SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

0
votes
0answers
10 views

Tomcat6 - SSL received a record that exceeded the maximum permissible length

After following the instructions to setup a secure http connection on my tomcat server (link: https://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html), I had this error pop up when I requested ...
0
votes
0answers
4 views

Is it possible to use certutil to export multiple certificates from a local client machine store, to a .p7b file?

Is it possible to use certutil to export multiple certificates from a local client machine store, to a .p7b file? Scenario: We have a few legacy certificates based on some legacy templates (2012 R2). ...
0
votes
0answers
21 views

Subversion is no longer working

Subversion has been fine. Today, I needed to set up SSL on the same server SVN is on, and there was an issue; both SSL and Subversion use port 433 So, in the Network tab in subversion, I changed it ...
1
vote
1answer
13 views

IIS7 set up issue

Not sure if SU or Server Fault is a better place to ask, but I'm setting up IIS7 with SSL on a Windows 2008 VPS I followed this site I complete the tutorial but the site will not start(Shows the ...
0
votes
0answers
14 views

What's the benefit of using .local for internal domain [closed]

My company uses .local for all internal servers and services. For example ldap.mycorp.local and dev.mycorp.local. Since you can no longer purchase SSL certificate for internal domain names, we have ...
0
votes
1answer
25 views

Older e-mail client can't send through stunnel and Gmail SMTP server

I'm using an older e-mail client (Edit: Eudora 7.1.0.9 on Windows) which seems unable to send e-mail through Gmail's SMTP server, even after lowering the security per this article. So I tried adding ...
0
votes
0answers
18 views

Verify python request with wireshark or proxy HTTPS

I am working on a scraper, that is scraping data using python requests package. The website has a secured connection (https). I managed to get over the login part, over the search part, and now I have ...
0
votes
1answer
10 views

How do I force Firefox or any other browser to check for CRLs

I am trying to see if I can watch the traffic that is sent and received when a browser checks for CRLs. All I can see with the latest version of Firefox is setting for OCSP. I dont see anything where ...
0
votes
1answer
31 views

Forcing SSL on phpmyadmin

I couldn't decide which website this question we be on (since I see it almost everywhere) so feel free to migrate. I've set up a self-signed SSL cert on my server to secure my installation of ...
0
votes
1answer
31 views

Mozilla NSS certutil binary

I have a problem with Firefox 32 and installed SSL certificates in cert8.db and I want to investigate it. I have found out that there is a tool called "certutil" from Mozilla that can work with this ...
0
votes
0answers
36 views

Does a certificate from “open.nsa.gov” in firefox mean the browser defaultly trusts the NSA?

While exploring Firefox options I see that I have a certificate identifying the NSA, issued by the US Government. I don't recall adding this at any point and don't really want my machine trusting the ...
1
vote
2answers
18 views

SSL sniff VirtualBox

I'm trying to sniff ssl traffic from a VirtualBox I created (Android). I'm using the build-in pcap system of VirtualBox to sniff regular traffic, but obviously that doesn't work for ssl. What I'm ...
-1
votes
0answers
49 views

CA Flag in SSL certificate

I have an web portal running as a POC purpose, and then i have a mobile apps to access this web portal. Since it's a POC, I just generate a self-signed SSL cert and load it inside the Web and my ...
0
votes
2answers
71 views

SHA2 support for windows XP SP2 : any hotfix or dll available?

SSL with SHA2 does not work in windows XP SP2 and below.Th websites does not open if it has SSL with sha2. It requires SP3 and above. So is there any hotfix or files other than completely installing ...
0
votes
1answer
59 views

digicert secure server ca signed by unknown authority mac os

Related to: Why won't OS X trust GitHub's SSL certificate? Why when I download this certificate and drag/drop into my Keychain on OSX, it shows as I downloaded from here: ...
0
votes
1answer
26 views

Why can`t we treat SSL Certs like Pgp keys instead of trusting CAs? [on hold]

I am dumb and stupid and I do not know all the technical aspects of SSL and server/client side implications and implementations. However I understand them good enough from user point of view to use ...
0
votes
1answer
25 views

ftp-client works fine. ftp-tls-client fails on one computer and works on another

Connecting to ftp - from a Windows Server 2012 - it works both secure (-over tls) and unsecure. From a Windows 7 it succeeds unsecure but fails when secure. (Using explicit TLS and passive mode.) ...
2
votes
1answer
48 views

