SSL (the predecessor of TLS) is a cryptographic protocol designed to provide communications security over a computer network. It is the S in HTTPS, IMAPS, SMTPS, etc.

learn more… | top users | synonyms (1)

4
votes
1answer
166 views

Can't disable SSLv3 in Apache + mod_nss

I am trying to implement TLS through mod_nss in Apache (RHEL 7). As per the documentation, I have installed mod_nss and removed mod_ssl. I have followed the steps outlined in the documentation (see ...
3
votes
1answer
105 views

mutt SSL unknown protocol - not able to connect

I am facing following situation. I am using arch linux I installed mutt the email client I followed the simple guidelines in the arch wiki to configure mutt to use imap For the simple config where ...
3
votes
0answers
602 views

NGINX Reverse Proxy - no user/password was provided for basic authentication

I've got Nginx set up on a RPi (raspbian)as a reverse proxy using SSL between the remote user and the Nginx instance. All seems to work well for two services mounted on the RPi (Shellinabox and RPi ...
3
votes
0answers
301 views

Creating a signed subordinate CA for client certificates

I have a root self-signed CA which I've created for myself. With this CA (we'll call it country), I've created a server certificate and key for my webserver, nginx. I now would like to create a ...
2
votes
0answers
37 views

Hosting Dovecot and Postfix Behind nginx?

So I'm looking at setting up postfix and dovecot on a server that is currently hosting some web-sites via nginx, and I've stumbled upon the mail {} configuration option for nginx, but I'm having a ...
2
votes
0answers
90 views

Adding nssdb certificate from an install script

I am trying to write an script (postinst for a .deb package) that will install a secure websockets (wss:) application and a certificate that allows access from the Chrome browser. The developer has ...
2
votes
0answers
88 views

Apache modssl returning random unwanted 200's rather than 404's

I have a fairly simple apache 2.4.7 config on CentOS 6.5 Linux and an active web server. No PHP or CGI, just some static pages and a proxypass to a different server tier. I'm doing some security ...
2
votes
0answers
315 views

Apache2 'Server' header reports wrong openSSL version

Does anyone know where the Apache 'Server' header pulls the openSSL version from (file location/directory)? I am expecting openssl-1.0.1j but apache is reporting openssl-1.0.1g (system's openssl ...
2
votes
0answers
451 views

Problems uploading a file via WebDAV?

I've configured on my Linux server (SLES11) with IHS Webserver with WebDAV enabled. A file upload via curl is successful using a URL like this: $ curl --insecure --upload-file testfile.txt \ ...
2
votes
0answers
3k views

SMTP Auth - SASL on Dovecot, Postfix and CentOS 6.2 (and Open-Xchange)

I am trying to get open SASL to work on CentOS 6.2. I followed this tutorial: http://wiki.centos.org/HowTos/postfix_sasl I suspect it works perfectly for CentOS 5.x so all I really need is an update ...
1
vote
0answers
33 views

Turning SSLEngine on causes ERR_CONNECTION_REFUSED

I am trying to configure my SSL certificate on a new installation of Ubuntu 15.10. I have installed the certificate files and the private key in the required directory: SSLCertificateFile ...
1
vote
0answers
57 views

Configure stunnel for smtp imaps of Gmail

hope someone could help me, i'm trying to configure stunnel on Debian system for get access to my gmail account. I have read a lot and it's seem simple but i can't figure it out. I have install and ...
1
vote
0answers
433 views

cURL does not recognize certificate

At our company they enforce a web proxy which breaks SSL connections and replaces the certificate by its own fake certificate. (To be precise it uses a proxy cert which is signed by the company cert.) ...
1
vote
0answers
106 views

Disabling sslv3 on samba4

How can I disable sslv3 on samba4 ldaps and just have tlsv1 enabled? I have not been able to find any documentation or guides on disabling this feature. This is in regards to the poodle ...
1
vote
0answers
117 views

sendmail and certs

I am trying to set up sendmail for our company on a CentOS 6.6-Release server. Specifically, I want to use SSL, so that passwords are sent encrypted. ls /etc/mail/ssl intermediate.crt ...
1
vote
0answers
86 views

VSFTPD cutted uploads

Installed VSFTPD v2.3.2 on a Wheezy. When I try to put anything my ftp client (filezilla v3.5.3) it sends the file by parts of 229376 bytes interrupted by deconnexion/reconnexion untill the en of the ...
1
vote
0answers
18 views

SSL (Hosted on LB) to be installed on the Downstream Apache Servers?

