SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

0
votes
0answers
31 views

HTTPS client “pairing”

I need to restrict usage of a certain site to a limited number of customers. More than that, actually: I would like to allow access from a restricted number of physical devices (Win + Android). This ...
1
vote
2answers
138 views

SSL keeps waiting for response

I'm trying to configure an HTTPS but It doesn't work and I don't realy know what's wrong. These are the steps I've followed: I have generated a .pem certificate (certificate + chain) with ...
0
votes
0answers
32 views

Web browsers won't load maxcdn URL over HTTPS in OSX

Both Safari and Chrome will not load this URL: https://maxcdn.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css I also tried to curl from command line and received an SSL error. I've ...
0
votes
0answers
33 views

Iceweasel thinks my client certificate is a server certificate; Chromium thinks it's an “other” certificate

I have a client certificate from StartCom. I recently reinstalled my OS and have to re-add the client certificate to Iceweasel in order to gain access to the control panel. I have a backup of the ...
1
vote
0answers
98 views

Can't start Apache 2 - Probably faulty SSL configuration

I followed this german tutorial to set up a Raspberry 2 Owncloud Server (connect.de/ratgeber/so-installieren-sie-owncloud-auf-einem-raspberry-pi-1540246.html) everything worked fine without any Errors ...
0
votes
0answers
116 views

Imgur.com does not load due to HTTPS settings

For some reason I am having some issues when I try to load imgur.com links sometimes. Here is a screenshot of what I see Whats strange is that it I get a 404 from Google and not Imgur (I am using ...
-1
votes
1answer
508 views

Jenkins using JNLP behind nginx SSL reverse proxy

I'd like to use JNLP to connect jenkins slaves to jenkins master. The master is running behind an SSL nginx proxy set up according to official documentation. Beyond this documentation I run into ...
1
vote
1answer
63 views

How to store an ssl key as a variable in a script for use with ncat?

I am trying to write a wrapper script to start an ncat listener. I don't want to have to output the certificate and key to a file, rather I'd like to store it as a variable within the script, and call ...
2
votes
1answer
609 views

Determine TLS certificate details with Microsoft Edge

I purchased a new ASUS Q302 laptop from Best Buys for testing some software under the Intel Broadwell architecture (6th Gen i7). It looks like the machine has one of those Proxy/Interception ...
1
vote
1answer
46 views

Apache SSL with Multiple Virtualhost

I have a VPS from DO with one ip address. I'm managing multiple domain via Apache Virtual Hosts, and now, I must setup a virtual host with SSL support. I created a self-signed ssl certificate to test ...
1
vote
0answers
68 views

Installing SSL on Shared hosting server

I have beta invitation of letsencrypt.org I followed there documentation here . But i am unable to install there packages because i have shared hosting server which does not allow to use sudo commands....
3
votes
1answer
248 views

How to always allow insecure connection for a certain url in chrome?

For internal usage, we have a system using a self-signed insecure SSL certificate, making Chrome warn me on each session: Your connection is not private Attackers might be trying to steal ...
2
votes
1answer
1k views

How do I force Windows 10 to trust the Fiddler root certificate?

I need to intercept certain HTTPS traffic from the local application to the remote web site. On Win7 it was easy enough to achieve by using http://FiddlerTool.com Now I am running the Windows10 box, ...
0
votes
0answers
61 views

Crossover.com not opening on my laptop but working on another laptop

i am trying to open crossover.com website on my personal laptop but it says err_connection_refused. But when i open the same website on my office laptop it works fine. I am able to login and play with ...
0
votes
0answers
20 views

Unable to connect to cloud using putty

I am trying to access my uni's cluster remotely from home. I have successfully connected to VPN using JUNOS PULSE but when i try to connect to cluster using PUTTY SSL connection it gives ERROR: ...
0
votes
0answers
26 views

Install SSL certificate on Plesk 12 using my CSR

I have purchased a SSL certificate for one of my domains, I have done it so by generating the CSR using a osx console. Now I want to install the certificate on the Plesk 12 control panel but it doesn'...
0
votes
1answer
58 views

Storing and retrieving certificate chains using openssl

Following this question I managed to create a number of certificates in a hierarchy of root, intermediate and end certificates: # Create root RSA key pair of 1024 bits as well as a certificate ...
0
votes
0answers
18 views

How to link Ip addresses when only using two for DNS servers and then the other three for SSL?

