SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

0
votes
0answers
8 views

gnuwin32 wget Unable to locally verify the issuer's authority

I have just installed gnuwin32 wget and have had some issues when running it. I appear to have issues with https sites... I get a "Unable to locally verify the issuer's authority." error. I have very ...
0
votes
0answers
12 views

WatchGuard Firebox VPN will not connect if signed in as a domain user

We are trying to connect to a client's network using their WatchGuard VPN, and we are experiencing a really odd error which some other people seem to have had, but haven't shared their solutions. ...
0
votes
0answers
89 views

Unable to access Amazon webs with Chrome

When going to a secure Amazon page over HTTPS, using either Chrome and MS Edge, the following Error comes up: This site can’t provide a secure connection www.amazon.com uses an unsupported protocol. ...
0
votes
0answers
11 views

Forcing SSL on Wordpress crashes site? [migrated]

So I have just installed a paid Comodo SSL on my website. I can visit my website with https://homepage.com/ but the https appears grey. Currently that isn't my worry. But when I visit the website ...
0
votes
0answers
17 views

(Setting up SSL) invalid number of arguments in “ssl_certificate” directive in /etc/nginx/nginx.conf

I am trying to setup SSL on my server. I purchased my SSL certificate from Comodo. I am following the tutorial they have made here: ...
0
votes
1answer
44 views

Browser (any) on Windows 7 loads bad (localhost) https certificate

On Windows 7 in Chrome, but also in any other browser, for one particular (external) website a bad HTTPS certificate is loaded. When I open the certificate it says that Windows does not have enough ...
1
vote
0answers
12 views

How to speed up SSL connection establishment?

I have an OpenSSL setup on my Linux PC using Apache2. NO, I haven't enabled DNS resolving. I have the certificate on the machine, LOCALLY. Still, Chrome devtools tell me that Initial Connection took ...
0
votes
2answers
14 views

Why is the non-ssl version of my ssl-enabled Apache host serving content from a different host?

I have a couple of web sites running on localhost with Apache/Ubuntu. I just successfully installed self-signed certificates for one of these, call it securesite.local. Another non-ssl site, call it ...
0
votes
1answer
19 views

Trouble connecting to some HTTPS urls

I am having trouble connecting to some websites using https. wget and curl complain about not being able to verify the certificate. I presume this is to missing root certificates on my NAS. For ...
0
votes
2answers
36 views

Apache certificate chain is not being sent

Good day! I've searched google high and low. Goodness, I've never gone past page 2 of search results before! But this one stumps me. I've got a website that I am securing with a certificate signed ...
0
votes
0answers
24 views

Configuring rabbitmq web stomp plugin to work over SSL connection

I am trying to setup a ssl connection for a rabbitmq web stomp plugin, but I can not figure it out. I have gotten valid certificates from letsencrypt and i would like to reuse those for the web-stomp ...
0
votes
1answer
26 views

Adding --no-check-certificate to yum repositories

I have added virtio-win.repo according to this guide. The content of /etc/yum.repo.d/virtio-win.repo is now [virtio-win-stable] name=virtio-win builds roughly matching what was shipped in latest ...
-2
votes
0answers
84 views

Own SSL certificates missbehave in Firefox (only)

Thank you for looking at this! After more than a week of searching and experimenting with new stuff I have working solution for me but I am only partly happy how it works for users. I need someone of ...
0
votes
0answers
24 views

Chrome doesn't leverage browser caching on unauthorized/broken ssl

On google chrome when you have a broken ssl This page is insecure (broken HTTPS). The browser doesn't cache the resources. I have a dev.domain.com and a www.domain.com. The www has the SSL attached ...
0
votes
0answers
17 views

Apache on Windows using CA Certificates

I have been issued by our CA a new cert and have the CA cert and my key that I used during the CSR for generation. I've never setup SSL in apache before and more or less copying from other examples ...
0
votes
0answers
31 views

Can I connect to freenode via SSL on Pidgin/Windows?

When I set up an IRC account on the irc.freenode.net server and select "Use SSL" under the advanced tab, I get an "SSL Handshake Failed" error. I found a guide for setting up an SSL freenode ...
1
vote
1answer
12 views

Where is the tls command?