First, i have very basic knowledge on the SSL topic. Here is my setup. I have (1) of Public Facing Domain on LB and (2) of Internal Domains on each Web Servers. Like: ...
1
vote
0answers
210 views

Creating Self signed certificate for tomcat 6

I am trying to configure self signed certificate for our tomcat server. For that initially I created the keystore certificate file using keytool . The command I tried for this is keytool -genkey ...
1
vote
0answers
407 views

Redirect loop with Nginx as reverse proxy and Yii

I've been reading another similar issues and changing some things in my Nginx configuration, but no one worked :/ When I'm trying to access to a specific page at my site, it leads me to a "redirect ...
1
vote
0answers
169 views

Export and import ssl certificate from cpanel to self manage hosting

I have moved my server from cpanel managed hosting to nginx-centos server. I have only command line to manage my server. I need to export and import the ssl certificate. All the tutorials that I have ...
1
vote
0answers
151 views

Missing dependencies in VMware install?

I'm in the process of setting up my HP thin client with Fedora 20 (already done) and using VMware view client on it. I've completed most if not the whole installation except the condition that the ...
1
vote
0answers
301 views

Make SSL certificate trusted in browser via SSL Bump Squid

my goal is to insert custom HTML injections in HTTPS pages. I've setup Squid with SSL Bump. I generated a self signed certificate. With this setup I'm getting client side warnings that the ...
1
vote
0answers
2k views

cipher suites and disabling weak ciphers in JBoss

Our security audit report says that a number of our JBoss EAP 5.0 servers (on RHEL 6.x) has weak ciphers enabled. Upon doing some research, I found a .jar file (from ...
1
vote
0answers
169 views

Please help diagnose very slow Remmina session for VirtualBox VM

I'm using Remmina 0.9.99.1 with CrunchBang VMs on a remote server (VirtualBox 4.3.4 on Debian 7.2.0 x64). I'm using RDP with TLS security, and connect through a UDP-mode VPN. With freshly-installed ...
1
vote
0answers
240 views

Ubuntu 12.04 apache2 site shows index of instead of actual site on redmine

I have an Ubuntu 12.04 server that has a successful redmine install on it. I have been using redmine on it for a while, but when I tried to set up the SSL cert using this method, ...
1
vote
0answers
262 views

Is SMTP over SSL possible in the Balsa email client?

In Balsa 2.5.1 is it possible to connect to SMTP with port 465 with SSL? The IMAP setup has an SSL option which disables the TLS choices, but I do not see anything similar when setting up SMTP. I ...
1
vote
0answers
610 views

ngircd / xchat SSL issues

I'm trying to setup a ngircd IRC server on Fedora 18 (which was installed using yum), but I'm having some SSL issues. I can connect to the server locally and remotely if I choose to "accept invalid ...
1
vote
0answers
505 views

How to add my own created certificate authority to system trusted repositories

I was told that I can add my created CA to trusted repositories/authorities in my system instead of adding it from browser and configuring in in ssl.conf. Yet I can't find anything similar on the ...
0
votes
0answers
15 views

How do I get a manifest to run from my Puppet Master server to a Puppet Agent node?

I am trying to run a Puppet manifest for the first time on two new servers. But I keep getting errors. I recently set up two CentOS v7 servers. They have passwordless SSH between them. Ports 22, ...
0
votes
0answers
10 views

Apache 2 Debian SSL Certification not exist

I'm not really good with Apache and that is the reason why I'm writing to you. I have installed a web server in SSL following some indication from the software vendor. When I restart the service I ...
0
votes
0answers
9 views

Apache and SSLVerifyClient

Please excuse any dumb statements regarding this. I am very new to Apache and to HP-UX. I am a SQL Server DBA and ended up on this project. I am working to try and implement SSL with Client Verify ...
0
votes
0answers
34 views

TLSv1.2 support in CentOS 5.8

Right now I can't access HTTPS site from PhantomJS headless WebKit browser because of TLSv1.2 In my CentOS 5.8 I have following OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 verison installed. I think I ...
0
votes
0answers
28 views

How do I add self-signed certificate to trusted list in Mageia

I am trying to add self signed certificate for my repository into trusted list in Mageia 5. But when I execute sudo urpmi.addmedia name repo_link I get ...retrieving failed: curl failed: exited with ...
0
votes
0answers
284 views

`lftp` does not connect to FTPS (ftp over ssl)

