SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

0
votes
0answers
172 views

Chrome is not accepting my IIS self-signed certificate

I'm developing on my local machine with a self-signed certificate in IIS. Everytime I open Chrome and go to my site, initially I get an error 'Your connection is not private'. I then have to click '...
0
votes
0answers
299 views

Chrome suddenly red HTTPS on mobile but not on desktop

Yesterday I enabled OCSP stapling for my website in nginx. Now when I check my website using Qualys SSL Labs I have 2 trust paths, 1 using a SHA1 root certificate and 1 using a SHA256 root ...
0
votes
0answers
199 views

squid proxy 503 Service Unavailable response for https url

I am using squild-3.5.4 version on centos 6.3 . To support HTTPS url I configured Intercept HTTPS CONNECT messages with SSL-Bump from Squid documentation. But this configuration not working with https ...
0
votes
0answers
376 views

Install Tomcat SSL cert in CUCM signed by CA created through openssl

My problem looks like this. I want to install a Tomcat certificate in CUCM signed by CA created by me which exists in my ubuntu operating system.This is what I thought the steps should be: Generate ...
0
votes
0answers
223 views

Configuring Chrome to Ignore or Accept Specific Untrusted Certificates

There are various personal websites and LAN addresses which I access through https. Obviously they're mine so they can be trusted, but since they all deploy a self-signed certificate, Chrome displays ...
0
votes
0answers
111 views

Enforcing RC4 cipher and testing enabled ciphers with OpenSSL

I am trying to enable and enforce the RC4 cipher on Apache 2.4. I checked the Apache SSL HOWTO. It says the RC4 cipher can be enabled in the two ways below: SSLCipherSuite RC4-SHA:AES128-SHA:HIGH:!...
0
votes
0answers
56 views

Unable to open two (so far) SSL sites, all others work normally

I have tried IE, Chrome, and FF. I have turned off WiFi on my mobile device and the connection goes through normally. From my computers connected to my internet, I'm unable to load the pages, it just ...
0
votes
0answers
306 views

Apache fails to start with TLSv1 disabled and does not recognize TLSv1.1 and TLSv1.2

I'm having issues trying to disable TLS 1.0 on apache as described here: http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslprotocol $ apache2 -v Server version: Apache/2.2.22 (Ubuntu) Server built:...
0
votes
0answers
51 views

Multi hop SSH with certificate on bastion server

I have this situtation: my local machine a login server (with token implementation) a set of machines accessible only with another authentication from login server (token implementation too) this ...
0
votes
0answers
135 views

Hexchat cannot accept SSL

I've been trying to access an IRC Server recently, which I have been on before. I can access it on Windows but when I get into Ubuntu I cannot access it due to not being able to "Use SSl for all the ...
0
votes
0answers
100 views

Wireshark capture SSL only

I would like to capture SSL or HTTPS traffic only in Wireshark, this is not something that can be filtered after due to the length of the time I would be recording the data after and the size of the ....
0
votes
0answers
237 views

SSLStrip and WWWW Issue

I have been playing around with the mana-toolkit (https://github.com/sensepost/mana) which uses a revised form of SSLstrip to support HSTS. I have noticed that SSLStrip adds an extra "w" to the ...
0
votes
0answers
896 views

testing cipher suite using openssl for tomcat server is resulting in wrong manner

I am using tomcat 6.0.28. and I have configured connector with "TLS_ECDHE_RSA_WITH_RC4_128_SHA" but when i am testing whether cipher is suited as follows I am getting following error: > F:\...
0
votes
0answers
512 views

Guacamole, Tomcat, HTTPS-setup fails due to issues with certification

I'm using guacamole (http://guac-dev.org/) to access (parts of) my home (Debian) computer clientless, on the go. From my work computer (University Network) the screen is however not updating and only ...
0
votes
0answers
440 views

Dropbox SSL Certificate issue on OS X in both Chrome and Safari

Currently unable to connect to www.dropbox.com via https. This is only happening on one machine on the network. The machine is running OS X 10.6.8. Safari gives - When trying to connect in chrome ...
0
votes
0answers
126 views

Chrome for Windows 8 Blocks Insecure Content with No Option to Allow

My company uses an idiotic security product that basically reissues certs for secure websites, which causes security warnings in the browser for any SSL-based URLs. Usually the browser will present ...
0
votes
0answers
524 views

Switch from HTTP to HTTPS with Apache2 not working

I'm trying to change my existing apache2 site from http to https with a self-signed cert on Ubuntu 11. The site is currently running with the config at sites-available/default. I've followed the ...
0
votes
0answers
341 views

Tomcat6 - SSL received a record that exceeded the maximum permissible length

After following the instructions to setup a secure http connection on my tomcat server (link: https://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html), I had this error pop up when I requested https://...
0
votes
0answers
55 views

Subversion is no longer working

Subversion has been fine. Today, I needed to set up SSL on the same server SVN is on, and there was an issue; both SSL and Subversion use port 433 So, in the Network tab in subversion, I changed it ...
0
votes
0answers
90 views

Does a certificate from “open.nsa.gov” in firefox mean the browser defaultly trusts the NSA?

