SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

0
votes
0answers
4 views

SSL https (http secure) sites won't display is client or server side?

Oddly, python.org has suddenly become unreachable for me through the Archlinux repo version of Firefox (v27 and v28.0 update): Secure Connection Failed An error occurred during a connection ...
1
vote
2answers
8 views

Wildcard CNAME record complications?

So we're using Route53 and I wanted to set up a wildcard CNAME record to redirect any unmatched subdomains to our main domain. I tried it out and everything looks like it worked okay, but when I told ...
0
votes
1answer
8 views

Squid upgrade HTTP to HTTPS

I want to use Squid to upgrade HTTP request to HTTPS using my own certificate, in order to make clients handshake with a server (a reverse proxy) that requires mutual authentication. How can I ...
1
vote
2answers
21 views

s_client not failing on revoked certifcate?

I'm running Firefox with with the EFF's HTTPS Everywhere. I recently visited Lavabit's site to see if its accepting donations: The revocation is expected considering the history.... However, I'm ...
0
votes
0answers
29 views

Why is SSL broken for one domain on one computer?

I've been having a strange issue, where I cannot connect to https://www.humblebundle.com. Plain HTTP works fine, as does https://humblebundle.com. These all redirect to the above address. I haven't ...
0
votes
0answers
30 views
+50

SSL Apache Proxy with hostname not working

We have decided to run a secure web proxy through apache. we assigned the server a domain name and then bought SSL certificate for that domain and then applied on Ubuntu 12.04 (precise) with ...
0
votes
0answers
10 views

export certificate with private key

I would like to backup my startcom certificate on this machine but I need to also export the private key with it, the problem is in the certificate manager the option also export private key is greyed ...
0
votes
0answers
11 views

Exchange 2010 Certificate Renewal

I am still learning how to configure Exchange 2010, so I hope that you can help me on some topics. The certificate for mail.xxxxxx.com has expired. The previous IT guy had OWA set up on the server, ...
1
vote
1answer
45 views

Does Heartbleed pose a risk for past HTTPS communications?

Heartbleed exposes a threat where computer memory for a vulnerable could be exposed. Consider an adversary with access to all cipher text input and output of your server (ISP, government, local ...
4
votes
2answers
338 views

How do I distinguish between these two certificate situations?

Situation 1 (safe): Website was vulnerable to heartbleed and using a certificate not valid before 2012-10-21 Website upgraded to an unvulnerable version of OpenSSL Website re-keyed and got a their ...
1
vote
3answers
181 views

How to setup Apache HTTP server with the vulnerable OpenSSL

I want to do some test, so I want to set up an Apache HTTP server with the vulnerable OpenSSL (specifically with the Heartbleed bug), and I'd better do it from source. How do I do that?
3
votes
1answer
2k views

Does Heartbleed Bug in OpenSSL affect ALL SSL certs

Does the Heartbleed Bug in OpenSSL affect ALL SSL certs, regardless of where I purchased or if I self-cert? For example, if I bought an SSL certificate from GoDaddy and set this up on my server ...
1
vote
1answer
1k views

Which versions of the Windows TLS/SSL file transfer software like WinSCP and FileZilla are not affected by Heartbleed?

I noticed that many people still use versions affected by the heartbleed vulnerability of wide spread TLS/SSL enabled Windows clients like WinSCP and Filezilla. To be able to make safe ...
2
votes
2answers
342 views

SSL certificate verification failure in Chrome, Heartbleed bug?

For some reasons I'm running into SSL problems since a few days. When trying to clone a git repository for example I receive the following error message: fatal: unable to access ...
0
votes
0answers
41 views

My android app doesn't work on university wifi

I've developed an Android app relying on a REST server. The app works great on mobile network and also on my WiFi. But when I try it at the university, it cannot connect to the server. The connection ...
0
votes
0answers
80 views

Blocking a trusted certificate in Google Chrome

Is it possible to somehow block a certain certificate that is currently trusted by my browser? The reason is the recently discovered Heartbleed-attack which I also found out to affect my netbanking ...
0
votes
0answers
16 views

Nginx/SNI: Return 444 if there's no certificate available for a specific domain hosted on the same IP

I'm stuck with configuring nginx regarding SSL and SNI support. In order to simplify my case let's say I have two domains, foo.com and bar.com. I have only one IP and both domains are mapped to this ...
4
votes
2answers
197 views

How do I convert a certificate to a private key?