I have trouble in connecting lftp with ftps (ftp over ssl, not sftp!) server (FTP Server Ultimate (PRO version).) running on Android phone. Technical details: Linux part. Following : ...
0
votes
0answers
66 views

fetchmail: Missing trust anchor certificate:

I try to setup fetchmail on mac for checkdomain.de and created a certificate .pem file in the cert directory of ssl by copying certificate from running this command: openssl s_client -connect ...
0
votes
0answers
56 views

SSL installation on apache2 / debian

So I have a debian wheezy installation where I someone started to install SSL but gave up and so I'm here to finish the task. problem - when accessing with http (port 80) - all is working. When ...
0
votes
0answers
20 views

Does postfix support MySQL connections over SSL

I have a postfix server and a MySQL database server. I setup MySQL SSL and have it working successfully. I can connect from postfix to mysql with the user requiring SSL. The problem I have is, when I ...
0
votes
0answers
78 views

Why does SSL negotiation fail on Linux? (Asus P5S-MX) (but worked on Windows7)… FIXED, but UNRESOLVED

Can anyone give me hints to why the web requests fail in these wireshark/tcpdump traces ? (and perhaps a hint why a Linux distro would start with SSLv3 as starting point) I am noob when it comes to ...
0
votes
0answers
48 views

RewriteRule ^/(.*) http://127.0.0.1:5050/$1 [L,P]

What is the full meaning of following line - RewriteRule ^/(.*) http://127.0.0.1:5050/$1 [L,P] There are three application both running by python on ubuntu 14.4. they are visible as below link ...
0
votes
0answers
40 views

check_nrpe ssl couldnt complete handshake, in both master and client server it works fine individually

I am getting this check_nrep ssl couldnt complete handshake erro in master server when i try executing the below command. /usr/local/nagios/libexec/check_nrpe -H 10.192.122.234 10.192.122.234 --> ...
0
votes
0answers
2k views

Cannot send mail to gmail account using ssmtp

I have the following ssmtp.conf file: root=test@gmail.com mailhub=smtp.gmail.com:587 hostname=ed424cef9b52 UseTLS=Yes UseStartTTLS=Yes AuthMethod=LOGIN AuthUser=test AuthPass=test ...
0
votes
0answers
1k views

libssl undefined reference to symbol 'SSL_load_error_strings@@OPENSSL_1.0.0'

With the following CMakeLists.txt (I tried to snip it AMAP) https://gist.github.com/pbertoni/29200833dc562ab6ee2c I got this error from make at linking time: /usr/bin/ld: ...
0
votes
0answers
161 views

OpenVPN TLS Error

I'm having trouble getting OpenVPN to work. I have installed and configured OpenVPN on my centos machine and it seemed to be going fine. I followed the instructions in the following link ...
0
votes
0answers
36 views

Enable TLS-SRP for, say, courier-imap

I want to use TLS-SRP for the services that I run on my server, because I don't want to leak credentials, not even on the server's disk. There are several articles on setting up TLS-SRP either with ...
0
votes
0answers
749 views

open ssl client giving error routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188:

On connecting to my application (a ssl server) by using command openssl s_client -host 127.0.0.1 -port 5028 -cipher EXPORT -debug -state I am getting error like CONNECTED(00000003) ...
0
votes
0answers
650 views

Cant use https on localhost

I am unable to use https on my localhost testmachine. I cant figure out the problem on my own so here is what i did: I placed the following to files in sites-available : 000-default.conf ...
0
votes
0answers
149 views

Sign a soap message from a JKS dynamically using Python Unix

I am currently calling a webservice using Curl command from unix . I have a requirement that I have to dynamically message sign the soap request every time I make a call to the webservice using my ...
0
votes
0answers
5k views

CentOS 7 httpd failed to make connection with backend

In a CentOS 7 server with apache httpd 2.4 set up as an ssl reverse proxy for tomcat, I am getting an error indicating that httpd is not able to connect with tomcat. How can I resolve this error so ...
0
votes
0answers
28 views

Apache 2: SSL installation & getting an example website running

I'm really stuck here and this is an assignment. I'm using "CentOS Linux 7". If anything I say doesn't make sense, I'm pretty much a noob. First off, I did yum install mod_ssl openssl. Are there ...
0
votes
0answers
115 views

Deleting ssl.conf a problem in apache set up?

In a desperate attempt to stop warnings from a free ssl cert I set up a while back and not knowing how to undo it I ended up deleting my ssl.conf file in the etc/ssl folder but now I am wondering if ...