SSL (the predecessor of TLS) is a cryptographic protocol designed to provide communications security over a computer network. It is the S in HTTPS, IMAPS, SMTPS, etc.

learn more… | top users | synonyms (1)

3
votes
1answer
25 views

mutt SSL unknown protocol - not able to connect

I am facing following situation. I am using arch linux I installed mutt the email client I followed the simple guidelines in the arch wiki to configure mutt to use imap For the simple config where ...
2
votes
1answer
2k views

Unable to locally verify the issuer's authority

I am not able to open any https URLs using wget or curl: $ wget https://www.python.org --2015-04-27 17:17:33-- https://www.python.org/ Resolving www.python.org (www.python.org)... 103.245.222.223 ...
1
vote
1answer
311 views

Mplayer fails to play network stream

I'm trying to play youtube streams with mplayer. On running mplayer -cache 2048 https://www.youtube.com/watch?v=USUA_1WVM8I, I get the following output and the video does not play at all. MPlayer ...
1
vote
1answer
81 views

When would CUPS use TLS?

I'm running Debian Testing on amd64, with the apt-listbugs feature that tells me if bugs are present before upgrading. Now the package libgnutls-deb0-28 has a serious bug to the effect that "CUPS ...
1
vote
1answer
503 views

svn: SSL is not supported

I am trying to check out code on a Unix box in the Z shell. When I run the following command svn checkout https://svn.example.net/svn/trunk/source build I get the following error message: svn: SSL ...
1
vote
1answer
3k views

How to remove SSL certificate?

I've been asked to remove certificates from some of our servers, but I don't know anything about httpd configuration. If I have one server where if I do this /usr/sbin/httpd -t -DDUMP_CERTS ...
1
vote
1answer
884 views

Exim4 as smarthost with SSL?

I want to use exim4 as a smarthost to send email using an smtp mail account over ssl. I've seen the hosts_require_tls option, but I need SSL and not TLS. How should I do this?
1
vote
1answer
574 views

Sendmail with TLS support changes FROM: address

I have multiple domains on one server and when sending email to server, which supports TLS, server changes FROM field to default domain ($j). What should i do (in .mc level please) to remain primary ...
0
votes
1answer
101 views

NGINX: 400 The plain HTTP request was sent to HTTPS port

i setup nginx for proxypass to docker registry, the protocol http works but if i set https i have: 400 The plain HTTP request was sent to HTTPS port This is my nginx configuration file: upstream ...
3
votes
0answers
216 views

Creating a signed subordinate CA for client certificates

I have a root self-signed CA which I've created for myself. With this CA (we'll call it country), I've created a server certificate and key for my webserver, nginx. I now would like to create a ...
2
votes
0answers
26 views

Adding nssdb certificate from an install script

I am trying to write an script (postinst for a .deb package) that will install a secure websockets (wss:) application and a certificate that allows access from the Chrome browser. The developer has ...
2
votes
0answers
56 views

Apache modssl returning random unwanted 200's rather than 404's

I have a fairly simple apache 2.4.7 config on CentOS 6.5 Linux and an active web server. No PHP or CGI, just some static pages and a proxypass to a different server tier. I'm doing some security ...
2
votes
0answers
363 views

NGINX Reverse Proxy - no user/password was provided for basic authentication

I've got Nginx set up on a RPi (raspbian)as a reverse proxy using SSL between the remote user and the Nginx instance. All seems to work well for two services mounted on the RPi (Shellinabox and RPi ...
2
votes
0answers
197 views

Apache2 'Server' header reports wrong openSSL version

Does anyone know where the Apache 'Server' header pulls the openSSL version from (file location/directory)? I am expecting openssl-1.0.1j but apache is reporting openssl-1.0.1g (system's openssl ...
2
votes
0answers
309 views

Problems uploading a file via WebDAV?

