SSL (the predecessor of TLS) is a cryptographic protocol designed to provide communications security over a computer network. It is the S in HTTPS, IMAPS, SMTPS, etc.

learn more… | top users | synonyms (1)

0
votes
0answers
23 views

SSL Secure Connection Failed [on hold]

I tried to migrated my Primary Web-Server to my Secondary Web-Server. I have verified every thing which is mentioned below. Both the host are n same version CentOS 6.7 httpd.conf was same as ...
1
vote
2answers
2k views

Multiple RSA server certificates not allowed

I purchased a multidomain certificate, and I was trying to install it on my server. I put the following information inside the virtual host for one of my sites: <VirtualHost *:443> ... ...
1
vote
0answers
5 views

How to decrypt data buffer in kernel level before read/recv [on hold]

Before reading contents from socket file descriptor using read/recv(), can we preprocess/modify(e.g. decryption) data buffered in kernel level? I have server&client programs written in C, and I ...
4
votes
4answers
4k views

specify certificate of CA in Dovecot

In Postfix, I have specified my private key, my certificate, and the certificate of my CA smtpd_tls_CAfile = /etc/ssl/cacert.pem smtpd_tls_key_file = /etc/ssl/server.key smtpd_tls_cert_file = ...
-1
votes
1answer
37 views

Why can't wget download a file? [on hold]

Why can't wget download the following file? Any way to solve the problem? $ wget https://www.svce.ac.in/departments/cse/NOTES/CS23041.pdf --2016-02-04 23:01:22-- ...
1
vote
1answer
4k views

How to remove SSL certificate?

I've been asked to remove certificates from some of our servers, but I don't know anything about httpd configuration. If I have one server where if I do this /usr/sbin/httpd -t -DDUMP_CERTS ...
3
votes
1answer
42 views

Let' encrypt - nginx - OCSP stapling

I would like to enable OCSP stapling in my nginx server. I'm using nginx version: nginx/1.6.2 debian Let's Encrypt certificate I'm really unexperienced in this matter, so it might be a trivial ...
1
vote
3answers
50 views

Apache 2.4 SSL Config - Server rejects requests with HTTP 400

I'm running into some trouble with my Apache 2.4 config. Accessing https://subdomain.my-domain.com always returns this http 400. Bad Request Your browser sent a request that this server could not ...
8
votes
7answers
18k views

invalid SSL_version specified at /usr/share/perl5/IO/Socket/SSL.pm line 332

Since I upgraded my PC from (k)ubuntu 12.04 to 12.10 I receive this error message when trying to send an email using sendemail. Installing an older version of IO::Socket::SSL is not an option. I ...
0
votes
1answer
87 views

“crypto failure” error when running various commands

I'm finding that a few commands (for now dig and nslookup) that fail no matter what with the following output: 19-Jan-2016 15:01:50.219 ENGINE_by_id failed (crypto failure) 19-Jan-2016 15:01:50.219 ...
0
votes
0answers
13 views

How do I get a manifest to run from my Puppet Master server to a Puppet Agent node?

I am trying to run a Puppet manifest for the first time on two new servers. But I keep getting errors. I recently set up two CentOS v7 servers. They have passwordless SSH between them. Ports 22, ...
2
votes
2answers
69 views

Cannot connect to localhost on port 4430

I am running vagrant from a virtual box with CentOS and Nginx installed. I've created a reverse tunnel from the vagrant box to a remote server but when I am trying to connect to my localhost on port ...
0
votes
1answer
20 views

openSSL Key and Certificate

As far I know, in an authenticated SSL connection, both the client and server have private keys and provide their certificates (with the corresponding public keys) across the connection before ...
0
votes
1answer
19 views

Apache Listening Port

I need for some help. I'm trying to set-up a web interface for a cloud system and I have used this conf (provided by the vendor) <VirtualHost *:443> ServerName sxweb.foo.com ServerAdmin ...
15
votes
3answers
39k views

How can I verify SSL certificates on the command line?

