SSL (the predecessor of TLS) is a cryptographic protocol designed to provide communications security over a computer network. It is the S in HTTPS, IMAPS, SMTPS, etc.

learn more… | top users | synonyms (1)

0
votes
0answers
7 views

Unable to access CUPS /admin page. A TLS fatal alert has been received

We have several servers that where the CUPS /admin interface is utilized. It was brought to my attention that several of them are no longer functional. The config is fairly simple and I cannot find a ...
0
votes
0answers
4 views

SSL error with rvm and ruby 2.2.2

I am getting the below error while doing a api call from one app to another: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed We are using using rvm ...
1
vote
0answers
15 views

cyrus-imapd & SSL

I have an IMAP server running on Fedora (cyrus-imapd-2.4.18-1.fc23.i686) with the following configuration: $ cat /etc/imapd.conf configdirectory: /var/lib/imap partition-default: /var/spool/imap ...
2
votes
0answers
20 views

Apache Reverse Proxy - How to disable SSL frontside but allow SSL backside

I have an Ubuntu 14 LTS / Apache 2.4 server with mod_proxy/mod_rewrite configured for use as a reverse proxy. One of the servers on the backside is too old to support TLS. I would like to disable ...
0
votes
0answers
21 views

Fatal error starting apache2 with mod_sssl [on hold]

I followed the instructions on this link to INSTALL SSL ON Ubuntu 14.04. After completing everything I get the following in the error log: [Fri Jun 24 19:10:26.262361 2016] [mpm_prefork:notice] [pid ...
0
votes
0answers
15 views

Do you need to disable SPDY to block SSL websites with Squid?

If a computer connects to squid, and squid does ssl-bump or peek-n-splice or DynamicSslCert to block access to certain HTTPS websites at certain times of day should SPDY be disabled in the browser? ...
-1
votes
0answers
17 views

CURL SSL Handshake error [closed]

Some sites disable support for SSL 3.0 (possible because of many exploits/vulnerabilities), so it's possible to force specific SSL version by either -2 / --sslv2 or -3 / --sslv3.  Also -L is worth a ...
1
vote
0answers
29 views

502 Proxy Error - PUT request to MDM OSX Server via apache ProxyPass on ubuntu 14

I am trying to set up a OSX Server behind an ubuntu server with apache2 and vhosts which uses proxypass to send requests to my OSX server. Most request work like they should but I am unable to make ...
1
vote
1answer
39 views

Images and Stylesheets not loading from squid due to a bad certificate?

I just setup Gate Sentry on a Raspberry PI 3, and it contains Squid 3 as part of it's proxy chain. It also utilizes ssl bump and certain websites that use SSL (usually big ones, like Facebook and ...
3
votes
0answers
29 views

Can't disable TLSv1 and RC4-SHA

I need to remove TLSv1 and RC4-SHA support in Centos 7. I have these lines in my ssl.conf SSLProtocol +TLSv1.2 +TLSv1.1 -TLSv1 SSLCompression off SSLHonorCipherOrder on SSLCipherSuite "ECDHE-ECDSA-...
2
votes
1answer
34 views

How do I configure Apache to serve https?

After many hours I finally managed to configure Apache to use my SSL certificate but i just found out that there is something wrong in my configuration. If I try to reach my domain from Google Chrome ...
1
vote
1answer
22 views

How to extract RSA keys from Apache

I am testing some old vulnerabilities related to SSL/TLS, and would like to know how to extract temporary RSA keys from Apache. The particular vulnerability I am testing is the FREAK attack. I ...
-1
votes
2answers
37 views

SSL Strip Attack: Confusion with “echo 1 > /proc/sys/net/ipv4/ip_forward”

In the SSLStrip attack, one has to enable IP forwarding using the command : echo 1 > /proc/sys/net/ipv4/ip_forward I understand this command enables the host to work as a router forwarding ...
3
votes
1answer
38 views

Using iptables to stop brute force attacks on a Apache https site

I have a TLS site Apache which uses Basic Authentication to protect resources. I'm trying to setup an iptables rule to prevent brute force attacks on port 443, so I've added the following iptables ...
18
votes
3answers
758 views

Untrusting an intermediate CA in Linux?

