SSL (the predecessor of TLS) is a cryptographic protocol designed to provide communications security over a computer network. It is the S in HTTPS, IMAPS, SMTPS, etc.

learn more… | top users | synonyms (1)

0
votes
0answers
21 views

Apache 2 Debian SSL Certification not exist

I'm not really good with Apache and that is the reason why I'm writing to you. I have installed a web server in SSL following some indication from the software vendor. When I restart the service I ...
3
votes
1answer
35 views

What are the drawbacks of using policy_any in openssl.cnf?

As given in this document, we may use policy_any to ignore most of the fields of subject in certificate request. There must be some drawbacks of ignoring such fields, would it may lead to some ...
0
votes
0answers
33 views

Apache and SSLVerifyClient

Please excuse any dumb statements regarding this. I am very new to Apache and to HP-UX. I am a SQL Server DBA and ended up on this project. I am working to try and implement SSL with Client Verify ...
0
votes
1answer
231 views

TLSv1.2 support in CentOS 5.8

Right now I can't access HTTPS site from PhantomJS headless WebKit browser because of TLSv1.2 In my CentOS 5.8 I have following OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 verison installed. I think I ...
0
votes
1answer
256 views

curl hangs after client hello

When I execute the following command in Ubuntu: curl -v --insecure -XGET 'https://user:pass@IP_ADDR:PORT/SOME_FILE.php' I get this output: * Hostname was NOT found in DNS cache * Trying IP_ADDR....
2
votes
1answer
167 views

Is it possible to use TLSv1.3 in Apache 2.4

Is it possible to use TLSv1.3 in Apache2.4? As of October 2015, TLS 1.3 is a working draft, i.e. TLSv1.3.
-1
votes
1answer
41 views

Puppet agent certificate error after rebuilding openstack instance

I have an open-stack instance vm , and puppet agent was working fine on it. By running the command puppet agent -t, it was good. But for some reason i had to rebuild the instance by using the open-...
1
vote
2answers
379 views

How to configure SSL for Apache2 on OpenSuSE 13.1

I have OpenSuSE installed on a virtual hosted Server, running multiple virtual websites. On normal http everything works fine. I now would like to run one of my virtual sites on https in addition to ...
0
votes
1answer
465 views

invalid SSL_version specified at /usr/share/perl5/IO/Socket/SSL.pm line 368

SMTP SEND CRITICAL - invalid SSL_version specified at /usr/share/perl5/IO/Socket/SSL.pm line 368 I am using a nagios script /usr/lib/nagios/plugins/check_smtp_send that sends an email using gmail. ...
1
vote
0answers
66 views

Turning SSLEngine on causes ERR_CONNECTION_REFUSED

I am trying to configure my SSL certificate on a new installation of Ubuntu 15.10. I have installed the certificate files and the private key in the required directory: SSLCertificateFile /etc/...
0
votes
2answers
109 views

TLS with syslog-ng 3.2.5

Does syslog-ng 3.2.5 from EPEL 6 (for CentOS 6) support TLS? I cannot get it to work at all; here is what I'm using: source s_network { tcp(ip(0.0.0.0) port(514) tls( key_file("/etc/ssl/...
1
vote
0answers
119 views

Hosting Dovecot and Postfix Behind nginx?

So I'm looking at setting up postfix and dovecot on a server that is currently hosting some web-sites via nginx, and I've stumbled upon the mail {} configuration option for nginx, but I'm having a ...
2
votes
1answer
654 views

Do I Need to Restart Nginx if I Renew My Security Certificate(s)?

So I'm setting up an nginx server with SSL enabled with a server definition something like: server { listen :80; listen [::]:80; server_name example.org; root /foo/bar; ssl on; ...
2
votes
1answer
301 views

HTTPS not working on CentOS Apache 2.4

I have created a key and self-signed certificate and moved them to /etc/httpd/conf/ My ssl.conf is here: http://pastebin.com/gsQbKY67 The ssl_module (shared) is there when I try httpd -M Output ...
1
vote
1answer
200 views

Install ssl on CentOS Apache server

I installed Apache by using sudo yum -y install httpd instead of using wget and installing that way. This means that it has been set up differently. I'm now trying to install ssl by using sudo yum ...
0
votes
1answer
69 views

Cannot disable SSLv3 on Amazon Linux Instance

I am using SSL Certificate issued by Go Daddy. On my Linux Instance following are the software details :- Apache Version - Apache/2.4.16 (Amazon) Openssl Version - OpenSSL 1.0.2c 12 Jun 2015 ...
0
votes
1answer
149 views

