Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [ssl]

SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

SSL and its successor - TLS - is primarily used to encrypt the connection between two applications at the presentation layer. It is most often used to secure websites in the form of HTTPS protocol but can also be used for other protocols and applications.

7024 questions
18
votes
4 answers

Removing vulnerable cipher on Windows 10 breaks outgoing RDP

TrustWave's vulnerability scanner fails a scan due to a Windows 10 machine running RDP: Block cipher algorithms with block size of 64 bits (like DES and 3DES) birthday attack known as Sweet32 (CVE-2016-2183) NOTE: On Windows 7/10 systems running…
Zek
  • 568
  • 3
  • 10
  • 24
18
votes
4 answers

How to create a multi-domain self-signed certificate for Apache2?

I've got a little private webserver where I have several virtualhosts. I know that it's impossible to assign a certificate to each individual virtualhost, because the server finds out which virtualhost was requested only AFTER the SSL connection has…
Vilx-
  • 843
  • 4
  • 16
  • 25
18
votes
1 answer

Where is the private key after using certreq for CSR generation on Windows 10?

I tried to follow the website below for instructions on how to generate the CSR for my web server: http://www.entrust.net/knowledge-base/technote.cfm?tn=8649 However, it only generates the CSR. Where is the private key? I was told that the key is…
Chong Lip Phang
  • 285
  • 1
  • 2
  • 7
18
votes
9 answers

Nginx conflicting server name for subdomain

I currently have a vhost running on Nginx for foo.domain.com and everything works great. I created a new file for a new sub-domain I want to add called bar.domain.com. I use the same settings for both. When I restart Nginx I get Restarting nginx:…
JakeCowton
  • 283
  • 1
  • 2
  • 7
18
votes
2 answers

Is it possible to trust a certificate in windows, without trusting its root CA?

Is it possible to get windows to trust a certificate, without getting it to trust the root CA as a trusted root CA? say I have the following certificate chain, Dept-Root-CA Dept-Intermediate-1 Server-Certificate I want to trust the…
bkr
  • 865
  • 1
  • 8
  • 21
18
votes
2 answers

ApacheBenchmark ab - SSL read failed - closing connection

When I am running ab on my website I get a ton of these responses: SSL read failed - closing connection SSL read failed - closing connection SSL read failed - closing connection And some times it is successful. I am on a MacBook Pro 10.7.2. What is…
chantheman
  • 355
  • 1
  • 3
  • 8
18
votes
7 answers

For an intranet server would you buy a ssl cert or use a self signed cert?

We have a webservice that our application uses and the developers require https connections to the webservice. Since this is an internal webservice would you use a self signed cert?
Aaron Fischer
  • 499
  • 1
  • 6
  • 9
18
votes
4 answers

SSL Handshake negotiation on Nginx terribly slow

I am using Nginx as a proxy to 4 apache instances. My problem is that SSL negotiation takes a lot of time (600 ms). See this as an example: http://www.webpagetest.org/result/101020_8JXS/1/details/ Here is my Nginx Conf: user…
Paras Chopra
  • 543
  • 1
  • 5
  • 15
18
votes
5 answers

Cannot conect MySQL (error 2026) after upgrade to Ubuntu 20.04

I cannot connect to MySQL 5.7.27 running on CentOS 7 server after upgrade of my workstation to Ubuntu 20.04 LTS. I am connecting using command mysql -h -u -p and after entering the password I get error 2026: ERROR 2026…
yavor
  • 183
  • 1
  • 1
  • 6
17
votes
2 answers

Why not validate self signed certificates through DNS-record instead of letsencrypt

I was just wondering. We use a lot of SSL certificates. Nowadays, we almost exclusively use letsencrypt (thanks!). The bottom line of these certificates is, that proof of ownership of the domain name(s) on the certificate comes from the power to…
Jelmer Jellema
  • 321
  • 2
  • 8
17
votes
1 answer

Let's Encrypt certbot validation over HTTPS

Update: The original SNI challenge type has been disabled. There is a new more secure SNI challenge type with limited server support. SNI is not likely a suitable option for small sites. I have configured HTTP to allow /.well-known/ over HTTP and…
Daniel F
  • 353
  • 4
  • 16
17
votes
4 answers

Is an SSL Cert needed for redirects?

We currently have a website set to redirect to a new address (our client changed domain names, but wants the old domain to send people to the new site) in IIS 8.5 using permanant redirects found in the 'HTTP Redirect' feature for the site. The SSL…
Jeff
  • 323
  • 2
  • 3
  • 8
17
votes
3 answers

How to disable SSLv2 or SSLv3?

Anyone know how to disable certain SSL versions and only enable others in IIS 7.5?
user3386733
  • 179
  • 1
  • 2
  • 4
17
votes
2 answers

Prevent nginx from redirecting traffic from https to http when used as a reverse proxy

Here's my abbreviated nginx vhost conf: upstream gunicorn { server 127.0.0.1:8080 fail_timeout=0; } server { listen 80; listen 443 ssl; server_name domain.com ~^.+\.domain\.com$; location / { try_files $uri @proxy; …
Chris Pratt
  • 621
  • 1
  • 6
  • 11
17
votes
4 answers

Can Tomcat reload its SSL certificate without being restarted?

I have a background process that can update the keystore Tomcat uses for its SSL credentials. I would like to be able to have Tomcat reload this automatically without needing a manual restart. Is it possible to have Tomcat reload this without…
sdeer
  • 273
  • 1
  • 2
  • 5
1 2 3
…
99 100