SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

3
votes
0answers
583 views

MITM the Android emulator

I am trying to man-in-the-middle the Android emulator so I can decrypt the SSL-traffic with sslsniff. The problem is that the traffic doesn't seem to get routed through sslsniff, even when I have ...
3
votes
0answers
1k views

SSL timeout on some sites, across all browsers, on Mac OS X Snow Leopard

For the past several weeks, I've been receiving "Error 7 (net::ERR_TIMED_OUT): The operation timed out" when I attempt to connect to either Twitter or Paypal via SSL. I get this specific error in ...
2
votes
0answers
74 views

Strange null bytes in CN from openssl req

I need to send CSR (certificate signing request) to the SSL authority for our wildcard domain SSL certificate. I see strange values in the CN (common name) field, for example ...
2
votes
0answers
16 views

Unable to browse to certain sites

I have a few guests on a XenServer host, and some sites ( both SSL and non SSL ) cannot be accessed by the XenHost and the Guests. Other machines on the same network can access these sites just fine, ...
2
votes
0answers
29 views

How does one know if the Mail app on OSX is using SSL to connect to your email account or not?

I set up an email account, which is supposed to use SSL. But while setting it up Mail said that it "Could not send the password securely" to the server, and that If I send the password other people ...
2
votes
0answers
208 views

Why doesn't Firefox accept different Ports for SSL encryption other than 443

There is an IIS Webserver with different Sites (SSL Binding) because I can't configure IIS to listen on same Address and Port with different Certificates so I set the SSL Port direction in the ...
2
votes
0answers
79 views

SSL cert owner != localhost after creating SSH tunnel

I use an SSH tunnel to connect to my work's mail server, then tell my mail client to connect to server "localhost" on port "1993" (the port I chose for the tunnel). I have two different Ubuntu Precise ...
2
votes
0answers
566 views

Chrome ignores some imported certificates

On Windows 7 with Chrome 30. I have a few websites running on localhost over SSL. Visiting them always displays the standard "The site's security certificate is not trusted!" message from Chrome. I ...
2
votes
0answers
1k views

Establish https on nonstandard port

I'm trying to estamblish https on port 55434 (different than standard 443). My nginx configuration looks like this: server { server_name example.org; listen 55434 ssl; ssl ...
2
votes
0answers
350 views

Decode SSL packets in WireShark

I have cert.cer, base64 x509 and a Wireshark dump in .pcap format. The packets are encoded, so how do I decode them? Now: [site-ip],443,http,xe.cer but it's still not working.
2
votes
0answers
3k views

Disable SSL hostname check in Chrome

How I disable SSL certificate error when CN does not match DNS name in Chrome? In IE, this is done by Tools -> Internet Options -> Advanced (tab) -> Scroll down to section "Security" -> checkbox: ...
1
vote
0answers
190 views

Mac OS X Yosemite and Client SSL Certificates

Ever since I upgraded from Mavericks to Yosemite, my SSL Client Certificates have stopped working in certain places. They still work in web browsers and in wget, but they have stopped working in curl ...
1
vote
0answers
42 views

Force browser to use HTTP because of HTTP proxy

I have a lot of HTTP proxies and I cannot access websites that are using SSL through those proxies. I have no access to configuring the proxies, so is it possible to force Firefox (in my case) to ...
1
vote
0answers
325 views

IIS 8.5 TLS 1.2 not working

I have Windows 8.1 with IIS 8.5 and have run the script from http://www.hass.de/content/setup-your-iis-ssl-perfect-forward-secrecy-and-tls-12 to enable TLS 1.2, but Qualys SSLLabs says my server ...
1
vote
0answers
31 views

Why does Thunderbird permanently asks to “verify xb7481.xb7.serverdomain.org:143”?

After using Thunderbird for 5+ years now, I suddenly get this weird popup asking to "Verify this security exception rule" [translated from german]. This happens without any reason, without looking at ...
1
vote
0answers
1k views

NET::ERR_CERT_DATE_INVALID error in Chrome when browsing python.org or github.com

Since one of the latest chrome updates, I'm getting this error that does not allow me to access some webs such as python.org or github.com. I've googled the problem but they say that it is generated ...
1
vote
0answers
232 views

GnuTLS error -15: An unexpected TLS packet was received when setting up vsftpd with SSL

