SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

3
votes
1answer
342 views

How to make a self-signed client SSL certificate?

Well, how to make a client SSL certificate, which doesn't need an (external) certification authority? Is there a way and is any profit to use elliptic curves for that? What should i do to use it on ...
6
votes
1answer
8k views

Permissions for SSL key?

I'm trying to set up a secure connection (https) in nginx. But I'm a bit worried about the private key's permissions, which aren't mentioned in any tutorial. Should I change them? To what?
0
votes
1answer
575 views

How to create a SSL certificate signed by an intermediate certificate

I am building a web site with HTTPS. The host has both a DNS name and an IP address and I'd like the SSL certificate(s) to cover both. I've been given a certificate that is signed by a trusted party - ...
1
vote
2answers
707 views

How to install SSL for Darwin Streaming Server on OS X Mountain Lion?

I downloaded Darwin Streaming Server and while I'm installing I want to enable SSL, but this requires that I have a valid streaming server SSL certificate installed. How can I install an SSL ...
0
votes
0answers
573 views

Why can't I proxy SSL connections in Charles under Linux (ubuntu)?

I want to proxy some API requests over SSL from a PHP application using Charles Proxy which should allow me to view unencrytped requests. I've done this on Windows before but on Linux, I'm seeing the ...
1
vote
2answers
4k views

changing the pass phrase on a key from openssl

A while ago I created a key with openssl genrsa -aes256 4096 > server.key. The process prompts for a pass phrase. I would now like to change that pass phrase, is that possible?
1
vote
1answer
364 views

Domain email, GMail, Postfix

So, after a long trek around the blog-o-tubes, I arrive here. I'm trying to set up email for my domain. I don't really want to do my own email hosting with my own mailserver, especially since my ...
1
vote
1answer
114 views

What type of ssl certificate to select

I have a commercial site and wanted to change to SSL at least for the logged in users. Hoping someone can provide some advice: I only have one domain, but ideally I'd like to test on our development ...
2
votes
1answer
998 views

AddTrust_External_Root.pem in fedora?

My campus network has switched its wifi network to protected EAP and requires me to provide AddTrust_External_Root.pem as a CA certificate. On Ubuntu the file is found in /etc/ssl/certs but in my ...
0
votes
3answers
38 views

What is the passphrase-file in apache2?

I'm referring to this question. What is the 'passphrase-file' mentioned in here? Please clarify.
1
vote
1answer
660 views

gksudo nautilus doesn't work. Ubuntu Terminal

I'm trying to open my /etc/apache2 folder through terminal. I tried running gksudo nautilus and gksu nautilus. Both doesn't show anything and do not show any errors in terminal. But nautilus works ...
1
vote
1answer
80 views

Must CSRs be generated on the server that will host the SSL certificate?

Is it necessary to generate the CSR (Certificate Signing Request) on the same machine that will host my web application and SSL certificate?
0
votes
2answers
125 views

Secure telnet for POP3 and others

I need a command to connect to POP3 server, set startTLS, and get secure connection. I neet something to use like telnet. Is there any program that can achieve it? --edit I'm just trying to write ...
7
votes
1answer
5k views

Why is SMTP over SSL between email servers not so popular? [closed]

In my understanding, most of email servers use SMTP/POP/IMAP over SSL to encrypt the email. It supports encryption when client (UA) send email to server (MTA) and UA receive email from MTA. However, ...
0
votes
1answer
527 views

Webdav between a OS X Server (self-signed certificate) and Windows 7?

Problem data: I have two freshly installed OS X Server 10.8.2 and Windows 7 SP1 (all updates to date). A self signed certificate on the OS X Server generated automatically and working for the exact ...
6
votes
2answers
2k views

Where to get certificates for Acrobat PDF

When sending an invoice in PDF format, it is useful (in some countries obligatory) to sign this PDF digitally. Of course, I could create a self-signed certificate via OpenSSL, but a warning "could ...
1
vote
2answers
3k views

ldap authentication not working with start_tls option after certificate upgrade

Ubuntu ldap authentication is not working on my client with ssl start_tls option enabled in the ldap.conf file. I can authenticate when I comment out ssl start_tls. I upgraded the ldap servers ...
0
votes
1answer
126 views

SSL Forging With Portable Firefox?

