SSL (the predecessor of TLS) is a cryptographic protocol designed to provide communications security over a computer network. It is the S in HTTPS, IMAPS, SMTPS, etc.

learn more… | top users | synonyms (1)

1
vote
1answer
473 views

Nmap script execution to detect heartbleed is failing

Wanting to setup Nmap on my Ubuntu 14.04 LTS system to detect HeartBleed vulnerability. I followed the instructions here: ...
1
vote
1answer
446 views

Sendmail with TLS support changes FROM: address

I have multiple domains on one server and when sending email to server, which supports TLS, server changes FROM field to default domain ($j). What should i do (in .mc level please) to remain primary ...
1
vote
2answers
18 views

Can I make davfs ignore untrusted certificates?

My server provides WebDAV over HTTPS only, so that other machines can access the DAV. Say the certificate is issued for www.myserver.com and the WebDAV is at https://www.myserver.com/webdav. For ...
2
votes
2answers
891 views

How to display server's TLS certicicate details in terminal?

Having TLS certificate in local file, I can display its details using syntax like: openssl x509 -text -noout -in cert_filename Is there any way to display remote SMTP/POP3/HTTP server's TLS ...
0
votes
0answers
41 views

libssl undefined reference to symbol 'SSL_load_error_strings@@OPENSSL_1.0.0'

With the following CMakeLists.txt (I tried to snip it AMAP) https://gist.github.com/pbertoni/29200833dc562ab6ee2c I got this error from make at linking time: /usr/bin/ld: ...
5
votes
1answer
41 views

How to find more details on Invalid Certificates

Setup I am following this blog post to set up ASP.net MVC5 on Linux. When I get to the part that adds the Microsoft certificates, I am warned that they are invalid. For example, this command: ...
1
vote
1answer
31 views

Multiple RSA server certificates not allowed

I purchased a multidomain certificate, and I was trying to install it on my server. I put the following information inside the virtual host for one of my sites: <VirtualHost *:443> ... ...
0
votes
1answer
53 views

Script timed out before returning headers: iredadmin.py

I am trying to access my iRedMail backend at https://domain.com/iredadmin However, it keeps timing out with a 500 error. I check my error log, and I see the following: [Sat Apr 11 16:53:41 2015] ...
0
votes
1answer
11 views

Apache ReverseProxy ssl

I have the following ReverseProxy set up which works for http requests: NameVirtualHost *:80 <VirtualHost *:80> ServerName sub.domain.com ProxyRequests Off ProxyVia Off <Proxy *> Order ...
1
vote
1answer
45 views

Mplayer fails to play network stream

I'm trying to play youtube streams with mplayer. On running mplayer -cache 2048 https://www.youtube.com/watch?v=USUA_1WVM8I, I get the following output and the video does not play at all. MPlayer ...
0
votes
1answer
85 views

Does Apache 2.2.3 support TLSv1.1 and TLSv1.2?

How can I find out if Apache 2.2.3 supports TLSv1.1 and TLSv1.2? If possible how can I implement it?
0
votes
1answer
22 views

Looking for an email server that supports mysql ssl connection

I am trying to secure connections to my MySQL server. I have SSL set up but I am looking for programs that support a SSL connection to MySQL. Specifically I am currently looking for an email server ...
1
vote
1answer
2k views

How to remove SSL certificate?

I've been asked to remove certificates from some of our servers, but I don't know anything about httpd configuration. If I have one server where if I do this /usr/sbin/httpd -t -DDUMP_CERTS ...
0
votes
1answer
49 views

Configure KVM/QEMU with TLS?

New to virtualization and kvm and I have a problem when i try to create a virtual machine with spice: virt-install --name Windows-7-x64 --ram 2048 --disk path=~/kvm/images/win7.img,size=50 --vcpus=1 ...
1
vote
1answer
48 views

When would CUPS use TLS?

I'm running Debian Testing on amd64, with the apt-listbugs feature that tells me if bugs are present before upgrading. Now the package libgnutls-deb0-28 has a serious bug to the effect that "CUPS ...
0
votes
0answers
40 views

OpenVPN TLS Error

I'm having trouble getting OpenVPN to work. I have installed and configured OpenVPN on my centos machine and it seemed to be going fine. I followed the instructions in the following link ...
0
votes
2answers
387 views

How to fix curl sslv3 alert handshake failure?