I'm trying to validate/verify that the rsa key, ca-bundle, and certificate stored here are ok. They are not being served by a webserver. How can I verify them?
2
votes
1answer
648 views

Sendmail with TLS support changes FROM: address

I have multiple domains on one server and when sending email to server, which supports TLS, server changes FROM field to default domain ($j). What should i do (in .mc level please) to remain primary ...
1
vote
1answer
707 views

svn: SSL is not supported

I am trying to check out code on a Unix box in the Z shell. When I run the following command svn checkout https://svn.example.net/svn/trunk/source build I get the following error message: svn: SSL ...
0
votes
0answers
10 views

Apache 2 Debian SSL Certification not exist

I'm not really good with Apache and that is the reason why I'm writing to you. I have installed a web server in SSL following some indication from the software vendor. When I restart the service I ...
3
votes
1answer
26 views

What are the drawbacks of using policy_any in openssl.cnf?

As given in this document, we may use policy_any to ignore most of the fields of subject in certificate request. There must be some drawbacks of ignoring such fields, would it may lead to some ...
0
votes
1answer
1k views

How to check mod_ssl.so version?

I'm running Apache 2.2.3 and would like to find out, how to check version of mod_ssl.so and if this module can support TLSv1.1 and TLSv1.2. Regards
0
votes
0answers
9 views

Apache and SSLVerifyClient

Please excuse any dumb statements regarding this. I am very new to Apache and to HP-UX. I am a SQL Server DBA and ended up on this project. I am working to try and implement SSL with Client Verify ...
0
votes
1answer
2k views

Does Apache 2.2.3 support TLSv1.1 and TLSv1.2?

How can I find out if Apache 2.2.3 supports TLSv1.1 and TLSv1.2? If possible how can I implement it?
0
votes
0answers
32 views

TLSv1.2 support in CentOS 5.8

Right now I can't access HTTPS site from PhantomJS headless WebKit browser because of TLSv1.2 In my CentOS 5.8 I have following OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 verison installed. I think I ...
2
votes
1answer
46 views

Is it possible to use TLSv1.3 in Apache 2.4

Is it possible to use TLSv1.3 in Apache2.4? As of October 2015, TLS 1.3 is a working draft, i.e. TLSv1.3.
0
votes
1answer
54 views

curl hangs after client hello

When I execute the following command in Ubuntu: curl -v --insecure -XGET 'https://user:pass@IP_ADDR:PORT/SOME_FILE.php' I get this output: * Hostname was NOT found in DNS cache * Trying ...
-1
votes
1answer
23 views

Puppet agent certificate error after rebuilding openstack instance

I have an open-stack instance vm , and puppet agent was working fine on it. By running the command puppet agent -t, it was good. But for some reason i had to rebuild the instance by using the ...
0
votes
1answer
44 views

How to configure SSL for Apache2 on OpenSuSE 13.1

I have OpenSuSE installed on a virtual hosted Server, running multiple virtual websites. On normal http everything works fine. I now would like to run one of my virtual sites on https in addition to ...
1
vote
1answer
69 views

invalid SSL_version specified at /usr/share/perl5/IO/Socket/SSL.pm line 368

SMTP SEND CRITICAL - invalid SSL_version specified at /usr/share/perl5/IO/Socket/SSL.pm line 368 I am using a nagios script /usr/lib/nagios/plugins/check_smtp_send that sends an email using gmail. ...
1
vote
0answers
31 views

Turning SSLEngine on causes ERR_CONNECTION_REFUSED

I am trying to configure my SSL certificate on a new installation of Ubuntu 15.10. I have installed the certificate files and the private key in the required directory: SSLCertificateFile ...
0
votes
2answers
32 views

TLS with syslog-ng 3.2.5

Does syslog-ng 3.2.5 from EPEL 6 (for CentOS 6) support TLS? I cannot get it to work at all; here is what I'm using: source s_network { tcp(ip(0.0.0.0) port(514) tls( ...
1
vote
0answers
54 views

Configure stunnel for smtp imaps of Gmail

hope someone could help me, i'm trying to configure stunnel on Debian system for get access to my gmail account. I have read a lot and it's seem simple but i can't figure it out. I have install and ...
2
votes
0answers
36 views

Hosting Dovecot and Postfix Behind nginx?

So I'm looking at setting up postfix and dovecot on a server that is currently hosting some web-sites via nginx, and I've stumbled upon the mail {} configuration option for nginx, but I'm having a ...
1
vote
1answer
57 views

Do I Need to Restart Nginx if I Renew My Security Certificate(s)?

So I'm setting up an nginx server with SSL enabled with a server definition something like: server { listen :80; listen [::]:80; server_name example.org; root /foo/bar; ssl on; ...
2
votes
2answers
2k views

How to convert ssl ciphers to curl format?

