabled in the browser? ...
1
vote
0answers
46 views

502 Proxy Error - PUT request to MDM OSX Server via apache ProxyPass on ubuntu 14

I am trying to set up a OSX Server behind an ubuntu server with apache2 and vhosts which uses proxypass to send requests to my OSX server. Most request work like they should but I am unable to make ...
1
vote
1answer
44 views

Images and Stylesheets not loading from squid due to a bad certificate?

I just setup Gate Sentry on a Raspberry PI 3, and it contains Squid 3 as part of it's proxy chain. It also utilizes ssl bump and certain websites that use SSL (usually big ones, like Facebook and ...
3
votes
0answers
40 views

Can't disable TLSv1 and RC4-SHA

I need to remove TLSv1 and RC4-SHA support in Centos 7. I have these lines in my ssl.conf SSLProtocol +TLSv1.2 +TLSv1.1 -TLSv1 SSLCompression off SSLHonorCipherOrder on SSLCipherSuite "ECDHE-ECDSA-...
2
votes
1answer
39 views

How do I configure Apache to serve https?

After many hours I finally managed to configure Apache to use my SSL certificate but i just found out that there is something wrong in my configuration. If I try to reach my domain from Google Chrome ...
1
vote
1answer
24 views

How to extract RSA keys from Apache

I am testing some old vulnerabilities related to SSL/TLS, and would like to know how to extract temporary RSA keys from Apache. The particular vulnerability I am testing is the FREAK attack. I ...
-1
votes
2answers
41 views

SSL Strip Attack: Confusion with “echo 1 > /proc/sys/net/ipv4/ip_forward”

In the SSLStrip attack, one has to enable IP forwarding using the command : echo 1 > /proc/sys/net/ipv4/ip_forward I understand this command enables the host to work as a router forwarding ...
3
votes
1answer
43 views

Using iptables to stop brute force attacks on a Apache https site

I have a TLS site Apache which uses Basic Authentication to protect resources. I'm trying to setup an iptables rule to prevent brute force attacks on port 443, so I've added the following iptables ...
18
votes
3answers
819 views

Untrusting an intermediate CA in Linux?

From this blog. Intermediate CAs are certificates signed by a root CA that can sign arbitrary certificates for any websites. They are just as powerful as root CAs, but there's no full list of ...
0
votes
0answers
68 views

sudo update-ca-certificates always add new cert

When I run sudo update-ca-certificates on debian 8 it is always add one new cert. it is normal behavior? What's can be wrong? ar@work:/tmp$ sudo update-ca-certificates Updating certificates in /etc/...
-1
votes
2answers
41 views

I cannnot find ssl.conf for TLS1.2 install

I have a dedicated server with CENTOS 6.7, Apache/2.4.20 php 7 and i want to enable TLS1.2 for paypal payments. From this I understand that i need to add extra lines in ssl.conf I looked for it in /...
0
votes
0answers
19 views

What does it mean “Gateway Proxy Failure” in Squid?

While browsing one of HTTPS sites, I got the following message in browser: Gateway Proxy Failure A non-recoverable internal failure or configuration problem prevents this request from being ...
0
votes
0answers
84 views

OpenLDAP 2.4: How to correctly implement TLS (ldaps) on CentOS 6.7

My environment: CentOS 6.7 / OpenDLAP 2.4 slapd -VV @(#) $OpenLDAP: slapd 2.4.40 (Nov 10 2015 09:41:16) $ mockbuild@c6b8.bsys.dev.centos.org:/builddir/build/BUILD/openldap-2.4.40/openldap-2....
0
votes
0answers
33 views

haproxy serving wrong SSL certificate for a subdomain

I have a Server that runs haproxy to redirect incoming traffic to the correct process based on the subdomain. haproxy is configured to use different SSL certificates depending on the subdomain. The ...
4
votes
3answers
193 views

How to check for sslv2 from a remote server?

I have a server which I want to check if it supports sslv2. from a remote machine I do the following: openssl s_client -ssl2 -connect something.somethingcool.com:443 But this returns: unknown ...
1
vote
1answer
28 views

SSLSNIFF on CentOS 7

I tried to install sslsniff 0.8 on CentOS 7 but I can't install the following dependencies since they can't be found when I execute the "yum" command: libboost1.35-dev, libboost-filesystem1.35-dev, ...
1
vote
1answer
110 views

Changing IPTables to Allow FTP over TLS Using Passive Ports

I am using Arch Linux. I followed a tutorial to change /etc/iptables/iptables.rules to allow only the basic ports for my web server. I also used /etc/modules-load.d/nf_conntrack_ftp.conf to enable ...
0
votes
0answers
32 views

Squid filters some of Bugzilla HTTPs URLs

I am trying to finetune web filtering with squid, but meeting ununderstandable behaviour (for me). For example, if I open the following address: https://bugzilla.mozilla.org/ It goes fine. But if I ...
1
vote
0answers
25 views

How to set Exim with TLS on a server with several domains?