From this blog. Intermediate CAs are certificates signed by a root CA that can sign arbitrary certificates for any websites. They are just as powerful as root CAs, but there's no full list of ...
0
votes
0answers
43 views

sudo update-ca-certificates always add new cert

When I run sudo update-ca-certificates on debian 8 it is always add one new cert. it is normal behavior? What's can be wrong? ar@work:/tmp$ sudo update-ca-certificates Updating certificates in /etc/...
-1
votes
2answers
36 views

I cannnot find ssl.conf for TLS1.2 install

I have a dedicated server with CENTOS 6.7, Apache/2.4.20 php 7 and i want to enable TLS1.2 for paypal payments. From this I understand that i need to add extra lines in ssl.conf I looked for it in /...
0
votes
0answers
19 views

What does it mean “Gateway Proxy Failure” in Squid?

While browsing one of HTTPS sites, I got the following message in browser: Gateway Proxy Failure A non-recoverable internal failure or configuration problem prevents this request from being ...
0
votes
0answers
62 views

OpenLDAP 2.4: How to correctly implement TLS (ldaps) on CentOS 6.7

My environment: CentOS 6.7 / OpenDLAP 2.4 slapd -VV @(#) $OpenLDAP: slapd 2.4.40 (Nov 10 2015 09:41:16) $ mockbuild@c6b8.bsys.dev.centos.org:/builddir/build/BUILD/openldap-2.4.40/openldap-2....
0
votes
0answers
27 views

haproxy serving wrong SSL certificate for a subdomain

I have a Server that runs haproxy to redirect incoming traffic to the correct process based on the subdomain. haproxy is configured to use different SSL certificates depending on the subdomain. The ...
4
votes
3answers
158 views

How to check for sslv2 from a remote server?

I have a server which I want to check if it supports sslv2. from a remote machine I do the following: openssl s_client -ssl2 -connect something.somethingcool.com:443 But this returns: unknown ...
1
vote
1answer
26 views

SSLSNIFF on CentOS 7

I tried to install sslsniff 0.8 on CentOS 7 but I can't install the following dependencies since they can't be found when I execute the "yum" command: libboost1.35-dev, libboost-filesystem1.35-dev, ...
1
vote
1answer
93 views

Changing IPTables to Allow FTP over TLS Using Passive Ports

I am using Arch Linux. I followed a tutorial to change /etc/iptables/iptables.rules to allow only the basic ports for my web server. I also used /etc/modules-load.d/nf_conntrack_ftp.conf to enable ...
0
votes
0answers
31 views

Squid filters some of Bugzilla HTTPs URLs

I am trying to finetune web filtering with squid, but meeting ununderstandable behaviour (for me). For example, if I open the following address: https://bugzilla.mozilla.org/ It goes fine. But if I ...
1
vote
0answers
23 views

How to set Exim with TLS on a server with several domains?

I have a Debian Linux server with Exim. I want this server to use TLS when sending emails to supporting SMTP hosts, if a email is created by software on my server (for example with mail or sendmail ...
2
votes
1answer
144 views

Unable to use a self-signed certif. on localhost

I created a self-signed certificate for localhost for testing as follows: openssl genrsa -out key.pem 2048 openssl req -new -key key.pem -out certificate.csr openssl x509 -req -in certificate.csr -...
0
votes
0answers
34 views

Installing Plone 5-on-RHEL 7-fails-unable-to-find-libssl-or-openssl-ssl-h

sudo ./install.sh --target=/home/admin/Plone --build-python zeo Error: Unable to find libssl or openssl/ssl.h. libssl and its development headers are required for Plone. Please install your ...
2
votes
1answer
41 views

Does linux verify server certificate against crl by default?

Let assume that I have a Linux based server running apache or tomcat with a web server certificate created by a trusted authority. The certificate has embedded distribution point of the crl. The ...
0
votes
1answer
24 views

wget TLSv1 behaves the same as TLSv1_2

I used wireshark to compare curl --tlsv1.0 vs --tlsv1.2 The server handshake obediently uses TLSv1.0 for servers that support it (the point is to check to validate they don't): wget url --no-check-...
0
votes
0answers
6 views

SSL of domain redirecting to plesk panel default screen

I have plesk setup on my linux server, where we have a subscription setup for a website 4ti.co.uk We are getting a strange error where if you go to the domain using https://4ti.co.uk it directs you ...
1
vote
0answers
432 views

TLS on vsftpd in browser does not exist: 530 Non-anonymous sessions must use encryption

I have installed vsftpd on debian 8 and I configured it in /etc/vsftpd.conf like so: listen=YES pam_service_name=vsftpd use_localtime=YES anonymous_enable=YES anon_root=/var/ftproot/anonymous ...
1
vote
1answer
115 views

curl: (77) pbm with the SSL CA cert (path? access rights?)

