Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [tls]

Transport Layer Security is a cryptographic protocol for encrypting and authenticating network communications, and replaces SSL. It is commonly used to secure Internet protocols such as HTTP.

573 questions
0
votes
2 answers

postfix - TLS/SSL error when receiving emails

I can receive emails from gmail, however certain other servers are getting rejected when they try to send emails to my server Here are the logs when I tried to get authentication from startcom.org as well as some other server attempting to send me…
Brandon Nguyen
  • 85
  • 2
  • 9
0
votes
2 answers

Proftpd with TLS not working on CentOS

Since last month update, Proftpd with TLS not working anymore on Centos 5.11 and Centos 6.7. While trying to connect with FileZilla client, it gets stuck at "Initializing TLS..." Installed Openssl and proftpd version on CentOS…
Minhaj
  • 177
  • 4
  • 14
0
votes
0 answers

Nginx: OCSP and client certificates

I have a working Nginx setup with OCSP stapling configured. Now I want to add client certificate authentication for a number of URLs. So I added a ssl_client_certificate statement that points to the CA certificate we use for the restricted URLs…
Marcus Ilgner
  • 21
  • 1
  • 7
0
votes
0 answers

One Virtual Host acting differently than others

I have three virtual host sites enabled on apache2 all using TLS/SSL certificates. I want to redirect the non-ssl (http) to the ssl (https). I am using a redirect in each virtual host. All three .conf files are exactly the same as…
I'm Root James
  • 212
  • 3
  • 13
0
votes
2 answers

NGINX is TLS 1.2 only due to PCI DSS certification. How can I warn the others?

How do I redirect those browsers that do not support TLS 1.2 to a page that'll explain the situation to them.
JasonGenX
  • 522
  • 1
  • 5
  • 16
0
votes
1 answer

What are Best Practices for setting a https node server via a reverse-proxy without using Apache or Nginx

I am trying to get a Node https server accessed through a node proxy. I bought certificates and got a standalone https server working fine. Initially there were some hiccups because of multiple certs in one file but this post helped: …
Sunny
  • 381
  • 1
  • 6
  • 16
0
votes
3 answers

Did I install stunnel correctly?

Running Ubuntu 14.04 64-bit. apt-get install build-essential -y apt-get install libssl-dev -y apt-get install wget -y cd srv wget https://www.stunnel.org/downloads/stunnel-5.23.tar.gz tar -xzf stunnel-5.23.tar.gz rm stunnel-5.23.tar.gz cd…
Karl Morrison
  • 1,621
  • 4
  • 29
  • 43
0
votes
0 answers

Policy Enforcement Point (PEP) in Windows

We are supposed to be implementing a file-transfer solution between us and a third-party, which uses a dedicated private line between us and them, and FTPS (i.e. FTP over SSL/TLS) to transfer files. However, I am reading through the current…
jimbobmcgee
  • 2,675
  • 4
  • 27
  • 43
0
votes
1 answer

nginx on debian wheezy and TLS > 1.0?

Hi I already searched for some hours, but I only found solutions, where they had used older nginx/openssl-versions. My problem is: How can I activate TLSv1.2 in nginx in that way, the client will connect via TLSv1.2. Clients will only connect with…
gu471
  • 24
  • 3
0
votes
0 answers

Multiple SSL certificates in Apache with clients using different certificates

Our setup is like this. SOAP services are exposed and clients send requests to SOAP endpoints. Each node provides the SOAP services. There can be one or more (maximum 6) nodes as a cluster. Multiple clients can contact the system. A load balancer…
Nerdyme
  • 1
0
votes
0 answers

Haproxy Layer 4 balancing with TLS

We have ssl3 turned off in favor of TLS. Most the tutorials on https for layer4 support with haproxy, ie ssl passthrough, uses check-ssl or ssl-hello-chk. In our setup this will fail because we have ssl3 disabled. My question is how to do…
richv
  • 146
  • 2
  • 8
0
votes
1 answer

TLS for ldap and certificate

I have the httpd conf: LoadModule ldap_module modules/mod_ldap.so LoadModule ssl_module modules/mod_ssl.so LDAPTrustedGlobalCert CA_BASE64 /etc/openldap/certs/domenCA.crt ServerName domen.lan ServerAlias …
andrej
  • 117
  • 1
  • 7
0
votes
1 answer

Why don't I receive the emails forwarded by Postfix?

My desired Postfix configuration is to forward all incoming mails according to virtual aliases and be able to send outgoing mails via SMTP and TLS. Sending already works, but the forwarding does not. When I send a mail from myname@gmail.com to…
danijar
  • 403
  • 2
  • 4
  • 14
0
votes
0 answers

Squid proxy unable to use LDAP/S on CentOS 6

I've configured Squid proxy to authenticate against Active Directory. With plain LDAP, everything works as expected. However, when I try to use LDAP/S, I get these error messages: p11-kit: couldn't stat path:…
Python Novice
  • 351
  • 1
  • 5
  • 13
0
votes
1 answer

Exchange 2010 rejecting Amazon SES TLS with UntrusedRoot

Due to our network setup, when we moved our business last year we switched Exchange 2010 to use AWS SES to relay our outgoing emails. This has worked pretty well up until yesterday, when Exchange began to fail to make the TLS connection to SES with…
Machavity
  • 846
  • 10
  • 26
1 2 3
…
38 39