I'm trying to setup certificates for a web server (Splunk, in particular), and don't think I have them in the right format. I need to provide the path to a private key file, and a CA certificate. ...
0
votes
0answers
9 views

curl: (35) error:0200100D:system library:fopen:Permission denied

In continuation with this question... I get curl error as above only as an unprivileged user on my system. However, on searching I found the above link which asks me to check permissions for ...
0
votes
1answer
18 views

OpenSSL CA keyUsage extension

I want to set up a chain of certificates, with a self signed 'root' CA at the top that signs sub CAs, which can then sign client and server certificates. When setting up openssl.cnf, I noticed a ...
0
votes
0answers
18 views

Squid behind Apache 2.4

I need to locate a Squid instance as a forward proxy behind Apache 2.4.6. As Squid3.3 listens on localhost:3128 and works OK with default config, I have this configuration vhost config for Apache: ...
0
votes
1answer
27 views

Verifying Certificate using Mac Terminal

In Mac Terminal, we can use the command security to do many things related to certificates. I'm trying to know how to verify a certificate using this command. I wrote security verify-cert [.pem ...
-1
votes
0answers
19 views

Encryption of two-way communication

Today I learnt how data sent through the web can be encrypted using symmetrical and asymmetrical encryption, but my textbook and people online only explain how it works when the encrypted data flows ...
0
votes
1answer
19 views

How to set up load balancer with SSL?

I currently have a single server with a Django stack. I have nginx with an SSL certificate for HTTPS. I want to scale the web layer by putting an nginx load balancer in front, and adding IP addresses ...
0
votes
1answer
33 views

Could be public key cryptography used in Wifi authentication?

Its known that all wifi encryption methods to secure your network from attackers are broken, WEP, WPA, WPA2... With some amount of time someone can break in in your network. Why we can't use some ...
0
votes
0answers
81 views

SSL connection error when browsing Facebook and Twitter

I get this error not always but most of the times I try to go to Facebook or Twitter: SSL connection error Unable to make a secure connection to the server. This may be a problem with the ...
0
votes
0answers
27 views

SSL with Flask and Apache always shows Test Page

I am trying to set up Flask to run on SSL, along with redirecting all HTTP traffic to HTTPS. I am currently using Apache as a web server, and it is serving traffic on port 80 HTTP properly. However, ...
0
votes
0answers
33 views

Invalid SSL certificates after system restore on Windows 7

I just recovered my Windows 7 system after a crash using startup repair. It seems Windows has restored to a previous point. The problem was HDD related after some software uninstaller started creating ...
1
vote
1answer
23 views

Is there a program to check the list of root CAs in Firefox?

Motivated by this and this question, I'd like to ask if there is a way to check if additional certificates have been maliciously added to the list of root CAs of Firefox. Possible ways could be: an ...
1
vote
1answer
61 views

Is it safe to add an untrusted certificate to Trusted Root Certification Authorities?

Before I access the internet at work I have to sign-on to their system. The sign-on page is ipass.swu.ac.th. Unfortunately the security certificate they use appears as not trusted (in Chrome). I have ...
0
votes
0answers
37 views

Email without SSL

I have been trying to setup LabTech Email settings. Unfortunately, it accepts only email settings that are not encrypted; no SSL/TLS i.e POP 110 and SMTP 25. Tried to setup SMTPSSL in the same, but no ...
0
votes
0answers
22 views

SSL failure on Auzre web farm with shared configuration and centralized certificates

[Sorry if this question is a bit long, there's lot of extra info in case it is relavent] Overview I'm having a problem with SSL on a 4 VM's load balanced farm in Azure. If the HTTPS request goes to ...
0
votes
1answer
24 views

how to use either certificate or password to access a tomcat website

My website is currently configured to only allow client with authorized certificate to access it. In addition to that, I know I can configure the tomcat to require user to enter username and password ...
0
votes
1answer
14 views

How to see the handshaking messages of SSL/TLS in firefox using firebug?

I am trying to understand the internals/working of SSL. I would like to view the handshaking, key exchange, cypher exchange, session key, etc. messages communicated. So, I thought if I enable firebug ...
1
vote
1answer
29 views

What does the less sign (<) mean in dovecot.conf in front of ssl certificate path?

