SSL (the predecessor of TLS) is a cryptographic protocol designed to provide communications security over a computer network. It is the S in HTTPS, IMAPS, SMTPS, etc.

learn more… | top users | synonyms (1)

0
votes
1answer
150 views

TLSv1.2 support in CentOS 5.8

Right now I can't access HTTPS site from PhantomJS headless WebKit browser because of TLSv1.2 In my CentOS 5.8 I have following OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 verison installed. I think I ...
1
vote
3answers
935 views

Dovecot with CAcert certificates, Outlook can't connect to IMAP

I have quite standard installation of postfix and dovecot on Ubuntu 12.10. I generated my own certificates and got them signed by cacert.org. The process of creating certs was like below: openssl ...
0
votes
1answer
2k views

Does Apache 2.2.3 support TLSv1.1 and TLSv1.2?

How can I find out if Apache 2.2.3 supports TLSv1.1 and TLSv1.2? If possible how can I implement it?
0
votes
0answers
23 views

sudo update-ca-certificates always add new cert

When I run sudo update-ca-certificates on debian 8 it is always add one new cert. it is normal behavior? What's can be wrong? ar@work:/tmp$ sudo update-ca-certificates Updating certificates in ...
1
vote
1answer
869 views

svn: SSL is not supported

I am trying to check out code on a Unix box in the Z shell. When I run the following command svn checkout https://svn.example.net/svn/trunk/source build I get the following error message: svn: SSL ...
0
votes
0answers
30 views

OpenLDAP 2.4: How to correctly implement TLS (ldaps) on CentOS 6.7

My environment: CentOS 6.7 / OpenDLAP 2.4 slapd -VV @(#) $OpenLDAP: slapd 2.4.40 (Nov 10 2015 09:41:16) $ ...
0
votes
1answer
2k views

How to check mod_ssl.so version?

I'm running Apache 2.2.3 and would like to find out, how to check version of mod_ssl.so and if this module can support TLSv1.1 and TLSv1.2. Regards
4
votes
3answers
126 views

How to check for sslv2 from a remote server?

I have a server which I want to check if it supports sslv2. from a remote machine I do the following: openssl s_client -ssl2 -connect something.somethingcool.com:443 But this returns: unknown ...
3
votes
1answer
229 views

Can ssl folder be removed without causing conflict

In /etc/httpd the ssl folder, if that is removed does that mean any site on the server if directed to https:// will not throw warning? I got a certificate a while back but soon realized if not a paid ...
2
votes
1answer
417 views

Generate a certificate signing request for an SSL server

I'm running CentOS 6.2 LAMP and I've just purchased an SSL certificate via Namecheap that I'm trying to install on my server. This is the certificate I purchased. How do I complete this process ...
0
votes
2answers
4k views

Redhat httpd start failed showing “ELinks: Connection refused”

I'm on RHEL 6.5 and Apache 2.2.15. And now applying a trusted SSL on the Server. After adding the respective SSL related Certs and files, my Apache is NOT starting up anymore. Here are some outputs: ...
0
votes
0answers
6k views

CentOS 7 httpd failed to make connection with backend

In a CentOS 7 server with apache httpd 2.4 set up as an ssl reverse proxy for tomcat, I am getting an error indicating that httpd is not able to connect with tomcat. How can I resolve this error so ...
4
votes
1answer
337 views

Can't disable SSLv3 in Apache + mod_nss

I am trying to implement TLS through mod_nss in Apache (RHEL 7). As per the documentation, I have installed mod_nss and removed mod_ssl. I have followed the steps outlined in the documentation (see ...
5
votes
2answers
41k views

How to configure SSL in apache?

I have installed apache in RHEL 6. Everything is working fine. What all changes and configurations should be done to use https://localhost:443/. If I change the "Listen 80" to 443 it is throwing an ...
5
votes
2answers
6k views

How can I start Apache on Arch Linux w/systemd using passphrase protected SSL keys?

I'm relatively new to using Arch Linux and think I must be missing the obvious way to do this correctly, but –short of starting the daemon on my own– I can't figure out how to get passphrase protected ...
3
votes
3answers
6k views

Apache disable SSLv2 SSLv3

I know that there are some Questions around here that comes along with this Topic. But I really don't know what I can do anymore. So here's the point: I am using Apache 2.2.22 on OpenSuse 12.3. The ...
40
votes
3answers
66k views

apache2 Invalid command 'SSLEngine'

When I restart httpd, I get the following error. What am I missing? [root@localhost ~]# service httpd restart Stopping httpd: [ OK ] Starting httpd: ...
54
votes
7answers
87k views

How to disable SSLv3 in Apache?

