SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

0
votes
0answers
57 views

Chrome doesn't leverage browser caching on unauthorized/broken ssl

On google chrome when you have a broken ssl This page is insecure (broken HTTPS). The browser doesn't cache the resources. I have a dev.domain.com and a www.domain.com. The www has the SSL attached ...
0
votes
0answers
24 views

Apache on Windows using CA Certificates

I have been issued by our CA a new cert and have the CA cert and my key that I used during the CSR for generation. I've never setup SSL in apache before and more or less copying from other examples ...
0
votes
0answers
52 views

Can I connect to freenode via SSL on Pidgin/Windows?

When I set up an IRC account on the irc.freenode.net server and select "Use SSL" under the advanced tab, I get an "SSL Handshake Failed" error. I found a guide for setting up an SSL freenode ...
1
vote
1answer
13 views

Where is the tls command?

I use Visual Studio 2015 to publish a docker image to a Linux server. The similar step is on the link. I get a failed message when you attempt to validate the connection to your Docker host in the ...
1
vote
1answer
108 views

Apache and support for per-directory CA

I was using Debian Wheezy with Apache and I configured some paths in SSL to be protected by client certificate. <Location /admin-page> SSLCACertificateFile /etc/apache2/ssl/leos.pem ...
0
votes
1answer
685 views

How to make Firefox ignore all SSL certification errors?

I'm on a private network with a lot of restrictions and monitorings. Every HTTPS connection results in SSL certification errors (maybe those people use "man-in-the-middle" approach to decrypt the ...
0
votes
0answers
96 views

Adding additional SSL certificate to be recognized in Cygwin

I have a server setup that has an HTTPS certificate issued by a major certificate provider (DigiCert). The certificate is recognized by all of the browsers on a machine running Windows Server 2008 R2, ...
0
votes
1answer
115 views

SSL certificate: incorrect order

I have SSL EV certificate for https://goout.cz. According to this test we are getting A+: https://www.ssllabs.com/ssltest/analyze.html?viaform=on&d=goout.cz However I get warning for "Incorrect ...
0
votes
1answer
57 views

Using signed certificates with shellinabox

I currently have a web server running Apache. This server hosts a website (foo.com), and is configured to use a signed RSA certificate for https connections. The Apache configuration for the site ...
2
votes
0answers
463 views

SSL error when connecting to git from Mac OS X 10.11.3 (El Capitan)

When I try to clone / pull / fetch from a git repository via https from a Mac System I keep getting an error: error: RPC failed; result=56, HTTP code = 200 fatal: The remote end hung up unexpectedly ...
0
votes
0answers
55 views

Why can't signtool find certificate in machine store?

We have a code signing certificate that is working in TeamCity builds using the following command: signtool sign /a /v /sm /s my /n "NAME_ISSUED_TO" /d "DESCRIPTION" FILENAME Unfortunately the ...
2
votes
1answer
239 views

Windows: SSL/TLS connection reset after ClientHello (ECONNRESET / write:errno=10054)

I'm using Windows Server 2012 as a workstation. The problem is that HTTPS connection initiated by node.js randomly fails. Probably this is system-wide issue and not only node is affected, but it ...
0
votes
0answers
310 views

SSL VPN Connection in Windows 10 is “aborted by the local system”

I'm trying to connect to the VPN of my company using Windows 10 built-in VPN client (SSL VPN) but I'm getting the following error: The credentials are correct and the certificate chain is correct. ...
1
vote
1answer
174 views

Git GUI on Windows not working with self-signed SSL certificates - gives errors (fatal: SSL certificate)

I'm using git GUI on Windows 7. I need to clone the repository and simply want to just use it. However, when cloning, pulling, pushing to/from repo with self-signed certificate, I'm getting this ...
2
votes
1answer
38 views

Validate FTP certificate by fingerprint or serialnumber

I want to establish a encrypted connection to an FTP server. FileZilla displays some information about the certificate sent from the server to me. It would help me if there was a site that accepts ...
0
votes
0answers
29 views

How Firewall monitors SSL HTTPS Content? Like Content Filtering

as per my knowledge, in SSL/TLS , only the source and destination machine can decrypt the message during a data communication . Then how a firewall like (Cyberoam) monitors the SSL Traffic, Like ...
0
votes
0answers
66 views

Creating a certificate chain via Openssl tool

I've been trying to create a certificate chain, something of the sort CA -> Intermediate CA -> Client certificates. I used the following to generate CA cert :- openssl genrsa -out ca.key 2048 -des3 ...
0
votes
1answer
38 views

Load runner Vugen unable by pass the SSL negotiotion

We are working on POC for service now app whose version name is Fuji and in order to login to this app with different test users we use the SSL certificates. Here the problem we face is an SSL ...
0
votes
5answers
100 views

Is a self signed SSL certificate less secure?