I've configured on my Linux server (SLES11) with IHS Webserver with WebDAV enabled. A file upload via curl is successful using a URL like this: $ curl --insecure --upload-file testfile.txt \ ...
2
votes
0answers
3k views

SMTP Auth - SASL on Dovecot, Postfix and CentOS 6.2 (and Open-Xchange)

I am trying to get open SASL to work on CentOS 6.2. I followed this tutorial: http://wiki.centos.org/HowTos/postfix_sasl I suspect it works perfectly for CentOS 5.x so all I really need is an update ...
1
vote
0answers
216 views

cURL does not recognize certificate

At our company they enforce a web proxy which breaks SSL connections and replaces the certificate by its own fake certificate. (To be precise it uses a proxy cert which is signed by the company cert.) ...
1
vote
0answers
71 views

Disabling sslv3 on samba4

How can I disable sslv3 on samba4 ldaps and just have tlsv1 enabled? I have not been able to find any documentation or guides on disabling this feature. This is in regards to the poodle ...
1
vote
0answers
81 views

sendmail and certs

I am trying to set up sendmail for our company on a CentOS 6.6-Release server. Specifically, I want to use SSL, so that passwords are sent encrypted. ls /etc/mail/ssl intermediate.crt ...
1
vote
0answers
63 views

VSFTPD cutted uploads

Installed VSFTPD v2.3.2 on a Wheezy. When I try to put anything my ftp client (filezilla v3.5.3) it sends the file by parts of 229376 bytes interrupted by deconnexion/reconnexion untill the en of the ...
1
vote
0answers
18 views

SSL (Hosted on LB) to be installed on the Downstream Apache Servers?

First, i have very basic knowledge on the SSL topic. Here is my setup. I have (1) of Public Facing Domain on LB and (2) of Internal Domains on each Web Servers. Like: ...
1
vote
0answers
147 views

Creating Self signed certificate for tomcat 6

I am trying to configure self signed certificate for our tomcat server. For that initially I created the keystore certificate file using keytool . The command I tried for this is keytool -genkey ...
1
vote
0answers
339 views

Redirect loop with Nginx as reverse proxy and Yii

I've been reading another similar issues and changing some things in my Nginx configuration, but no one worked :/ When I'm trying to access to a specific page at my site, it leads me to a "redirect ...
1
vote
0answers
108 views

Export and import ssl certificate from cpanel to self manage hosting

I have moved my server from cpanel managed hosting to nginx-centos server. I have only command line to manage my server. I need to export and import the ssl certificate. All the tutorials that I have ...
1
vote
0answers
126 views

Missing dependencies in VMware install?

I'm in the process of setting up my HP thin client with Fedora 20 (already done) and using VMware view client on it. I've completed most if not the whole installation except the condition that the ...
1
vote
0answers
227 views

Make SSL certificate trusted in browser via SSL Bump Squid

my goal is to insert custom HTML injections in HTTPS pages. I've setup Squid with SSL Bump. I generated a self signed certificate. With this setup I'm getting client side warnings that the ...
1
vote
0answers
1k views

cipher suites and disabling weak ciphers in JBoss

Our security audit report says that a number of our JBoss EAP 5.0 servers (on RHEL 6.x) has weak ciphers enabled. Upon doing some research, I found a .jar file (from ...
1
vote
0answers
139 views

Please help diagnose very slow Remmina session for VirtualBox VM

I'm using Remmina 0.9.99.1 with CrunchBang VMs on a remote server (VirtualBox 4.3.4 on Debian 7.2.0 x64). I'm using RDP with TLS security, and connect through a UDP-mode VPN. With freshly-installed ...
1
vote
0answers
172 views

Ubuntu 12.04 apache2 site shows index of instead of actual site on redmine

I have an Ubuntu 12.04 server that has a successful redmine install on it. I have been using redmine on it for a while, but when I tried to set up the SSL cert using this method, ...
1
vote
0answers
219 views

Is SMTP over SSL possible in the Balsa email client?

In Balsa 2.5.1 is it possible to connect to SMTP with port 465 with SSL? The IMAP setup has an SSL option which disables the TLS choices, but I do not see anything similar when setting up SMTP. I ...
1
vote
0answers
539 views

ngircd / xchat SSL issues

I'm trying to setup a ngircd IRC server on Fedora 18 (which was installed using yum), but I'm having some SSL issues. I can connect to the server locally and remotely if I choose to "accept invalid ...
1
vote
0answers
451 views

How to add my own created certificate authority to system trusted repositories

I was told that I can add my created CA to trusted repositories/authorities in my system instead of adding it from browser and configuring in in ssl.conf. Yet I can't find anything similar on the ...
0
votes
0answers
17 views

SSL installation on apache2 / debian

So I have a debian wheezy installation where I someone started to install SSL but gave up and so I'm here to finish the task. problem - when accessing with http (port 80) - all is working. When ...
0
votes
0answers
13 views

Does postfix support MySQL connections over SSL

I have a postfix server and a MySQL database server. I setup MySQL SSL and have it working successfully. I can connect from postfix to mysql with the user requiring SSL. The problem I have is, when I ...
0
votes
0answers
48 views

