SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

0
votes
0answers
13 views

Self signed certificate is not appearing in Chrome after importing

I have a Synology NAS that creates a self signed certificate for SSL access. I'm using the latest Chrome on Windows 7. Upon visiting the NAS's landing page, Chrome presents a red warning to say that ...
0
votes
1answer
13 views

Are URL based SSL / certificates at IIS?

Is there a way to change the used certificate / ssl encryption depending on the visited url? We are using IIS 7 and later. Edit: We plan to develop and deploy web applications to our customers. It ...
0
votes
0answers
18 views

Chrome for Windows 8 Blocks Insecure Content with No Option to Allow

My company uses an idiotic security product that basically reissues certs for secure websites, which causes security warnings in the browser for any SSL-based URLs. Usually the browser will present ...
0
votes
0answers
6 views

ssl connection error with VPN

So today I went on a site that required secure connection (betting site) and I got this error. http://s30.postimg.org/kskk0jupd/Untitled.jpg Yesterday, it was all working fine. I am using a VPN ...
1
vote
1answer
22 views

SSL handshake failure when using Logstash

I am using Logstash, and it works on most machines I have running. But on some, I get this error: Failed to tls handshake with x.x.x.x x509: certificate is valid for , not dns_name I read on ...
0
votes
0answers
7 views

Install root certificate authority on Ubuntu

First off I am not sure whether I have the correct terminology. What I mean by certificate authority is a verified certificate distributor such that if I goto a website in my Browser that is HTTPS ...
0
votes
0answers
3 views

SSL on freenode Irssi seems to connect, but everything I type is scrambled

I followed these instructions from freenode to configure SSL from my raspberry pi that I'm running headless. I can connect to freenode. It asks me for my password. It accepts my password, but every ...
1
vote
1answer
19 views

How to force all Apache connections to use TLSv1.1 or TLSv1.2

I haven't been able to find a solution for this, if there is please do refer to it. Running: Windows7 x64 Apache 2.4.4 OpenSSL 1.0.1j and have the following in my httpd_ssl ...
1
vote
0answers
63 views

IIS 8.5 TLS 1.2 not working

I have Windows 8.1 with IIS 8.5 and have run the script from http://www.hass.de/content/setup-your-iis-ssl-perfect-forward-secrecy-and-tls-12 to enable TLS 1.2, but Qualys SSLLabs says my server ...
0
votes
2answers
46 views

Postfix SMTP SSL config: Can't send email but can receive it with SSL

I am trying to finish configuring my postfix/dovecot mail server that sits behind my home's router/firewall. I'm on Mint/Ubuntu 12.04. I'm close. I can connect/retrieve emails via SSL but can only ...
-1
votes
0answers
55 views

Disable ssl 3.0 in Opera

Are there some who can check my work? I am using Opera 25 in Windows XP Pro. I was not able to find my preferences editor so in the properties box I added the string which has been suggested for ...
0
votes
0answers
15 views

SSLv3 Disabled - Mild error message

Due to POODLE there is now a need to disable SSLv3 on servers. If a client connects to a server that no longer support SSLv3, and the client does not have TLS available the client displays some kind ...
0
votes
0answers
12 views

Undo a change to HTTPS [migrated]

I recently moved my site from http://www.example.com to https://www.example.com Now, due to an issue with the SSL certificate authority I have had to pull it down and reverse it back to http:// Now ...
0
votes
0answers
12 views

Get SSL private key from certicate request text [migrated]

I created my certificate request using the IIS wizard and then requested and received my SSL certificate from Symantec. To add the certificate to our load balancer I require the private key. ...
1
vote
2answers
65 views

Disable SSLv3 in email servers

After the recent POODLE vulnerability, I would like to disable SSLv3 on my mail servers (for POP, IMAP, and SMTP). My concern is whether that will break my clients' access. I have been looking online ...
5
votes
2answers
1k views

Disabling SSL 3 on 64bit Chrome for Windows [duplicate]

I see lots of different places with the same response for disabling SSL3 on chrome (adding --ssl-version-min=tls1 to the end of the execution of chrome.exe). But apparently this isn't working for my ...
0
votes
1answer
28 views

How do I configure my system to trust a CA for a specific subset of domains?

The company I work for has a number of internal web services accessible over HTTPS. These services use SSL/TLS certificates signed by an internal certificate authority which is only trusted by ...
3
votes
1answer
142 views

Does Firefox support TLS on non-standard ports?