I have an Ubuntu 14.04 on EC2 with vsftpd 3.0.2 I have set up the SSL certs and my vsftpd.conf is: listen=YES anonymous_enable=NO local_enable=YES write_enable=YES dirmessage_enable=YES ...
1
vote
0answers
124 views

Not using CONNECT for SSL with Squid proxy

I want to disable encryption between my browser and my Squid so that I can get Squid to cache the pages. As using my own server and SSH port forw I'm not that worried about security. I already tried ...
1
vote
0answers
9 views

How to control SSL automatic activities in Wordpress php files

I have domain with one sub-domain. The domain has installed SSL with valid certificate but sub-domain doesn't have it. I installed two Wordpress, one for domain and one for sub-domain (clone it to ...
1
vote
0answers
234 views

nginx - ssl and www redirect configuration

this is related to: http://stackoverflow.com/questions/24538973/django-allowed-hosts-error-for-www-domain-and-ip-address i'm attempting to redirect www and non-ssl requests to ssl non-www domain for ...
1
vote
0answers
1k views

How to properly configure SSL certificates on a Synology NAS?

While Synology DSM is a wonderful product, that was designed to be easy to be used, it seems that there a few areas where it lacks documentation (even from online sources). In fact most of the ...
1
vote
0answers
99 views

Java keyTool - append primary/secondary intermediate certificates to key store

I have already created a keystore (server.jks in the image) having imported the relevant key-pair. keytool -importkeystore -srckeystore server.p12 -destkeystore server.jks -srcstoretype pkcs12 I ...
1
vote
0answers
41 views

Is there a way to quickly disable all root certificates in Windows 7?

I'd like to temporarily disable all trusted root certificates and wondering if there is a quicker way than going through every single one of them, right-click Properties and selecting "Disable all ...
1
vote
0answers
731 views

SSL connection error when browsing Facebook and Twitter

I get this error not always but most of the times I try to go to Facebook or Twitter: SSL connection error Unable to make a secure connection to the server. This may be a problem with the ...
1
vote
0answers
25 views

Remote management on WRT630N via HTTPS

I have a Linksys WRT630N wireless router and am trying to configure remote management via HTTPS. I've chosen a nonstandard port and can successfully connect and manage the router remotely via HTTP, ...
1
vote
0answers
136 views

GnuTLS test 'chat' equivalent of OpenSSL s_client s_server

How can I set up a test encrypted "chat" with GnuTLS, equivalent to the OpenSSL s_client and s_server using GPG credentials? I would like to tell GnuTLS-serv and -cli to use keys generated with GPG ...
1
vote
0answers
1k views

Chrome and Outlook can only make secure connections when user account has admin privileges

I have a co-worker who is set up as an admin user under Win XP SP3 and I'm trying to switch her to being a restricted user. The short story is that when I switch her account to restricted, Chrome ...
1
vote
0answers
104 views

Apache configured for HSTS, but SSLLabs/Chrome not acknowledging

I'm setting up a webserver and I've been checking it against SSLLabs and Chrome 31 to make sure the security is up to snuff. However neither Chrome nor SSLLabs seems to believe that strict transport ...
1
vote
0answers
94 views

SSL certificate for CNAME record

I have the CNAME record images.bob.com, which points to the images.susan.co.uk (images.bob.com. 1800 IN CNAME images.susan.co.uk.). I would like to ask for issuing SSL certificate for the ...
1
vote
0answers
1k views

SSL Error after upgrading to Windows 8.1

After upgrade my Windows 8 to Windows 8.1, I got this SSL Error: ...and this I have did some research and tried to change my system time up to date, reset my modem and use wireshark to see if ...
1
vote
0answers
585 views

CIFS share via LDAP + SSL

I have NAS drive which is bound to an Open Directory LDAP server for authentication with SSL enabled. The NAS allows for CIFS shares to be accessed via LDAP authentication. (in this case the NAS is a ...
1
vote
0answers
41 views

How to only accept certificates issued by user-specified CA per domain?

