Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [tls]

Transport Layer Security is a cryptographic protocol for encrypting and authenticating network communications, and replaces SSL. It is commonly used to secure Internet protocols such as HTTP.

573 questions
0
votes
1 answer

FTPS connection stalled on TLS initialization?

I am very good with an HTTP server, but I am new to FTP. I'm trying to configure a FTPS connection and I have listen set to port 990. But FileZilla client connection always hangs up on TLS initialization and then times out. Any suggestions on…
nkcmr
  • 271
  • 1
  • 4
  • 11
0
votes
1 answer

How to force Windows Server to accept only SSLv3 connections when using HTTPS?

I want to reproduce some production issue. For this purpose I need to configure my test Windows Server 2008 R2 to reject TLS connections and accept only SSLv3 connections when exposing IIS hosted web services over HTTPS. How can I do that?
Ladislav Mrnka
  • 227
  • 4
  • 11
0
votes
1 answer

Configuring sendmail to only use starttls in client mode

Is it possible to configure sendmail so that it will only connect to a remote smtp server when STARTTLS is offered there? I so - how do I do it?
user58292
0
votes
1 answer

How to generate new CSRs for TLS use in sendmail?

SendMail 8.13.8 | CentOS 5.x Hi Guys, I'm using ca-signed TLS certificates on my sendmail server and they are up for renewal soon. Our new CA doesn't like our old CSR so I need to generate a new CSR. Can someone point me to the procedure for doing…
Mike B
  • 11,871
  • 42
  • 107
  • 168
0
votes
3 answers

Secure email routing

We have relationships with some banks that are trying to implement some secure email. Is there any method that would force the server to send emails via TLS when sending email to a specific domain? This is a cpanel/WHM server. We basically need to…
Jestep
  • 643
  • 1
  • 7
  • 11
0
votes
1 answer

RST ACK over SSL in FireFox POST request

The original question is here. In short, for few users several POST requests hangs and are aborted after couple of minutes, when working over SSL (http is OK). What I'm asking here is an explanation of the WireShark log: No. Time Source …
queen3
  • 101
  • 2
0
votes
2 answers

SendMail TLS Certificate - Can it be shared for different hosts?

CentOS 5 | SendMail Can TLS certificates be shared between multiple sendmail MTAs? I'm using a CA-signed cert and would prefer to not purchase new certs for each additional sendmail host.
Mike B
  • 11,871
  • 42
  • 107
  • 168
0
votes
1 answer

Can't connect to vsftpd from Windows XP (FTPS)

All right, I've been working on this for days and I'm starting to tear my hair out: I'm running a vsftpd server v2.0.6 (+SSL, +TCP wrappers) on CentOS 5.4, but Windows clients can't seem to authenticate to it (lftp/cygwin, SmartFTP, and FileZilla). …
Sam
  • 219
  • 1
  • 2
  • 9
0
votes
1 answer

Exim force NON-TLS for a certain relay host

I have to relay mail to a certain host that advertises TLS but the remote host falls over. How can I add something to my router that forces the router not to use TLS. This is my route send_to_gateway: driver = manualroute domains = !…
John Oxley
  • 278
  • 1
  • 6
  • 19
0
votes
2 answers

Do I need to enable TLS support for postfix?

I need to send out notifications from my web-app and I've setup postfix as a null client on my server. So in my /etc/postfix/master.cf I have commented out the lines #smtp inet n - - - - smtpd #local unix - …
ErJab
  • 298
  • 4
  • 12
0
votes
5 answers

Configuring IIS7 for TLS 1.0 only

I have been tasked with configuring an IIS7 server to accept TLS 1.0 HTTPS connections only. I have come up with the following list of cipher suites which I have deduced are TLS…
tomfanning
  • 3,378
  • 7
  • 34
  • 34
0
votes
1 answer

Can't access Postfix TLS/SSL

I have set up my Postfix, with TLS/SSL, correctly. Every test on the machine itself (with telnet) runs fine. However, when I want to access the server from somewhere else, it fails. So port 587 and the rest is blocked for some reason, but I don't…
Jelle De Loecker
  • 1,094
  • 6
  • 17
  • 30
0
votes
3 answers

cPanel configuration appears to allow unauthenticated SMTP - how to fix?

One of my clients is using a cPanel-based Virtual Dedicated Server that appears to allow unauthenticated SMTP: bash$ echo EHLO | nc mail.clientscompany.com 25 ... 250-SIZE 52428800 250-PIPELINING 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP It…
ttsiodras
  • 413
  • 1
  • 4
  • 10
0
votes
1 answer

Using TLS-PSK on IIS

We are doing embedded device and due to low memory contraints and closed enviroment best option there would be using one of TLS-PSK ChiperSuites (pre shared key - no asymetric cryptography). As far as I see there is no TLS-PSK support in Schannel…
ralu
  • 123
  • 1
  • 6
-1
votes
1 answer

TLS SNI alternative in apache

Is it possible to serve different public certificates based on the port the client is connecting? I am aware that using SNI (in conjunction with NameVirtualHost) server will respond with appropriate certificate. I would like to be able aside from…
igobivo
  • 113
  • 2
1 2 3
…
38 39