Get latest files with lftp

I would like to know if it was possible to download all latest files on an ftp server with lftp without downloading the older files. Examples; On my server I have /doc /vps /order/{id} /order/{id} /...
4
votes
1answer
124 views

Add warning to emails received by Postfix without TLS

Is it possible with Postfix to add a warning to all emails received over a cleartext (non-TLS) connection? For example modifying the subject and/or adding a custom header.
0
votes
0answers
44 views

How do I add self-signed certificate to trusted list in Mageia

I am trying to add self signed certificate for my repository into trusted list in Mageia 5. But when I execute sudo urpmi.addmedia name repo_link I get ...retrieving failed: curl failed: exited with ...
0
votes
3answers
26 views

Verify SSL for local computers

I have a small business network and for this network, one computer is DHCP-, DNS- and web server. It uses local domains like machinary.ao or resources.ao I'd like to use ssl. Computers and network ...
3
votes
2answers
1k views

Wget TLS 1.2 error

According to the manual, I should be able to specify TLS version 1.2 when using wget. When I try, it fails. wget https://site --no-check-certificate --secure-protocol=TLSv1_2 wget: --secure-...
0
votes
1answer
676 views

`lftp` does not connect to FTPS (ftp over ssl)

I have trouble in connecting lftp with ftps (ftp over ssl, not sftp!) server (FTP Server Ultimate (PRO version).) running on Android phone. Technical details: Linux part. Following : http://...
1
vote
1answer
89 views

How can I safely send email over encrypted connection from the command line?

I found the following related questions on the stackexchange network: stackoverflow - Connecting to smtp.gmail.com via command line serverfault - Using nc.exe (NetCat) to send emails to secured SMTP ...
0
votes
1answer
44 views

SSL Problem, Where should I insert the certificate.crt?

I'm using startSSL. I've got a private key.key, a certificate.crt and a decrypted key.key for private key.key. What should I do with this files and where should I upload them? How can I get https for ...
6
votes
2answers
2k views

script to check if SSL certificate is valid

I have several SSL certificates, and I would like to be notified, when a certificate has expired. My idea is to create a cronjob, which executes a simple command every day. I know that the openssl ...
2
votes
1answer
63 views

How to use feh to open web image with self-signed certificate

I'd like to use feh to open an image located on a server using a self-signed certificate. Is there any way to achieve this? I checked the man page in hope of finding something similar to curl's -k, ...
4
votes
1answer
415 views

Can't disable SSLv3 in Apache + mod_nss

I am trying to implement TLS through mod_nss in Apache (RHEL 7). As per the documentation, I have installed mod_nss and removed mod_ssl. I have followed the steps outlined in the documentation (see ...
3
votes
2answers
508 views

How to verify a service is listening on both ipv4 and ipv6?

I want to check whether https service is listening on both IPv6 and IPv4. And also when I am accessing url via browser, I want to know request is served by IPv4 or IPv6.
0
votes
0answers
99 views

fetchmail: Missing trust anchor certificate:

I try to setup fetchmail on mac for checkdomain.de and created a certificate .pem file in the cert directory of ssl by copying certificate from running this command: openssl s_client -connect host58....
1
vote
1answer
280 views

SLES cant upgrade packages via zypper or yast2

getting errors whenever this box tries to phone to grab a package via yast: There was an error in the repository initialization. Download (curl) error for https://nu.novell.com/repo/repoindex.xml?...
4
votes
1answer
192 views

mutt SSL unknown protocol - not able to connect

I am facing following situation. I am using arch linux I installed mutt the email client I followed the simple guidelines in the arch wiki to configure mutt to use imap For the simple config where ...
1
vote
1answer
133 views

vsftpd: use Explicit SSL in a different port than unencrypted FTP

I've managed to run vsftpd with unencrypted FTP, Implicit SSL, and Explicit SSL. What I'm looking for is a way to run it with Explicit SSL, but have a separate port for SSL. For example: port 15000 ...
0
votes
4answers
311 views

How can I find where the Location of SSL key file is?

