Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [ssl]

SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.

SSL and its successor - TLS - is primarily used to encrypt the connection between two applications at the presentation layer. It is most often used to secure websites in the form of HTTPS protocol but can also be used for other protocols and applications.

7024 questions
10
votes
1 answer

How to generate a pem certificate? in an easy way, for testing

A third-party app I have requires a *.pem certificate to be able to open a wss connection. How can I generate a *.pem file, keeping in mind that I need that only for testing, therefore I want an easy, not necessarily a really secure way to do…
Raj
  • 129
  • 1
  • 1
  • 6
10
votes
2 answers

How do I setup multiple subdomains with their own certificate using nginx?

Unless every answer that I've read was plain wrong, SNI should make it possible to do what I want, yet every guide tells me to do exactly what I'm doing. And yet nginx is serving the wrong certificate so I'm clearly doing something wrong. ❯ sudo…
Wayne Werner
  • 739
  • 4
  • 15
  • 27
10
votes
1 answer

Trying to get 100% in ssllabs.com key exchange

I wanted to know what steps are needed to get 100% on every category in ssllabs.com. I am aware that this could lead to problems in older systems, but I dont care. My letsencrypt.org certificate uses 4096 bits. This is the best score I could get…
feedc0de
  • 269
  • 1
  • 2
  • 9
10
votes
1 answer

nginx redirect based on domain name

I have a django web app which run on server with IP address xx.xxx.105.49 and domain as www.example1.com Below is my nginx configuration server { listen 80; server_name example1.com www.example1.com ; location / { return 301 …
Shiva Krishna Bavandla
  • 211
  • 2
  • 3
  • 9
10
votes
1 answer

Do Postfix and Dovecot support OCSP stapling?

Since I would like to set the "must staple" attribute in my SSL certificates, I was doing some research to find out if all of my services support OCSP stapling. So far I found out, that Apache does which I was able to confirm using SSLLabs.com. But…
comfreak
  • 1,501
  • 1
  • 21
  • 33
10
votes
2 answers

Can the same wildcard SSL certificate be used on different IP addresses and/or boxes?

Example: Wildcard SSL certificate for *.example.com installed on two different boxes. hostEU.example.com A 60.70.80.90 hostUS.example.com A 200.210.220.240 I assume this is a perfectly valid scenario, where the actual hostnames do not reside on…
mr-euro
  • 848
  • 3
  • 14
  • 31
10
votes
2 answers

Do web Servers send the certificate chain to the Web Client?

If my web server (latest Apache) has a valid (not expired or revoked) Verisign certificate chain (root -> intermediate -> leaf/my server), then does the server send the entire(?) chain to the client? Does the web client (e.g., latest Chrome) need to…
mellow-yellow
  • 441
  • 6
  • 15
10
votes
1 answer

Generate subdomain certificate from valid wildcard certificate

Giving the nature of SSL certificates and keys which can be chained, can I (myself) generate a certificate for a subdomain based on the main domain certificate and key which are issued for wildcard subdomains? The practice here is that I have to…
Tala
  • 267
  • 1
  • 3
  • 9
10
votes
4 answers

Webserver randomly serves different vhosts

We've got nginx running on Ubuntu Trusty. It serves several websites over https, running on one ip address. Randomly, although it seems slightly related to work load, sometimes single requests turn up on the wrong vhost. This leads to requests on…
Thom Wiggers
  • 292
  • 1
  • 13
10
votes
5 answers

Apache SSL error: Private key not found

I'm running apache on Ubuntu 14.04 and trying to implement SSL. Any help would be greatly appreciated. default-ssl.conf has: SSLCertificateFile /etc/apache2/ssl/domain.crt SSLCertificateKeyFile /etc/apache2/ssl/domain.csr When I restart…
mikesynan
  • 111
  • 1
  • 1
  • 5
10
votes
2 answers

HAProxy with SNI and different SSL Settings

I have HAProxy for my two sites, one of them public and one private. www.mysite.com private.mysite.com Atm, I'm using haproxy like this: frontend mysite_https bind *.443 ssl crt /etc/mycert.pem ca-file /etc/myca.pem verify optional no-sslv3 mode…
mohrphium
  • 645
  • 2
  • 9
  • 17
10
votes
4 answers

Getting SSL certificate chain from jabber server

trying to connect my jabber client (pidgin) to a jabber server with self signed certificate, I am getting an "unable to validate certificate" error. As it is not possible to tell the client not to validate the chain, I would like to get the…
ProfHase85
  • 501
  • 3
  • 6
  • 15
10
votes
4 answers

What's the best way to check if an SMTP server is SSL-enabled or not?

What's the best way to check if an SMTP server is SSL-enabled or not? Follow-up question: How do I make it SSL-enabled if it's not yet SSL-enabled. The OS is CentOS.
Randell
  • 1,173
  • 8
  • 18
  • 26
10
votes
4 answers

openssl s_client shows alert certificate unknown but all server certificates appear to be verified

I am troubleshooting errors establishing a secure connection to an EPP server. I issue the command below and see that all of the server certificates are verified, but still I get an error (highlighted in bold). Is there still a problem validating…
shampoopy
  • 103
  • 1
  • 1
  • 4
10
votes
2 answers

Cipher String Syntax in nginx

In an nginx configuration file, you might configure a list of SSL ciphers like this ssl_ciphers HIGH:!aNULL:!eNULL:!LOW:!ADH:!RC4:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS; What's the syntax of this cipher string? That is, I know (or think I…
Alana Storm
  • 458
  • 5
  • 16
1 2 3
…
99 100