0
votes
0answers
13 views

nginx - ssl and www redirect configuration

this is related to: http://stackoverflow.com/questions/24538973/django-allowed-hosts-error-for-www-domain-and-ip-address i'm attempting to redirect www and non-ssl requests to ssl non-www domain for ...
1
vote
2answers
38 views

How to build a certifcate chain for ServerHello

I've been trying to put together a certificate chain. I have the private key (privatekey.pem) and CSR (csr.pem) that I submitted to the Certificate Authority/CA. I took the CA's certificate and put ...
0
votes
2answers
152 views

Why Firefox alert me about HTTPs “Untrusted” Connection on Positivessl - Comodo certificate?

For my new startUp I got a SSL certificate from Comodo.com. I did all the painful process and finally I was able to implement it on my AWS server (I'm running MEAN Stack). Now when someone visit my ...
-1
votes
0answers
8 views

My WordPress site SSL is in red crossed color and can't load at first time? [migrated]

I enabled ssl connection on my wordpress website. From Admin panel → settings → and changed both URL from http to https. Then added define('FORCE_SSL_ADMIN', TRUE); if ...
1
vote
1answer
32 views

What specific sequence of events can cause “SSL_ERROR_RX_UNEXPECTED_SERVER_HELLO” in Firefox?

I have a user that was visiting a site and received the following error in FireFox: Secure Connection Failed An error occurred during the connection to foo.foo2.com. SSL received an unexpected ...
0
votes
1answer
33 views

SSL Redirect in VirtualHost causing url to break

I recently configured by website to direct all traffic through https. I did this by modifying the vhost file to show this <VirtualHost *:80> DocumentRoot "/srv/http/example" ServerName ...
0
votes
1answer
76 views

Virtual hosting with nginx over SSL, without SNI (via a wildcard cert)

I'm trying to get https://survey.mediacru.sh to work without SNI. We have a wildcard cert and are using nginx as our http server. However, on browsers without SNI support (for example, the stock ...
0
votes
0answers
143 views

Why is SSL broken for one domain on one computer?

I've been having a strange issue, where I cannot connect to https://www.humblebundle.com. Plain HTTP works fine, as does https://humblebundle.com. These all redirect to the above address. I haven't ...
1
vote
1answer
48 views

Does Heartbleed pose a risk for past HTTPS communications?

Heartbleed exposes a threat where computer memory for a vulnerable could be exposed. Consider an adversary with access to all cipher text input and output of your server (ISP, government, local ...
3
votes
1answer
3k views

Does Heartbleed Bug in OpenSSL affect ALL SSL certs

Does the Heartbleed Bug in OpenSSL affect ALL SSL certs, regardless of where I purchased or if I self-cert? For example, if I bought an SSL certificate from GoDaddy and set this up on my server ...
0
votes
0answers
67 views

Nginx/SNI: Return 444 if there's no certificate available for a specific domain hosted on the same IP

I'm stuck with configuring nginx regarding SSL and SNI support. In order to simplify my case let's say I have two domains, foo.com and bar.com. I have only one IP and both domains are mapped to this ...
0
votes
0answers
22 views

My self signed certificates do not have organisation

I use the command openssl s_client -connect myServer.myCompany.be:2500 -showcerts > myServer.pem # it also works if you remove all but the base64 encoded key # and its surrounding comments If I ...
0
votes
1answer
40 views

What details would you view in a certificate to check if it is trustworthy?

I have a question need help: What details would you view in a certificate to check if it is a trustworthy website?
0
votes
0answers
90 views

Why the indicator for https condition at left side of URL bar alerted in yellow

Why the indicator for https condition at left side of URL bar alerted in yellow I would like to know why the indicator for https condition at left side of URL bar alerted in yellow even when I just ...
1
vote
1answer
22 views

What is the proper handling of an SSL request where SSL is not enabled?

