SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

3
votes
0answers
629 views

MITM the Android emulator

I am trying to man-in-the-middle the Android emulator so I can decrypt the SSL-traffic with sslsniff. The problem is that the traffic doesn't seem to get routed through sslsniff, even when I have ...
3
votes
0answers
1k views

SSL timeout on some sites, across all browsers, on Mac OS X Snow Leopard

For the past several weeks, I've been receiving "Error 7 (net::ERR_TIMED_OUT): The operation timed out" when I attempt to connect to either Twitter or Paypal via SSL. I get this specific error in ...
2
votes
0answers
66 views

MAMP in MAC Yosemite SSL,WSGI

I installed MAMP after testing with XAMPP , I require to install Openssl or generate SSL certificates and a controller in wsgi run in XAMPP not make it but I wonder if someone can help me configure ...
2
votes
0answers
32 views

SSL issue: The private key did not match the public key provided

I followed the instructions outlined here by amazon. A quick summary: Created a private key openssl genrsa -out my-private-key.pem 2048 Created a CSRopenssl req -sha256 -new -key ...
2
votes
0answers
30 views

SSL FAIL Mac to Security update 2015-004

After upgrading my Mac to Security update 2015-004 I started experiencing issues on website that use Thawte SSL certificate and with mandrillapp SMTP which as well use Thawte certificate. I'm running ...
2
votes
0answers
16 views

How to instruct SVN print its CA list?

This is related to What does Subversion use for its CA list?. I want to have SVN tell me the CAs its using. svn help does not appear to discuss it (but I may have missed it, since its not obvious in ...
2
votes
0answers
143 views

What is causing warning on a certificate's basicConstraints?

I created a self signed server certificate using OpenSSL's req -x509 command and a CONF file. The CONF file is shown below. When I examine the certificate using Microsoft certificate viewer, its ...
2
votes
0answers
540 views

Mac OS X Yosemite and Client SSL Certificates

Ever since I upgraded from Mavericks to Yosemite, my SSL Client Certificates have stopped working in certain places. They still work in web browsers and in wget, but they have stopped working in curl ...
2
votes
0answers
116 views

Strange null bytes in CN from openssl req

I need to send CSR (certificate signing request) to the SSL authority for our wildcard domain SSL certificate. I see strange values in the CN (common name) field, for example ...
2
votes
0answers
17 views

Unable to browse to certain sites

I have a few guests on a XenServer host, and some sites ( both SSL and non SSL ) cannot be accessed by the XenHost and the Guests. Other machines on the same network can access these sites just fine, ...
2
votes
0answers
29 views

How does one know if the Mail app on OSX is using SSL to connect to your email account or not?

I set up an email account, which is supposed to use SSL. But while setting it up Mail said that it "Could not send the password securely" to the server, and that If I send the password other people ...
2
votes
0answers
301 views

Why doesn't Firefox accept different Ports for SSL encryption other than 443

There is an IIS Webserver with different Sites (SSL Binding) because I can't configure IIS to listen on same Address and Port with different Certificates so I set the SSL Port direction in the ...
2
votes
0answers
85 views

SSL cert owner != localhost after creating SSH tunnel

I use an SSH tunnel to connect to my work's mail server, then tell my mail client to connect to server "localhost" on port "1993" (the port I chose for the tunnel). I have two different Ubuntu Precise ...
2
votes
0answers
846 views

Chrome ignores some imported certificates

On Windows 7 with Chrome 30. I have a few websites running on localhost over SSL. Visiting them always displays the standard "The site's security certificate is not trusted!" message from Chrome. I ...
2
votes
0answers
2k views

How to tell `links` to ignore expired SSL certificate and proceed?

I'm using the links browser and trying to connect to an HTTPS site. I then get: Verification failure: certificate has expired this is "fine" (i.e. was decided to be tolerated) for this ...
2
votes
0answers
2k views

Establish https on nonstandard port

I'm trying to estamblish https on port 55434 (different than standard 443). My nginx configuration looks like this: server { server_name example.org; listen 55434 ssl; ssl ...
2
votes
0answers
379 views

Decode SSL packets in WireShark

I have cert.cer, base64 x509 and a Wireshark dump in .pcap format. The packets are encoded, so how do I decode them? Now: [site-ip],443,http,xe.cer but it's still not working.
2
votes
0answers
3k views

Disable SSL hostname check in Chrome

How I disable SSL certificate error when CN does not match DNS name in Chrome? In IE, this is done by Tools -> Internet Options -> Advanced (tab) -> Scroll down to section "Security" -> checkbox: ...
1
vote
0answers
36 views

Running two FTP sites both with SSL on the same server?

