SSL (the predecessor of TLS) is a cryptographic protocol designed to provide communications security over a computer network. It is the S in HTTPS, IMAPS, SMTPS, etc.

learn more… | top users | synonyms

1
vote
1answer
18 views

Multiple RSA server certificates not allowed

I purchased a multidomain certificate, and I was trying to install it on my server. I put the following information inside the virtual host for one of my sites: <VirtualHost *:443> ... ...
5
votes
1answer
20 views

How to find more details on Invalid Certificates

Setup I am following this blog post to set up ASP.net MVC5 on Linux. When I get to the part that adds the Microsoft certificates, I am warned that they are invalid. For example, this command: ...
0
votes
0answers
21 views

libssl undefined reference to symbol 'SSL_load_error_strings@@OPENSSL_1.0.0'

With the following CMakeLists.txt (I tried to snip it AMAP) https://gist.github.com/pbertoni/29200833dc562ab6ee2c I got this error from make at linking time: /usr/bin/ld: ...
0
votes
1answer
40 views
+50

Script timed out before returning headers: iredadmin.py

I am trying to access my iRedMail backend at https://domain.com/iredadmin However, it keeps timing out with a 500 error. I check my error log, and I see the following: [Sat Apr 11 16:53:41 2015] ...
0
votes
1answer
11 views

Apache ReverseProxy ssl

I have the following ReverseProxy set up which works for http requests: NameVirtualHost *:80 <VirtualHost *:80> ServerName sub.domain.com ProxyRequests Off ProxyVia Off <Proxy *> Order ...
0
votes
1answer
18 views

Looking for an email server that supports mysql ssl connection

I am trying to secure connections to my MySQL server. I have SSL set up but I am looking for programs that support a SSL connection to MySQL. Specifically I am currently looking for an email server ...
0
votes
2answers
231 views

How to fix curl sslv3 alert handshake failure?

I'm trying to curl HTTPS website in the following way: $ curl -v https://thepiratebay.se/ However it fails with the error: * About to connect() to thepiratebay.se port 443 (#0) * Trying ...
0
votes
1answer
71 views

Does Apache 2.2.3 support TLSv1.1 and TLSv1.2?

How can I find out if Apache 2.2.3 supports TLSv1.1 and TLSv1.2? If possible how can I implement it?
0
votes
1answer
35 views

How to check mod_ssl.so version?

I'm running Apache 2.2.3 and would like to find out, how to check version of mod_ssl.so and if this module can support TLSv1.1 and TLSv1.2. Regards
0
votes
0answers
63 views

open ssl client giving error routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188:

On connecting to my application (a ssl server) by using command openssl s_client -host 127.0.0.1 -port 5028 -cipher EXPORT -debug -state I am getting error like CONNECTED(00000003) ...
0
votes
0answers
73 views

Cant use https on localhost

I am unable to use https on my localhost testmachine. I cant figure out the problem on my own so here is what i did: I placed the following to files in sites-available : 000-default.conf ...
1
vote
0answers
55 views

cURL does not recognize certificate

At our company they enforce a web proxy which breaks SSL connections and replaces the certificate by its own fake certificate. (To be precise it uses a proxy cert which is signed by the company cert.) ...
2
votes
1answer
97 views

CURL won't connect to self

I'm having a weird issue where CURL cannot connect to its own server. For example if I'm on server example.com wget https://example.com/ <--- WORKS FIND curl https://example.com gets error: 35 ...
0
votes
0answers
40 views

Sign a soap message from a JKS dynamically using Python Unix

I am currently calling a webservice using Curl command from unix . I have a requirement that I have to dynamically message sign the soap request every time I make a call to the webservice using my ...
0
votes
0answers
29 views

Disabling sslv3 on samba4

How can I disable sslv3 on samba4 ldaps and just have tlsv1 enabled? I have not been able to find any documentation or guides on disabling this feature. This is in regards to the poodle ...
2
votes
1answer
391 views

postfix smtp connection timed out, why?

