Tagged Questions
1
vote
0answers
147 views
Establish https on nonstandard port
I'm trying to estamblish https on port 55434 (different than standard 443). My nginx configuration looks like this:
server {
server_name example.org;
listen 55434 ssl;
ssl ...
0
votes
1answer
96 views
Using HTTPS with a squid proxy
I have a squid proxy set up on a few different servers. I am behind it on most applications (firefox, other apps that allow proxy config, etc). right now I'm not using https, and if I look in ...
30
votes
2answers
1k views
Why do some websites show the company name next to the URL?
Some websites show the company name next to the URL (in Chrome) and some don't.
How do I set this up for my website? Is there a reason why or why I wouldn't want to do this?
-1
votes
3answers
135 views
How ISP sees the HTTPS traffic? [duplicate]
If I am visiting a https url say https://www.youtube.com/watch?v=7HKoqNJtMTQ. What exactly my ISP will see ?
0
votes
0answers
173 views
Webdav between a OS X Server (self-signed certificate) and Windows 7?
Problem data:
I have two freshly installed OS X Server 10.8.2 and Windows 7 SP1 (all updates to date).
A self signed certificate on the OS X Server generated automatically and working for the exact ...
0
votes
2answers
74 views
Can SSL connection send my IP address to the host?
I don't have enough information about the difference between HTTP and HTTPS, but
can an HTTPS request send my IP address to the host and store it?
What are the kinds of data that are being ...
0
votes
1answer
33 views
65K ports and SSL? [closed]
People conencts to a Bank using SSL.
Bank is openning its 443 port.
but there is only 1 port of 443 , but it is a server so I guess he is using also the other ports.
But thats means that it can ...
0
votes
0answers
166 views
Issue with SSL certificate in internet explorer 8, popup does not appear
I need to log into a https website using SSL certificates.
If I try to do this in mozilla firefox, the certificate popup appears and everything works well. Problem is, that application does not ...
1
vote
0answers
44 views
Using Apache as a debug proxy for https traffic
I know that I should be using mitmproxy (or Charles, or Fiddler, or Burp Proxy), and that I can use Squid, but is it possible to use Apache to debug out going https traffic from my computer? That is, ...
0
votes
0answers
55 views
Why Gmail contains unencrypted resources. [closed]
I just reinstalled Google Chrome and when I go to Gmail the padlock in the Omnibox will change to yellow before I do anything. But before the reinstallation Chrome always show green padlock if I do ...
0
votes
0answers
152 views
SSL encryption for Android app [closed]
I am looking for a way to secure my information that I need to send from my Android phone to my home server.
I know that SSL can be used to encrypt a URL but what prevents the user from just doing ...
0
votes
0answers
174 views
Iptables - having trouble opening port 443
I am attempting to set up https, but I am having difficulty opening that port.
Nmap scan report for localhost (127.0.0.1)
Host is up (0.000073s latency).
PORT STATE SERVICE
443/tcp closed https
...
6
votes
3answers
8k views
The certificate is not trusted because no issuer chain was provided
Could anyone explain the meaning of this error message in plain English?
Should I add an exception or I should not continue on this website?
Technical details: the URL is here, the browser is ...
8
votes
1answer
4k views
How can I disable SSL (https) google search in FireFox?
I know that Firefox 14 has enabled Secure Sockets Layer (SSL or https) search for its Google search plug-in. How can I disable it?
Thanks,
0
votes
1answer
1k views
Curl Couldn't resolve host for HTTPS
I am trying to use curl on a Red Hat Enterprise Linux Server release 6.1. When I try to use URL with HTTPS it gives an error message "Couldn't resolve host". But for the same URL when tried with HTTP ...
1
vote
1answer
390 views
Sniffing SSL Traffic with Wireshark Locally
I ahve an application that is submitting and recieving information via HTTPS. If I place wireshark on the same box and the client. Will I be able to decrypt all of the data within the communication ...
0
votes
0answers
141 views
Firefox says self-signed HTTPS sites error - The URL is not valid and cannot be loaded
Recently Firefox has started telling me that any HTTPS sites which use self-signed certs have Invalid URLs, where as the exact same URLs work fine in Internet Explorer 9. Internet Explorer at least ...