Everybody seems to be talking about the POODLE vulnerability today. And everybody recommends disabling SSLv3 in Apache using the following configuration directive: SSLProtocol All -SSLv2 -SSLv3 ...
0
votes
1answer
242 views

SSL-encrypted proxy server for war files in CentOS 7

How can I configure a CentOS 7 web server to serve only SSL-encrypted content from war files, with tomcat running behind a proxy server? I imagine this involves using firewalld, https, and tomcat. ...
1
vote
1answer
152 views

Install ssl on CentOS Apache server

I installed Apache by using sudo yum -y install httpd instead of using wget and installing that way. This means that it has been set up differently. I'm now trying to install ssl by using sudo yum ...
2
votes
1answer
253 views

HTTPS not working on CentOS Apache 2.4

I have created a key and self-signed certificate and moved them to /etc/httpd/conf/ My ssl.conf is here: http://pastebin.com/gsQbKY67 The ssl_module (shared) is there when I try httpd -M Output ...
-1
votes
2answers
26 views

I cannnot find ssl.conf for TLS1.2 install

I have a dedicated server with CENTOS 6.7, Apache/2.4.20 php 7 and i want to enable TLS1.2 for paypal payments. From this I understand that i need to add extra lines in ssl.conf I looked for it in ...
0
votes
0answers
16 views

What does it mean “Gateway Proxy Failure” in Squid?

While browsing one of HTTPS sites, I got the following message in browser: Gateway Proxy Failure A non-recoverable internal failure or configuration problem prevents this request from being ...
0
votes
0answers
19 views

haproxy serving wrong SSL certificate for a subdomain

I have a Server that runs haproxy to redirect incoming traffic to the correct process based on the subdomain. haproxy is configured to use different SSL certificates depending on the subdomain. The ...
1
vote
1answer
18 views

SSLSNIFF on CentOS 7

I tried to install sslsniff 0.8 on CentOS 7 but I can't install the following dependencies since they can't be found when I execute the "yum" command: libboost1.35-dev, libboost-filesystem1.35-dev, ...
1
vote
1answer
55 views

Changing IPTables to Allow FTP over TLS Using Passive Ports

I am using Arch Linux. I followed a tutorial to change /etc/iptables/iptables.rules to allow only the basic ports for my web server. I also used /etc/modules-load.d/nf_conntrack_ftp.conf to enable ...
0
votes
0answers
31 views

Squid filters some of Bugzilla HTTPs URLs

I am trying to finetune web filtering with squid, but meeting ununderstandable behaviour (for me). For example, if I open the following address: https://bugzilla.mozilla.org/ It goes fine. But if I ...
0
votes
2answers
505 views

Trying to use TLS SMTP against Exim, getting Security Error back; what's wrong?

OS: FreeBSD9 64 Bit MTA: EXIM4 with TLS with Self Signed Certificate. I am using telnet myserver.com 25 EHLO dummy@dummy.com STARTTLS It says TLS go ahead And then I issue MSG FROM: ...
1
vote
0answers
19 views

How to set Exim with TLS on a server with several domains?

I have a Debian Linux server with Exim. I want this server to use TLS when sending emails to supporting SMTP hosts, if a email is created by software on my server (for example with mail or sendmail ...
2
votes
1answer
94 views

Unable to use a self-signed certif. on localhost

I created a self-signed certificate for localhost for testing as follows: openssl genrsa -out key.pem 2048 openssl req -new -key key.pem -out certificate.csr openssl x509 -req -in certificate.csr ...
0
votes
0answers
30 views

Installing Plone 5-on-RHEL 7-fails-unable-to-find-libssl-or-openssl-ssl-h

sudo ./install.sh --target=/home/admin/Plone --build-python zeo Error: Unable to find libssl or openssl/ssl.h. libssl and its development headers are required for Plone. Please install your ...
18
votes
3answers
52k views

Adding a self-signed certificate to the “trusted list”

I've generated a self-signed certificate for my build server and I'd like to globally trust the certificate on my machine, as I created the key myself and I'm sick of seeing warnings. I'm on Ubuntu ...
2
votes
1answer
38 views

Does linux verify server certificate against crl by default?