Quick question. I have a server I am managing which does NOT use https. When I attempt to go to the website with an https url, I get a bizzarre error which is the result of the fact that I have more ...
0
votes
1answer
105 views

scramble https over http to avoid detection by Firewall

My campus has recently installed Fortigate Firewall and have started spoofing https certs. eg. Certificates appear to be invalid saying: "Google.com; verified by Fortinet CA" Is there a way to ...
1
vote
3answers
133 views

Serve all content via HTTPS, regardless of web server settings

I've got a server running on port 80 on a Mac. I'd like to also have the same content that's being served on port 80 available on port 443. I'd like to know if there's a command line way or an easy ...
5
votes
2answers
678 views

Prevent Internet Explorer from caching SSL client certificates

I use a particular HTTPS website, but I have to separate client certificates that I use to authenticate (sometimes I use one account, which requires certificate A and sometimes a different one, which ...
1
vote
0answers
786 views

Chrome and Outlook can only make secure connections when user account has admin privileges

I have a co-worker who is set up as an admin user under Win XP SP3 and I'm trying to switch her to being a restricted user. The short story is that when I switch her account to restricted, Chrome ...
1
vote
1answer
19 views

// Vs http:// when including remote content

My website content is served over SSL and my webpage uses Google Adsense. In The ad code the javascript file is included from: //pagead2.googlesyndication.com/pagead/js/adsbygoogle.js I would just ...
1
vote
0answers
52 views

Apache configured for HSTS, but SSLLabs/Chrome not acknowledging

I'm setting up a webserver and I've been checking it against SSLLabs and Chrome 31 to make sure the security is up to snuff. However neither Chrome nor SSLLabs seems to believe that strict transport ...
0
votes
2answers
116 views

How can I tell whether PFS is enabled?

I have kinda 2 questions.. first, is this setting considered "secure" ? Second, how do I tell whether perfect forward secrecy is enabled? ssl_session_timeout 5m; ssl_protocols TLSv1 ...
0
votes
0answers
48 views

All https requests are goes as TLS (windows 7 64bit)

I have installed a version of windows 7 64bit on my laptop. After it all software that are going to send request to https has failed because the OS are using TLS instead of SSL3. I find it because all ...
0
votes
0answers
264 views

Rails 2 and Ngnix: https pages can't load css or js (but will load graphics)

ADMISSION: i've posted this same question on stackoverflow, before realising it's probabaly better suited to superuser, but it kind of depends on the answer: If it turns out to be a problem in my ...
0
votes
0answers
20 views

Have a non-navigator program pass a SSL token connection

I'm installing a new workflow at my workplace and having some trouble to put solutions in place. We have a company VPN but don't want to have our subcontractors machine access to it. We would like to ...
0
votes
0answers
146 views

TLS-SRP ciphersuites support in browsers

i'm doing some research on how browsers support TLS-SRP (RFC5054). I know that TLS-SRP is implemented in GnuTLS, OpenSSL as of release 1.0.1, Apache mod_gnutls, cURL, TLS Lite and SecureBlackbox. I ...
0
votes
1answer
160 views

Multiple websites on one server/IP; only one with SSL

I recently acquired an SSL certificate for my primary site (https://wemarsh.com/). It works great, and I've even set up an .htaccess rule so all traffic on that site is encrypted. (I'm running ...
1
vote
1answer
148 views

Intermediate SSL Cert

I have an SSL certificate that is self-signed, and therefore uses an intermediate certificate. I am using Node.js and returning both the certificate as well as the certificate chain which includes ...
1
vote
4answers
2k views

Custom Protocol Handler not working in Chrome on SSL page

I've successfully created and registered a custom protocol handler in my web application and it's working fine in all browsers. There's the initial warning dialog about launching an external ...
0
votes
1answer
203 views

What I must do to get TLSv1.2 support in Google Chrome 30?

Here one can read that Google Chrome 30 support TLSv1.2, but I can't access a server using it on Ubuntu 13.04. The server just support TLSv1.2 and have cipher TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 ...
2
votes
1answer
2k views

Firefox, error when accessing https url

I'm connected through a public wifi hotspot. No problem when using IExplorer. When I use Firefox, I obtain the following error message after asking for any https url, as for example ...
0
votes
1answer
2k views

How to search non ssl google? [duplicate]

Even when I visit nosslsearch.google.com I ultimately get redirected to https://www.google.com. Why is this? (I'm not signed in to google, and I'm entering these in the urlbar, not the search ...
0
votes
1answer
164 views