I have built an internal ftp server on our network and am having it be accessed from the outside. The server is running 2012 R2 and has IIS 8.5. When I set up the sites I have the data channel open ...
1
vote
0answers
23 views

How do I undo an apache2 ubuntu HTTP HTTPS redirect?

I've got an apache2 instance running, with HTTPS redirect running: <IfModule mod_ssl.c> <VirtualHost *:80> ServerAdmin support@myco.com DocumentRoot "/var/www" ServerName ...
1
vote
0answers
86 views

Chrome ignores self-signed SSL certificates in MacOS

I'm trying to get a self-signed certificate from a Raspberry Pi accepted by Chrome (42.0.2311.90) in OSX 10.10.2. A method I've found involves: click the (red, crossed) lock symbol left of the URL ...
1
vote
0answers
76 views

Meaning of “dovecot: ssl-params: Error: epoll_ctl(del, 7) failed”?

During dovecot regeneration of ssl-params I noticed this sequence in my log file: Mar 13 10:37:37 mail dovecot: ssl-params: Generating SSL parameters Mar 13 10:37:52 mail dovecot: ssl-params: Error: ...
1
vote
0answers
131 views

nginx http to https proxy with self-signed certificate

I have an nginx proxy to redirect http requests with a specified port to another https url. Here is my configuration so far: server { listen 59848; location / { resolver 8.8.8.8; ...
1
vote
0answers
162 views

I destroyed my Mac's PHP setup: SSL certification fails

Long story short, I deleted the PHP symlink on my Mac, and replaced it with a symlink from XAMPP. Now it seems that there's a problem with my SSL configuration or what seems to me, a lack thereof. ...
1
vote
0answers
27 views

ApacheDS: Where is the CA certificate?

ApacheDS auto-installs with an automatically generated certificate. For testing purposes, I'd like to just use this for now, but in order to trust it, I need the CA cert ...
1
vote
0answers
210 views

IRC over SSL on Weechat

So I'm trying to see up SSL for IRC through weechat, but have been having issues. I've generated a .pem file for my nick and also have installed the ca-bundle.crt, but keep getting a TLS handshake ...
1
vote
0answers
55 views

Force browser to use HTTP because of HTTP proxy

I have a lot of HTTP proxies and I cannot access websites that are using SSL through those proxies. I have no access to configuring the proxies, so is it possible to force Firefox (in my case) to ...
1
vote
0answers
808 views

IIS 8.5 TLS 1.2 not working

I have Windows 8.1 with IIS 8.5 and have run the script from http://www.hass.de/content/setup-your-iis-ssl-perfect-forward-secrecy-and-tls-12 to enable TLS 1.2, but Qualys SSLLabs says my server ...
1
vote
0answers
36 views

Why does Thunderbird permanently asks to “verify xb7481.xb7.serverdomain.org:143”?

After using Thunderbird for 5+ years now, I suddenly get this weird popup asking to "Verify this security exception rule" [translated from german]. This happens without any reason, without looking at ...
1
vote
0answers
348 views

GnuTLS error -15: An unexpected TLS packet was received when setting up vsftpd with SSL

I have an Ubuntu 14.04 on EC2 with vsftpd 3.0.2 I have set up the SSL certs and my vsftpd.conf is: listen=YES anonymous_enable=NO local_enable=YES write_enable=YES dirmessage_enable=YES ...
1
vote
0answers
172 views

Not using CONNECT for SSL with Squid proxy

I want to disable encryption between my browser and my Squid so that I can get Squid to cache the pages. As using my own server and SSH port forw I'm not that worried about security. I already tried ...
1
vote
0answers
10 views

How to control SSL automatic activities in Wordpress php files

I have domain with one sub-domain. The domain has installed SSL with valid certificate but sub-domain doesn't have it. I installed two Wordpress, one for domain and one for sub-domain (clone it to ...
1
vote
0answers
290 views

nginx - ssl and www redirect configuration

this is related to: http://stackoverflow.com/questions/24538973/django-allowed-hosts-error-for-www-domain-and-ip-address i'm attempting to redirect www and non-ssl requests to ssl non-www domain for ...
1
vote
0answers
1k views

How to properly configure SSL certificates on a Synology NAS?