I'm trying to curl HTTPS website in the following way: $ curl -v https://thepiratebay.se/ However it fails with the error: * About to connect() to thepiratebay.se port 443 (#0) * Trying ...
1
vote
1answer
744 views

Exim4 as smarthost with SSL?

I want to use exim4 as a smarthost to send email using an smtp mail account over ssl. I've seen the hosts_require_tls option, but I need SSL and not TLS. How should I do this?
0
votes
0answers
81 views

How to log failed username and plaintext passwords in dovecot server using PAM authentication?

I am configuring web mail honeypot in centOS 6.6 using SquirrelMail, postfix and Dovecot. I need to log all the entered user name and plain text passwords for web mail login. Modifications done to ...
0
votes
1answer
47 views

How to check mod_ssl.so version?

I'm running Apache 2.2.3 and would like to find out, how to check version of mod_ssl.so and if this module can support TLSv1.1 and TLSv1.2. Regards
0
votes
2answers
62 views

Implementing TLS 1.2 when I SSH into a box as a measure against POODLE

Is it possible to edit sshd_config or ssh_config, such that the SSH connection into a machine configured to use TLS1.2 is successful and rejects connections configured to use TLS1.1 and below, as well ...
0
votes
0answers
11 views

Enable TLS-SRP for, say, courier-imap

I want to use TLS-SRP for the services that I run on my server, because I don't want to leak credentials, not even on the server's disk. There are several articles on setting up TLS-SRP either with ...
0
votes
0answers
75 views

open ssl client giving error routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188:

On connecting to my application (a ssl server) by using command openssl s_client -host 127.0.0.1 -port 5028 -cipher EXPORT -debug -state I am getting error like CONNECTED(00000003) ...
0
votes
0answers
87 views

Cant use https on localhost

I am unable to use https on my localhost testmachine. I cant figure out the problem on my own so here is what i did: I placed the following to files in sites-available : 000-default.conf ...
1
vote
0answers
62 views

cURL does not recognize certificate

At our company they enforce a web proxy which breaks SSL connections and replaces the certificate by its own fake certificate. (To be precise it uses a proxy cert which is signed by the company cert.) ...
2
votes
1answer
124 views

CURL won't connect to self

I'm having a weird issue where CURL cannot connect to its own server. For example if I'm on server example.com wget https://example.com/ <--- WORKS FIND curl https://example.com gets error: 35 ...
2
votes
1answer
490 views

postfix smtp connection timed out, why?

A CentOS 7 web server has postfix, dovecot, and mailx installed. I have been able to make an IMAP connection to the server in order to read inbox mail using a remote Thunderbird client, but I am not ...
0
votes
0answers
46 views

Sign a soap message from a JKS dynamically using Python Unix

I am currently calling a webservice using Curl command from unix . I have a requirement that I have to dynamically message sign the soap request every time I make a call to the webservice using my ...
0
votes
0answers
30 views

Disabling sslv3 on samba4

How can I disable sslv3 on samba4 ldaps and just have tlsv1 enabled? I have not been able to find any documentation or guides on disabling this feature. This is in regards to the poodle ...
2
votes
0answers
23 views

Apache modssl returning random unwanted 200's rather than 404's

I have a fairly simple apache 2.4.7 config on CentOS 6.5 Linux and an active web server. No PHP or CGI, just some static pages and a proxypass to a different server tier. I'm doing some security ...
8
votes
2answers
27k views

apache2 Invalid command 'SSLEngine'

When I restart httpd, I get the following error. What am I missing? [root@localhost ~]# service httpd restart Stopping httpd: [ OK ] Starting httpd: ...
7
votes
5answers
13k views

invalid SSL_version specified at /usr/share/perl5/IO/Socket/SSL.pm line 332

Since I upgraded my PC from (k)ubuntu 12.04 to 12.10 I receive this error message when trying to send an email using sendemail. Installing an older version of IO::Socket::SSL is not an option. I ...
1
vote
3answers
5k views

Thunderbird fails to connect to Dovecot and Postfix

I set up Dovecot and Postfix, but when I try to authenticate with Thunderbird, it gives this error: "Thunderbird failed to find the settings for your email account." ==> /var/log/dovecot-info.log ...
3
votes
2answers
6k views

cURL/wget - SSLv3, TLS handshake, CERT hangs

I have problems connecting to https sites using cURL or wget. When I download from a https curl seems to be stuck while doing the TLS handshake, CERT. The problem is independent of the site (I noticed ...
1
vote
0answers
34 views

sendmail and certs

I am trying to set up sendmail for our company on a CentOS 6.6-Release server. Specifically, I want to use SSL, so that passwords are sent encrypted. ls /etc/mail/ssl intermediate.crt ...
1
vote
0answers
33 views