A CentOS 7 web server has postfix, dovecot, and mailx installed. I have been able to make an IMAP connection to the server in order to read inbox mail using a remote Thunderbird client, but I am not ...
2
votes
0answers
22 views

Apache modssl returning random unwanted 200's rather than 404's

I have a fairly simple apache 2.4.7 config on CentOS 6.5 Linux and an active web server. No PHP or CGI, just some static pages and a proxypass to a different server tier. I'm doing some security ...
1
vote
0answers
32 views

sendmail and certs

I am trying to set up sendmail for our company on a CentOS 6.6-Release server. Specifically, I want to use SSL, so that passwords are sent encrypted. ls /etc/mail/ssl intermediate.crt ...
1
vote
0answers
30 views

VSFTPD cutted uploads

Installed VSFTPD v2.3.2 on a Wheezy. When I try to put anything my ftp client (filezilla v3.5.3) it sends the file by parts of 229376 bytes interrupted by deconnexion/reconnexion untill the en of the ...
1
vote
0answers
199 views

NGINX Reverse Proxy - no user/password was provided for basic authentication

I've got Nginx set up on a RPi (raspbian)as a reverse proxy using SSL between the remote user and the Nginx instance. All seems to work well for two services mounted on the RPi (Shellinabox and RPi ...
0
votes
0answers
61 views

Using Varnish + Nginx Forcing SSL

i'm using Varnish and i would like to force communication only with SSL. My server is Nginx. What's the best way to do so? Or the easiest? I read about Pound proxy and installed it but guides were too ...
0
votes
1answer
61 views

IMAP Dovecot cannot connect

I am trying to set up my own mail server (for 'fun'). I followed this tutorial to the bone. But I get this error message: imap-login: Disconnected (auth failed, 2 attempts in 9 secs): ...
0
votes
1answer
105 views

lwp-request Fails After Upgrade to Centos 7

I have a bash script that runs well on centos 6, which has an lwp-request in it. I upgraded my system to Centos 7, and the request fails to run: # lwp-request -E https://localhost/admin/startup GET ...
1
vote
0answers
105 views

Apache2 'Server' header reports wrong openSSL version

Does anyone know where the Apache 'Server' header pulls the openSSL version from (file location/directory)? I am expecting openssl-1.0.1j but apache is reporting openssl-1.0.1g (system's openssl ...
0
votes
0answers
34 views

Verifying SSL key and certificate files for a web server

I want my web users to upload their own SSL certificate files for their domains. I have the configuration environment all set up. But unfortunately, if Apache web server finds a broken SSL certificate ...
2
votes
2answers
482 views

What should I do about Python 2.7.9 not looking for SSL certificates in the right place on FreeBSD?

I have a FreeBSD 10.0 system, and a couple of days ago, I upgraded my python27 port from Python 2.7.8 to Python 2.7.9, which enabled SSL verification by default. Unsurprisingly, it broke my existing ...
1
vote
0answers
14 views

SSL (Hosted on LB) to be installed on the Downstream Apache Servers?

First, i have very basic knowledge on the SSL topic. Here is my setup. I have (1) of Public Facing Domain on LB and (2) of Internal Domains on each Web Servers. Like: ...
0
votes
1answer
69 views

Installing Restund on AWS EC2 Ubuntu

I have successfully installed Restund on a Vagrant Machine running Ubuntu. But when I tried to install it on AWS EC2 Instance running Ubuntu, I get an error when starting Restund. Error Message: tls ...
0
votes
0answers
1k views

CentOS 7 httpd failed to make connection with backend

In a CentOS 7 server with apache httpd 2.4 set up as an ssl reverse proxy for tomcat, I am getting an error indicating that httpd is not able to connect with tomcat. How can I resolve this error so ...
1
vote
2answers
181 views

How does openssl decrypt a password

I'm learning about encryption and decryption on linux and php. So I have three questions about openssl and how it generates password hashes. 1- So say I generated a password with the linux command ...
0
votes
1answer
145 views

SSL-encrypted proxy server for war files in CentOS 7

How can I configure a CentOS 7 web server to serve only SSL-encrypted content from war files, with tomcat running behind a proxy server? I imagine this involves using firewalld, https, and tomcat. ...
0
votes
0answers
21 views

Apache 2: SSL installation & getting an example website running

I'm really stuck here and this is an assignment. I'm using "CentOS Linux 7". If anything I say doesn't make sense, I'm pretty much a noob. First off, I did yum install mod_ssl openssl. Are there ...
1
vote
0answers
67 views

Creating Self signed certificate for tomcat 6

I am trying to configure self signed certificate for our tomcat server. For that initially I created the keystore certificate file using keytool . The command I tried for this is keytool -genkey ...
1
vote
1answer
94 views