I'm using a self signed SSL certificate on the homepage for our prom. I know almost everybody who uses this website personally, so I can assure them that the certificate is trustworthy, even though ...
0
votes
0answers
23 views

How do I override the Mac Mail “invalid certificate warning”

I have 2 mailservers set up on the same IP address (one for me, which we'll call foo.com, one for a project I'm involved with, lets say bar.com). It's a standard Dovecot & Postfix stack, both with ...
0
votes
2answers
26 views

website with expired SSL

A website I'm trying to register at has an expired SSL certificate. I have the option to either use HTTPS with an expired certificate or HTTP, which option would be more secure? Is the expired SSL ...
0
votes
1answer
329 views

Getting “Invalid command 'SSLOpenSSLConfCmd'” when using Apache 2.4.10 and Debian 7?

I've upgraded my Apache 2.2 to Apache 2.4.10 on Debian 7 (Wheezy) in order to use stronger DH keys. I've also upgraded openssl to OpenSSL 1.0.1k. I've been trying to add the following command to my ...
1
vote
0answers
79 views

Can not connect to vsftpd FTP server on Ubuntu 14.04 LTS?

I installed vsftpd on my Ubuntu 14.04 LTS Linux box. When I try to connect either locally using the URL ftp://localhost I do get an authentication dialog box. However, after I enter my user name and ...
1
vote
0answers
48 views

Owncloud https and ssl with free dns

I use no-ip and I want to set my owncloud server (hosted with raspberry) with https protocol. After installed everything I follow this from the official documentation: <VirtualHost *:80> ...
0
votes
4answers
151 views

Untrusted certificate with Internet Explorer 11

I get "untrusted certificate" errors when opening all https sites in IE 11. I added sites to trusted sites, adjusted date and time, reset IE setting, installed sites' certificates (by click on view ...
3
votes
2answers
522 views

Managing LetsEncrypt Certificate expiration and auto-renewals

I've been experimenting with LetsEncrypt SSL certificates and managed to get certificates set up and installed on Windows for use with IIS using the ACMESharp Powershell library. The process to do ...
0
votes
1answer
65 views

Firefox doesn't ask me for a certificate when visiting a site that needs one

I use Firefox 44.0.2 on a Linux Xubuntu system. I'm trying to access a company website that requires a certificate. I can confirm I have the correct certificate in Preferences->Advanced->Certificates-...
1
vote
1answer
41 views

How to manage multiple certificates in the Apple Key Chain with Apple Mail in mind?

I would like to ask about proper management of SSL certificates in Keychain. An article on holeyn.com says: The only time it might be useful to have multiple key-pairs (...) In this situation, ...
1
vote
2answers
27 views

Can a wildcard CN in an SSL certificate be more specific

Can the common name for a wild-carded SSL certificate be more specific than simply "*"? e.g.: in the case of a firewall with multiple interfaces and similar names assigned to those interfaces: pix-...
3
votes
1answer
330 views

How to set the Owner of certificate generated by Let's Encrypt?

I've implemented Let's Encrypt on two production servers with relative ease, and both servers are providing certificates to the websites we run on those servers. What's bugging me though is when you ...
0
votes
0answers
102 views

SSL self-signed certificate on client side

When I create a SSL self-signed certificate. If I don't add the .crt on the client side, the browser (Chrome/Firefox) seems to download implicitly the .crt. Is it possible to prevent this ? If I ...
0
votes
0answers
8 views

Recovery after losing the master key - how to make OpenVPN accept clients signed by different certificates

Due to unfortunate circumstances, I lost my master signing OpenVPN keys. However I still have the public part of the key as well as all the client certificates. This means the system is usable and ...
1
vote
1answer
191 views

When using Kaspersky Anti-Virus Personal Root Certificate, can you view the website's certificate?

Use of Kaspersky Anti-Virus Personal Root Certificate with Firefox is discussed in this post, Which CA issued certificate for https://www.google.com. My question is (other than for google.com) is it ...
1
vote
1answer
164 views

Does HTTPS/SSL make sense on a local network?