Client unable to access OWA website after temporarily changing SSL certificate on the server

I have the following issue: One client computer (Windows XP) cannot access the OWA website. All other client computers can (Except another one in the same remote office). How this happened: I ...
0
votes
0answers
20 views

RootCertificate popup does install

When connecting to my university's wifi, it keeps popping up with a certificate (root) that needs to be install, I select yes [yes|no|view details] But I am not sure if it installs the certificate ...
0
votes
1answer
13 views

PKCS12 key from Winserver2008 cert authority

I have created a standalone cert authority in windows server 2008. I can use certreq (from that same box) to generate a cert with the appropriate CN, etc, and ensure that the private key is ...
1
vote
1answer
24 views

Make browser and server use the eNULL SSL/TLS cipher

Is it possible to make a browser and a web server use SSL/TLS (https) with eNULL cipher for debugging purposes in a development environment (e.g. wireshark capture without setting up SSL stream ...
0
votes
0answers
11 views

FTPS certificate email address has different domain than the Organization name

Wondering if this should be of any concern. We received a FTPS ip which is SSL enabled. (This is not SFTP). Filezilla - the FTP client shows a certificate where the organization name say 'XYZ Inc' and ...
0
votes
0answers
19 views

How can I recover my SSL certificates on OSX?

Alright, so I screwed up. I was installing testing SSL on dovecot/postfix servers and I accidentally deleted my MacBook's SSL certificates. I went to Keychain, highlighted everything in ...
1
vote
0answers
8 views

How to control SSL automatic activities in Wordpress php files

I have domain with one sub-domain. The domain has installed SSL with valid certificate but sub-domain doesn't have it. I installed two Wordpress, one for domain and one for sub-domain (clone it to ...
1
vote
1answer
38 views

Provide Session Master Key to Wireshark UI?

I'm working on an issue with HTTPS. I suspect its related to client certificates. I want to read some of the encrypted handshake messages that follows the ServerHelloDone message. (Once the ...
0
votes
2answers
81 views

curl and sni-enabled server

I am running curl against a sni-enabled server with the following command curl --cacert CustomCA.crt -H "Host: example.com" https://1.2.3.4/foo However, I am not getting the right certificate where ...
0
votes
1answer
17 views

How to get digicert high assurance in my Mac

I removed Digicert high assurance certificate from the keychain. Now when I visit facebook.com or other ssl websites from chrome, they don't open and I get an SSL error, e.g.: How can I to get ...
0
votes
0answers
81 views

SSL certificate error attempting to download Homebrew?

I've been trying to download and install Homebrew for my Mac (OS 10.9.4) using the install script on the home page, but the download fails with a SSL certificate error (see log below). I understand ...
0
votes
0answers
93 views

Chrome won't trust DigiCert SSL. I have to trust it manually.

I have been having this problem for a while. I have found this thread which exactly my problem but it didn't solve my problem. Why won't OS X trust GitHub's SSL certificate? I also tried ...
0
votes
3answers
583 views

Can I use another port other than 443 for SSL communication?

I have an application that communicates via SSL, however, Port 443 is already in use by an IIS instance on that same server. Can I use another port other than 443 for SSL communication?
0
votes
2answers
28 views

HTTPS over private network

My web server runs over a LAN(that means, I don't have a public IP address(domain name) to give to a Certificate Authority to get SSL work for me). My IP is a private one(10.100.10.239), but the ...
0
votes
1answer
58 views

Linux/Postfix with relay: I can openssl to relay host on port 465, but postfix does not seem to connect

This looks like a tough one to me: I'm configuring postfix on my local home server running ubuntu server 14.04 LTS I was able to send outgoing mail through my relayhost on port 26, everything worked ...
5
votes
2answers
1k views

Why does https://gmail.com/ produce no SSL error while using a bad certificate?