I inherited a RedHat server and I'm trying to find the SSL key file that was used to generate the self signed cert so I can make a CSR. From what poking around I've done, I can't find it in any of ...
0
votes
0answers
95 views

SSL installation on apache2 / debian

So I have a debian wheezy installation where I someone started to install SSL but gave up and so I'm here to finish the task. problem - when accessing with http (port 80) - all is working. When ...
0
votes
0answers
22 views

Does postfix support MySQL connections over SSL

I have a postfix server and a MySQL database server. I setup MySQL SSL and have it working successfully. I can connect from postfix to mysql with the user requiring SSL. The problem I have is, when I ...
1
vote
1answer
157 views

Allow specific linux user to bind to port 443

I am in charge of setting up a JBoss web application that runs over SSL, thus should be accessible over port 443. Of course, it can be started up by user with root privileges, but that is something I'...
0
votes
0answers
92 views

Why does SSL negotiation fail on Linux? (Asus P5S-MX) (but worked on Windows7)… FIXED, but UNRESOLVED

Can anyone give me hints to why the web requests fail in these wireshark/tcpdump traces ? (and perhaps a hint why a Linux distro would start with SSLv3 as starting point) I am noob when it comes to ...
1
vote
2answers
548 views

Wildcard SSL certificate does not work with naked domain

I have deployed a wildcard certificate (Comodo PlatinumSSL) for *.domain.com on Apache/Ubuntu 14.04. Everything works if the client visits https://www.domain.com but https://domain.com throws up this ...
2
votes
1answer
528 views

Generate Private Key for Existing SSL Certificate

I have been provided with a Comodo SSL certificate to deploy with Apache/ModSSL on Ubuntu 14.04. All I got was an email with links like this. I was not provided with a private key. It appears the ...
0
votes
0answers
61 views

RewriteRule ^/(.*) http://127.0.0.1:5050/$1 [L,P] [on hold]

What is the full meaning of following line - RewriteRule ^/(.*) http://127.0.0.1:5050/$1 [L,P] There are three application both running by python on ubuntu 14.4. they are visible as below link IP:...
0
votes
1answer
538 views

NGINX: 400 The plain HTTP request was sent to HTTPS port

i setup nginx for proxypass to docker registry, the protocol http works but if i set https i have: 400 The plain HTTP request was sent to HTTPS port This is my nginx configuration file: upstream ...
-2
votes
1answer
49 views

Is this a violation? using https service in intranet?

I have CentOS 7 servers in the cloud which is offering HTTPS services. Now this Enterprise can't use our services from the cloud, so they wanted a local intranet solution, the same as I am running in ...
3
votes
2answers
130 views

How to generate a CSR for attaching SSL certificate to the site? [duplicate]

How can I generate a CSR for attaching SSL certificate to the site? In various articles about installing SSL certificates are described different ways of generating private key and CSR. That's like ...
2
votes
0answers
126 views

Adding nssdb certificate from an install script

I am trying to write an script (postinst for a .deb package) that will install a secure websockets (wss:) application and a certificate that allows access from the Chrome browser. The developer has ...
3
votes
2answers
5k views

How to convert ssl ciphers to curl format?

The official ssl docs list ciphers in a different format than curl takes. For instance, if I want curl to use the cipher TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, I have to pass it curl --ciphers ...
3
votes
1answer
3k views

How to see list of curl ciphers?

My understanding is that during ssl negotiation, the client (i.e. curl) sends a list of ciphers to the server, and the server replies with its preferred choice. How do I see the list of ciphers that ...
1
vote
3answers
998 views

Dovecot with CAcert certificates, Outlook can't connect to IMAP

I have quite standard installation of postfix and dovecot on Ubuntu 12.10. I generated my own certificates and got them signed by cacert.org. The process of creating certs was like below: openssl ...
0
votes
0answers
4k views

Cannot send mail to gmail account using ssmtp

I have the following ssmtp.conf file: root=test@gmail.com mailhub=smtp.gmail.com:587 hostname=ed424cef9b52 UseTLS=Yes UseStartTTLS=Yes AuthMethod=LOGIN AuthUser=test AuthPass=test FromLineOverride=...
0
votes
1answer
53 views

A question about sendmail macros and tls

http://docs.oracle.com/cd/E19120-01/open.solaris/819-1634/fvbqm/index.html Here i read some sendmail macros must be edited on mc file to work I want tls use version 1 and strong cipher How to put ...
0
votes
1answer
387 views

wget: force no default certificates

I'm having trouble with verification of custom server SSL certificates and wget. wget -O- --ca-certificate=myservercert.pem https://www.google.com This should fail but does not, as wget does ...