SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

1
vote
0answers
242 views

nginx - ssl and www redirect configuration

this is related to: http://stackoverflow.com/questions/24538973/django-allowed-hosts-error-for-www-domain-and-ip-address i'm attempting to redirect www and non-ssl requests to ssl non-www domain for ...
1
vote
2answers
69 views

How to build a certifcate chain for ServerHello

I've been trying to put together a certificate chain. I have the private key (privatekey.pem) and CSR (csr.pem) that I submitted to the Certificate Authority/CA. I took the CA's certificate and put ...
17
votes
3answers
2k views

Website is securely not secure

I am accessing Pandora via SSL and notice a few icons by the URL. First is the exclamation point in a triangle, indicating the page is not fully secure: Next to it is a shield? This one says ...
0
votes
0answers
69 views

rails ssl setup on Amazon EC2

Environment Amazon EC2 CentOS Rails 4.0.4 SSL certificates installed Chef My Rails config In my environment .rb (staging.rb and production.rb) I added this config.force_ssl = true Started ...
0
votes
0answers
130 views

Windows 7 IPsec IKEv2 EAP-TLS error

I have set-up Strongswan on a Ubuntu 14.04 server from the official package repo with IKEv2 and rightauth=eap-tls using our PKI infrastructure. I can connect just fine from Android and Linux but not ...
2
votes
2answers
2k views

How do I fix the CVE-2014-0224 OpenSSL vulnerability?

I just scanned my site with this tool and it said my site was vulnerable to CVE-2014-0224. How do I fix it? Do I need to get a new cert issued? The one I have I purchased from enom. Is it their ...
0
votes
0answers
603 views

OpenSSL, Converting CRT to PEM

I've been trying to use openssl to convert a .crt certificate to a .pem openssl.exe x509 -in server.crt -out openssl.pem -inform der -outform pem After using that command, I get unable to load ...
0
votes
2answers
3k views

SSL problems on chrome

I'm running Chrome 35 on windows 8.1. In the past month, every web site I go to gives either SSL connection error, or else This webpage is not available. I click on refresh three or four times before ...
2
votes
1answer
5k views

How to properly install certificate issued to me?

I tried various ways to install certificate, but it seems it either not being seen by linux or something else is wrong. I got .pfx to be able to connect to another server via vpn (need to use Cisco ...
3
votes
2answers
2k views

Outlook shows certificate security warning in local LAN although certificate is only associated to IIS

I have the following configuration with Exchange Server 2010: I have a self-signed certificate which is associated with all the services (POP, SMTP etc..) except IIS (which is associated with a ...
0
votes
0answers
23 views

Is it possible to combine my S/MIME public signing and encryption certificates into one certificate?

My company provides me with S/MIME certificates, but for some reason choose to issue separate certificates for signing and encrypting. Therefore, when I sign a message, the recipients aren't able to ...
1
vote
2answers
5k views

Why Firefox alert me about HTTPs “Untrusted” Connection on Positivessl - Comodo certificate?

For my new startUp I got a SSL certificate from Comodo.com. I did all the painful process and finally I was able to implement it on my AWS server (I'm running MEAN Stack). Now when someone visit my ...
1
vote
0answers
1k views

How to properly configure SSL certificates on a Synology NAS?

While Synology DSM is a wonderful product, that was designed to be easy to be used, it seems that there a few areas where it lacks documentation (even from online sources). In fact most of the ...
0
votes
0answers
812 views

How to install SSL certificate in the Trusted Root Certification Authorities Store?

Apologies in advance, I do not have an IT background and have never done this before, yet I am being asked to figure this out and to do so as soon as possible. Our organization is trying to update ...
0
votes
2answers
207 views

Errors from httperf

I use httperf for performance testing. I start many threads of httperf at the same time, but after running for a while I receive errors like this: "httperf: failed to connect to SSL server ...
0
votes
0answers
313 views

Can not connect to VNC server on Ubuntu 14.04 over SSL using winsokify

I found this thread: noVNC over SSL, and it helped me a lot. But I am getting an error message. You see my issue is that I get a session to the SSL interface but I get an error stating: unsupported ...
0
votes
2answers
163 views

Can't browse HTTPS pages. TLS error. Outobox virus?