I use Visual Studio 2015 to publish a docker image to a Linux server. The similar step is on the link. I get a failed message when you attempt to validate the connection to your Docker host in the ...
1
vote
1answer
49 views

Apache and support for per-directory CA

I was using Debian Wheezy with Apache and I configured some paths in SSL to be protected by client certificate. <Location /admin-page> SSLCACertificateFile /etc/apache2/ssl/leos.pem ...
0
votes
1answer
180 views

How to make Firefox ignore all SSL certification errors?

I'm on a private network with a lot of restrictions and monitorings. Every HTTPS connection results in SSL certification errors (maybe those people use "man-in-the-middle" approach to decrypt the ...
0
votes
0answers
36 views

Adding additional SSL certificate to be recognized in Cygwin

I have a server setup that has an HTTPS certificate issued by a major certificate provider (DigiCert). The certificate is recognized by all of the browsers on a machine running Windows Server 2008 R2, ...
0
votes
1answer
48 views

SSL certificate: incorrect order

I have SSL EV certificate for https://goout.cz. According to this test we are getting A+: https://www.ssllabs.com/ssltest/analyze.html?viaform=on&d=goout.cz However I get warning for "Incorrect ...
0
votes
1answer
32 views

Using signed certificates with shellinabox

I currently have a web server running Apache. This server hosts a website (foo.com), and is configured to use a signed RSA certificate for https connections. The Apache configuration for the site ...
1
vote
0answers
193 views

SSL error when connecting to git from Mac OS X 10.11.3 (El Capitan)

When I try to clone / pull / fetch from a git repository via https from a Mac System I keep getting an error: error: RPC failed; result=56, HTTP code = 200 fatal: The remote end hung up unexpectedly ...
0
votes
0answers
30 views

Why can't signtool find certificate in machine store?

We have a code signing certificate that is working in TeamCity builds using the following command: signtool sign /a /v /sm /s my /n "NAME_ISSUED_TO" /d "DESCRIPTION" FILENAME Unfortunately the ...
2
votes
1answer
118 views

Windows: SSL/TLS connection reset after ClientHello (ECONNRESET / write:errno=10054)

I'm using Windows Server 2012 as a workstation. The problem is that HTTPS connection initiated by node.js randomly fails. Probably this is system-wide issue and not only node is affected, but it ...
0
votes
0answers
88 views

SSL VPN Connection in Windows 10 is “aborted by the local system”

I'm trying to connect to the VPN of my company using Windows 10 built-in VPN client (SSL VPN) but I'm getting the following error: The credentials are correct and the certificate chain is correct. ...
1
vote
1answer
121 views

Git GUI on Windows not working with self-signed SSL certificates - gives errors (fatal: SSL certificate)

I'm using git GUI on Windows 7. I need to clone the repository and simply want to just use it. However, when cloning, pulling, pushing to/from repo with self-signed certificate, I'm getting this ...
2
votes
1answer
27 views

Validate FTP certificate by fingerprint or serialnumber

I want to establish a encrypted connection to an FTP server. FileZilla displays some information about the certificate sent from the server to me. It would help me if there was a site that accepts ...
0
votes
0answers
24 views

How Firewall monitors SSL HTTPS Content? Like Content Filtering

as per my knowledge, in SSL/TLS , only the source and destination machine can decrypt the message during a data communication . Then how a firewall like (Cyberoam) monitors the SSL Traffic, Like ...
0
votes
0answers
49 views

Creating a certificate chain via Openssl tool

I've been trying to create a certificate chain, something of the sort CA -> Intermediate CA -> Client certificates. I used the following to generate CA cert :- openssl genrsa -out ca.key 2048 -des3 ...
0
votes
1answer
25 views

Load runner Vugen unable by pass the SSL negotiotion

We are working on POC for service now app whose version name is Fuji and in order to login to this app with different test users we use the SSL certificates. Here the problem we face is an SSL ...
0
votes
5answers
85 views

Is a self signed SSL certificate less secure?

I'm using a self signed SSL certificate on the homepage for our prom. I know almost everybody who uses this website personally, so I can assure them that the certificate is trustworthy, even though ...
0
votes
0answers
22 views

How do I override the Mac Mail “invalid certificate warning”

I have 2 mailservers set up on the same IP address (one for me, which we'll call foo.com, one for a project I'm involved with, lets say bar.com). It's a standard Dovecot & Postfix stack, both with ...
0
votes
2answers
24 views

website with expired SSL

A website I'm trying to register at has an expired SSL certificate. I have the option to either use HTTPS with an expired certificate or HTTP, which option would be more secure? Is the expired SSL ...
0
votes
1answer
166 views

Getting “Invalid command 'SSLOpenSSLConfCmd'” when using Apache 2.4.10 and Debian 7?