While Synology DSM is a wonderful product, that was designed to be easy to be used, it seems that there a few areas where it lacks documentation (even from online sources). In fact most of the ...
1
vote
0answers
147 views

Java keyTool - append primary/secondary intermediate certificates to key store

I have already created a keystore (server.jks in the image) having imported the relevant key-pair. keytool -importkeystore -srckeystore server.p12 -destkeystore server.jks -srcstoretype pkcs12 I ...
1
vote
0answers
50 views

Is there a way to quickly disable all root certificates in Windows 7?

I'd like to temporarily disable all trusted root certificates and wondering if there is a quicker way than going through every single one of them, right-click Properties and selecting "Disable all ...
1
vote
0answers
899 views

SSL connection error when browsing Facebook and Twitter

I get this error not always but most of the times I try to go to Facebook or Twitter: SSL connection error Unable to make a secure connection to the server. This may be a problem with the ...
1
vote
0answers
27 views

Remote management on WRT630N via HTTPS

I have a Linksys WRT630N wireless router and am trying to configure remote management via HTTPS. I've chosen a nonstandard port and can successfully connect and manage the router remotely via HTTP, ...
1
vote
0answers
158 views

GnuTLS test 'chat' equivalent of OpenSSL s_client s_server

How can I set up a test encrypted "chat" with GnuTLS, equivalent to the OpenSSL s_client and s_server using GPG credentials? I would like to tell GnuTLS-serv and -cli to use keys generated with GPG ...
1
vote
0answers
2k views

Chrome and Outlook can only make secure connections when user account has admin privileges

I have a co-worker who is set up as an admin user under Win XP SP3 and I'm trying to switch her to being a restricted user. The short story is that when I switch her account to restricted, Chrome ...
1
vote
0answers
126 views

Apache configured for HSTS, but SSLLabs/Chrome not acknowledging

I'm setting up a webserver and I've been checking it against SSLLabs and Chrome 31 to make sure the security is up to snuff. However neither Chrome nor SSLLabs seems to believe that strict transport ...
1
vote
0answers
127 views

SSL certificate for CNAME record

I have the CNAME record images.bob.com, which points to the images.susan.co.uk (images.bob.com. 1800 IN CNAME images.susan.co.uk.). I would like to ask for issuing SSL certificate for the ...
1
vote
0answers
1k views

SSL Error after upgrading to Windows 8.1

After upgrade my Windows 8 to Windows 8.1, I got this SSL Error: ...and this I have did some research and tried to change my system time up to date, reset my modem and use wireshark to see if ...
1
vote
0answers
734 views

CIFS share via LDAP + SSL

I have NAS drive which is bound to an Open Directory LDAP server for authentication with SSL enabled. The NAS allows for CIFS shares to be accessed via LDAP authentication. (in this case the NAS is a ...
1
vote
0answers
51 views

How to only accept certificates issued by user-specified CA per domain?

Question Is it possible in Chromium or Firefox to only accept SSL certificates issued by a user-specified CA for a specific domain? Background When you have set up your own certificate authority ...
1
vote
0answers
89 views

Using Apache as a debug proxy for https traffic

I know that I should be using mitmproxy (or Charles, or Fiddler, or Burp Proxy), and that I can use Squid, but is it possible to use Apache to debug out going https traffic from my computer? That is, ...
1
vote
0answers
242 views

How to run secure voip traffic without using vpn

I use quintum tenor for voip traffic using VPN SSL Tunnel. VPN server is based in another country. VPN used enough bandwidth, and we need to reduce bandwidth consumption. Is there any SECURE way to ...
1
vote
0answers
180 views

Weird redirection caused by SSL in all browsers

I have 2 websites, mydomain.com and mydomain.co. Here is the comparison of the 2 websites. mydomain.com | production site | purchased SSL certification from GoDaddy mydomain.co | development site ...
1
vote
0answers
1k views

Redirect IP to url for ISPConfig 3 administration

I am running a debian machine with ISPConfig 3.0.4.3. Yesterday I purchased a RapidSSL wildcard certficate and want to make sure my IPSConfig always loads the admin.mydomain.net url. Even if the user ...
1
vote
0answers
93 views

Installing a custom Root authority certificate for a Service Application

I have an Windows service application, that executes under a specific user account, that calls a remote web service via HTTPS. The certificate the remote server uses is issued by a Root authority ...