Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [tls]

Transport Layer Security is a cryptographic protocol for encrypting and authenticating network communications, and replaces SSL. It is commonly used to secure Internet protocols such as HTTP.

573 questions
0
votes
1 answer

How to update libssl for TLS_FALLBACK_SCSV vulnerability on nginx configuration?

I can't get the TLS_FALLBACK_SCSV to work when testing on SSLabs, keeping me from an A+ rating. Seems it an issue of libssl, not nginx configuration. I have updated to OpenSSL 1.0.1k 8 Jan 2015, but still it fails. (Have also disabled…
knutole
  • 243
  • 2
  • 11
0
votes
1 answer

How to proxy requests from Nginx to SSL server

My curl request looks as follows: curl --header "Authorization: Basic BASE_64" https://example.com --tlsv1 -k (I need to explicitly provide TLS and skip verification) and it works. I'd like to setup nginx to act as middleware and handle…
Kamil Lelonek
  • 113
  • 1
  • 7
0
votes
1 answer

Enabling TLS1.0? Cannot communicate securely with peer: no connection encryption algorithms

For over a year I have been running a photo based website that allows customers to order prints, which are subsequently fulfilled by a printing company. Orders are posted in XML format to a designated URL. Recently orders are not being posted and…
panoramic
  • 21
  • 1
  • 7
0
votes
1 answer

How to disable TLS v1 in Apache v2.2 (Openssl 1.0.1)

I’ve been asked to disable SSL v3 and TLS v1 on our web servers. But Apache reports: [error] No SSL protocols available [hint: SSLProtocol] when I include –TLSv1 in the SSLProtocol stanza below. If I remove –TLSv1 it works fine but TLS version 1 is…
Shaun McCullagh
  • 1
  • 1
  • 2
0
votes
0 answers

How to configure Coldfusion 10 CFLDAP to use TLS instead of SSL2

We are using CFLDAP to authenticate users from a remote system. The remote system has now shut down SSL 2 and 3 due to the POODLE issue. Is there a way to configure either Coldfusion or Tomcat to use TLS as the outgoing connection?
JamesS
  • 1
  • 1
0
votes
0 answers

GnuTLS error -15: An unexpected TLS packet was received

I have been trying to set up VSFTPd on my CentOS 7 machine, and I have been running into an issue when connecting through FileZilla. I keep receiving error -15 regarding the TLS packet. The following is my full FileZilla debug log. Status: …
J.W.F.
  • 338
  • 2
  • 4
  • 16
0
votes
1 answer

Ubuntu SSL connection with TLS connection error

I am using Ubuntu 12.04, installed at VirtualBox (Mac) using vagrant. I am not using any proxy server. In my company network, when I try curl -1vsS https://github.com/FGRibreau/doxx/archive/master.zip I get the following results: * About to…
forestclown
  • 945
  • 4
  • 15
  • 25
0
votes
1 answer

openssl s_client shows TLS working on ports 993,465, but mail clients time out on connection attempts

With the recent scares over POODLE, we have begun the process of changing everyone's connections to TLS, instead of SSL... While this process went smoothly for HTTPS, it seems that Dovecot & Postfix reject (or drop, rather - since the connection…
rm-vanda
  • 257
  • 8
  • 18
0
votes
1 answer

Tomcat 7 URL rewrite from other domain

On a tomcat 7 server, we've configured a https connector, the TLS certificate is valid for an URL like www.example.com . Now we want to change the A record of one of our subdomains (like foo.bar.com) to point to the tomcat server. How can I…
Mr.Radar
  • 133
  • 1
  • 6
0
votes
1 answer

LDAP Replica with TLS

I'm having trouble to run the replica LDAP with TLS, without TLS, all works !! Provider and Consumer are identical CentOS release 6.5 rpm -qa | grep…
Stefano Elmopi
  • 1
  • 3
0
votes
1 answer

Using self signed certificates with Tigase XMPP server

I am trying to use a self signed certificate, generated using http://docs.tigase.org/tigase-server/5.3.0/adminguide/#_server_certificates, to start the XMPP server. However, the server does not start logging the below mentioned exception error in…
Pratap Patil
  • 11
  • 3
0
votes
1 answer

Exim says "The request is invalid" during gnutls_handshake

I have Debian wheezy and setup Exim to listen to port 587, where users can authenticate using TLS. I'm testing it with Thunderbird 31.1.2. When I try to send a message, Thunderbird displays this: Sending of message failed. The message could not…
Antonis Christofides
  • 2,598
  • 2
  • 23
  • 35
0
votes
1 answer

Issues with LDAP authentication over SSL (ldaps)

I'm trying to setup an LDAP server with ldaps support. The server is hosted on ec2 and it has a domain name on route 53. I got an SSL certificate for the route 53 domain (say example.com). When i try to connect using ldaps from an ldap client, I get…
Ananth Ravi
  • 125
  • 4
0
votes
1 answer

How do I determine where an SSL certificate is being served from?

I am having the same issue described in this question: IIS 7 Still Serving old SSL Certificate I have replaced an old SSL certificate with a new one and completely removed the old certificate from the server. The poster above solved his issue when…
Adrian Hope-Bailie
  • 255
  • 4
  • 8
0
votes
1 answer

Nginx SSL Termination - How to encrypt data to client?

I've setup a Nginx as a HTTP load-balancer with SSL/TLS termination for apache webservers. My question is by using Nginx to terminate ssl how do I encrypt the data back to the browser/client. Does each apache server have to be configured to do SSL…
User Conscious
  • 13
  • 2
1 2 3
…
38 39