Suddenly I have lost an ability to browse HTTPS pages with all browser. Here is an example of simple Google search with Chrome In other cases it can show blank page, or TLS error message. UPDATE ...
1
vote
3answers
3k views

SSL error on youtube and google

This is everything it says. I honestly have no idea what the heck is going on. This just started happening a couple days ago. This is everything it says. Cannot connect to the real www.youtube.com ...
0
votes
0answers
36 views

Location of Outlook certificate warning setting

My hosting provider misconfigured their email server using a self-signed certificate that had CA=TRUE set. Only way I was able to retrieve business emails for a few days was to tell Outlook to accept ...
0
votes
1answer
506 views

Apache proxy: Why is one vhost returning Forbidden while the other one works?

I have a Java application that needs to talk to another intranet website using HTTPS in both directions. After fighting with Java's SSL implementations for some time, I gave up on that, and have now ...
0
votes
0answers
50 views

SSL Websites not working with VPN

I run a VPN service, and have just realized that websites that use SSL never load. A little confused by this, since nothing is blocking the SSL. However, I had a thought that I would need my own SSL ...
0
votes
1answer
114 views

Not getting prompted for certificate in IE8

I am unable to connect to a local intranet server using IE8. This server issues an unsigned certificate. When using IE8, it returns "Internet Explorer cannot display the webpage" instead of "there ...
0
votes
0answers
2k views

Dropbox website does not open and gives SSL related error

When I open the website www.dropbox.com in my Windows server 2003 R2 service pack 2 PC, I get error as shown below: I checked settings of Internet explorer and everything seems to be ok. Also, date ...
0
votes
1answer
222 views

How to overcome Local Group Policy Editor's 1023 character limit?

I want to reorder the SSL Cipher Suite Order applied as part of KB2919355, prioritizing the forward secrecy suites above all else. Trying to do this with gpedit at Computer Configuration > ...
2
votes
1answer
560 views

my SSL site shows lock icon in Chrome, but shows warning sign in Firefox

My SSL secure site (goinspire.com/secure-payment) shows a lock symbol in Chrome, but in Firefox it shows a warning sign instead. According to http://www.whynopadlock.com there is an http url there ...
0
votes
1answer
266 views

WHM/cPanel SSL Warning in Chrome

I'm managing a server running CentOS, and when I try to log in to WHM at xxx.xxx.xxx.xxx:2087 I've always got a warning saying "This is probably not the site you are looking for!" . I did a little ...
1
vote
0answers
110 views

Java keyTool - append primary/secondary intermediate certificates to key store

I have already created a keystore (server.jks in the image) having imported the relevant key-pair. keytool -importkeystore -srckeystore server.p12 -destkeystore server.jks -srcstoretype pkcs12 I ...
1
vote
1answer
91 views

What specific sequence of events can cause “SSL_ERROR_RX_UNEXPECTED_SERVER_HELLO” in Firefox?

I have a user that was visiting a site and received the following error in FireFox: Secure Connection Failed An error occurred during the connection to foo.foo2.com. SSL received an unexpected ...
1
vote
1answer
2k views

enabling ssl on wamp with startssl on a live site

i am trying to enable ssl on my website i use wamp for a live site, i have read ALOT of tutorials on how to enable SSL but was unable to find any for using certificates from startssl.com every module ...
0
votes
0answers
25 views

Unix console steps to renew ssl keys

I have a ssl certificate for 3Yrs with 1.5Yrs expiry from today. Could anyone please provide the console steps to update the SSL certificate/regenerate the TLS cretificate for renewal with clear ...
0
votes
1answer
51 views

Crazy Finished Message in TLS

I'm tried to uderstand what is the content of the Finished Message of TLS. I'm using wireshark to capture the traffic between my browser and the internet. I noticed a "stangeness" when the chosen ...
2
votes
1answer
272 views

How do you hide the Extended Validation text in Firefox?