I have five IP addresses for the short term. I was wondering what would be the best set up for NAT on these servers. I will have a total of seven servers at my house. The IP addresses need to be split ...
0
votes
0answers
79 views

Configure SSL on Amazon RDS

I would like to force all users to connect to my Amazon RDS instance via SSL, otherwise the connection should not be established. I believe I have enabled SSL on the RDS instance which can be ...
0
votes
0answers
285 views

apache2 multiple SSL configuration with nodejs proxy

I have two applications: example.com which runs a PHP application from apache2 and api.example.com which is an API from nodejs. example.com Since there is payment and authentication I force SSL if ...
0
votes
1answer
46 views

SSL does not work

I am trying to add https to our url. Below is my config in httpd.conf. But when I type in the url with https, the server hangs are returns time out. The url works with http as before. HTTPS part is ...
1
vote
2answers
44 views

Does restarting a Puppet Master service require regenerating for the SSL certificates of the servers it controls?

Do I have any special extra work I need to do, afterward, if I have to restart the Puppet Master service? Specifically, does this affect SSL certificates?
0
votes
1answer
284 views

OpenLDAP TLS Configuration

I've been stuck on an OpenLDAP problems the past couple days. I don't really have any experience with OpenLDAP prior to this so forgive my ignorance. Basically my problem is I've ran a Nessus scan ...
0
votes
0answers
132 views

sign keytool generated cert/key pairs using easy-rsa openvpn intermediate CA

I am creating root and intermediate CA with easy-rsa using ./build-ca & ./build-inter commands consecutively. Now, I want my root ca as offline and I want my certs/keys signed by intermediate CA. ...
0
votes
2answers
4k views

FileZilla stuck at Initializing TLS

I am having an issue with FileZilla. I try to establish an FTP connection with my server but end up stuck at the same initial message after trying quite a few rounds. I am able to use the same host, ...
0
votes
0answers
30 views

HAProxy with ssl offloading solution

We are planing to implement HAProxy to achieve 2000 TPS so what kind of hardware i should buy or is there any special SSL Hardware card available in market which we can use with HAProxy? We have PHP ...
1
vote
2answers
677 views

svn not accepting https/ssl certificate

When bettercodes.org disappeared in September, I moved my private repo over to https://subversion.assembla.com/. It's working great, except for the fact that I have to temporarily accept the ...
-1
votes
1answer
80 views

Configure LDAP over TLS to make connection be secure

I configured OpenLDAP and today I've configured the TLS for more security following these guide dn: cn=config changetype: modify add: olcTLSCACertificateFile olcTLSCACertificateFile: /etc/openldap/...
0
votes
1answer
207 views

Self-signed certificates with permanent redirects and www subdomain in apache2

On my local Mac machine I have the following apache conf snippet: <VirtualHost *:80> ServerName example.com ServerAlias www.example.com Redirect permanent / https://www.example.com ...
0
votes
0answers
56 views

Which refreshPattern do I have to use to cache git clone results via HTTPS?

I setup a HTTPS intercepting caching proxy using squid 4.0.1 on Ubuntu 15.10 and SSL Bumping following http://wiki.squid-cache.org/ConfigExamples/Intercept/SslBumpExplicit. Now, specifying ...
0
votes
1answer
2k views

OpenSSL: socket: Connection refused connect:errno=111 Cent OS

I'm facing this problem.Actually I'm trying to disable SSLV3 and enable TLS 1.2 in my Cent OS production server.I found exact same question here. [root@186-aven-vps ~]# openssl s_client -connect ...
0
votes
0answers
20 views

Difference between JKS file and client certificates

I am accessing my partner URL using httpS. I was able to download the client certificates from Browser itself. However i got to know that it is not enough for us only to have the client certificates ...
2
votes
1answer
26 views

Difference between SSL certificates showing with name in browser bar and without

I noticed Chrome shows the owner of a SSL-certificate only in some cases in the adressbar. What is the difference between these types of certificates. Here is an example: With company Without ...
0
votes
0answers
24 views

SSL in apache does not recognize a path to https

I had a regular apache configuration in an ubuntu machine. I added SSL support for everything in the folder /var/www/marc However, when I go to https://myserver.com/marc, Firefox asks me to trust the ...
0
votes
0answers
783 views

Unable to connect to sql server 2012 with SSL encryption enabled using sqljdbc4

I am trying to connect my web application to SQL server 2012 with SSL encryption enabled using sqljdbc4 but i get the below error : com.microsoft.sqlserver.jdbc.SQLServerException: The driver ...
0
votes
2answers
192 views

Why is session reuse useful in FTPS?

