SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

-2
votes
1answer
10 views

What are some SSL certificate for purchase out there? [on hold]

What are some recommendations for best SSL certs and host intrusion detection software packages to purchase?
0
votes
2answers
35 views

Man-in-the-middle proxy without any certificate errors?

I am working in school as IT engineer. We have legal order from our governmental ISP to collect logs about our users network behavior, to identify infected PC's and so on. I need to filter all ...
0
votes
0answers
21 views

Accept all out of date self-signed certificates

My work computer does not access the internet at all, ever. We have a web server that has an out of date certificate that is preventing me from accessing it programmatically with a POST request. I ...
1
vote
0answers
18 views

Get a server's SSL/TLS certificate using “openssl s_client”

I am trying to get the SSL/TLS certificate for one of our load balancers (Netscaler) using: openssl s_client -showcerts -connect lb.example.com:443 But it won't show me the certificate: CONNECTED(...
0
votes
0answers
7 views

Get notified when a certificate for one of my domains gets issued [on hold]

Since client transparency and certificate logs are widely in use now, can I, as a site owner, somehow subscribe to one of the certificate logs and get notified when a certificate for one of my domains ...
-1
votes
0answers
20 views

Decrypting TLS Browser Traffic With Wireshark - Body is still encrypted

I was trying to reverse engineer a protocol using wireshark. I followed this article and tried to decrypt TLS Browser Traffic using SSLKEYLOGFILE since decrypting using private key didn't work for me. ...
0
votes
1answer
17 views

Disable SSL for Google in Firefox

Since a couple of weeks I'm having problems with Google (Firefox 47.0 x64), specific with the SSL certificate. Every time I'm tried to load a Google page: Gmail, Search, Plus, Maps, Wallet, PlayStore ...
0
votes
0answers
12 views

Unable to generate certificate in Internet Explorer

I have a problem with Internet Explorer, I'm unable to generate a new certificate from a root one, every time I try to generate get a prompt which says. “Error in InstallResponse. Error Number ...
0
votes
1answer
21 views

SSL Cert only valid

Similar to Intermediate SSL Cert I have a router that I'm running a squid cache on. The thing is, everything is https nowadays, so I've enabed MITM SSL filtering to cache https. I'm fairly certain ...
0
votes
1answer
11 views

File Client: Permissions?

So on a linux server, I was recently made as an admin, and I have writing rights to manage and write data on the server. However, I have to sudo su in order to do this. When I try to use an FTP ...
0
votes
1answer
22 views

SSL: CERTIFICATE_VERIFY_FAILED error in a docker container

I'm running into the following error message when I do easy_install pip: root@ff45b7b74944:/# easy_install pip Searching for pip Reading https://pypi.python.org/simple/pip/ Download error on https://...
-1
votes
0answers
18 views

How would I host an https site on intranet?

I can add a self signed certificate to a webserver to get ssl sites, however, self signed certificates are not validated by a CA and any webapplication that accesses them will get a nasty warning that ...
0
votes
0answers
16 views

Different document root for https version of site - cloudflare ssl

I'm having a site just issued a free ssl certificate. Which was installed automatically after changing dns. The site works fine for http version domain but when I try https domain it shows a cpanel ...
0
votes
1answer
23 views

Certificate verify failed, using fresh Plesk installation

I have a fresh installation of Debian 8.1 Plesk 12 Plesk installed Postfix and Dovecot and added a default certificate for Postfix. I'm running PHP 5.6 for my website. New in 5.6, PHP verifies ...
3
votes
1answer
42 views

Web WhatsApp doesn't show behind proxy

I have proxy with SSL bump configured. While this is on, WhatApp we doesn't show, why?
0
votes
2answers
40 views

Can you use an SSL certificate provided by LetsEncrypt.org to digitally sign pdfs?

Let's say that I have an SSL cert (x.509 cert) that I use to provide my personal website via HTTPS. Is it possible to use this cert to digitally sign pdfs in Acrobat DC which come from me? Would I ...
1
vote
1answer
57 views

SSH from Windows (Putty) to Ubuntu via HTTPS

I'm trying to connect to Ubuntu using Putty via HTTPS (SSH via port 22 is blocked via the firewall). I read so many tutorials and sites about SSL, SSH, tunneling, ... that I'm kind of confused now. I ...
-2
votes
2answers
40 views

How do I know if my Windws 10 version (Home) edition has SSL support?

