SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

0
votes
0answers
1 view

Determine reason for X.509 certifcate revocation?

I'm trying to connect to Human Rights Watch. The page is not loading and the browser is not giving me much information. The browser states "Peer's Certificate has been revoked. (Error code: ...
0
votes
0answers
3 views

SSL connection on Java 7 based server fails with RECV TLSv1 ALERT: fatal, handshake_failure

A client-side SSL connection on a Java 7 based server fails with RECV TLSv1 ALERT: fatal, handshake_failure. This client is trying to connect to https://www.iatspayments.com The SSL debug log shows ...
1
vote
4answers
50 views

Can I force https requests to use http

I have a situation where my employer uses a cert to spy on everyone's https traffic. They set it up poorly with a self signed certificate so unless the application allows me to ignore the cert I just ...
0
votes
0answers
13 views

Self-signed root CA certificate on OSX does not authenticate own-signed certificates

I have a Vault server configured with TLS running on a vault.dev machine. The certificate for vault.dev is signed by a self-signed root CA. I have two client machines: Debian and OSX, both separate ...
0
votes
1answer
18 views

Can we restrict the usage of an SSL certificate to only a specific protocol?

I would like to generate a certificate that can be used only for HTTPS. For example, if I use the same certificate for my web server (HTTPS) and my mail server (IMAPS) using the same certificate, the ...
1
vote
1answer
17 views

Firefox: how to debug SSL error

I am behind a firewall that uses SSL interception. I have installed the CA certificate of the proxy in Firefox, and most SSL connections are established correctly. However, in same cases the ...
0
votes
1answer
43 views

Why do I need a certificate to create my own other self-signed certificate

In the last few days I was trying to understand the story of certificates, and I understood the main principle of them, but I didn't understand that step when we create a CA cert to sign my own server ...
0
votes
0answers
18 views

no certificate found in safari

I have a problem where our certificate is not visible (I'll get to more details after explaining the problem), in Safari. I get it working on Chrome and Firefox. The OS I am using for testing is OS X ...
1
vote
1answer
13 views

openSSL Key and Certificate

As far I know, in an authenticated SSL connection, both the client and server have private keys and provide their certificates (with the corresponding public keys) across the connection before ...
0
votes
0answers
15 views

Openconnect certificate validation with NetworkManager

On my Cinnamon (linux) desktop, I have setup an openconnect VPN connection in NetworkManager. When connecting, I don't seem to have any issues: the connection is established and network traffic is ...
0
votes
1answer
193 views

ERR_SSL_VERSION_OR_CIPHER_MISMATCH error in Chrome

I cannot open some sites due to this error in Google Chrome (version: 48.0.2564.82 ) ERR_SSL_VERSION_OR_CIPHER_MISMATCH It is an https site. Windows 10.
-1
votes
0answers
17 views

Unable to disable SSLv3 in Apache 2.4.18

One of my client wanted me to upgrade openssl and Apache on his server because he want to receive an A from SSLLabs. I went ahead and upgraded to Apache 2.4.18 and openssl to version 1.0.2e. I then ...
0
votes
1answer
30 views

GIT warning: unsupported ssl version tlsv1.2: using default

I am trying to clone a git repository and receiving the following warning and error message: Cloning into 'projectname'... warning: unsupported ssl version tlsv1.2: using default * Couldn't find host ...
0
votes
1answer
41 views

TLS curl POST resulting in SSLv3 error

I am trying to make a POST request via curl to a server that only supports TLS 1.2, TLS 1.1, and TLS 1.0. However, even when I try to specify the need for TLS instead of the default SSL v. 3 (adding ...
0
votes
0answers
9 views

Setting Up TT-RSS over HTTPS

I have what is hopefully a quick question: I have a very basic installation of TT-RSS on Ubuntu 14.04, literally: sudo apt-get install tt-rss and I've been using that for a while. However, I believe ...
0
votes
0answers
8 views

Connect To Watchgaurd SSL VPN On Lubuntu

I have followed the steps below to set-up on my Lubuntu machine, and per the command line I am connected to the server BUT my internet connection appears to drop the second I connect to this VPN ...
0
votes
1answer
42 views

Apache : Poodle attack complain & RC4 cipher complain even after changing ssl.conf

I checked our domain on SSL_Labs and found out that our server is vulnerable to Poodle attack. We have a Debian System, running Apache2 as a load-balancer and failover for two Tomcat instances. I did ...
0
votes
0answers
148 views

