SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

0
votes
5answers
91 views

Is a self signed SSL certificate less secure?

I'm using a self signed SSL certificate on the homepage for our prom. I know almost everybody who uses this website personally, so I can assure them that the certificate is trustworthy, even though ...
0
votes
0answers
22 views

How do I override the Mac Mail “invalid certificate warning”

I have 2 mailservers set up on the same IP address (one for me, which we'll call foo.com, one for a project I'm involved with, lets say bar.com). It's a standard Dovecot & Postfix stack, both with ...
0
votes
2answers
25 views

website with expired SSL

A website I'm trying to register at has an expired SSL certificate. I have the option to either use HTTPS with an expired certificate or HTTP, which option would be more secure? Is the expired SSL ...
0
votes
1answer
235 views

Getting “Invalid command 'SSLOpenSSLConfCmd'” when using Apache 2.4.10 and Debian 7?

I've upgraded my Apache 2.2 to Apache 2.4.10 on Debian 7 (Wheezy) in order to use stronger DH keys. I've also upgraded openssl to OpenSSL 1.0.1k. I've been trying to add the following command to my ...
1
vote
0answers
68 views

Can not connect to vsftpd FTP server on Ubuntu 14.04 LTS?

I installed vsftpd on my Ubuntu 14.04 LTS Linux box. When I try to connect either locally using the URL ftp://localhost I do get an authentication dialog box. However, after I enter my user name and ...
1
vote
0answers
40 views

Owncloud https and ssl with free dns

I use no-ip and I want to set my owncloud server (hosted with raspberry) with https protocol. After installed everything I follow this from the official documentation: <VirtualHost *:80> ...
0
votes
4answers
110 views

Untrusted certificate with Internet Explorer 11

I get "untrusted certificate" errors when opening all https sites in IE 11. I added sites to trusted sites, adjusted date and time, reset IE setting, installed sites' certificates (by click on view ...
3
votes
2answers
384 views

Managing LetsEncrypt Certificate expiration and auto-renewals

I've been experimenting with LetsEncrypt SSL certificates and managed to get certificates set up and installed on Windows for use with IIS using the ACMESharp Powershell library. The process to do ...
0
votes
1answer
46 views

Firefox doesn't ask me for a certificate when visiting a site that needs one

I use Firefox 44.0.2 on a Linux Xubuntu system. I'm trying to access a company website that requires a certificate. I can confirm I have the correct certificate in ...
1
vote
1answer
37 views

How to manage multiple certificates in the Apple Key Chain with Apple Mail in mind?

I would like to ask about proper management of SSL certificates in Keychain. An article on holeyn.com says: The only time it might be useful to have multiple key-pairs (...) In this situation, ...
1
vote
2answers
27 views

Can a wildcard CN in an SSL certificate be more specific

Can the common name for a wild-carded SSL certificate be more specific than simply "*"? e.g.: in the case of a firewall with multiple interfaces and similar names assigned to those interfaces: ...
3
votes
1answer
224 views

How to set the Owner of certificate generated by Let's Encrypt?

I've implemented Let's Encrypt on two production servers with relative ease, and both servers are providing certificates to the websites we run on those servers. What's bugging me though is when you ...
0
votes
0answers
84 views

SSL self-signed certificate on client side

When I create a SSL self-signed certificate. If I don't add the .crt on the client side, the browser (Chrome/Firefox) seems to download implicitly the .crt. Is it possible to prevent this ? If I ...
0
votes
0answers
8 views

Recovery after losing the master key - how to make OpenVPN accept clients signed by different certificates

Due to unfortunate circumstances, I lost my master signing OpenVPN keys. However I still have the public part of the key as well as all the client certificates. This means the system is usable and ...
1
vote
1answer
160 views

When using Kaspersky Anti-Virus Personal Root Certificate, can you view the website's certificate?

Use of Kaspersky Anti-Virus Personal Root Certificate with Firefox is discussed in this post, Which CA issued certificate for https://www.google.com. My question is (other than for google.com) is it ...
1
vote
1answer
110 views

Does HTTPS/SSL make sense on a local network?

I wonder if I should enable HTTPS/SSL on web servers in my LAN. Which opportunities does a sniffer/man-in-the-middle have in a local area network, where devices are usually connected by switches? Is ...
0
votes
0answers
89 views

An unexpected TLS packet was received setting up VSFTPD - Filezilla

I'm setting up an FTPS server under linux Ubuntu 14.04.01 i installed VSFTPD using apt-get install vsftpd then generated an openssl Key using: openssl req -x509 -nodes -days 730 -newkey rsa:2048 ...
2
votes
1answer
13 views

openssl s_client, what does s/i mean?