VSFTPD cutted uploads

Installed VSFTPD v2.3.2 on a Wheezy. When I try to put anything my ftp client (filezilla v3.5.3) it sends the file by parts of 229376 bytes interrupted by deconnexion/reconnexion untill the en of the ...
1
vote
0answers
213 views

NGINX Reverse Proxy - no user/password was provided for basic authentication

I've got Nginx set up on a RPi (raspbian)as a reverse proxy using SSL between the remote user and the Nginx instance. All seems to work well for two services mounted on the RPi (Shellinabox and RPi ...
0
votes
0answers
63 views

Using Varnish + Nginx Forcing SSL

i'm using Varnish and i would like to force communication only with SSL. My server is Nginx. What's the best way to do so? Or the easiest? I read about Pound proxy and installed it but guides were too ...
1
vote
4answers
10k views

Helo command rejected: need fully-qualified hostname Error

My mail server is in some blacklist cause of spams. I reconfugured postfix. Aften then My customers get this error they can't send emails. 404 4.5.2 <PLLAMNAZIFE>: Helo command rejected: need ...
1
vote
2answers
1k views

Create SSL certificate - Silent [closed]

I want to create a SSL certificate without get prompt for the data. The normal way to create the certificate would be: openssl req -x509 -nodes -days 7300 -newkey rsa:2048 -keyout ...
0
votes
1answer
66 views

IMAP Dovecot cannot connect

I am trying to set up my own mail server (for 'fun'). I followed this tutorial to the bone. But I get this error message: imap-login: Disconnected (auth failed, 2 attempts in 9 secs): ...
0
votes
1answer
109 views

lwp-request Fails After Upgrade to Centos 7

I have a bash script that runs well on centos 6, which has an lwp-request in it. I upgraded my system to Centos 7, and the request fails to run: # lwp-request -E https://localhost/admin/startup GET ...
1
vote
0answers
110 views

Apache2 'Server' header reports wrong openSSL version

Does anyone know where the Apache 'Server' header pulls the openSSL version from (file location/directory)? I am expecting openssl-1.0.1j but apache is reporting openssl-1.0.1g (system's openssl ...
0
votes
0answers
36 views

Verifying SSL key and certificate files for a web server

I want my web users to upload their own SSL certificate files for their domains. I have the configuration environment all set up. But unfortunately, if Apache web server finds a broken SSL certificate ...
2
votes
2answers
506 views

What should I do about Python 2.7.9 not looking for SSL certificates in the right place on FreeBSD?

I have a FreeBSD 10.0 system, and a couple of days ago, I upgraded my python27 port from Python 2.7.8 to Python 2.7.9, which enabled SSL verification by default. Unsurprisingly, it broke my existing ...
5
votes
2answers
3k views

How can I start Apache on Arch Linux w/systemd using passphrase protected SSL keys?

I'm relatively new to using Arch Linux and think I must be missing the obvious way to do this correctly, but –short of starting the daemon on my own– I can't figure out how to get passphrase protected ...
6
votes
3answers
11k views

Trust a self signed PEM certificate

I have set up a proxy server with SSL using a PEM certificate. Now, there is a couple of machines of mine that I would like to trust this certificate automatically (without the web browser ...
1
vote
0answers
14 views

SSL (Hosted on LB) to be installed on the Downstream Apache Servers?

First, i have very basic knowledge on the SSL topic. Here is my setup. I have (1) of Public Facing Domain on LB and (2) of Internal Domains on each Web Servers. Like: ...
2
votes
1answer
12k views

make fatal error: openssl/sha.h: No such file or directory

I'm trying to compile a program that, according to the documentation, requires the "OpenSSL library". I have OpenSSL installed, and it's still giving me the error openssl/sha.h: No such file or ...
0
votes
1answer
76 views

Installing Restund on AWS EC2 Ubuntu

I have successfully installed Restund on a Vagrant Machine running Ubuntu. But when I tried to install it on AWS EC2 Instance running Ubuntu, I get an error when starting Restund. Error Message: tls ...