HTTPS won't run. (CentOS) [closed]

I've installed my SSL using the following guide as I would usually with other servers: http://wiki.centos.org/HowTos/Https However when I run httpd and try to connect using https it doesn't work. I ...
1
vote
0answers
279 views

Redirect loop with Nginx as reverse proxy and Yii

I've been reading another similar issues and changing some things in my Nginx configuration, but no one worked :/ When I'm trying to access to a specific page at my site, it leads me to a "redirect ...
1
vote
1answer
448 views

Nmap script execution to detect heartbleed is failing

Wanting to setup Nmap on my Ubuntu 14.04 LTS system to detect HeartBleed vulnerability. I followed the instructions here: ...
1
vote
0answers
61 views

Export and import ssl certificate from cpanel to self manage hosting

I have moved my server from cpanel managed hosting to nginx-centos server. I have only command line to manage my server. I need to export and import the ssl certificate. All the tutorials that I have ...
1
vote
0answers
81 views

Missing dependencies in VMware install?

I'm in the process of setting up my HP thin client with Fedora 20 (already done) and using VMware view client on it. I've completed most if not the whole installation except the condition that the ...
2
votes
1answer
52 views

Check SMTP over SSL

I need to get a look at how my SSL mailserver plays with others; for non-SSL this is easy to do with (e.g.) telnet. Is there a bonified SSL/TLS client that can be used the same way?
1
vote
0answers
164 views

Make SSL certificate trusted in browser via SSL Bump Squid

my goal is to insert custom HTML injections in HTTPS pages. I've setup Squid with SSL Bump. I generated a self signed certificate. With this setup I'm getting client side warnings that the ...
3
votes
2answers
1k views

Apache disable SSLv2 SSLv3

I know that there are some Questions around here that comes along with this Topic. But I really don't know what I can do anymore. So here's the point: I am using Apache 2.2.22 on OpenSuse 12.3. The ...
3
votes
2answers
384 views

How to globally configure secure clients using OpenSSL on Oracle Linux 5/RHEL 5?

My workplace recently patched one of our servers to address the POODLE vulnerability. Since then older Oracle Linux 5 clients (based on RHEL 5) can no longer securely connect to the server with any ...
1
vote
2answers
1k views

Apache not listening on port 443

I've purchased an SSL and I'm trying to set it on a browser. The port is forwarded in the router to the server, and I believe that SSL certificate is installed correctly (the apache starts OK). I ...
3
votes
2answers
46 views

Need explanations about SSL issue and installation process

I am trying to install SSL on my server. First of all I wanted to purchase a certificate. They asked me to generate a CSR file. I created it and it resulted with two files: my.website.key ...
1
vote
2answers
156 views

Still vulnerable after disabling SSLv3

I'm trying to disable SSLv3 to avoid the Poodle problem. I'm using the following instructions as a guidleine: https://access.redhat.com/solutions/1232413 I've applied the following line to my config ...
1
vote
1answer
5k views

Disable SSLv3 In cURL?

I'm having a problem connecting to a website that is hosted with CloudFlare using cURL. When I try to connect to the website with HTTPS (using curl -v https://www.xxxxxx.com), it says: * About to ...
34
votes
7answers
37k views

How to disable SSLv3 in Apache?

Everybody seems to be talking about the POODLE vulnerability today. And everybody recommends disabling SSLv3 in Apache using the following configuration directive: SSLProtocol All -SSLv2 -SSLv3 ...
5
votes
1answer
8k views

How do I disable SSLv3 in an OpenSSH SSH server to avoid POODLE?

In wake of the newly-discovered POODLE vulnerability, I'd like to disable SSLv3 on all of my SSH servers. How do I achieve this with OpenSSH?
1
vote
0answers
596 views

cipher suites and disabling weak ciphers in JBoss

Our security audit report says that a number of our JBoss EAP 5.0 servers (on RHEL 6.x) has weak ciphers enabled. Upon doing some research, I found a .jar file (from ...
1
vote
1answer
196 views

“sec_error_unknown_issuer” in Iceweasel 22.0

If I visit a certain web-page with Iceweasel 22.0, then I receive the sec_error_unknown_issuer error. When I check the X.509v3 certificate hierarchy, then the top-most certificate is "DOD CA-28". ...