My presumption was that TLS 1.0+ is supported by Firefox on ports other than 443. However, a tweet crossed my path that seems to debunk this. Turns out that Firefox does not support TLS on any ...
4
votes
3answers
4k views

Disable SSLv3 in major browsers

As the question suggests: How to disable support of the SSL version 3 and set TLS version 1 as minimum (oldest) protocol supported in order to defend against POODLE. One can test a browser with this ...
0
votes
1answer
20 views

SSL: generating a CSR for a domain with and without www on ubuntu 14.04 / apache2

I want to create a CSR for my domain, but I was unable to find details online about this. Is the CSR generation different when I want to use addresses with www and without on the mentioned ...
3
votes
1answer
38 views

View text version of remote server SSL certificate from linux command line

Does anyone know of a linux one-liner that can be used to download an SSL certificate from a remote server and decode it to text? I think the last step would involve openssl x509 -text -noout but the ...
1
vote
1answer
38 views

Using CERT Tapioca on VirtualBox

I'm attempting to use Cert Tapioca (http://www.cert.org/blogs/certcc/post.cfm?EntryID=203) in Virtual Box so that I can test the SSL/HTTPS security of all the sites I have browsed. What I did is, ...
1
vote
0answers
19 views

Why does Thunderbird permanently asks to “verify xb7481.xb7.serverdomain.org:143”?

After using Thunderbird for 5+ years now, I suddenly get this weird popup asking to "Verify this security exception rule" [translated from german]. This happens without any reason, without looking at ...
1
vote
1answer
11 views

How can I make my computer trust a firewall web server certificate?

Every time I log into my firewall I get a message that says: The site's security certificate is not trusted! I know this is because my firewall doesn't have an identity certificate from a ...
0
votes
0answers
128 views

NET::ERR_CERT_DATE_INVALID error in Chrome when browsing python.org or github.com

Since one of the latest chrome updates, I'm getting this error that does not allow me to access some webs such as python.org or github.com. I've googled the problem but they say that it is generated ...
-3
votes
0answers
14 views

Need help … ssl vpn tunnel between two sites

could any one help me throw this .... i have a graduating project and I'm going to use ssh VPN tunneling between tow sites .... a bank and a branch ...... from where should i start ..... does it need ...
2
votes
2answers
33 views

How to deal with mail senders failing on STARTTLS?

I try to use my mail server richtercloud.de for subscriptions to vger.kernel.org mailing lists. I set up postfix 2.11 running on Ubuntu 14.04 and sending and reception works. I set up postfix to ...
0
votes
1answer
12 views

Accessing a particular directory via HTTPS

I am trying to create a particular directory on my LAMP installation folder to be HTTPS enabled. I was reading about that and i found out it can be done in httpd.conf. However i do not have https.conf ...
0
votes
0answers
25 views

openSSL and gnuTLS can't connect to OpenWRT web interface, why not?

I have some weirdness securely connecting to OpenWRT from IceWeasel (debian Firefox). I find recent Firefox's error messages less useful for troubleshooting. So I want some HTTPS tool to run tests ...
1
vote
1answer
45 views

Using CERT Tapioca on VM

I have been attempting to get CERT Tapioca (http://www.cert.org/blogs/certcc/post.cfm?EntryID=203) running on my Mac so that I can test the SSL/HTTPS security of our Android app. Up to this point, I ...
-1
votes
0answers
32 views

How to import a self-signed certificate in chrome?

Well this question is a duplicate, for example of this question But the import don't work for me. I can see the imported certificate and so on but Chrome is still warning about it.. I also installed ...
0
votes
0answers
29 views

Can I extract a certificate private key from the windows certificate store in a disk image?

