The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
2answers
21 views

How to fix curl sslv3 alert handshake failure?

I'm trying to curl HTTPS website in the following way: $ curl -v https://thepiratebay.se/ However it fails with the error: * About to connect() to thepiratebay.se port 443 (#0) * Trying ...
0
votes
0answers
25 views

Does Apache 2.2.3 support TLSv1.1 and TLSv1.2?

How can I find out if Apache 2.2.3 supports TLSv1.1 and TLSv1.2? If possible how can I implement it?
0
votes
1answer
30 views

How to check mod_ssl.so version?

I'm running Apache 2.2.3 and would like to find out, how to check version of mod_ssl.so and if this module can support TLSv1.1 and TLSv1.2. Regards
0
votes
0answers
34 views

open ssl client giving error routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188:

On connecting to my application (a ssl server) by using command openssl s_client -host 127.0.0.1 -port 5028 -cipher EXPORT -debug -state I am getting error like CONNECTED(00000003) ...
0
votes
0answers
55 views

Cant use https on localhost

I am unable to use https on my localhost testmachine. I cant figure out the problem on my own so here is what i did: I placed the following to files in sites-available : 000-default.conf ...
1
vote
0answers
37 views

cURL does not recognize certificate

At our company they enforce a web proxy which breaks SSL connections and replaces the certificate by its own fake certificate. (To be precise it uses a proxy cert which is signed by the company cert.) ...
2
votes
1answer
49 views

CURL won't connect to self

I'm having a weird issue where CURL cannot connect to its own server. For example if I'm on server example.com wget https://example.com/ <--- WORKS FIND curl https://example.com gets error: 35 ...
0
votes
0answers
30 views

Sign a soap message from a JKS dynamically using Python Unix

I am currently calling a webservice using Curl command from unix . I have a requirement that I have to dynamically message sign the soap request every time I make a call to the webservice using my ...
0
votes
0answers
21 views

Disabling sslv3 on samba4

How can I disable sslv3 on samba4 ldaps and just have tlsv1 enabled? I have not been able to find any documentation or guides on disabling this feature. This is in regards to the poodle ...
2
votes
1answer
178 views

postfix smtp connection timed out, why?

A CentOS 7 web server has postfix, dovecot, and mailx installed. I have been able to make an IMAP connection to the server in order to read inbox mail using a remote Thunderbird client, but I am not ...
2
votes
0answers
20 views

Apache modssl returning random unwanted 200's rather than 404's

I have a fairly simple apache 2.4.7 config on CentOS 6.5 Linux and an active web server. No PHP or CGI, just some static pages and a proxypass to a different server tier. I'm doing some security ...
1
vote
0answers
28 views

sendmail and certs

I am trying to set up sendmail for our company on a CentOS 6.6-Release server. Specifically, I want to use SSL, so that passwords are sent encrypted. ls /etc/mail/ssl intermediate.crt ...
1
vote
0answers
25 views

VSFTPD cutted uploads

Installed VSFTPD v2.3.2 on a Wheezy. When I try to put anything my ftp client (filezilla v3.5.3) it sends the file by parts of 229376 bytes interrupted by deconnexion/reconnexion untill the en of the ...
1
vote
0answers
155 views

NGINX Reverse Proxy - no user/password was provided for basic authentication

I've got Nginx set up on a RPi (raspbian)as a reverse proxy using SSL between the remote user and the Nginx instance. All seems to work well for two services mounted on the RPi (Shellinabox and RPi ...
0
votes
0answers
43 views

Using Varnish + Nginx Forcing SSL

i'm using Varnish and i would like to force communication only with SSL. My server is Nginx. What's the best way to do so? Or the easiest? I read about Pound proxy and installed it but guides were too ...
0
votes
1answer
39 views

IMAP Dovecot cannot connect

I am trying to set up my own mail server (for 'fun'). I followed this tutorial to the bone. But I get this error message: imap-login: Disconnected (auth failed, 2 attempts in 9 secs): ...
0
votes
1answer
94 views

lwp-request Fails After Upgrade to Centos 7

I have a bash script that runs well on centos 6, which has an lwp-request in it. I upgraded my system to Centos 7, and the request fails to run: # lwp-request -E https://localhost/admin/startup GET ...
1
vote
0answers
86 views

Apache2 'Server' header reports wrong openSSL version

Does anyone know where the Apache 'Server' header pulls the openSSL version from (file location/directory)? I am expecting openssl-1.0.1j but apache is reporting openssl-1.0.1g (system's openssl ...
0
votes
0answers
28 views

Verifying SSL key and certificate files for a web server

I want my web users to upload their own SSL certificate files for their domains. I have the configuration environment all set up. But unfortunately, if Apache web server finds a broken SSL certificate ...
2
votes
2answers
395 views

What should I do about Python 2.7.9 not looking for SSL certificates in the right place on FreeBSD?