It looks like https://gmail.com uses an SSL certificate which is for the hostname mail.google.com. As the SSL certificate hostname does not match the browser URL, why does this work? I should get a ...
0
votes
0answers
69 views

Github stopped working recently, 07/26/2014? [duplicate]

I'm a pro user of github until it stopped working on the last saturday, the 26. of July, 2014. Since then, i'm becoming in my browser following SSL error: My IDE (IntelliJ) is becoming the same ...
5
votes
2answers
393 views

Netflix SSL certificate shows up when trying to visit https://www.google.com

I'm on a hotel Wi-Fi network where occasionally the following message shows up in Chrome when trying to visit any Google sites over HTTPS: The SSL certificate reported when this happens is This ...
0
votes
0answers
13 views

Regarding CRL Updation - Compliance

Could someone let me know if automatic updation of Certificate Revocation List is a mandatory requirement as per SSL specifications ? Thanks
20
votes
2answers
2k views

Paypal.com SSL certificate invalid, issued to BitPay.com

Trying to buy some games from GoG, click Paypal and Chrome shows me this page: I'm not entirely sure how to work out what's going on here. I am a Bitcoin user so my immediate fear is my ...
0
votes
1answer
46 views

How can I connect to a HTTPS site via HTTP

We have CheckPoint in our company. I am using Anonymox to bypass CheckPoint. Everything is OK except when I try to connect HTTPS sites I cannot bypass CheckPoint. For example I can watch videos on ...
0
votes
0answers
20 views

Server Certificates Missing in IIS

On my Windows Server 2012 R2 box, when I connect to it through Remote Desktop, I'm trying to setup a server certificate but in IIS, in the "IIS" group, there is no Server Certificates feature. I ...
0
votes
1answer
36 views

Adding cert to trusted certs

I'm trying to access a web service from a certain website. Since this is a service I can't just click somewhere "go to this site anyway". I just get an endpoint exception in my code. I downloaded ...
1
vote
0answers
31 views

Strange null bytes in CN from openssl req

I need to send CSR (certificate signing request) to the SSL authority for our wildcard domain SSL certificate. I see strange values in the CN (common name) field, for example ...
0
votes
2answers
31 views

Is Firefox using its own isolated Certificate STore

I am using the latest Firefox. However, my campus uses their own certificate for all internet browsing and asks us to install their certificate as Root CA. Since, i don't trust them with my ...
-1
votes
1answer
315 views

Windows 7 64-bit SSL untrusted certificate error when visiting any SSL website

I have installed Windows 7 64-bit and I get an untrusted certificate error when visiting any website served via SSL, like Google.com, Gmail.com, etc. I tried this using Firefox, IE and Chrome and it ...
2
votes
0answers
15 views

Unable to browse to certain sites

I have a few guests on a XenServer host, and some sites ( both SSL and non SSL ) cannot be accessed by the XenHost and the Guests. Other machines on the same network can access these sites just fine, ...
0
votes
0answers
126 views

Magento | After SSL Setup, Images not shown

My problem is, i setup a Comodo Positive SSL on solempet.com When i changed the options for front page to secure https urls, images and css now shown. I mean site is not load properly and images, css ...
1
vote
1answer
42 views

How to load a Html Image with https in Word?

I have an image that is like https://example.company.org/image When I type this into the browser it says The site's security certificate is not trusted! and then I proceed saying "OK" - it ...
1
vote
2answers
58 views

Download self-signed server certicate

Summary I need to download a self-signed certificate from a server, to create a .JKS-file to use as truststore in an application. How can I do that from a Red Hat server? What I have tried I have ...
1
vote
1answer
26 views

Port forwarding does not work for http sites

I am connecting to office network through VPN. I have two servers A and B. I have ssh tomcat access to A through VPN but not to B. When I ssh into A, from there I can ssh into B. Also, B is running ...
0
votes
2answers
98 views

How can I export private key from a certificate chain?

I create a keystore and from that keysore I generate a CSR file and when I receive Signed Certificate from CA, I imported root and intermediate certificates to my keystore and finally my signed ...
1
vote
0answers
97 views

nginx - ssl and www redirect configuration

this is related to: http://stackoverflow.com/questions/24538973/django-allowed-hosts-error-for-www-domain-and-ip-address i'm attempting to redirect www and non-ssl requests to ssl non-www domain for ...