1
vote
2answers
38 views

Download self-signed server certicate

Summary I need to download a self-signed certificate from a server, to create a .JKS-file to use as truststore in an application. How can I do that from a Red Hat server? What I have tried I have ...
0
votes
0answers
97 views

curl: (35) error:0200100D:system library:fopen:Permission denied

In continuation with this question... I get curl error as above only as an unprivileged user on my system. However, on searching I found the above link which asks me to check permissions for ...
0
votes
1answer
48 views

How to update CRL automatically?

I have the following issue: I have a self-signed CA (certificate authority) mainly for persoanl use (mail encryption and signing, ...). I created several ceertificates and the CRLs (which are empty ...
0
votes
0answers
92 views

Compiling squid 3.3.11 for linux 6 enterprice with dynamic certificate options enabled, with error [testPreCompiler.o] Error 1

Maybe someone can help shed some light on my current issue. trying to complie squid 3.3.11 on linux 6 error is: [root@rh6squid-proxy squid-3.3.11]# make check Making check in compat make[1]: Entering ...
0
votes
1answer
239 views

Secure web proxy using squid

I Recently installed squid as a web proxy, it works fine. But the problem is that connection to the proxy server is not encrypted, so it's visible to any mans in the middle by DPI (Deep Packet ...
1
vote
1answer
45 views

SSL not work for virtual IP

I have a website which was deployed with three real web servers and a load balancer with a virtual IP. I have applied an SSL certificate from a CA and imported to Tomcat using OpenSSL using the ...
0
votes
0answers
94 views

iptables messing up Tomcat?

I encountered the following problem(s) using Tomcat 7 with iptables on. 1) Namely, there's this Tomcat 7 instance that I run on server-1 (directly exposed), and this Tomcat instance hosts a REST ...
0
votes
0answers
96 views

Fedora Linux 18 - puppet 3.1.1 Certificate issue - unprintable or non-ASCII

I have searched all over the Puppet errata documentation and I've tried regenerating the certs, reinstalling, deleting and regenerating the certificates. When I try to connect to the Puppet ...
2
votes
1answer
71 views

Fedora 8: rubygems.org certificate validation failure. How to install GeoTrust CA?

Trying to get a gem: $gem install puppet ERROR: Could not find a valid gem 'puppet' (>= 0), here is why: Unable to download data from https://rubygems.org/ - SSL_connect returned=1 ...
0
votes
0answers
211 views

How can I add a centralised CA SSL certificate repository to a QNAP NAS Linux build?

I would like to install a centralised CA SSL certificate repository to my QNAP NAS Linux build (TS-209II Pro, firmware version 3.3.2 build 0918T). Currently all HTTPS requests fail, as the CAs can ...
4
votes
1answer
3k views

Can I get around using “pip install --cert”?

Trying to figure out if there is a way that I can avoid using the --cert flag to pip when I am installing packages at work. There is some issue with the proxy that only allows me to download the ...
0
votes
0answers
52 views

SSL Certificate updates

In Windows or Linux system, how does the SSL certificate gets "updated" or "revoked"? By default some certificate comes while installing the OS / Browser. But later when that needs to be updated how ...
-1
votes
1answer
263 views

Can I run two FTP sites on one server using two different IP addresses?

So we currently have our FTP site running on one computer (Mac OS-X) with one IP address. We are trying to host a second FTP site running off of the same computer, but with a different IP address. Is ...
0
votes
1answer
183 views

Error with curl

I'm having this error with curl: curl https://www.google.com -v * About to connect() to www.google.com port 443 (#0) * Trying 2607:f8b0:400e:c01::67... * Failed to connect to ...
0
votes
1answer
416 views

sshd service listening on multiple ports

Well, I need use multiple and distinct ports where sshd will be listening, for distincts clients. Each client connect a different ssh port in real time. Can I put sshd service listening on multiple ...
2
votes
1answer
2k views

Permissions for SSL key?