I wonder if I should enable HTTPS/SSL on web servers in my LAN. Which opportunities does a sniffer/man-in-the-middle have in a local area network, where devices are usually connected by switches? Is ...
0
votes
0answers
101 views

An unexpected TLS packet was received setting up VSFTPD - Filezilla

I'm setting up an FTPS server under linux Ubuntu 14.04.01 i installed VSFTPD using apt-get install vsftpd then generated an openssl Key using: openssl req -x509 -nodes -days 730 -newkey rsa:2048 -...
2
votes
1answer
14 views

openssl s_client, what does s/i mean?

So I've tried to find the answer on Google or in the man pages, but searching for the meaning of an identifier that's one letter appears to be impossible. If I run the following: openssl s_client -...
0
votes
0answers
57 views

Roundcube not sending email via smtps

I am running Roundcube 1.1.4 on Debian Jessie - it all works OK apart from sending emails via my SMTPS server (which normally works OK). I use self-signed certificates. No additional Roundcube plugins ...
1
vote
2answers
49 views

apache SSL configuration using trusted certificates

It's my first time I'm dealing with SSL, I'd like to know, if I got this right or not. I create selfsigned Client-Certificates with a self created CA my-own-CA.crt. When I buy a Server-Certificate of ...
1
vote
1answer
94 views

Identify the required (missing) certificate that's causing a Java app to fail

I'm using Intellij IDEA 15, a Java-based IDE. It allows me to click on a link in any open-source Java class in my project and download the source and documentation from the internet. However, this ...
-1
votes
1answer
106 views

SSL certificate invalid Chrome / IE

I Have found these steps to add SSL self attested certificate in chrome for sites having invalid SSL certificate. I have have added exactly as mentioned but still when I reopen the site I have the ...
0
votes
0answers
90 views

How to save SSL certificate in terminal without openssl?

I've got the following scenario: A service runs on server-1, calling server-2 via SSL over proxy-1 Server-2 is external and out of our scope Server-2 can only be reached from server-1 over proxy ...
0
votes
2answers
86 views

How to install SSL certificate for Windows 8.1

I have a Windows 8.1 machine that I RDP into on a public IP (also secured by 2FA). I am getting a failing PCI scan because the default SSL cert created by Windows for RDP is using SHA1 hashing. So ...
1
vote
1answer
59 views

Determine reason for X.509 certifcate revocation?

I'm trying to connect to Human Rights Watch. The page is not loading and the browser is not giving me much information. The browser states "Peer's Certificate has been revoked. (Error code: ...
0
votes
0answers
414 views

SSL connection on Java 7 based server fails with RECV TLSv1 ALERT: fatal, handshake_failure

A client-side SSL connection on a Java 7 based server fails with RECV TLSv1 ALERT: fatal, handshake_failure. This client is trying to connect to https://www.iatspayments.com The SSL debug log shows ...
1
vote
4answers
80 views

Can I force https requests to use http

I have a situation where my employer uses a cert to spy on everyone's https traffic. They set it up poorly with a self signed certificate so unless the application allows me to ignore the cert I just ...
0
votes
0answers
53 views

Self-signed root CA certificate on OSX does not authenticate own-signed certificates

I have a Vault server configured with TLS running on a vault.dev machine. The certificate for vault.dev is signed by a self-signed root CA. I have two client machines: Debian and OSX, both separate ...
0
votes
1answer
26 views

Can we restrict the usage of an SSL certificate to only a specific protocol?

I would like to generate a certificate that can be used only for HTTPS. For example, if I use the same certificate for my web server (HTTPS) and my mail server (IMAPS) using the same certificate, the ...
1
vote
1answer
154 views

Firefox: how to debug SSL error

I am behind a firewall that uses SSL interception. I have installed the CA certificate of the proxy in Firefox, and most SSL connections are established correctly. However, in same cases the ...
0
votes
1answer
72 views

Why do I need a certificate to create my own other self-signed certificate

In the last few days I was trying to understand the story of certificates, and I understood the main principle of them, but I didn't understand that step when we create a CA cert to sign my own server ...
0
votes
0answers
44 views

no certificate found in safari

I have a problem where our certificate is not visible (I'll get to more details after explaining the problem), in Safari. I get it working on Chrome and Firefox. The OS I am using for testing is OS X (...