A couple of years ago I've configured a mail server with exim4 + dovecot 2.2.10 on debian and recently have been tweaking dovecot config. I use a self-signed x509 openSSL certificate, the paths to the ...
0
votes
1answer
33 views

How to update CRL automatically?

I have the following issue: I have a self-signed CA (certificate authority) mainly for persoanl use (mail encryption and signing, ...). I created several ceertificates and the CRLs (which are empty ...
0
votes
0answers
44 views

NAT - FTPS (Error : Failed to retrieve directory list)

I have setup ftp server (Ubuntu 13.04 / Picuntu 4.4) using vsftpd. The plain FTP works perfectly fine. In order to secure the connection, I added ssl encryption. The server accepts the login ...
1
vote
0answers
22 views

Remote management on WRT630N via HTTPS

I have a Linksys WRT630N wireless router and am trying to configure remote management via HTTPS. I've chosen a nonstandard port and can successfully connect and manage the router remotely via HTTP, ...
0
votes
0answers
29 views

Compiling squid 3.3.11 for linux 6 enterprice with dynamic certificate options enabled, with error [testPreCompiler.o] Error 1

Maybe someone can help shed some light on my current issue. trying to complie squid 3.3.11 on linux 6 error is: [root@rh6squid-proxy squid-3.3.11]# make check Making check in compat make[1]: Entering ...
0
votes
0answers
65 views

pip and SSL certificate errors

I am trying to install a library via pip. I have a problem with SSL certificate, even when using the --cert. Trying this on windows (pip version 1.5.4,python version 2.7.6): pip --cert ...
0
votes
0answers
76 views

IIS 8.5 Windows Authentication + Chrome not working

I have IIS 8.5 running with the Network Service in the App Pool. I have a wildcart cert installed. Anon auth false. Authentication and SSO works on Firefox and Chrome (after whitelisting) However ...
0
votes
0answers
13 views

My self signed certificates do not have organisation

I use the command openssl s_client -connect myServer.myCompany.be:2500 -showcerts > myServer.pem # it also works if you remove all but the base64 encoded key # and its surrounding comments If I ...
7
votes
1answer
75 views

What Trusted Root Certification Authorities should I trust?

After two recent Slashdot articles (#1 #2) about questionable Root Certificates installed on machines, I decided to take a closer look at what I have installed on my machines. (I use current versions ...
1
vote
1answer
43 views

Creating stronger self signed certificate

I've installed the calomel addon in Firefox, which gives information about the quality of an SSL certificate. I have created a self signed certificate, which scores full point on PFS and the Bulk ...
0
votes
1answer
163 views

vsftpd: 500 OOPS: could not bind listening IPv4 socket

I will use vsftpd as a ftp server. I did all changes on /etc/vsftpd.conf. These changes are (according to digitalocean): anonymous_enable=NO write_enable=YES local_enable=YES chroot_local_user=YES ...
1
vote
0answers
49 views

GnuTLS test 'chat' equivalent of OpenSSL s_client s_server

How can I set up a test encrypted "chat" with GnuTLS, equivalent to the OpenSSL s_client and s_server using GPG credentials? I would like to tell GnuTLS-serv and -cli to use keys generated with GPG ...
0
votes
1answer
36 views

What details would you view in a certificate to check if it is trustworthy?

I have a question need help: What details would you view in a certificate to check if it is a trustworthy website?
0
votes
0answers
316 views

SSL input filter read failed

Am using apache-httpd-2.4.3 in Red Hat Enterprise Linux Server release 5.5 (Tikanga). when am trying to hit browser using URL, getting this messages in webserver's ssl_error_log. [Tue Feb 25 ...
0
votes
0answers
40 views

Why the indicator for https condition at left side of URL bar alerted in yellow

Why the indicator for https condition at left side of URL bar alerted in yellow I would like to know why the indicator for https condition at left side of URL bar alerted in yellow even when I just ...
1
vote
1answer
16 views

What is the proper handling of an SSL request where SSL is not enabled?

Quick question. I have a server I am managing which does NOT use https. When I attempt to go to the website with an https url, I get a bizzarre error which is the result of the fact that I have more ...