Windows 10 + WebDAV: Mutual authentication failed: The server's password is out of date at the domain controller

We have an existing WebDAV installation with an Apache mod_dav was WebDAV drive hosted at an SSL protected URL with CA issued certificate and basic authentication. MacOSX and Windows < 10 have been ...
0
votes
0answers
22 views

Generating machine TLS certificates in software

I am working with a distributed software solution where machines may communicate over the internet. Automatically for sensitive data this means you have to encrypt the traffic. Using a public tool ...
0
votes
0answers
29 views

Could not retrieve 'System.Collections.Hashtable.AutomationCertificateName' certificate asset on azure

I import "Connect-Azure" workflow from Import runbooks from the Gallery which is below. workflow Connect-Azure { Param ( [Parameter(Mandatory=$true)] [String] $AzureConnectionName ...
-1
votes
1answer
48 views

What is the correct terminology for an “official” SSL certificate?

What is the correct terminology or wording for an SSL certificate that you have bought from a certified provider (e.g. GoDaddy or something) and has been signed by a root certificate authority? For ...
0
votes
1answer
8 views

server isn't sending Certificate after Server Hello

I used Wireshark to capture the packets sent to and from google.com and a personal website of mine and... google.com sends the Certificate right after the Server Hello. My own webserver, however, ...
0
votes
1answer
37 views

Does a proxy server protect my download habbits from my ISP?

If I torrent files and access websites through a proxy server, can my ISP see what I am up too and the websites I'm visiting (SSL and non-SSL)? Also, would a proxy suffice or would a VPN be more ...
0
votes
1answer
350 views

Piratebay ERR_SSL_VERSION_OR_CIPHER_MISMATCH

Since a few months ago I've been using proxy sites to access the pirate bay, but now I'm in need to create an account, and those proxy sites won't allow me to do that. The problem is because TPB is ...
0
votes
0answers
17 views

SSL Connection using Windows Certificate Store

I am creating an SSL connection using OpenSSL API. As we know in a SSL handshake, series of Certificate Authentication occurs for Server or Client. Now for client certificate authentication, the ...
0
votes
1answer
83 views

“Java is unavailable” in Firefox 32 bits

I'm trying to connect to a VPN using SSL Network Extender, and am getting Java is unavailable error.This occurs in 32 bits Java on 32 bits Firefox in Windows 7 (64 bits). Since both browser and Java ...
0
votes
1answer
25 views

IIS SSL Settings - Require client certificates and self-signed certificates

I am having a little challenge understanding digital certificates and ssl. In IIS SSL Settings for my website I am setting my website to require client certificates. I am using a self-signed ...
0
votes
1answer
12 views

Is enrollment certificate a result of an export of the signing certificate

Newbie on digital signatures... Does the certificate that users would import come from me exporting from the signing certificate?
0
votes
0answers
27 views

Windows 10 won't connect to courier imapd-ssl

I have tried to access an email account at work from Windows 10 using Windows Live mail, MS Outlook and Thunderbird. I am able to connect to the outgoing server with no problems, but I cannot connect ...
0
votes
0answers
26 views

Issues installing development tools to Ubuntu: curl: (35) Unknown SSL protocol error

I am attempting to download both Node.js with Linuxbrew, and RVM to an Ubuntu VM. Linuxbrew installs fine, but when I try to install Node.js with it, or RVM, I get this error: curl: (35) Unknown SSL ...
0
votes
0answers
29 views

Connect to FTP over SSL/TLS with Thunar

I have a Windows server (Windows Server 2012 R2) running IIS 8.0 FTP and it requires SSL (using a self-signed certificate). I am able to connect and pull/push using lftp, however, I can't find a way ...
0
votes
0answers
12 views

How to I export the IIS list of certificates into a detailed list?

I wish to export the list of certificates installed on the my IIS into to a detailed list (Name, domain, expiration date and so forth) into a list. I wish to upload it to my calendar so I'll know ...
0
votes
1answer
25 views

SSL: Can't convert DER to PEM

I'm working with ssl certificates and trying to convert myCA.cer to myCA.pem... $ openssl x509 -in myCA.crt -inform der -outform pem -out myCA.cer.pem unable to load certificate ...
0
votes
0answers
26 views

Microsoft Edge force HTTP/2 usage

Im testing my web application with HTTP/2 protocol. Im using my local nginx with self signed ssl cert. On Google Chrome and Firefox there is no issue, the problem arises with Microsoft Edge. ...
0
votes
0answers
41 views

How can I view the certificate for a connection blocked because of HSTS?