Certain sites have Extended Validation certificates. On top of the normal lock symbol, Firefox also shows the Organization name next to the lock symbol in green text. This gives users a nice, warm, ...
1
vote
1answer
389 views

SSL Redirect in VirtualHost causing url to break

I recently configured by website to direct all traffic through https. I did this by modifying the vhost file to show this <VirtualHost *:80> DocumentRoot "/srv/http/example" ServerName ...
1
vote
1answer
81 views

SSL failure fallback

I've successfully configured my Apache webserver to make use of public certificates as an authentication method, using following configuration: SSLVerifyClient require SSLVerifyDepth 1 ...
2
votes
1answer
60 views

Windows - service account default certificate store

I am writing a web app that connects to external web services. The external web services serve an intermediate certificate signed by Thawte SGC CA - G2. When I setup IIS to run the web app using ...
0
votes
0answers
53 views

How to change cryptography method at TLS protocol on Localhost(XAMPP)?

How do I change the cryptography method at SSL/TLS protocol on Localhost(XAMPP)? I want to use Blowfish as symmetric cypher, and RSA for PKC....
0
votes
1answer
524 views

How do I install my SSL certificate? [closed]

Looking at the Magento interface I don't see anywhere to put in my certificate. It has an option to turn on SSL (without a certificate apparently), but I'm told that will break the site (someone else ...
0
votes
1answer
381 views

Problems using tshark sniffing TLS encrypted traffic with .pem key

I am having problems decrypting TLS encrypted syslog-ng packets in a honeynet using tshark (command line Wireshark). The goal is to be able to intercept the packets going from the honeypots to a ...
1
vote
0answers
43 views

Is there a way to quickly disable all root certificates in Windows 7?

I'd like to temporarily disable all trusted root certificates and wondering if there is a quicker way than going through every single one of them, right-click Properties and selecting "Disable all ...
0
votes
2answers
119 views

Bandwidth Test for HTTPS Proxy Server

Is there a tool that would test bandwidth usage on a server. I've tried siege and Jmeter. Both are very good for direct web applications. However they give support for proxy, siege proxy did not work ...
1
vote
3answers
8k views

Enable TLS 1.1 and 1.2 for Clients on Java 7

Java 7 disables TLS 1.1 and 1.2 for clients. From Java Cryptography Architecture Oracle Providers Documentation: Although SunJSSE in the Java SE 7 release supports TLS 1.1 and TLS 1.2, neither ...
0
votes
1answer
258 views

Virtual hosting with nginx over SSL, without SNI (via a wildcard cert)

I'm trying to get https://survey.mediacru.sh to work without SNI. We have a wildcard cert and are using nginx as our http server. However, on browsers without SNI support (for example, the stock ...
0
votes
1answer
634 views

What is the role of cakey.pem and cacert.pem in addition to .key and .crt based encryption

I have .key file which holds the private key data, .crt file which would be certificate with public key and, to my knowledge, that's it for public key encryption, right? Not exactly. In order to ...
1
vote
2answers
2k views

Disable Specific Cipher Suites Apache with WHM/cPanel

We are operating a few web servers that have WHM/cPanel installed so we can easily mange our sites and projects. To ensure our information and users information is secured, we have been running some ...
3
votes
2answers
73 views

Is it normal for a hosting service to require that I buy a public IPv4 for using my own $25 certificate?

Self explanatory title, I guess. I'd love to have my website in https only, but they (the web hosting service) claim in the administration that I need to buy a public IPv4 address from them before ...
0
votes
1answer
60 views

Microsoft CA Certificate Request

I am new to MS CA and I have recently installed a MS CA setup on a VM. I used the web service provided "http://test.server.name.tld/certsrv" to request a certificate. I approved my test certificate ...
0
votes
0answers
226 views

Apache - Disabled SNI

I'm having a bit of trouble with my webserver. Whenever I connect to Apache using SSL, I get a 400 Bad Request. I've looked in Apache's error log, and I see: [ssl:error] [pid 30065] AH02032: ...
1
vote
3answers
4k views

Disable SSL browsing in Chrome

I need to disable SSL browsing completely in Chrome. If not completely, at least disable https://www.facebook.com and force http://www.facebook.com to load, FOR EXAMPLE (FB is just an example - i ...
0
votes
1answer
126 views

Why would an IP address fail, but the server (hardware and web server) and file system work?

Please forgive me if this is a duplicate, or better on network engineering SE. I have an account on BlueHost, and it provides me configuring multiple dedicated IP addresses and multiple SSL ...
0
votes
0answers
17 views

How to set SSL_BASE for mod_ssl?

I want to specify which openssl mod_ssl should use. Can I specify where openssl is in httpd.conf?