I noticed that not all FTPS clients support session reuse and I'm wondering whether it is a critical security option that should be left enabled on the server. My guess is that it's possible for an ...
0
votes
0answers
98 views

How do I force Firefox and Chrome to use HSTS and a pinned certificate for a specific port on localhost?

I am wanting to use the browser-based notebook interface of Sage, a computer algebra system. Before I can do this I need to ensure that neither remote nor local privilege escalation is possible. To ...
1
vote
0answers
274 views

Secure stealth tunnel through a proxy to another proxy (STunnel, Squid)

How to stealth my traffic routed through a proxy server? There is a client computer with several restrictions. You cannot install any software and the access to the internet is only possible through ...
1
vote
2answers
36 views

Is there a hardware appliance that can see VPN packet payloads? [closed]

My IT staff at work claims they have a hardware appliance that can see the payload of a packet that has been encrypted using a VPN. I was told this only works if the connection was established on a ...
1
vote
1answer
132 views

How do you verify a client rsa key via cli?

I am experiencing some issues with openvpn and I would like to verifiy the client's connecting key. I found a number of samples on how to verify the servers key: linux-3kfe:/usr/share/easy-rsa/keys # ...
-2
votes
2answers
97 views

Youtube.com doesn't work on any browsers, throws multiple kinds of errors my way

I use mainly Chrome, but I checked out other browsers (like Edge) and it didn't work on them either. At first I couldn't connect to YouTube, because: the connection was not private" (NET::...
0
votes
0answers
136 views

Deadlock when adding untrusted certificate to keychain running MS Remote Desktop Client on Mac OS X 10.10.5

I am experiencing a strange, frustrating, and seemingly nondeterministic issue using the MS RDP client on Mac OS X 10.10.5. Here are the steps to reproduce the issue: Open Microsoft Remote Desktop ...
0
votes
3answers
59 views

https certificates for 2 IP addresses on the same server

We are working on a router-like device which can have it’s own access point and be connected to another router. We want to have https on the management web page using a valid certificate (not a self-...
0
votes
1answer
82 views

How to generate a keystore file for a Jetty server from PEM file?

I got a certificate.pem file from the CA, that have structure like below: -----BEGIN CERTIFICATE----- encrypted text of the public key -----END CERTIFICATE----- From this, we need to generate the ...
0
votes
0answers
58 views

Guest in VirtualBox 5.0.4 should act as router for SSLsplit

Recently I’ve been studying SSLSplit and TLS/SSL so I wanted to try it in VirtualBox. Host system: Windows 8.1. Guest: Ubuntu 14.04 with Bridged Network Adapter. On guest I allow forwarding in /...
0
votes
0answers
152 views

Stunnel and openvpn on mac os

I recently install a openvpn server with stunnel4 on a server. On my mac, I have install tunnelblick and stunnel. Everything seem alright, when I start my vpn, I'm connected but I don't have internet,...
-1
votes
1answer
37 views

SSL Configuration for Nginx and Apache

I've server now running Nginx with SSL Wildcard installed but I need to add SSL to my new server running Apache, How to that? Case: The nginx server is still active with domain example.com and add ...
-2
votes
2answers
127 views

Is the data sent from web server to browser is really more secured in https than http?

I was just reading about the differences between http and https briefly. And what I have not understood is the following possible scenario: Everyone has SSL public key right? So, anyone can get the ...
2
votes
1answer
56 views

SSL wildcard certificate for multiple subdomains / ip's?

I have multiple subdomains running web servers that I was to put SSL onto. Say they are linux.mydomain.com, windows.mydomain.com and mac.mydomain.com. each is its own vps and has its own IP (and a ...
0
votes
0answers
29 views

CERT Tapioca on Mac for Android app SSL testing

I'm attempting to use Cert Tapioca (http://www.cert.org/blogs/certcc/post.cfm?EntryID=203) in Virtual Box so that I can test the SSL/HTTPS security of Android Apps. After downloading and running the ...