1
vote
1answer
45 views
Origin of SSL identification string on certain HTTPS sites
Some SSL protected sites have a fancy identification string in the browser navigation bar. Where does it come from? Is it the "Common Name" field in the CSR?
Here's an example:
0
votes
3answers
251 views
How to connect to a NON-HTTP (“custom protocol”) server via HTTPS
I need to install a piece of client software which connects to a custom server (not a http server) on a specific port. But my IT dept are implementing HTTPS and say I must connect via HTTPS.
How ...
2
votes
1answer
2k views
Importing a self-signed SSL certificate on MacOS
I generated a self-signed certificate with openssl and added it to my linux server. I then imported the certificate on my mac with Keychain Access into the System keychain using the settings "Always ...
2
votes
2answers
480 views
Redirect Apache SSL traffic to subdomain with a proper certificate
I currently have a server which has a DynDNS subdomain (let's call it foo.dyn.com). I also have a proper domain with a CNAME pointing to that subdomain (let's call it bar.baz.com). foo.dyn.com has a ...
1
vote
1answer
862 views
How to block specific HTTPS traffic?
According to HTTPS description:
Hypertext Transfer Protocol Secure (HTTPS) is a combination of
Hypertext Transfer Protocol (HTTP) with SSL/TLS protocol. It provides
encrypted communication ...
1
vote
0answers
77 views
Installing a custom Root authority certificate for a Service Application
I have an Windows service application, that executes under a specific user account, that calls a remote web service via HTTPS. The certificate the remote server uses is issued by a Root authority ...
0
votes
1answer
302 views
decrypt local ssl traffic (MacOS)
I am trying to reverse engineer a protocol which uses HTTPS exclusively.
On Windows I was using oSpy to view the plaintext of local SSL packets, but for MacOS I have not been able to find an ...
0
votes
1answer
120 views
SSL-VPN connection out into internet?
Is it possible for me to "rent" a web server, use a cisco AnyConnect client on my machine, create an SSL-VPN tunnel to the server I am renting and then use this to tunnel my internet connection onto ...
1
vote
0answers
235 views
Chrome says “This page contains some resources that are not secure” in all https websites
When I go to Gmail website (it is https), I see a red https with a line in address bar, and when I click on the icon near the URL, There is a sentence "... However, This page contains some resources ...
0
votes
1answer
1k views
Https connection in java
I have successfully generated a keystore using
keytool -genkeypair -alias SomeAlias -keyalg RSA -validity 365 -keystore NAME.keystore -storetype JKS
placed it in tomcat config dir and updated ...
14
votes
9answers
14k views
Mac OS X Lion 10.7.2 update breaks SSL
Summary
After updating from 10.7.1 to 10.7.2, neither Safari nor Google Chrome can load GMail. Spinning Beachballs all around.
The problem isn't GMail; Firefox loads GMail just fine.
The problem ...
1
vote
3answers
545 views
What happens when 's' of HTTPS is removed?
I have this: https://194.16.222.100/ which corresponds to www.skanetrafiken.se.
Using this, although the web browser says that there is a SSL error, I can access the web-page. However, when I remove ...
1
vote
1answer
906 views
TLS 1.0 Unchecked Unable to open GMAIL, HOTMAIL and other Logins?
I am using Firefox 6.02 and Windows 7 x86 version. I was recently unable to log in to Gmail, Hotmail and other such websites. I checked the preferences and figured out there was some security issue as ...
0
votes
1answer
399 views
HTTPS not working on custom port
I am doing this as a test for bigger deployment. I have Apache running on CentOS5 in a clean VM (just a few tools installed, PHP and such).
If mod_ssl is set to listen on 443 in ...
0
votes
2answers
1k views
How to easily deploy HTTPS in ubuntu 10.04?
I have an apache web server running on Ubuntu 10.04 and I would like to switch everything to HTTPS.
2
votes
1answer
652 views
HTTP to HTTPS Tunnel
So the issue is that I have quite a few homebrew scripts/web testing programs that only work with HTTP. The problem is that the website only allows HTTPS connections.
Does anyone know of a way to ...
2
votes
2answers
978 views
How do add a certificate from a self-signed server to trusted certificates in Chrome?