I'm trying to open a website in Firefox 42.0, but I get a warning about an invalid certificate. As in this question, the website has an HSTS (HTTP Strict Transport Security) policy, which means that ...
1
vote
1answer
27 views

Is there a way to verify if e-mail was delivered only using SSL connection?

I have my own mail server, which is listening on both unsecured and SSL / TLS ports. My question is, when I receive an e-mail, is there any way to verify if the mail, on its way from original server ...
1
vote
2answers
44 views

Is it possible to have a certificate signed by 2 authorities?

To explain the situation a bit: I'm building an iOS application that uses SSL pinning. I've created a self-signed certificate authority that issues SSL certificates to my web server, and the CA's ...
0
votes
0answers
7 views

Will Internet Explorer negotiate the TLS version to be used in a connection?

Will Internet Explorer negotiate the TLS version to be used in a connection? We currently only have 1.0 enabled, but our payments supplier has told us we need to enable 1.1 and 1.2 But we have ...
0
votes
1answer
47 views

How can I tell why Chrome doesn't like a remote SSL handshake?

For one particular web site, which we really need to be able to communicate with, we are starting to get the usual SSL handshake error: ERR_SSL_VERSION_OR_CIPHER_MISMATCH I've already confirmed, ...
1
vote
3answers
27 views

2 domains with 2 certificates, 1 public IP, 1 nginx server

I hope you can help me out here because I cannot figure out why this is happening. I have the following 2 domains: alpha.com beta.com they both pointing to same server IP: x.x.x.x I have a ...
0
votes
1answer
41 views

How to create SSL certificate with multiple DNS entries, signed with my own CA certificate

I need help creating SSL certificate with multiple subjectAltNames, signed with my own selfbrewed CA certificate. What I need: I'm on OSX 10.10.5 I have myCA.cer which I use to sign another SSL ...
1
vote
0answers
21 views

Router intermittently blocks VPN

I use Checkpint SSL network extender to connect to my work, and it used to work perfectly with a Netgear DGND3700v2 router together with an ADSL connection. Then I changed ISP (from ADSL to fiber) and ...
0
votes
0answers
22 views

HTTPS client “pairing”

I need to restrict usage of a certain site to a limited number of customers. More than that, actually: I would like to allow access from a restricted number of physical devices (Win + Android). This ...
2
votes
2answers
67 views

SSL keeps waiting for response

I'm trying to configure an HTTPS but It doesn't work and I don't realy know what's wrong. These are the steps I've followed: I have generated a .pem certificate (certificate + chain) with ...
0
votes
0answers
20 views

Web browsers won't load maxcdn URL over HTTPS in OSX

Both Safari and Chrome will not load this URL: https://maxcdn.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css I also tried to curl from command line and received an SSL error. I've ...
0
votes
0answers
18 views

Iceweasel thinks my client certificate is a server certificate; Chromium thinks it's an “other” certificate

I have a client certificate from StartCom. I recently reinstalled my OS and have to re-add the client certificate to Iceweasel in order to gain access to the control panel. I have a backup of the ...
1
vote
0answers
57 views

Can't start Apache 2 - Probably faulty SSL configuration

I followed this german tutorial to set up a Raspberry 2 Owncloud Server (connect.de/ratgeber/so-installieren-sie-owncloud-auf-einem-raspberry-pi-1540246.html) everything worked fine without any Errors ...
0
votes
0answers
49 views

Imgur.com does not load due to HTTPS settings

For some reason I am having some issues when I try to load imgur.com links sometimes. Here is a screenshot of what I see Whats strange is that it I get a 404 from Google and not Imgur (I am using ...
-1
votes
1answer
117 views

Jenkins using JNLP behind nginx SSL reverse proxy

I'd like to use JNLP to connect jenkins slaves to jenkins master. The master is running behind an SSL nginx proxy set up according to official documentation. Beyond this documentation I run into ...
0
votes
1answer
23 views

How to store an ssl key as a variable in a script for use with ncat?

I am trying to write a wrapper script to start an ncat listener. I don't want to have to output the certificate and key to a file, rather I'd like to store it as a variable within the script, and call ...