I have a FreeBSD 10.0 system, and a couple of days ago, I upgraded my python27 port from Python 2.7.8 to Python 2.7.9, which enabled SSL verification by default. Unsurprisingly, it broke my existing ...
1
vote
0answers
14 views

SSL (Hosted on LB) to be installed on the Downstream Apache Servers?

First, i have very basic knowledge on the SSL topic. Here is my setup. I have (1) of Public Facing Domain on LB and (2) of Internal Domains on each Web Servers. Like: ...
0
votes
1answer
59 views

Installing Restund on AWS EC2 Ubuntu

I have successfully installed Restund on a Vagrant Machine running Ubuntu. But when I tried to install it on AWS EC2 Instance running Ubuntu, I get an error when starting Restund. Error Message: tls ...
0
votes
0answers
899 views

CentOS 7 httpd failed to make connection with backend

In a CentOS 7 server with apache httpd 2.4 set up as an ssl reverse proxy for tomcat, I am getting an error indicating that httpd is not able to connect with tomcat. How can I resolve this error so ...
1
vote
2answers
114 views

How does openssl decrypt a password

I'm learning about encryption and decryption on linux and php. So I have three questions about openssl and how it generates password hashes. 1- So say I generated a password with the linux command ...
0
votes
1answer
136 views

SSL-encrypted proxy server for war files in CentOS 7

How can I configure a CentOS 7 web server to serve only SSL-encrypted content from war files, with tomcat running behind a proxy server? I imagine this involves using firewalld, https, and tomcat. ...
0
votes
0answers
20 views

Apache 2: SSL installation & getting an example website running

I'm really stuck here and this is an assignment. I'm using "CentOS Linux 7". If anything I say doesn't make sense, I'm pretty much a noob. First off, I did yum install mod_ssl openssl. Are there ...
1
vote
0answers
56 views

Creating Self signed certificate for tomcat 6

I am trying to configure self signed certificate for our tomcat server. For that initially I created the keystore certificate file using keytool . The command I tried for this is keytool -genkey ...
1
vote
1answer
88 views

HTTPS won't run. (CentOS) [closed]

I've installed my SSL using the following guide as I would usually with other servers: http://wiki.centos.org/HowTos/Https However when I run httpd and try to connect using https it doesn't work. I ...
1
vote
0answers
267 views

Redirect loop with Nginx as reverse proxy and Yii

I've been reading another similar issues and changing some things in my Nginx configuration, but no one worked :/ When I'm trying to access to a specific page at my site, it leads me to a "redirect ...
1
vote
1answer
384 views

Nmap script execution to detect heartbleed is failing

Wanting to setup Nmap on my Ubuntu 14.04 LTS system to detect HeartBleed vulnerability. I followed the instructions here: ...
1
vote
0answers
54 views

Export and import ssl certificate from cpanel to self manage hosting

I have moved my server from cpanel managed hosting to nginx-centos server. I have only command line to manage my server. I need to export and import the ssl certificate. All the tutorials that I have ...
1
vote
0answers
74 views

Missing dependencies in VMware install?

I'm in the process of setting up my HP thin client with Fedora 20 (already done) and using VMware view client on it. I've completed most if not the whole installation except the condition that the ...
2
votes
1answer
41 views

Check SMTP over SSL

I need to get a look at how my SSL mailserver plays with others; for non-SSL this is easy to do with (e.g.) telnet. Is there a bonified SSL/TLS client that can be used the same way?
1
vote
0answers
159 views

Make SSL certificate trusted in browser via SSL Bump Squid

my goal is to insert custom HTML injections in HTTPS pages. I've setup Squid with SSL Bump. I generated a self signed certificate. With this setup I'm getting client side warnings that the ...
3
votes
2answers
1k views

Apache disable SSLv2 SSLv3

I know that there are some Questions around here that comes along with this Topic. But I really don't know what I can do anymore. So here's the point: I am using Apache 2.2.22 on OpenSuse 12.3. The ...
3
votes
2answers
305 views

How to globally configure secure clients using OpenSSL on Oracle Linux 5/RHEL 5?