In Portable Firefox for Windows, I looked at the options where it lists SSL certificates. I know that Windows stores SSL certificates in its own store. Does Firefox use these certificates? I am ...
0
votes
2answers
197 views

Can SSL connection send my IP address to the host?

I don't have enough information about the difference between HTTP and HTTPS, but can an HTTPS request send my IP address to the host and store it? What are the kinds of data that are being ...
3
votes
3answers
2k views

SSL proxy with stunnel

I'm trying to set an SSL connection with stunnel. Some kind of SSL proxy. Final aim Connect http only CLIENT to https only SERVER. My plan is CLIENT: change endpoint to PROXY PROXY: use stunnel ...
0
votes
1answer
63 views

65K ports and SSL? [closed]

People connect to bank using SSL. Bank is opening its 443 port. but there is only 1 port of 443 , but it is a server so I guess he is using also the other ports. But that is means that it can only ...
1
vote
2answers
1k views

Find SSL Certificate in use

I would like to know which SSL certificate is used for accessing a certain website. In my browser (Chrome, FF), the icon next to the URL does not show a SSL connection. Also in Chrome it states "Your ...
1
vote
1answer
1k views

Proper Rules For SSL Redirect For Subdomains

RewriteCond %{HTTP_HOST} ^(.*\.)*subexample.example.com$ [NC] RewriteCond %{SERVER_PORT} !^443$ RewriteRule ^(.*)$ https://subexample.example.com/$1 [R] Is what I have been using. It works as ...
0
votes
1answer
74 views

openssl: register a CA as an unprivileged user

I'm in a situation where I have a Certificate Authority (CA) that I need to register with openssl, but no root access. Even if I had root access, I don't think it would be right to register this at a ...
1
vote
3answers
1k views

How to make netcat support ssl by combining openssl?

Original netcat doesn't support ssl. ncat from nmap project does. In linux, we can connect multiple commands with pipeline. Is it possible to combine netcat and openssl to create a ncat?
2
votes
1answer
4k views

Why do I have untrusted certificates for Google, Yahoo, Mozilla and others?

In the HTTPS/SSL section of chrome://chrome/settings, I see the following: What does this mean, and is there something wrong? I have a basic understanding of SSL/TLS - I'm not claiming to be ...
1
vote
0answers
97 views

Using Apache as a debug proxy for https traffic

I know that I should be using mitmproxy (or Charles, or Fiddler, or Burp Proxy), and that I can use Squid, but is it possible to use Apache to debug out going https traffic from my computer? That is, ...
0
votes
0answers
41 views

firefox no internet

In our company we have a proxy that verifies all ssl certificates and terminates the ssl connection itself (i.e. decrypts in the middle), then reencrypts and passes the website to the browser with its ...
0
votes
1answer
531 views

Is it possible to set up a Squid proxy server that uses SSL for proxy connections?

Is it possible to set up a Squid proxy server that uses SSL for proxy connections? Currently all the stuff I send to Squid are not encrypted and I don't if it's possible to connect to Squid using ...
1
vote
1answer
3k views

use postfix with ssl certificate that has a password

i have gone through a couple of tutorials on how to set up postfix on ubuntu with support for my ssl certificate: https://help.ubuntu.com/community/Postfix ...
3
votes
2answers
5k views

Receiving SSL certificate errors only from some clients

I am receiving SSL certificate errors from Chrome (latest version (23.0.1271.52 beta-m) and Internet Explorer 6 (not used) on my home desktop machine (Windows XP SP2). In Firefox, the site works fine ...
0
votes
2answers
3k views

dovecot imap ssl certificate issues

i have been trying to configure my dovecot imap server (version 1.0.10 - upgrading is not an option at this stage) with a new ssl certificate on ubuntu like so: $ grep ^ssl /etc/dovecot/dovecot.conf ...
0
votes
1answer
247 views

Trying to setup a local (http) proxy on port 80, to a remote https location

My goal is to intercept traffic from my machine, and do some reverse engineering on existing prototocols. To do so I have a closed-source client, and a closed-source remote server. The remote server ...
3
votes
2answers
7k views

Tortoise SVN v1.66 - authorization failed: Could not authenticate to server: could not parse

So a co-worker is having an issue with connecting to a SVN repo over HTTPS. Here are the details: OS: Windows 7 Enterprise x64 SVN Client: Tortoise SVN 1.6.6 x64 So, whenever he connects (via a ...
1
vote
1answer
309 views

Why apache doesn't restart after configuring SSL?