I'm trying to set up a secure connection (https) in nginx. But I'm a bit worried about the private key's permissions, which aren't mentioned in any tutorial. Should I change them? To what?
0
votes
2answers
105 views

Secure telnet for POP3 and others

I need a command to connect to POP3 server, set startTLS, and get secure connection. I neet something to use like telnet. Is there any program that can achieve it? --edit I'm just trying to write ...
1
vote
1answer
1k views

Why do I have untrusted certificates for Google, Yahoo, Mozilla and others?

In the HTTPS/SSL section of chrome://chrome/settings, I see the following: What does this mean, and is there something wrong? I have a basic understanding of SSL/TLS - I'm not claiming to be ...
0
votes
1answer
823 views

Opening firewall to incoming port 443

I recently set up the ufw firewall on a Linux machine so that outgoing connections are allowed, incoming connections are denied, and denied connections are logged. This seems to work fine for most ...
0
votes
1answer
2k views

Curl Couldn't resolve host for HTTPS

I am trying to use curl on a Red Hat Enterprise Linux Server release 6.1. When I try to use URL with HTTPS it gives an error message "Couldn't resolve host". But for the same URL when tried with HTTP ...
0
votes
1answer
1k views

how to install libio-socket-ssl-perl on tiny core Linux?

I found this commands on another pages: apt-get install libio-socket-ssl-perl tce-load -wi libio-socket-ssl-perl but doesnt work. Any idea to install libio-socket-ssl-perl on tiny core ...
0
votes
2answers
402 views

Mozilla Sync (wsgi via apache) through SSL causes error 500, no log entries

I have been following (among others) these instructions to setup a Mozilla sync server. It runs fine when I connect to http://mydomain.com:5000/ but when I use https instead of http and remove the ...
0
votes
2answers
1k views

Is there a tool to decrypt all SSL/SSH traffic originating from this computer?

I expect the program to scan memory of all local processes (or debug them, or provide crypto libraries with hook like in LD_PRELOAD) and use keys to decrypt traffic, making it analysable with ...
0
votes
2answers
943 views

HTTPS not working on custom port

I am doing this as a test for bigger deployment. I have Apache running on CentOS5 in a clean VM (just a few tools installed, PHP and such). If mod_ssl is set to listen on 443 in ...
1
vote
1answer
267 views

Corrupted (SSL) keystore / spotting bogus SSL certificates

Disclaimer: I am new to SSL, find it a little confusing, and need an answer somewhat quickly. I was told that there was a danger that my "keystore" might be corrupted, so I am trying to examine it ...
1
vote
1answer
305 views

Syncrify and SSL support

I installed the Syncrify server and client on a Linux box. From what I've read on their site, Syncrify comes with a built in self-signed SSL certificate. However after setting the SSL port on the ...
4
votes
1answer
590 views

How to add self-signed certificates to different browsers?

How can I add self-signed certificates to e.g: Google Chrome under Linux (from the command line)? Thank you!
0
votes
1answer
577 views

How can I create an external SSL wrapper/tunnel page for an insecure webpage behind a firewall?

I have an security cam with a built-in webpage inside my home network. That camera is using basic HTTP authentication instead of SSL. I want to be able to access the camera's webpage from outside my ...
2
votes
8answers
865 views

any emacs like tool while working via SSH

I use emacs for coding and other stuffs. I have now a website which I have to do so many file editing work on ssh connection. It was difficult for me to learn vi or nano. I like to know if any tools ...
2
votes
1answer
248 views

SSL TurnKey Linux

I have a TurnKey Mantis linux appliance and I want to make the connection secure.I've bought from GlobeHost a certificate and got the following files :sub-domain_domain_net.ca-bundle and ...
19
votes
6answers
62k views

Add permanent SSL certificate exception in Chrome (Linux)

I have a problem with a website that has an SSL certificate which doesn't correspond to the website domain. Chrome gives me a warning for this website (and rightly so), which I have to ignore ...
2
votes
1answer
1k views

SSL VPN Command Line Client

How can I run the Array SSL VPN client via the command line w/o using a browser? I want to run the vpn client on a headless linux box.