After re-installing Windows 7 I notice that I seem to have failed to export the private key for one of my client certificates (for Internet Explorer use). When viewing the certificate in IE, it ...
2
votes
2answers
54 views

How does a browser know if a site supports https

A lot of sites now default to https. Where beforehand i would have had to asked for https specifically (ie: typing out https://www.google.com) now even if I type out just www.google.com or even ...
0
votes
0answers
37 views

Switch from HTTP to HTTPS with Apache2 not working

I'm trying to change my existing apache2 site from http to https with a self-signed cert on Ubuntu 11. The site is currently running with the config at sites-available/default. I've followed the ...
2
votes
0answers
137 views
+100

How to know which Certificates to leave in my browser, and which to remove

I would like to tighten up security a bit, so I am disabling unneeded certs from my browsers. For instance, the "WoSign CA Limited" cert from China I obviously don't need, yet "Thawte Consulting cc" I ...
0
votes
1answer
67 views

CentOS Ruby Install - Open SSL Issue

Attempting to install ruby 2.1.2 on a centos 7 box, but running into a dependency issue with openssl ~ % ruby-install ruby ...blah blah blah... ---> Package openssl-devel.x86_64 1:1.0.1e-34.el7 ...
0
votes
1answer
38 views

Iptables to forward HTTPS traffic to remote HTTPS proxy

My goal is to use Iptables to take all traffic going to my server on port 443 and forward it to a remote HTTPS proxy server. So basically if I was to use my ip of 192.168.1.142:443 as a SSL proxy it ...
0
votes
0answers
85 views

GnuTLS error -15: An unexpected TLS packet was received when setting up vsftpd with SSL

I have an Ubuntu 14.04 on EC2 with vsftpd 3.0.2 I have set up the SSL certs and my vsftpd.conf is: listen=YES anonymous_enable=NO local_enable=YES write_enable=YES dirmessage_enable=YES ...
1
vote
0answers
45 views

Not using CONNECT for SSL with Squid proxy

I want to disable encryption between my browser and my Squid so that I can get Squid to cache the pages. As using my own server and SSH port forw I'm not that worried about security. I already tried ...
0
votes
0answers
47 views

Tomcat6 - SSL received a record that exceeded the maximum permissible length

After following the instructions to setup a secure http connection on my tomcat server (link: https://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html), I had this error pop up when I requested ...
0
votes
0answers
45 views

Is it possible to use certutil to export multiple certificates from a local client machine store, to a .p7b file?

Is it possible to use certutil to export multiple certificates from a local client machine store, to a .p7b file? Scenario: We have a few legacy certificates based on some legacy templates (2012 R2). ...
0
votes
0answers
24 views

Subversion is no longer working

Subversion has been fine. Today, I needed to set up SSL on the same server SVN is on, and there was an issue; both SSL and Subversion use port 433 So, in the Network tab in subversion, I changed it ...
1
vote
1answer
18 views

IIS7 set up issue

Not sure if SU or Server Fault is a better place to ask, but I'm setting up IIS7 with SSL on a Windows 2008 VPS I followed this site I complete the tutorial but the site will not start(Shows the ...
0
votes
1answer
55 views

Older e-mail client can't send through stunnel and Gmail SMTP server

I'm using an older e-mail client (Edit: Eudora 7.1.0.9 on Windows) which seems unable to send e-mail through Gmail's SMTP server, even after lowering the security per this article. So I tried adding ...
0
votes
0answers
41 views

Verify python request with wireshark or proxy HTTPS

I am working on a scraper, that is scraping data using python requests package. The website has a secured connection (https). I managed to get over the login part, over the search part, and now I have ...
0
votes
1answer
23 views

How do I force Firefox or any other browser to check for CRLs

I am trying to see if I can watch the traffic that is sent and received when a browser checks for CRLs. All I can see with the latest version of Firefox is setting for OCSP. I dont see anything where ...
0
votes
1answer
47 views

Forcing SSL on phpmyadmin

I couldn't decide which website this question we be on (since I see it almost everywhere) so feel free to migrate. I've set up a self-signed SSL cert on my server to secure my installation of ...
0
votes
1answer
80 views

Mozilla NSS certutil binary

I have a problem with Firefox 32 and installed SSL certificates in cert8.db and I want to investigate it. I have found out that there is a tool called "certutil" from Mozilla that can work with this ...
0
votes
0answers
43 views

Does a certificate from “open.nsa.gov” in firefox mean the browser defaultly trusts the NSA?

While exploring Firefox options I see that I have a certificate identifying the NSA, issued by the US Government. I don't recall adding this at any point and don't really want my machine trusting the ...
1
vote
2answers
37 views

SSL sniff VirtualBox

I'm trying to sniff ssl traffic from a VirtualBox I created (Android). I'm using the build-in pcap system of VirtualBox to sniff regular traffic, but obviously that doesn't work for ssl. What I'm ...