Why do SSL negotiation fail on Linux? (Asus P5S-MX) (but worked on Windows7)… FIXED, but UNRESOLVED

Can anyone tell give me hints to why the web requests fails in these wireshark/tcpdump traces ? (and perhabs hint to why a linux distro would start with SSLv3 as starting point) I a noob when it comes ...
0
votes
0answers
27 views

RewriteRule ^/(.*) http://127.0.0.1:5050/$1 [L,P]

What is the full meaning of following line - RewriteRule ^/(.*) http://127.0.0.1:5050/$1 [L,P] There are three application both running by python on ubuntu 14.4. they are visible as below link ...
0
votes
0answers
19 views

check_nrpe ssl couldnt complete handshake, in both master and client server it works fine individually

I am getting this check_nrep ssl couldnt complete handshake erro in master server when i try executing the below command. /usr/local/nagios/libexec/check_nrpe -H 10.192.122.234 10.192.122.234 --> ...
0
votes
0answers
313 views

Cannot send mail to gmail account using ssmtp

I have the following ssmtp.conf file: root=test@gmail.com mailhub=smtp.gmail.com:587 hostname=ed424cef9b52 UseTLS=Yes UseStartTTLS=Yes AuthMethod=LOGIN AuthUser=test AuthPass=test ...
0
votes
0answers
458 views

libssl undefined reference to symbol 'SSL_load_error_strings@@OPENSSL_1.0.0'

With the following CMakeLists.txt (I tried to snip it AMAP) https://gist.github.com/pbertoni/29200833dc562ab6ee2c I got this error from make at linking time: /usr/bin/ld: ...
0
votes
0answers
125 views

OpenVPN TLS Error

I'm having trouble getting OpenVPN to work. I have installed and configured OpenVPN on my centos machine and it seemed to be going fine. I followed the instructions in the following link ...
0
votes
0answers
22 views

Enable TLS-SRP for, say, courier-imap

I want to use TLS-SRP for the services that I run on my server, because I don't want to leak credentials, not even on the server's disk. There are several articles on setting up TLS-SRP either with ...
0
votes
0answers
361 views

open ssl client giving error routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188:

On connecting to my application (a ssl server) by using command openssl s_client -host 127.0.0.1 -port 5028 -cipher EXPORT -debug -state I am getting error like CONNECTED(00000003) ...
0
votes
0answers
328 views

Cant use https on localhost

I am unable to use https on my localhost testmachine. I cant figure out the problem on my own so here is what i did: I placed the following to files in sites-available : 000-default.conf ...
0
votes
0answers
90 views

Sign a soap message from a JKS dynamically using Python Unix

I am currently calling a webservice using Curl command from unix . I have a requirement that I have to dynamically message sign the soap request every time I make a call to the webservice using my ...
0
votes
0answers
91 views

Using Varnish + Nginx Forcing SSL

i'm using Varnish and i would like to force communication only with SSL. My server is Nginx. What's the best way to do so? Or the easiest? I read about Pound proxy and installed it but guides were too ...
0
votes
0answers
64 views

Verifying SSL key and certificate files for a web server

I want my web users to upload their own SSL certificate files for their domains. I have the configuration environment all set up. But unfortunately, if Apache web server finds a broken SSL certificate ...
0
votes
0answers
3k views

CentOS 7 httpd failed to make connection with backend

In a CentOS 7 server with apache httpd 2.4 set up as an ssl reverse proxy for tomcat, I am getting an error indicating that httpd is not able to connect with tomcat. How can I resolve this error so ...
0
votes
0answers
24 views

Apache 2: SSL installation & getting an example website running

I'm really stuck here and this is an assignment. I'm using "CentOS Linux 7". If anything I say doesn't make sense, I'm pretty much a noob. First off, I did yum install mod_ssl openssl. Are there ...
0
votes
0answers
128 views

Can Postfix inbound TLS (smtpd) use a policy map to not enforce TLS for some hosts?

I have a Postfix server running submission on port 587 with mandatory TLS and SASL authentication. I want to allow clients on localhost to connect without using TLS and without authenticating. By ...
0
votes
0answers
96 views

Deleting ssl.conf a problem in apache set up?

In a desperate attempt to stop warnings from a free ssl cert I set up a while back and not knowing how to undo it I ended up deleting my ssl.conf file in the etc/ssl folder but now I am wondering if ...