I am in root in my directory on CentOS release 6.6 and I want to do the following in order to install mysql in upper version on centOS: rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-...
1
vote
1answer
249 views

Use HAProxy to tunnel SSH through https

I have a server with Apache webserver on it and many websites running on http (port 80) and https (port 443). I would like to use a proxy on port 443 in between Apache and the user. In this page, ...
1
vote
1answer
150 views

apache2 no listening sockets available, but nothing listening on the port

I'm trying to setup SSL on an ubuntu server. I've generated a key and certificate with the following commands openssl genrsa -out mydomain.key 1024 and openssl req -new -key mydomain.key -x509 -out ...
0
votes
1answer
47 views

How can I configure TLS1.1 on LFTP?

Could you please help me with the steps to configure TLS1.1 for lftp?Also how can I check which version of TLS is running on my Redhat Linux OS ?
4
votes
2answers
127 views

OS X Postfix no TLS found

I'm working on OSX El Capitan. About week ago everything worked fine, but then I changed my gmail password and now I can't send emails any more. Additional configuration for /etc/postfix/main.cf is: ...
1
vote
0answers
16 views

Rebuild pki directory and associated changes

Let me preface this with, "I am not looking for a free lunch." I royally screwed up my cert storage recently and during my attempt to repair I made things worse. I am looking for a thorough ...
1
vote
1answer
314 views

How to fix curl sslv3 alert handshake failure on Gentoo?

I'm trying open a website with cURL like this: $ curl -vH "Accept: application/json" https://www.rocketleaguereplays.com/api/replays/-1/ The output is: * Trying 104.24.114.83... * Connected to ...
2
votes
0answers
2k views

Uninstall all changes made by Letsencrypt

I installed Letsencrypt during the beta, following the instructions in the email, and now it seems broken on my debian jessie server. I try to uninstall letsencrypt and want to start over with my (...
0
votes
0answers
91 views

Enabling SSL on ubuntu with apache2

I'm trying to get SSL working on my ubuntu VM. I'm going through the steps in this link but when I got to reload the apache service after enabling default-ssl.conf I'm getting errors in the log: [...
2
votes
1answer
464 views

What do I do if I can't find ssl.conf file in a CentOS server?

I'm preparing a new CentOS Linux server, one of many. When I try to configure SSL on this server, I noticed there is no ssl.conf file. Not in /etc/httpd/conf.d/ssl.conf and not in /etc/httpd/conf/ssl....
0
votes
1answer
199 views

This organization's certificate has been revoked. error on IE and Chrome Browser

Server type: Apache/2.2.15 (CentOS) DAV/2 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips mod_qos/10.24 No problem on Firefox browser. on IE and Chrome it displays: This organization's certificate has been ...
1
vote
0answers
35 views

How to decrypt data buffer in kernel level before read/recv [closed]

Before reading contents from socket file descriptor using read/recv(), can we preprocess/modify(e.g. decryption) data buffered in kernel level? I have server&client programs written in C, and I ...
5
votes
2answers
720 views

Let' encrypt - nginx - OCSP stapling

I would like to enable OCSP stapling in my nginx server. I'm using nginx version: nginx/1.6.2 debian Let's Encrypt certificate I'm really unexperienced in this matter, so it might be a trivial ...
0
votes
0answers
50 views

How do I get a manifest to run from my Puppet Master server to a Puppet Agent node?

I am trying to run a Puppet manifest for the first time on two new servers. But I keep getting errors. I recently set up two CentOS v7 servers. They have passwordless SSH between them. Ports 22, ...
0
votes
1answer
40 views

openSSL Key and Certificate

As far I know, in an authenticated SSL connection, both the client and server have private keys and provide their certificates (with the corresponding public keys) across the connection before ...
2
votes
2answers
286 views

Cannot connect to localhost on port 4430

I am running vagrant from a virtual box with CentOS and Nginx installed. I've created a reverse tunnel from the vagrant box to a remote server but when I am trying to connect to my localhost on port ...
0
votes
1answer
24 views

Apache Listening Port

I need some help. I'm trying to set up a web interface for a cloud system and I have used this conf (provided by the vendor) <VirtualHost *:443> ServerName sxweb.foo.com ServerAdmin ...
0
votes
1answer
253 views

“crypto failure” error when running various commands

I'm finding that a few commands (for now dig and nslookup) that fail no matter what with the following output: 19-Jan-2016 15:01:50.219 ENGINE_by_id failed (crypto failure) 19-Jan-2016 15:01:50.219 ...
1
vote
3answers
297 views

Apache 2.4 SSL Config - Server rejects requests with HTTP 400

I'm running into some trouble with my Apache 2.4 config. Accessing https://subdomain.my-domain.com always returns this http 400. Bad Request Your browser sent a request that this server could not ...