My workplace recently patched one of our servers to address the POODLE vulnerability. Since then older Oracle Linux 5 clients (based on RHEL 5) can no longer securely connect to the server with any ...
1
vote
2answers
1k views

Apache not listening on port 443

I've purchased an SSL and I'm trying to set it on a browser. The port is forwarded in the router to the server, and I believe that SSL certificate is installed correctly (the apache starts OK). I ...
3
votes
2answers
44 views

Need explanations about SSL issue and installation process

I am trying to install SSL on my server. First of all I wanted to purchase a certificate. They asked me to generate a CSR file. I created it and it resulted with two files: my.website.key ...
1
vote
2answers
146 views

Still vulnerable after disabling SSLv3

I'm trying to disable SSLv3 to avoid the Poodle problem. I'm using the following instructions as a guidleine: https://access.redhat.com/solutions/1232413 I've applied the following line to my config ...
1
vote
1answer
5k views

Disable SSLv3 In cURL?

I'm having a problem connecting to a website that is hosted with CloudFlare using cURL. When I try to connect to the website with HTTPS (using curl -v https://www.xxxxxx.com), it says: * About to ...
32
votes
7answers
34k views

How to disable SSLv3 in Apache?

Everybody seems to be talking about the POODLE vulnerability today. And everybody recommends disabling SSLv3 in Apache using the following configuration directive: SSLProtocol All -SSLv2 -SSLv3 ...
5
votes
1answer
7k views

How do I disable SSLv3 in an OpenSSH SSH server to avoid POODLE?

In wake of the newly-discovered POODLE vulnerability, I'd like to disable SSLv3 on all of my SSH servers. How do I achieve this with OpenSSH?
1
vote
0answers
514 views

cipher suites and disabling weak ciphers in JBoss

Our security audit report says that a number of our JBoss EAP 5.0 servers (on RHEL 6.x) has weak ciphers enabled. Upon doing some research, I found a .jar file (from ...
1
vote
1answer
184 views

“sec_error_unknown_issuer” in Iceweasel 22.0

If I visit a certain web-page with Iceweasel 22.0, then I receive the sec_error_unknown_issuer error. When I check the X.509v3 certificate hierarchy, then the top-most certificate is "DOD CA-28". ...
3
votes
1answer
1k views

FreeBSD 10 root certificate store

Is on a default FreeBSD 10 no root certificate store? When I install one by hand it is in /usr/local/share/certs/ca-root-nss.crt, which I symlink to /etc/ssl/cert.pem and thats the main places I ...
3
votes
1answer
3k views

Chrome does not open Https websites [closed]

I am a corporate user with proxy server. I am working on the Fedora 20 OS and installed Chrome browser. I set proxy settings under Settings -> Network -> Change Proxy settings -> Network Proxy. ...
1
vote
1answer
266 views

svn: SSL is not supported

I am trying to check out code on a Unix box in the Z shell. When I run the following command svn checkout https://svn.example.net/svn/trunk/source build I get the following error message: svn: SSL ...
2
votes
0answers
147 views

What's in the /etc/pki/nssdb database? [duplicate]

So, these files aren't empty... [ root@localhost ] # ls -l total 248 -rw-r--r--. 1 root root 65536 Jan 12 2010 cert8.db -rw-r--r--. 1 root root 65536 Dec 23 2013 cert8.db.orig -rw-r--r--. 1 root ...
3
votes
1answer
305 views

Proper way to handle FTP over SSL with restrictive firewall rules?

Without SSL, FTP works fine over a stateful Firewall, like netfilter (iptables) + the nf_conntrack_ftp kernel module like this: # modprobe nf_conntrack_ftp # iptables -A INPUT -m conntrack --ctstate ...
3
votes
1answer
161 views

Does fetchmail support SSL or TLS when using SMTP to forward email?

I am trying to forward emails that are fetched with fetchmail to another SMTP host, which enforces STARTTLS. I could not find a way to enable TLS in fetchmail. Is this possible at all? If so, how?