I've installed apache2 and then configure it to work with SSL following this and this tutorials, the problem becomes when I try to restart the service, the following error throws: ...
0
votes
2answers
189 views

Server unresponsive after successful OpenSSL connection

I'm testing server connections using OpenSSL, with varying results Server A: connection is successful, as are user login and the other commands I expected to work Server B: connection is successful, ...
5
votes
2answers
15k views

How to disable SSL for some websites in Chrome?

I want to set chrome to load HTTP instead of HTTPS for some websites. So I searched internet but all the solutions was old. They said go to Under the hood tab which doesn't exist in my chrome 22. ...
2
votes
0answers
422 views

Decode SSL packets in WireShark

I have cert.cer, base64 x509 and a Wireshark dump in .pcap format. The packets are encoded, so how do I decode them? Now: [site-ip],443,http,xe.cer but it's still not working.
1
vote
1answer
698 views

Can I use torrent while I'm on the SSL VPN of my college network? [closed]

I'm using μTorrent But I connected on my college network by SSL VPN, torrent is stopped. How can I use torrent while I'm still on my SSL VPN network?
0
votes
0answers
1k views

Iptables - having trouble opening port 443

I am attempting to set up https, but I am having difficulty opening that port. Nmap scan report for localhost (127.0.0.1) Host is up (0.000073s latency). PORT STATE SERVICE 443/tcp closed https ...
1
vote
0answers
301 views

How to run secure voip traffic without using vpn

I use quintum tenor for voip traffic using VPN SSL Tunnel. VPN server is based in another country. VPN used enough bandwidth, and we need to reduce bandwidth consumption. Is there any SECURE way to ...
1
vote
2answers
4k views

Google account gives ERR_SSL_BAD_RECORD_MAC_ALERT errors

A couple of days ago, I started being unable to connect to accounts.google.com, which handles logins to all kinds of google services. I get this error in Chrome: Error 126 ...
0
votes
1answer
356 views

Intermediate certificates on NLB load balanced servers

I am fairly sure I know how to install the 'main' certificate on load balanced servers (install on one, export, import to the others) but I'm not quite sure what to do about the intermediate ...
0
votes
0answers
575 views

Internet Explorer 9 - website certificate expired

My Internet Explorer 9, for every page, shows this messege to me: There is a problem with this website"s security certificate. The security certificate presented by website has expired or is ...
0
votes
1answer
678 views

Decrypt file that was encrypted using a public key created from PuttyGen

I have a file that our customer encrypted using our public key. I know how to decrypt it using our ppk file programmatically, but I am unsure of how to do this from the command line, or using PuTTYGen ...
0
votes
0answers
73 views

Can one use SSL certificates for user authentication to websites?

I hear that it is possible to create SSL certificates and use them instead of password authentication. Is this true and how to do it? And do all SSL enabled sites allow this?
2
votes
1answer
60 views

Can port numbers of SSL connections be sniffed?

I know that using SSL doesn't stop third parties from seeing what you're connecting to. Does it also not protect against third parties seeing what port you're connecting on?
3
votes
1answer
966 views

Firefox extension for one-click SSL override?

When I visit a site with an invalid SSL certificate, I get a message saying "This connection is untrusted". If I want to visit it nevertheless, I have to click "I understand the risks", uncheck ...
4
votes
1answer
5k views

Adding Self Signed Certificate to trusted root certificate store using Command Line

Is there any way to add certificate to Local Computer's Trusted Root Certification Authority using command line? I tried using certmgr.exe, it shows success but when i check root CA, i don't see my ...
1
vote
1answer
259 views

How do I get tor exit node information of a certain connection I made

At some point today my email client warned about an smtp certificate change of self signed certs. I took a screenshot of the certificate fingerprints and refused the connection because it does not ...