The official ssl docs list ciphers in a different format than curl takes. For instance, if I want curl to use the cipher TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, I have to pass it curl --ciphers ...
2
votes
1answer
76 views

HTTPS not working on CentOS Apache 2.4

I have created a key and self-signed certificate and moved them to /etc/httpd/conf/ My ssl.conf is here: http://pastebin.com/gsQbKY67 The ssl_module (shared) is there when I try httpd -M Output ...
1
vote
1answer
66 views

Install ssl on CentOS Apache server

I installed Apache by using sudo yum -y install httpd instead of using wget and installing that way. This means that it has been set up differently. I'm now trying to install ssl by using sudo yum ...
4
votes
1answer
50 views

Add warning to emails received by Postfix without TLS

Is it possible with Postfix to add a warning to all emails received over a cleartext (non-TLS) connection? For example modifying the subject and/or adding a custom header.
0
votes
1answer
46 views

Cannot disable SSLv3 on Amazon Linux Instance

I am using SSL Certificate issued by Go Daddy. On my Linux Instance following are the software details :- Apache Version - Apache/2.4.16 (Amazon) Openssl Version - OpenSSL 1.0.2c 12 Jun 2015 ...
0
votes
1answer
49 views

Get latest files with lftp

I would like to know if it was possible to download all latest files on an ftp server with lftp without downloading the older files. Examples; On my server I have /doc /vps /order/{id} /order/{id} ...
0
votes
0answers
27 views

How do I add self-signed certificate to trusted list in Mageia

I am trying to add self signed certificate for my repository into trusted list in Mageia 5. But when I execute sudo urpmi.addmedia name repo_link I get ...retrieving failed: curl failed: exited with ...
5
votes
2answers
2k views

How to get server's ssl certificate in a human readable form?

For example, I want to find out when the certificate for encrypted.google.com expires (i.e. Not After date), and what other domains may use it for authentication (Subject Alternative Names).
2
votes
0answers
88 views

Adding nssdb certificate from an install script

I am trying to write an script (postinst for a .deb package) that will install a secure websockets (wss:) application and a certificate that allows access from the Chrome browser. The developer has ...
0
votes
3answers
21 views

Verify SSL for local computers

I have a small business network and for this network, one computer is DHCP-, DNS- and web server. It uses local domains like machinary.ao or resources.ao I'd like to use ssl. Computers and network ...
0
votes
4answers
106 views

How can I find where the Location of SSL key file is?

I inherited a RedHat server and I'm trying to find the SSL key file that was used to generate the self signed cert so I can make a CSR. From what poking around I've done, I can't find it in any of ...
51
votes
7answers
74k views

How to disable SSLv3 in Apache?

Everybody seems to be talking about the POODLE vulnerability today. And everybody recommends disabling SSLv3 in Apache using the following configuration directive: SSLProtocol All -SSLv2 -SSLv3 ...
-2
votes
1answer
47 views

Is this a violation? using https service in intranet?

I have CentOS 7 servers in the cloud which is offering HTTPS services. Now this Enterprise can't use our services from the cloud, so they wanted a local intranet solution, the same as I am running in ...
3
votes
2answers
336 views

Wget TLS 1.2 error

According to the manual, I should be able to specify TLS version 1.2 when using wget. When I try, it fails. wget https://site --no-check-certificate --secure-protocol=TLSv1_2 wget: ...
2
votes
2answers
7k views

FTP over SSL in AIX (UNIX)

Folks over at SO couldn't answer this, so I am posting over here. I need to do an FTP over SSL to a FileZilla Server running on a Windows server from an AIX Unix clien. I have the Host name of the ...
6
votes
1answer
12k views

How do I use implicit FTP over TLS

using any FTP client (I'm on Ubuntu 12.04 and tried using lftp), I want to be able to make an implicit TLS connection on a FTP server, but I can't quite manage to successfully connect(All I get is : ...
3
votes
1answer
1k views

Proper way to handle FTP over SSL with restrictive firewall rules?

Without SSL, FTP works fine over a stateful Firewall, like netfilter (iptables) + the nf_conntrack_ftp kernel module like this: # modprobe nf_conntrack_ftp # iptables -A INPUT -m conntrack --ctstate ...