I have a dedicated server with a wiki and want to secure it so nobody can read my articles by sniffing my pages.
I do not want to pay for a valid certificate so I created a self-signed certificate. ...
0
votes
3answers
1k views
I'm receiving an SSL error in various browsers, but I can't find non-SSL content
I'm receiving an error with my SSL connection. Using google chrome I see the following error:
Your connection is encrypted with
128-bit encryption ... however this
page includes other ...
-1
votes
1answer
60 views
How to setup Chrome Browser on MacOS (or Windows) so that only SSL connections are allowed?
Due to security concerns we would like to Chrome Browser on MacOS (or Windows) allows only SSL (https) connections. I.e., if host does not support https then it will not allowed. Is that possible?
2
votes
1answer
216 views
LightHTTPD; how do i disable http so only https is available on a single port?
I have a project that should be available only through ssl connection. It's being served by Lighthttpd, but I can't figure out how to set up the ssl on the port.
When I use the guides I find with ...
5
votes
1answer
508 views
What happened to the Https Lock in Firefox 4?
Previous versions of Firefox used to have a padlock icon in the address bar whenever you browsed to a HTTPS site.
Since Firefox 4 it no longer seems to be there. What happened to it? Is there any way ...
6
votes
2answers
430 views
How to tell which resources are loaded “insecurely” with Chrome using https
I understand this is because I'm loading some stuff via http:// but does that mean a single http reference can't appear in the source? Even in examples like <a href="http://...">...</a>?
...
2
votes
2answers
8k views
SVN over HTTPS and SSL handshake fails
I am trying to checkout from my team's svn server. It requires client side authentication. I'm running Ubuntu 10.04.
Here's what I get:
$ svn checkout https://myproject.myserver.org/svn/project/
...
1
vote
2answers
472 views
How to lock down Win Vista Firewall for HTTPS only access?
When I'm on public WiFi (laptop), I want to configure my firewall through its advanced settings to allow only HTTPS web traffic.
My first attempt was to block incoming and outgoing by default, then ...
2
votes
1answer
347 views
Is HTTPS TLS or SSL?
How to know a HTTPS connection in use is TLS-based or SSL-based?
If I want to use TLS instead of SSL in Apache2, is there anything special to config?
2
votes
0answers
2k views
Disable SSL hostname check in Chrome
How I disable SSL certificate error when CN does not match DNS name in Chrome?
In IE, this is done by Tools -> Internet Options -> Advanced (tab) -> Scroll down to section "Security" -> checkbox: ...
2
votes
1answer
289 views
Are there any good resources that describe how https/SSL/TLS works?
I find it really hard to find online resources which go through the details of the following aspects of SSL work.
Is a certificate of a website signed with the public key of a Certificate Authority, ...
1
vote
1answer
677 views
Upgraded to Chrome 6, and now some SSL sites don't load
I recently auto-updated my laptop (Macbook Pro with 10.6, it it matters) to Chrome 6. My current employer has an annoying firewall that intercepts all incoming traffic, mainly to filter non-work ...
2
votes
1answer
2k views
Open stream over https in VLC and wildcard SSL certificate
I am wondering how to trust a certificate manually in VLC.
My purpose is to open a stream over https. gnutls returns an error: the common name of the certificate sent by the remote site is
...
21
votes
7answers
13k views
Is there an https everywhere add on for chrome, MSIE or safari?
I really like this https everywhere add on for Firefox. But I tend to browser hop, so have similar https-preferring add-ons been released for the other major browsers?
5
votes
4answers
2k views
Force a browser to load the 'https' edition of a website, not the 'http'?
This is similar to this previous question, but I believe it's a bit different*.
Sites like GMail support a preference that pushes all traffic through the SSL edition of the site rather than the ...
1
vote
2answers
202 views
Is the Royal Mail website secure? [closed]
In the UK our postal service drops cards through our mailbox when there is a fee to pay on a item of mail. On this card it gives us a URL to visit to pay the fee, after following the links you get to ...
0
votes
7answers
380 views
Public Key encryption
This is the way I understand how the public key work...Let's say you are on a website and you access the credit card for page. You then encrypt the packet with the public key of that site and the send ...