Pages don't load after installing a certificate on tomcat, restart required

I posted this question before but not in the correct forum. I have configured tomcat7 to use SSL and have made it point to a keystore. The keystore has a self signed certificate by default. There are ...
0
votes
1answer
2k views

Redirect incoming https to local ip with iptables

I have a router with 1 network interface (eth0, public ip) and an alias for eth0:0, local ip 192.168.1.1. I want to redirect all incoming https (443) traffic to another server. I tried it with ...
0
votes
0answers
336 views

501 Not Implemented error

I'm trying to setup WAMP to act as a local server and setup ssl so that I can develop facebook applications. But when I open my localhost over https and try to open the project the .js and .css files ...
0
votes
0answers
57 views

Fiddler fails with some ssl websites

Running Fiddler2 to debug http, I've noticed some https connections no longer work with it - ie, https://google.com or https://facebook.com. Some other https sites still work. I thought I read about ...
1
vote
0answers
35 views

How to only accept certificates issued by user-specified CA per domain?

Question Is it possible in Chromium or Firefox to only accept SSL certificates issued by a user-specified CA for a specific domain? Background When you have set up your own certificate authority ...
0
votes
1answer
294 views

Access HTTPS from different port

While web browsing, how do you redirect HTTPS URLs to a port other than the standard 443? Due to Windows XP's inability to handle name-based hosting with SSL, I'm forced to remap port 443 to a unique ...
4
votes
2answers
4k views

Why does Chrome always redirect me to https://www.google.com

Whenever I enter "http://www.google.de" (or any other google domain) in the addressbar, it is automatically replaced by "https://www.google.de". This happens regardless of beeing logged in with my ...
1
vote
0answers
813 views

Establish https on nonstandard port

I'm trying to estamblish https on port 55434 (different than standard 443). My nginx configuration looks like this: server { server_name example.org; listen 55434 ssl; ssl ...
0
votes
1answer
226 views

Using HTTPS with a squid proxy

I have a squid proxy set up on a few different servers. I am behind it on most applications (firefox, other apps that allow proxy config, etc). right now I'm not using https, and if I look in ...
31
votes
2answers
2k views

Why do some websites show the company name next to the URL?

Some websites show the company name next to the URL (in Chrome) and some don't. How do I set this up for my website? Is there a reason why or why I wouldn't want to do this?
0
votes
3answers
1k views

How ISP sees the HTTPS traffic? [duplicate]

If I am visiting a https url say https://www.youtube.com/watch?v=7HKoqNJtMTQ. What exactly my ISP will see ?
0
votes
0answers
271 views

Webdav between a OS X Server (self-signed certificate) and Windows 7?

Problem data: I have two freshly installed OS X Server 10.8.2 and Windows 7 SP1 (all updates to date). A self signed certificate on the OS X Server generated automatically and working for the exact ...
0
votes
2answers
117 views

Can SSL connection send my IP address to the host?

I don't have enough information about the difference between HTTP and HTTPS, but can an HTTPS request send my IP address to the host and store it? What are the kinds of data that are being ...
0
votes
1answer
42 views

65K ports and SSL? [closed]

People connect to bank using SSL. Bank is opening its 443 port. but there is only 1 port of 443 , but it is a server so I guess he is using also the other ports. But that is means that it can only ...
1
vote
0answers
68 views

Using Apache as a debug proxy for https traffic

I know that I should be using mitmproxy (or Charles, or Fiddler, or Burp Proxy), and that I can use Squid, but is it possible to use Apache to debug out going https traffic from my computer? That is, ...
0
votes
0answers
592 views

Iptables - having trouble opening port 443

I am attempting to set up https, but I am having difficulty opening that port. Nmap scan report for localhost (127.0.0.1) Host is up (0.000073s latency). PORT STATE SERVICE 443/tcp closed https ...
10
votes
3answers
19k views

The certificate is not trusted because no issuer chain was provided

Could anyone explain the meaning of this error message in plain English? Should I add an exception or I should not continue on this website? Technical details: the URL is here, the browser is ...
13
votes
3answers
10k views

How can I disable SSL (https) google search in FireFox?

I know that Firefox 14 has enabled Secure Sockets Layer (SSL or https) search for its Google search plug-in. How can I disable it? Thanks,