So I've tried to find the answer on Google or in the man pages, but searching for the meaning of an identifier that's one letter appears to be impossible. If I run the following: openssl s_client ...
0
votes
0answers
43 views

Roundcube not sending email via smtps

I am running Roundcube 1.1.4 on Debian Jessie - it all works OK apart from sending emails via my SMTPS server (which normally works OK). I use self-signed certificates. No additional Roundcube plugins ...
1
vote
2answers
45 views

apache SSL configuration using trusted certificates

It's my first time I'm dealing with SSL, I'd like to know, if I got this right or not. I create selfsigned Client-Certificates with a self created CA my-own-CA.crt. When I buy a Server-Certificate of ...
1
vote
1answer
70 views

Identify the required (missing) certificate that's causing a Java app to fail

I'm using Intellij IDEA 15, a Java-based IDE. It allows me to click on a link in any open-source Java class in my project and download the source and documentation from the internet. However, this ...
-1
votes
1answer
97 views

SSL certificate invalid Chrome / IE

I Have found these steps to add SSL self attested certificate in chrome for sites having invalid SSL certificate. I have have added exactly as mentioned but still when I reopen the site I have the ...
0
votes
0answers
63 views

How to save SSL certificate in terminal without openssl?

I've got the following scenario: A service runs on server-1, calling server-2 via SSL over proxy-1 Server-2 is external and out of our scope Server-2 can only be reached from server-1 over proxy ...
0
votes
2answers
68 views

How to install SSL certificate for Windows 8.1

I have a Windows 8.1 machine that I RDP into on a public IP (also secured by 2FA). I am getting a failing PCI scan because the default SSL cert created by Windows for RDP is using SHA1 hashing. So ...
1
vote
1answer
56 views

Determine reason for X.509 certifcate revocation?

I'm trying to connect to Human Rights Watch. The page is not loading and the browser is not giving me much information. The browser states "Peer's Certificate has been revoked. (Error code: ...
0
votes
0answers
260 views

SSL connection on Java 7 based server fails with RECV TLSv1 ALERT: fatal, handshake_failure

A client-side SSL connection on a Java 7 based server fails with RECV TLSv1 ALERT: fatal, handshake_failure. This client is trying to connect to https://www.iatspayments.com The SSL debug log shows ...
1
vote
4answers
75 views

Can I force https requests to use http

I have a situation where my employer uses a cert to spy on everyone's https traffic. They set it up poorly with a self signed certificate so unless the application allows me to ignore the cert I just ...
0
votes
0answers
45 views

Self-signed root CA certificate on OSX does not authenticate own-signed certificates

I have a Vault server configured with TLS running on a vault.dev machine. The certificate for vault.dev is signed by a self-signed root CA. I have two client machines: Debian and OSX, both separate ...
0
votes
1answer
25 views

Can we restrict the usage of an SSL certificate to only a specific protocol?

I would like to generate a certificate that can be used only for HTTPS. For example, if I use the same certificate for my web server (HTTPS) and my mail server (IMAPS) using the same certificate, the ...
1
vote
1answer
112 views

Firefox: how to debug SSL error

I am behind a firewall that uses SSL interception. I have installed the CA certificate of the proxy in Firefox, and most SSL connections are established correctly. However, in same cases the ...
0
votes
1answer
71 views

Why do I need a certificate to create my own other self-signed certificate

In the last few days I was trying to understand the story of certificates, and I understood the main principle of them, but I didn't understand that step when we create a CA cert to sign my own server ...
0
votes
0answers
37 views

no certificate found in safari

I have a problem where our certificate is not visible (I'll get to more details after explaining the problem), in Safari. I get it working on Chrome and Firefox. The OS I am using for testing is OS X ...
1
vote
1answer
49 views

openSSL Key and Certificate

As far I know, in an authenticated SSL connection, both the client and server have private keys and provide their certificates (with the corresponding public keys) across the connection before ...
0
votes
0answers
117 views

Openconnect certificate validation with NetworkManager

On my Cinnamon (linux) desktop, I have setup an openconnect VPN connection in NetworkManager. When connecting, I don't seem to have any issues: the connection is established and network traffic is ...
1
vote
1answer
522 views