I've upgraded my Apache 2.2 to Apache 2.4.10 on Debian 7 (Wheezy) in order to use stronger DH keys. I've also upgraded openssl to OpenSSL 1.0.1k. I've been trying to add the following command to my ...
1
vote
0answers
52 views

Can not connect to vsftpd FTP server on Ubuntu 14.04 LTS?

I installed vsftpd on my Ubuntu 14.04 LTS Linux box. When I try to connect either locally using the URL ftp://localhost I do get an authentication dialog box. However, after I enter my user name and ...
1
vote
0answers
34 views

Owncloud https and ssl with free dns

I use no-ip and I want to set my owncloud server (hosted with raspberry) with https protocol. After installed everything I follow this from the official documentation: <VirtualHost *:80> ...
0
votes
4answers
81 views

Untrusted certificate with Internet Explorer 11

I get "untrusted certificate" errors when opening all https sites in IE 11. I added sites to trusted sites, adjusted date and time, reset IE setting, installed sites' certificates (by click on view ...
3
votes
2answers
278 views

Managing LetsEncrypt Certificate expiration and auto-renewals

I've been experimenting with LetsEncrypt SSL certificates and managed to get certificates set up and installed on Windows for use with IIS using the ACMESharp Powershell library. The process to do ...
0
votes
1answer
37 views

Firefox doesn't ask me for a certificate when visiting a site that needs one

I use Firefox 44.0.2 on a Linux Xubuntu system. I'm trying to access a company website that requires a certificate. I can confirm I have the correct certificate in ...
1
vote
1answer
34 views

How to manage multiple certificates in the Apple Key Chain with Apple Mail in mind?

I would like to ask about proper management of SSL certificates in Keychain. An article on holeyn.com says: The only time it might be useful to have multiple key-pairs (...) In this situation, ...
1
vote
2answers
26 views

Can a wildcard CN in an SSL certificate be more specific

Can the common name for a wild-carded SSL certificate be more specific than simply "*"? e.g.: in the case of a firewall with multiple interfaces and similar names assigned to those interfaces: ...
2
votes
1answer
148 views

How to set the Owner of certificate generated by Let's Encrypt?

I've implemented Let's Encrypt on two production servers with relative ease, and both servers are providing certificates to the websites we run on those servers. What's bugging me though is when you ...
0
votes
0answers
68 views

SSL self-signed certificate on client side

When I create a SSL self-signed certificate. If I don't add the .crt on the client side, the browser (Chrome/Firefox) seems to download implicitly the .crt. Is it possible to prevent this ? If I ...
0
votes
0answers
8 views

Recovery after losing the master key - how to make OpenVPN accept clients signed by different certificates

Due to unfortunate circumstances, I lost my master signing OpenVPN keys. However I still have the public part of the key as well as all the client certificates. This means the system is usable and ...
1
vote
1answer
133 views

When using Kaspersky Anti-Virus Personal Root Certificate, can you view the website's certificate?

Use of Kaspersky Anti-Virus Personal Root Certificate with Firefox is discussed in this post, Which CA issued certificate for https://www.google.com. My question is (other than for google.com) is it ...
1
vote
1answer
75 views

Does HTTPS/SSL make sense on a local network?

I wonder if I should enable HTTPS/SSL on web servers in my LAN. Which opportunities does a sniffer/man-in-the-middle have in a local area network, where devices are usually connected by switches? Is ...
0
votes
0answers
71 views

An unexpected TLS packet was received setting up VSFTPD - Filezilla

I'm setting up an FTPS server under linux Ubuntu 14.04.01 i installed VSFTPD using apt-get install vsftpd then generated an openssl Key using: openssl req -x509 -nodes -days 730 -newkey rsa:2048 ...
2
votes
1answer
13 views

openssl s_client, what does s/i mean?

So I've tried to find the answer on Google or in the man pages, but searching for the meaning of an identifier that's one letter appears to be impossible. If I run the following: openssl s_client ...
0
votes
0answers
36 views

Roundcube not sending email via smtps

I am running Roundcube 1.1.4 on Debian Jessie - it all works OK apart from sending emails via my SMTPS server (which normally works OK). I use self-signed certificates. No additional Roundcube plugins ...