Context: I am tryin to install MongoDB and saw there are seperate installers for Windows 2008 or later with SSL support and one without SSL support. My machine runs 64-bit Windows 10 Home edition. "...
0
votes
1answer
10 views

is calling remote bash script via https which then call another bash script with http considers secure?

It might be a silly question but I will go for it anyway… due to some backward compatibility I only adjusted part of the calling script chain. there is a reason why I call it twice but let's leave it ...
-1
votes
2answers
36 views

Can i use a gethttpsforfree to create a valid certificate for locahost or intranet domain?

I have a webapp running in a public domain using a ssl certitifcate provided by https://gethttpsforfree.com/ It works like a charm. The problem is that sometimes i need to install this webapp ...
0
votes
0answers
54 views

SSL Certificate error in Internet Explorer but not Firefox, Chrome or Edge

I have installed security certificates on 2 websites, which work perfectly in Firefox, Chrome and Edge but when accessing in Internet Explorer (10 and 11), users get the "There is a problem with this ...
0
votes
1answer
19 views

AppId or GUID of a Running Service

My instructions are to The default port used by a Performance Center host service is 8731. To configure SSL on a host for port 8731, refer to the Microsoft Web Site: How To Configure a Port with an ...
0
votes
0answers
10 views

Signing OpenVPN server and clients certificates by Samba4 DC auto-signed CA.pem

I installed Samba4 and configured it to be domain controller, and it auto generated ca.pem, cert.pem, key.pem. And now I want to use the same CA of samba to sign the new certificates (maybe generated ...
1
vote
1answer
119 views

Can't connect to https on ubuntu - “Unknown SSL protocol error”

I can't seem to connect to a specific server over SSL from our Ubuntu servers. Locally, on my Mac, it works flawlessly. The server address: powerschool.spokaneschools.org curl -v https://...
0
votes
1answer
25 views

Nginx DDoS SSL Cert

Ok, So I have a Nginx reverse proxy that is blocking this incoming Layer 7 DDoS. The problem is, my outgoing is massive the only assumption I have come to is that my server is sending the SSL ...
0
votes
0answers
16 views

SSL site hosted in IIS shows certificate, but no such certificate is installed

I have a problem that is really leaving me scratching my head. I'm hoping it's something simple I've overlooked. I need to replace an expiring SSL server certificate on an IIS 7.5-hosted site on a ...
0
votes
2answers
89 views

CentOS 7 - Won't accept any SSL certificates

I have a problem on my CentOS 7 box doing anything that requires SSL, including curl, wget or updating via YUM. The output is always the same: [root@localhost ~]# curl -I -v https://google.com * ...
0
votes
0answers
22 views

Check Outlook 2007 Imap/Smtp ssl certificate details

Normally you can click on the browser url and check ssl certificates details. How to do this on Outlook 2007 for the certificates used by an imap or smtp connection over ssl ?
0
votes
0answers
19 views

vsftpd behind Router (passive mode) not working properly

I am currently running a vsftpd server behind a router. But unfortunately it is not working properly, I can connect, I see the files and sometimes I can download and upload but sometimes it just says ...
0
votes
1answer
97 views

Apache SSL error: Re-negotiation handshake failed: Not accepted by client?

I protect my wordpress administration by a client certificate. I had a trouble in march after upgrading from Wheezy to Jessie but it has been solved and everything ran well until my letsencrypt ...
0
votes
1answer
76 views

How to make a self-signed certificate trusted?

I've created a self signed certificate on my Windows 10 PC and would like to see it trusted by the web browsers on the same machine. To do this, I've added the certificate to the 'Trusted Root ...
0
votes
0answers
26 views

joomla https: Error 310, too many redirects

I have joomla 3.5.1 running under apache 2.4 behind an nginx reverse proxy. It works fine without SSL. My nginx does SSL fine, and then proxies the requests (in plain HTTP) to apache. I followed the ...
0
votes
0answers
82 views

Access QNap Web Dav via Map Network Drive

When trying to connect to my WebDav server I get "The mapped network drive could not be created because the following error has occurred: Mutual Authentication failed. The Server's password is out of ...
0
votes
1answer
18 views

How to use a certificate authority (CA) with a separate key file for SSL bumping in squid 4.x?

