SSL (the predecessor of TLS) is a cryptographic protocol designed to provide communications security over a computer network. It is the S in HTTPS, IMAPS, SMTPS, etc.

learn more… | top users | synonyms (1)

14
votes
1answer
36k views

make fatal error: openssl/sha.h: No such file or directory

I'm trying to compile a program that, according to the documentation, requires the "OpenSSL library". I have OpenSSL installed, and it's still giving me the error openssl/sha.h: No such file or ...
0
votes
0answers
6 views

Getting SSL errors when trying to set up Galera cluster

I am trying to set up a galera cluster. I am running RHEL7.2. I have my master running but when I try to start mariadb on one of my slaves like so ... # /usr/bin/systemctl start mariadb ... it ...
0
votes
2answers
320 views

curl hangs after client hello

When I execute the following command in Ubuntu: curl -v --insecure -XGET 'https://user:pass@IP_ADDR:PORT/SOME_FILE.php' I get this output: * Hostname was NOT found in DNS cache * Trying IP_ADDR....
0
votes
0answers
107 views

SSL installation on apache2 / debian

So I have a debian wheezy installation where I someone started to install SSL but gave up and so I'm here to finish the task. problem - when accessing with http (port 80) - all is working. When ...
0
votes
2answers
29 views

When FTP Requires FTP over TLS is it FTPS?

After reading through this tutorial I still have a persistent question. In the beggining of the article the writer says: Warning: FTP is inherently insecure! Consider using SFTP instead of FTP. ...
0
votes
0answers
37 views
+50

HTTPs connections to github times out randomly on different machines

I checked the status on git-hub , there is no issue like DDOS , their server is 100% operational , but cloning of repos at different Jenkins slaves times out randomly , sometimes it does and sometimes ...
0
votes
0answers
16 views

Can't pipe contents of a file but can do more [duplicate]

I am trying to transfer SSL certificates from my server to a docker container running on the same server. Permissions on the file: $ sudo ls -al live/my.server.com/cert.pem lrwxrwxrwx. 1 root root ...
0
votes
3answers
29 views

Verify SSL for local computers

I have a small business network and for this network, one computer is DHCP-, DNS- and web server. It uses local domains like machinary.ao or resources.ao I'd like to use ssl. Computers and network ...
3
votes
1answer
3k views

Apache boot without asking for passwd

So I'm maintaining a server which has a verified SSL certificate setup, however there is a password on the private key and so whenever apache is reboot, we get a message asking for the password. This ...
1
vote
2answers
456 views

How to configure SSL for Apache2 on OpenSuSE 13.1

I have OpenSuSE installed on a virtual hosted Server, running multiple virtual websites. On normal http everything works fine. I now would like to run one of my virtual sites on https in addition to ...
0
votes
1answer
37 views

Where to find SSL private key on a CentOS server

I am running a server on CentOS, and I would like to decrypt and view the SSL traffic. However, I cannot locate any of the keys necessary to do this. My /etc/pki/CA/private folder is empty, and my /...
0
votes
0answers
12 views

Debug CalDAVs sync failures with network sniffer, how to be display prettyprinted traffic in terminal

I need to debug some unsuccessful CalDAV synchronization requests. I have functioning clients, so I can compare working vs broken. The traffic is SSL-encrypted, but I have the key. I have root on a ...
6
votes
4answers
14k views

How do I install a system-wide SSL certificate on openSUSE?

I have a PEM certificate that I just downloaded from a webserver. I want to install it system-wide so I can curl the server without it complaining about a missing certificate. I tried putting the ...
0
votes
0answers
13 views

Enabling HTTPS for pentaho bi-server - Tomcat

We are setting up Pentaho which is a BI tool. This uses Tomcat as the webserver. We tried following the below link but were not successful. http://wiki.pentaho.com/display/ServerDoc1x/01.+Enabling+...
1
vote
0answers
21 views

SSL (Hosted on LB) to be installed on the Downstream Apache Servers?

First, I have very basic knowledge on the SSL topic. Here is my setup. I have (1) of Public Facing Domain on LB and (2) of Internal Domains on each Web Servers. Like: [https://public....
0
votes
1answer
2k views

How to check mod_ssl.so version?