Question Is it possible in Chromium or Firefox to only accept SSL certificates issued by a user-specified CA for a specific domain? Background When you have set up your own certificate authority ...
1
vote
0answers
80 views

Using Apache as a debug proxy for https traffic

I know that I should be using mitmproxy (or Charles, or Fiddler, or Burp Proxy), and that I can use Squid, but is it possible to use Apache to debug out going https traffic from my computer? That is, ...
1
vote
0answers
207 views

How to run secure voip traffic without using vpn

I use quintum tenor for voip traffic using VPN SSL Tunnel. VPN server is based in another country. VPN used enough bandwidth, and we need to reduce bandwidth consumption. Is there any SECURE way to ...
1
vote
0answers
165 views

Weird redirection caused by SSL in all browsers

I have 2 websites, mydomain.com and mydomain.co. Here is the comparison of the 2 websites. mydomain.com | production site | purchased SSL certification from GoDaddy mydomain.co | development site ...
1
vote
0answers
1k views

Redirect IP to url for ISPConfig 3 administration

I am running a debian machine with ISPConfig 3.0.4.3. Yesterday I purchased a RapidSSL wildcard certficate and want to make sure my IPSConfig always loads the admin.mydomain.net url. Even if the user ...
1
vote
0answers
92 views

Installing a custom Root authority certificate for a Service Application

I have an Windows service application, that executes under a specific user account, that calls a remote web service via HTTPS. The certificate the remote server uses is issued by a Root authority ...
1
vote
0answers
449 views

Preventing Internet Explorer from “remembering” an old SSL certificate

A website I'm using has switched recently from a GoDaddy SSL certifcate to a StartCom certificate, which works fine in most cases. The original GoDaddy certificate expired last year. However, in ...
1
vote
0answers
377 views

Self-Signed Certificate and IIS 6.0, How to generate a Client Certificate

I am looking at generating a self-signed certificate, and only allow users who has client certificate installed on my web server. I am using IIS 6.0 with selfSSL to generate my .pfx web server ...
0
votes
0answers
8 views

How to get current SSH passprase from Apache2 server?

I’ve fogotten passphrase for my SSL certificate private key, however, I’ve got running Apache sever, that uses that key. Is there any way to get passprase or unencrypted version of private key from ...
0
votes
0answers
44 views

Why Kaspersky 2015 is not installing Kaspersky's Certificate in Mozilla Firefox browser

I've been using Kaspersky Internet Security for a few years without any issues. but when I updated a few months ago from 2014 to 2015 I noticed that my browser (Firefox) was warning me when I was ...
0
votes
0answers
29 views

SSLStrip and WWWW Issue

I have been playing around with the mana-toolkit (https://github.com/sensepost/mana) which uses a revised form of SSLstrip to support HSTS. I have noticed that SSLStrip adds an extra "w" to the ...
0
votes
0answers
7 views

ApacheDS: Where is the CA certificate?

ApacheDS auto-installs with an automatically generated certificate. For testing purposes, I'd like to just use this for now, but in order to trust it, I need the CA cert ...
0
votes
0answers
32 views

Mumble Server (Murmur) 3rd Party SSL Installation on Ubuntu

I recently purchased a wildcard certificate for my website and would like to also add it to my murmur server but I am having trouble finding out the proper steps to take to do this. The certificate I ...
0
votes
0answers
15 views

No login input in Chrome on SSL (which is “blocking” Anno2070)

I bought anno2070 two days ago on steam but couldn't play since. The game keeps asking me for the activation code which I enter and it accepts but than it redirects me to the activation window. I ...
0
votes
0answers
37 views

IRC over SSL on Weechat

So I'm trying to see up SSL for IRC through weechat, but have been having issues. I've generated a .pem file for my nick and also have installed the ca-bundle.crt, but keep getting a TLS handshake ...
0
votes
0answers
6 views

Adding a certificate to be used by MS SQL SERVER

I have MS SQL SERVER 2012 installed on my Windows 8.1. Now I wanted to enable SSL encryption in it. What I did was: 1. Run - > MMC 2. Add snap-in 3. Added certificate (personal) for local computer ...
0
votes
0answers
4 views

Is it safe to use the same RSA key pair at the sender and the recipient?

Most questions on the internet are about using the same certificate on multiple clients, what about using the same certificate between two servers communicating with each other for example? Would that ...
0
votes
0answers
120 views

testing cipher suite using openssl for tomcat server is resulting in wrong manner

I am using tomcat 6.0.28. and I have configured connector with "TLS_ECDHE_RSA_WITH_RC4_128_SHA" but when i am testing whether cipher is suited as follows I am getting following error: > ...
0
votes
0answers
40 views

Guacamole, Tomcat, HTTPS-setup fails due to issues with certification

I'm using guacamole (http://guac-dev.org/) to access (parts of) my home (Debian) computer clientless, on the go. From my work computer (University Network) the screen is however not updating and only ...