I have a Debian Linux server with Exim. I want this server to use TLS when sending emails to supporting SMTP hosts, if a email is created by software on my server (for example with mail or sendmail ...
2
votes
1answer
182 views

Unable to use a self-signed certif. on localhost

I created a self-signed certificate for localhost for testing as follows: openssl genrsa -out key.pem 2048 openssl req -new -key key.pem -out certificate.csr openssl x509 -req -in certificate.csr -...
0
votes
0answers
39 views

Installing Plone 5-on-RHEL 7-fails-unable-to-find-libssl-or-openssl-ssl-h

sudo ./install.sh --target=/home/admin/Plone --build-python zeo Error: Unable to find libssl or openssl/ssl.h. libssl and its development headers are required for Plone. Please install your ...
2
votes
1answer
46 views

Does linux verify server certificate against crl by default?

Let assume that I have a Linux based server running apache or tomcat with a web server certificate created by a trusted authority. The certificate has embedded distribution point of the crl. The ...
0
votes
1answer
30 views

wget TLSv1 behaves the same as TLSv1_2

I used wireshark to compare curl --tlsv1.0 vs --tlsv1.2 The server handshake obediently uses TLSv1.0 for servers that support it (the point is to check to validate they don't): wget url --no-check-...
0
votes
0answers
7 views

SSL of domain redirecting to plesk panel default screen

I have plesk setup on my linux server, where we have a subscription setup for a website 4ti.co.uk We are getting a strange error where if you go to the domain using https://4ti.co.uk it directs you ...
1
vote
0answers
711 views

TLS on vsftpd in browser does not exist: 530 Non-anonymous sessions must use encryption

I have installed vsftpd on debian 8 and I configured it in /etc/vsftpd.conf like so: listen=YES pam_service_name=vsftpd use_localtime=YES anonymous_enable=YES anon_root=/var/ftproot/anonymous ...
1
vote
1answer
225 views

curl: (77) pbm with the SSL CA cert (path? access rights?)

I am in root in my directory on CentOS release 6.6 and I want to do the following in order to install mysql in upper version on centOS: rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-...
1
vote
1answer
304 views

Use HAProxy to tunnel SSH through https

I have a server with Apache webserver on it and many websites running on http (port 80) and https (port 443). I would like to use a proxy on port 443 in between Apache and the user. In this page, ...
1
vote
1answer
189 views

apache2 no listening sockets available, but nothing listening on the port

I'm trying to setup SSL on an ubuntu server. I've generated a key and certificate with the following commands openssl genrsa -out mydomain.key 1024 and openssl req -new -key mydomain.key -x509 -out ...
0
votes
1answer
63 views

How can I configure TLS1.1 on LFTP?

Could you please help me with the steps to configure TLS1.1 for lftp?Also how can I check which version of TLS is running on my Redhat Linux OS ?
4
votes
2answers
146 views

OS X Postfix no TLS found

I'm working on OSX El Capitan. About week ago everything worked fine, but then I changed my gmail password and now I can't send emails any more. Additional configuration for /etc/postfix/main.cf is: ...
1
vote
0answers
17 views

Rebuild pki directory and associated changes

Let me preface this with, "I am not looking for a free lunch." I royally screwed up my cert storage recently and during my attempt to repair I made things worse. I am looking for a thorough ...
1
vote
1answer
428 views

How to fix curl sslv3 alert handshake failure on Gentoo?

I'm trying open a website with cURL like this: $ curl -vH "Accept: application/json" https://www.rocketleaguereplays.com/api/replays/-1/ The output is: * Trying 104.24.114.83... * Connected to ...
2
votes
0answers
2k views

Uninstall all changes made by Letsencrypt

I installed Letsencrypt during the beta, following the instructions in the email, and now it seems broken on my debian jessie server. I try to uninstall letsencrypt and want to start over with my (...
0
votes
0answers
117 views

Enabling SSL on ubuntu with apache2

I'm trying to get SSL working on my ubuntu VM. I'm going through the steps in this link but when I got to reload the apache service after enabling default-ssl.conf I'm getting errors in the log: [...
2
votes
1answer
639 views

What do I do if I can't find ssl.conf file in a CentOS server?

I'm preparing a new CentOS Linux server, one of many. When I try to configure SSL on this server, I noticed there is no ssl.conf file. Not in /etc/httpd/conf.d/ssl.conf and not in /etc/httpd/conf/ssl....
0
votes
1answer
279 views

This organization's certificate has been revoked. error on IE and Chrome Browser

Server type: Apache/2.2.15 (CentOS) DAV/2 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips mod_qos/10.24 No problem on Firefox browser. on IE and Chrome it displays: This organization's certificate has been ...
1
vote
0answers
39 views

How to decrypt data buffer in kernel level before read/recv [closed]

Before reading contents from socket file descriptor using read/recv(), can we preprocess/modify(e.g. decryption) data buffered in kernel level? I have server&client programs written in C, and I ...
5
votes
2answers
920 views

Let' encrypt - nginx - OCSP stapling

I would like to enable OCSP stapling in my nginx server. I'm using nginx version: nginx/1.6.2 debian Let's Encrypt certificate I'm really unexperienced in this matter, so it might be a trivial ...
0
votes
0answers
55 views

How do I get a manifest to run from my Puppet Master server to a Puppet Agent node?

I am trying to run a Puppet manifest for the first time on two new servers. But I keep getting errors. I recently set up two CentOS v7 servers. They have passwordless SSH between them. Ports 22, ...