I'm running Apache 2.2.3 and would like to find out, how to check version of mod_ssl.so and if this module can support TLSv1.1 and TLSv1.2. Regards
0
votes
0answers
35 views

Apache and SSLVerifyClient

Please excuse any dumb statements regarding this. I am very new to Apache and to HP-UX. I am a SQL Server DBA and ended up on this project. I am working to try and implement SSL with Client Verify ...
1
vote
3answers
360 views

Apache 2.4 SSL Config - Server rejects requests with HTTP 400 [closed]

I'm running into some trouble with my Apache 2.4 config. Accessing https://subdomain.my-domain.com always returns this http 400. Bad Request Your browser sent a request that this server could not ...
2
votes
1answer
30 views

Apache Reverse Proxy - How to disable SSL frontside but allow SSL backside

I have an Ubuntu 14 LTS / Apache 2.4 server with mod_proxy/mod_rewrite configured for use as a reverse proxy. One of the servers on the backside is too old to support TLS. I would like to disable ...
0
votes
0answers
45 views

Unable to access CUPS /admin page. A TLS fatal alert has been received

We have several servers where the CUPS /admin interface is utilized. It was brought to my attention that several of them are no longer functional. The config is fairly simple and I cannot find a ...
0
votes
0answers
11 views

SSL error with rvm and ruby 2.2.2

I am getting the below error while doing a api call from one app to another: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed We are using using rvm ...
1
vote
0answers
24 views

cyrus-imapd & SSL

I have an IMAP server running on Fedora (cyrus-imapd-2.4.18-1.fc23.i686) with the following configuration: $ cat /etc/imapd.conf configdirectory: /var/lib/imap partition-default: /var/spool/imap ...
0
votes
1answer
26 views

Apache Listening Port

I need some help. I'm trying to set up a web interface for a cloud system and I have used this conf (provided by the vendor) <VirtualHost *:443> ServerName sxweb.foo.com ServerAdmin ...
1
vote
1answer
968 views

svn: SSL is not supported

I am trying to check out code on a Unix box in the Z shell. When I run the following command svn checkout https://svn.example.net/svn/trunk/source build I get the following error message: svn: SSL ...
2
votes
2answers
9k views

Apache not listening on port 443

I've purchased an SSL and I'm trying to set it on a browser. The port is forwarded in the router to the server, and I believe that SSL certificate is installed correctly (the apache starts OK). I ...
1
vote
3answers
1k views

Dovecot with CAcert certificates, Outlook can't connect to IMAP

I have quite standard installation of postfix and dovecot on Ubuntu 12.10. I generated my own certificates and got them signed by cacert.org. The process of creating certs was like below: openssl ...
0
votes
0answers
112 views

Enabling SSL on ubuntu with apache2

I'm trying to get SSL working on my ubuntu VM. I'm going through the steps in this link but when I got to reload the apache service after enabling default-ssl.conf I'm getting errors in the log: [...
0
votes
0answers
22 views

Do you need to disable SPDY to block SSL websites with Squid?

If a computer connects to squid, and squid does ssl-bump or peek-n-splice or DynamicSslCert to block access to certain HTTPS websites at certain times of day should SPDY be disabled in the browser? ...
1
vote
1answer
187 views

apache2 no listening sockets available, but nothing listening on the port

I'm trying to setup SSL on an ubuntu server. I've generated a key and certificate with the following commands openssl genrsa -out mydomain.key 1024 and openssl req -new -key mydomain.key -x509 -out ...
1
vote
1answer
302 views

Use HAProxy to tunnel SSH through https

I have a server with Apache webserver on it and many websites running on http (port 80) and https (port 443). I would like to use a proxy on port 443 in between Apache and the user. In this page, ...
8
votes
2answers
47k views

How to fix curl sslv3 alert handshake failure?

I'm trying to curl HTTPS website in the following way: $ curl -v https://thepiratebay.se/ However it fails with the error: * About to connect() to thepiratebay.se port 443 (#0) * Trying 173.245....
-1
votes
2answers
632 views

Cannot disable SSLv3. Followed guides and forum posts

I am having no luck disabling SSL3 on CentOS 6. I have followed guides and forum posts to no avail. grep -Ri SSLProtocol /etc/httpd Binary file /etc/httpd/modules/mod_ssl.so matches /etc/httpd/conf.d/...
0
votes
2answers
587 views

How to “get” a HTTPS website running? [closed]

I have a website serving several pages that can be reachable via HTTP. How can I make these sites available via standard HTTPS? (not self-signed). What are the steps? (go to a CA, and then?) Can ...
1
vote
1answer
694 views

ngircd / xchat SSL issues

I'm trying to setup a ngircd IRC server on Fedora 18 (which was installed using yum), but I'm having some SSL issues. I can connect to the server locally and remotely if I choose to "accept invalid ...
1
vote
0answers
44 views

502 Proxy Error - PUT request to MDM OSX Server via apache ProxyPass on ubuntu 14

I am trying to set up a OSX Server behind an ubuntu server with apache2 and vhosts which uses proxypass to send requests to my OSX server. Most request work like they should but I am unable to make ...
1
vote
1answer
44 views

Images and Stylesheets not loading from squid due to a bad certificate?