Let assume that I have a Linux based server running apache or tomcat with a web server certificate created by a trusted authority. The certificate has embedded distribution point of the crl. The ...
0
votes
1answer
18 views

wget TLSv1 behaves the same as TLSv1_2

I used wireshark to compare curl --tlsv1.0 vs --tlsv1.2 The server handshake obediently uses TLSv1.0 for servers that support it (the point is to check to validate they don't): wget url ...
3
votes
2answers
1k views

Wget TLS 1.2 error

According to the manual, I should be able to specify TLS version 1.2 when using wget. When I try, it fails. wget https://site --no-check-certificate --secure-protocol=TLSv1_2 wget: ...
0
votes
0answers
6 views

SSL of domain redirecting to plesk panel default screen

I have plesk setup on my linux server, where we have a subscription setup for a website 4ti.co.uk We are getting a strange error where if you go to the domain using https://4ti.co.uk it directs you ...
1
vote
0answers
193 views

TLS on vsftpd in browser does not exist: 530 Non-anonymous sessions must use encryption

I have installed vsftpd on debian 8 and I configured it in /etc/vsftpd.conf like so: listen=YES pam_service_name=vsftpd use_localtime=YES anonymous_enable=YES anon_root=/var/ftproot/anonymous ...
1
vote
1answer
70 views

curl: (77) pbm with the SSL CA cert (path? access rights?)

I am in root in my directory on CentOS release 6.6 and I want to do the following in order to install mysql in upper version on centOS: rpm -Uvh ...
1
vote
1answer
5k views

How to remove SSL certificate?

I've been asked to remove certificates from some of our servers, but I don't know anything about httpd configuration. If I have one server where if I do this /usr/sbin/httpd -t -DDUMP_CERTS ...
1
vote
1answer
172 views

Use HAProxy to tunnel SSH through https

I have a server with Apache webserver on it and many websites running on http (port 80) and https (port 443). I would like to use a proxy on port 443 in between Apache and the user. In this page, ...
1
vote
1answer
117 views

apache2 no listening sockets available, but nothing listening on the port

I'm trying to setup SSL on an ubuntu server. I've generated a key and certificate with the following commands openssl genrsa -out mydomain.key 1024 and openssl req -new -key mydomain.key -x509 -out ...
0
votes
0answers
31 views

How can I configure TLS1.1 on LFTP?

Could you please help me with the steps to configure TLS1.1 for lftp?Also how can I check which version of TLS is running on my Redhat Linux OS ?
4
votes
2answers
99 views

OS X Postfix no TLS found

I'm working on OSX El Capitan. About week ago everything worked fine, but then I changed my gmail password and now I can't send emails any more. Additional configuration for /etc/postfix/main.cf is: ...
1
vote
0answers
16 views

Rebuild pki directory and associated changes

Let me preface this with, "I am not looking for a free lunch." I royally screwed up my cert storage recently and during my attempt to repair I made things worse. I am looking for a thorough ...
5
votes
2answers
543 views

Let' encrypt - nginx - OCSP stapling

I would like to enable OCSP stapling in my nginx server. I'm using nginx version: nginx/1.6.2 debian Let's Encrypt certificate I'm really unexperienced in this matter, so it might be a trivial ...
2
votes
1answer
380 views

Apache2 'Server' header reports wrong openSSL version

Does anyone know where the Apache 'Server' header pulls the openSSL version from (file location/directory)? I am expecting openssl-1.0.1j but apache is reporting openssl-1.0.1g (system's openssl ...
6
votes
3answers
13k views

How do I install a system-wide SSL certificate on openSUSE?

I have a PEM certificate that I just downloaded from a webserver. I want to install it system-wide so I can curl the server without it complaining about a missing certificate. I tried putting the ...
0
votes
1answer
532 views

`lftp` does not connect to FTPS (ftp over ssl)

I have trouble in connecting lftp with ftps (ftp over ssl, not sftp!) server (FTP Server Ultimate (PRO version).) running on Android phone. Technical details: Linux part. Following : ...
9
votes
1answer
5k views

mutt SMTP TLS error sending mail

When I try to send a mail, I get the following error: gnutls_handshake: An unexpected TLS packet was received. This is my .muttrc (myname, myaddress and mymail are placeholders): # Automatically ...
1
vote
1answer
198 views

How to fix curl sslv3 alert handshake failure on Gentoo?

I'm trying open a website with cURL like this: $ curl -vH "Accept: application/json" https://www.rocketleaguereplays.com/api/replays/-1/ The output is: * Trying 104.24.114.83... * Connected to ...