According to the squid article on SSL bumping one uses the cert parameter of the http_port [port] ssl-bump directive in order to specify a CA which has it's key included in one file (protected by OS ...
0
votes
0answers
20 views

Occasional SSL problems on private WiFi

Once in a while I would get a problem like this: It happens to any website (e.g., even in Gmail). After a few hours the problem's gone even if I didn't do anything to fix it. What could be causing ...
0
votes
1answer
245 views

How do I deal with NET:ERR_CERT_AUTHORITY_INVALID in Chrome?

My work place intercepts SSL connections, looks at their contents, and then passes the data to and from my machine and remote hosts - a kind of man-in-the-middle attack. This is not uncommon in ...
0
votes
0answers
756 views

Replaying Client Hello from previous session

I am basically testing an SSL server. I need to capture the client hello and then replay the same client hello with exact same field values. Here are the steps that I performed- 1) Captured the client ...
1
vote
0answers
35 views

OpenSSL with added CA certificate on CentOS

So the problem is: I'm trying to add CA certificate on CentOS (on server) and check the working of SSL of one of my clients domain. The same thing works perfectly on Ubuntu: How do you add a ...
1
vote
1answer
35 views

Can it be found out, what websites/domains an SSL (pem) certificate approves of?

A (non-wildcard) SSL certificate can be issued to match multiple domains and subdomains, like mysub1.example1.com, www.example2.com, and many others, all in one certificate with the same private key. ...
-1
votes
2answers
39 views

Plesk backend with Letsencrypt

I have a debian server with plesk and letsencrypt (via plesk) installed. Is it possible to use these plesk-generated certificates which are normally only for the subscriptions/domains to secure the ...
0
votes
0answers
15 views

What happens when certificates created by Acrobat expire?

If I create a certificate using Adobe Acrobat to encrypt PDFs, I notice that the certificate has an expiration date (5 years after its creation date) when looking them up on Certmgr. My question is, ...
0
votes
0answers
85 views

OpenLDAP TLS negotiation failure ldap_start_tls: Connect error (-11) additional info: A TLS packet with unexpected length was received

I have tried to configure Openldap with TLS. I have an TLS certificates and configured with .ldif file and changed necessary configuration in ldap.conf file. I am using ubuntu 14.04 LTS operating ...
3
votes
0answers
555 views

How to set TLS protocols as default after applying KB3140245?

This is about instructions to Windows update KB3140245 on a 64-bit Windows 7 machine. Microsoft released this update some time ago that "allows users to change system-wide default protocols for ...
0
votes
1answer
25 views

Human readable SSL/TLS packets

If I have a protocol-analyzer/packet-sniffer, such as wireshark installed on a particular device.. (or in this case; tcpdump & tshark etc. on my smartphone..) ..should I be able to read ...
0
votes
0answers
48 views

Can't connect with TLS1.2/Client auth from IE/Chrome. Only works with Firefox

I have a client for which I'm developing an app. That app must connect to their server, which sits behind a NetScaler load balancer configured with TLS1.2 only and requires client certificate ...
0
votes
1answer
109 views

How do I access an https site that still uses RC4?

I have an old wireless router that I haven't needed to change the configuration on for years. Recently I ran into some issues with my network and needed to turn on it's dhcp server. When i went to ...
1
vote
2answers
180 views

Chrome ERR_SSL_PROTOCOL_ERROR on known working site

When I connect to https://www.feeguarantee.com, Chrome gives me an ERR_SSL_PROTOCOL_ERROR. Firefox gives SSL_ERROR_RX_RECORD_TOO_LONG. Edge gives some generic error. All other sites appear to ...
0
votes
0answers
14 views

Courier does not work with courier-ssl installed

I have been trying to enable SSL on my courier IMAP server running Ubuntu 14.04. I installed courier-ssl and courier-imap-ssl. Then the server stopped working completely, with an "authentication error"...
0
votes
0answers
16 views

SSL/TLS validation errors on requests

Every single website I try to access is giving me a certificate error. I've tried checking the system's time, but it's correct. Thanks.
0
votes
0answers
223 views

502 Bad Gateway with Nginx as proxy for Jenkins

I'm using Centos 7 with Nginx and a SSL from letsencrypt to use as a proxy for jenkins on the same droplet. Everything was working up to the point I tried to proxy Jenkins.. which gave a 502 Bad ...