I just setup Gate Sentry on a Raspberry PI 3, and it contains Squid 3 as part of it's proxy chain. It also utilizes ssl bump and certain websites that use SSL (usually big ones, like Facebook and ...
0
votes
0answers
26 views

Apache 2 Debian SSL Certification not exist

I'm not really good with Apache and that is the reason why I'm writing to you. I have installed a web server in SSL following some indication from the software vendor. When I restart the service I ...
18
votes
3answers
815 views

Untrusting an intermediate CA in Linux?

From this blog. Intermediate CAs are certificates signed by a root CA that can sign arbitrary certificates for any websites. They are just as powerful as root CAs, but there's no full list of ...
3
votes
0answers
40 views

Can't disable TLSv1 and RC4-SHA

I need to remove TLSv1 and RC4-SHA support in Centos 7. I have these lines in my ssl.conf SSLProtocol +TLSv1.2 +TLSv1.1 -TLSv1 SSLCompression off SSLHonorCipherOrder on SSLCipherSuite "ECDHE-ECDSA-...
2
votes
1answer
39 views

How do I configure Apache to serve https?

After many hours I finally managed to configure Apache to use my SSL certificate but i just found out that there is something wrong in my configuration. If I try to reach my domain from Google Chrome ...
0
votes
0answers
897 views

Cant use https on localhost

I am unable to use https on my localhost testmachine. I cant figure out the problem on my own so here is what i did: I placed the following to files in sites-available : 000-default.conf <...
0
votes
0answers
7k views

CentOS 7 httpd failed to make connection with backend

In a CentOS 7 server with apache httpd 2.4 set up as an ssl reverse proxy for tomcat, I am getting an error indicating that httpd is not able to connect with tomcat. How can I resolve this error so ...
3
votes
1answer
18k views

Apache “RSA server certificate CN does not match server name” error

I have an apache installation with some name-based vhosts and a SSL certficate with CN=maindomain.com and DNS Alternative Names for the all the vhosts (sub)domains. However, this setup gives warnings ...
2
votes
1answer
26k views

Apache - Generate private key from an existing .crt file

I have some apache instances running smoothly with a home-made generated certificate. Now I have to use a provided certificate, but what I had sent is only a .crt file. In tried to copy it into the ...
1
vote
1answer
24 views

How to extract RSA keys from Apache

I am testing some old vulnerabilities related to SSL/TLS, and would like to know how to extract temporary RSA keys from Apache. The particular vulnerability I am testing is the FREAK attack. I ...
0
votes
1answer
63 views

How can I configure TLS1.1 on LFTP?

Could you please help me with the steps to configure TLS1.1 for lftp?Also how can I check which version of TLS is running on my Redhat Linux OS ?
-1
votes
2answers
41 views

SSL Strip Attack: Confusion with “echo 1 > /proc/sys/net/ipv4/ip_forward”

In the SSLStrip attack, one has to enable IP forwarding using the command : echo 1 > /proc/sys/net/ipv4/ip_forward I understand this command enables the host to work as a router forwarding ...
3
votes
1answer
43 views

Using iptables to stop brute force attacks on a Apache https site

I have a TLS site Apache which uses Basic Authentication to protect resources. I'm trying to setup an iptables rule to prevent brute force attacks on port 443, so I've added the following iptables ...
0
votes
1answer
282 views

TLSv1.2 support in CentOS 5.8

Right now I can't access HTTPS site from PhantomJS headless WebKit browser because of TLSv1.2 In my CentOS 5.8 I have following OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 verison installed. I think I ...
0
votes
1answer
2k views

Does Apache 2.2.3 support TLSv1.1 and TLSv1.2?

How can I find out if Apache 2.2.3 supports TLSv1.1 and TLSv1.2? If possible how can I implement it?