ERR_SSL_VERSION_OR_CIPHER_MISMATCH error in Chrome

I cannot open some sites due to this error in Google Chrome (version: 48.0.2564.82 ) ERR_SSL_VERSION_OR_CIPHER_MISMATCH It is an https site. Windows 10.
0
votes
1answer
106 views

Unable to disable SSLv3 in Apache 2.4.18

One of my client wanted me to upgrade openssl and Apache on his server because he want to receive an A from SSLLabs. I went ahead and upgraded to Apache 2.4.18 and openssl to version 1.0.2e. I then ...
0
votes
1answer
107 views

GIT warning: unsupported ssl version tlsv1.2: using default

I am trying to clone a git repository and receiving the following warning and error message: Cloning into 'projectname'... warning: unsupported ssl version tlsv1.2: using default * Couldn't find host ...
0
votes
1answer
129 views

TLS curl POST resulting in SSLv3 error

I am trying to make a POST request via curl to a server that only supports TLS 1.2, TLS 1.1, and TLS 1.0. However, even when I try to specify the need for TLS instead of the default SSL v. 3 (adding ...
0
votes
0answers
25 views

Setting Up TT-RSS over HTTPS

I have what is hopefully a quick question: I have a very basic installation of TT-RSS on Ubuntu 14.04, literally: sudo apt-get install tt-rss and I've been using that for a while. However, I believe ...
0
votes
0answers
21 views

Connect To Watchgaurd SSL VPN On Lubuntu

I have followed the steps below to set-up on my Lubuntu machine, and per the command line I am connected to the server BUT my internet connection appears to drop the second I connect to this VPN ...
0
votes
1answer
260 views

Apache : Poodle attack complain & RC4 cipher complain even after changing ssl.conf

I checked our domain on SSL_Labs and found out that our server is vulnerable to Poodle attack. We have a Debian System, running Apache2 as a load-balancer and failover for two Tomcat instances. I did ...
1
vote
0answers
949 views

Windows 10 + WebDAV: Mutual authentication failed: The server's password is out of date at the domain controller

We have an existing WebDAV installation with an Apache mod_dav was WebDAV drive hosted at an SSL protected URL with CA issued certificate and basic authentication. MacOSX and Windows < 10 have been ...
0
votes
1answer
24 views

Generating machine TLS certificates in software

I am working with a distributed software solution where machines may communicate over the internet. Automatically for sensitive data this means you have to encrypt the traffic. Using a public tool ...
0
votes
0answers
58 views

Could not retrieve 'System.Collections.Hashtable.AutomationCertificateName' certificate asset on azure

I import "Connect-Azure" workflow from Import runbooks from the Gallery which is below. workflow Connect-Azure { Param ( [Parameter(Mandatory=$true)] [String] $AzureConnectionName ...
0
votes
1answer
54 views

What is the correct terminology for an “official” SSL certificate?

What is the correct terminology or wording for an SSL certificate that you have bought from a certified provider (e.g. GoDaddy or something) and has been signed by a root certificate authority? For ...
0
votes
1answer
28 views

server isn't sending Certificate after Server Hello

I used Wireshark to capture the packets sent to and from google.com and a personal website of mine and... google.com sends the Certificate right after the Server Hello. My own webserver, however, ...
0
votes
1answer
51 views

Does a proxy server protect my download habbits from my ISP?

If I torrent files and access websites through a proxy server, can my ISP see what I am up too and the websites I'm visiting (SSL and non-SSL)? Also, would a proxy suffice or would a VPN be more ...
0
votes
1answer
686 views

Piratebay ERR_SSL_VERSION_OR_CIPHER_MISMATCH

Since a few months ago I've been using proxy sites to access the pirate bay, but now I'm in need to create an account, and those proxy sites won't allow me to do that. The problem is because TPB is ...
0
votes
0answers
82 views

SSL Connection using Windows Certificate Store

I am creating an SSL connection using OpenSSL API. As we know in a SSL handshake, series of Certificate Authentication occurs for Server or Client. Now for client certificate authentication, the ...
0
votes
1answer
540 views

“Java is unavailable” in Firefox 32 bits

I'm trying to connect to a VPN using SSL Network Extender, and am getting Java is unavailable error.This occurs in 32 bits Java on 32 bits Firefox in Windows 7 (64 bits). Since both browser and Java ...