While exploring Firefox options I see that I have a certificate identifying the NSA, issued by the US Government. I don't recall adding this at any point and don't really want my machine trusting the ...
0
votes
0answers
33 views

FTPS certificate email address has different domain than the Organization name

Wondering if this should be of any concern. We received a FTPS ip which is SSL enabled. (This is not SFTP). Filezilla - the FTP client shows a certificate where the organization name say 'XYZ Inc' and ...
0
votes
0answers
908 views

Magento | After SSL Setup, Images not shown

My problem is, i setup a Comodo Positive SSL on solempet.com When i changed the options for front page to secure https urls, images and css now shown. I mean site is not load properly and images, css ...
0
votes
0answers
243 views

Windows 7 IPsec IKEv2 EAP-TLS error

I have set-up Strongswan on a Ubuntu 14.04 server from the official package repo with IKEv2 and rightauth=eap-tls using our PKI infrastructure. I can connect just fine from Android and Linux but not ...
0
votes
0answers
1k views

OpenSSL, Converting CRT to PEM

I've been trying to use openssl to convert a .crt certificate to a .pem openssl.exe x509 -in server.crt -out openssl.pem -inform der -outform pem After using that command, I get unable to load ...
0
votes
0answers
1k views

How to install SSL certificate in the Trusted Root Certification Authorities Store?

Apologies in advance, I do not have an IT background and have never done this before, yet I am being asked to figure this out and to do so as soon as possible. Our organization is trying to update ...
0
votes
0answers
65 views

Location of Outlook certificate warning setting

My hosting provider misconfigured their email server using a self-signed certificate that had CA=TRUE set. Only way I was able to retrieve business emails for a few days was to tell Outlook to accept ...
0
votes
0answers
101 views

SSL Websites not working with VPN

I run a VPN service, and have just realized that websites that use SSL never load. A little confused by this, since nothing is blocking the SSL. However, I had a thought that I would need my own SSL ...
0
votes
0answers
4k views

Dropbox website does not open and gives SSL related error

When I open the website www.dropbox.com in my Windows server 2003 R2 service pack 2 PC, I get error as shown below: I checked settings of Internet explorer and everything seems to be ok. Also, date ...
0
votes
0answers
457 views

Why is SSL broken for one domain on one computer?

I've been having a strange issue, where I cannot connect to https://www.humblebundle.com. Plain HTTP works fine, as does https://humblebundle.com. These all redirect to the above address. I haven't ...
0
votes
0answers
169 views

Blocking a trusted certificate in Google Chrome

Is it possible to somehow block a certain certificate that is currently trusted by my browser? The reason is the recently discovered Heartbleed-attack which I also found out to affect my netbanking (...
0
votes
0answers
240 views

SSL failure on Auzre web farm with shared configuration and centralized certificates

[Sorry if this question is a bit long, there's lot of extra info in case it is relavent] Overview I'm having a problem with SSL on a 4 VM's load balanced farm in Azure. If the HTTPS request goes to ...
0
votes
0answers
1k views

IIS 8.5 Windows Authentication + Chrome not working

I have IIS 8.5 running with the Network Service in the App Pool. I have a wildcart cert installed. Anon auth false. Authentication and SSO works on Firefox and Chrome (after whitelisting) However ...
0
votes
0answers
2k views

Why the indicator for https condition at left side of URL bar alerted in yellow

Why the indicator for https condition at left side of URL bar alerted in yellow I would like to know why the indicator for https condition at left side of URL bar alerted in yellow even when I just ...
0
votes
0answers
39 views

FastCGI apache mod making HTTPS fail

We hired somebody last month to install FastCGI in place of suphp, so that we could install magento multisites on our server. We have monitors set to watch some of our websites on siteuptime.com, and ...
0
votes
0answers
569 views

Apache SSL working with IP but not FQDN

All was well in my little network until I switch internet providers and had to change my IP address on my internal network from 172.16.0.x to 192.168.1.x, they have funky hardware and this is in my ...
0
votes
0answers
407 views

wireshark: decrypt live SSL traffic

w.r.t decryting SSL traffic with wireshark, I've seen the sample capture from wireshark website and it worked fine. What I'd like to achieve is to decode live traffic. So the key I guess is to ...
0
votes
0answers
2k views

How to disable SSL 2.0+ in OS X 10.7?

I am currently encountering a problem with my Webkit browsers (Chrome v31.0.1650.63 and Safari) on my MBP running OS X 10.7.5. The browsers are not able to establish any SSL connections. The Google ...
0
votes
0answers
230 views

iptables messing up Tomcat?

I encountered the following problem(s) using Tomcat 7 with iptables on. 1) Namely, there's this Tomcat 7 instance that I run on server-1 (directly exposed), and this Tomcat instance hosts a REST ...
0
votes
0answers
594 views

Rails 2 and Ngnix: https pages can't load css or js (but will load graphics)

ADMISSION: i've posted this same question on stackoverflow, before realising it's probabaly better suited to superuser, but it kind of depends on the answer: If it turns out to be a problem in my ...
0
votes
0answers
914 views

How to make Firefox remember a self signed certificate is trusted

I'm using some private server with a self-signed certificate for https connections. Firefox 25.0 warns me about the certificate being untrusted every time. For some reason, I can't make it remember ...
0
votes
0answers
288 views

How to disable fake SSL check in development phase for Opera 17+ and Chrom 30+

During the test, we are configuring our web server(Tomcat) to be connected to with test SSL When we try to connect to this site with IE, we face this error: There is a problem with this website's ...
0
votes
0answers
64 views

SSL Certificate updates

In Windows or Linux system, how does the SSL certificate gets "updated" or "revoked"? By default some certificate comes while installing the OS / Browser. But later when that needs to be updated how ...
0
votes
0answers
838 views

501 Not Implemented error

I'm trying to setup WAMP to act as a local server and setup ssl so that I can develop facebook applications. But when I open my localhost over https and try to open the project the .js and .css files ...
0
votes
0answers
997 views

Windows 2003 (actually XP x64) can't read SSL signature if it's SHA-2 (SHA 256/384/512)

I have a Windows XP Professional x64 virtual machine to run some HLDS processes. I chose the x64 edition as I already have a license for it, and as it uses the Windows Server 2003 kernel it'll be more ...
0
votes
0answers
583 views

Why can't I proxy SSL connections in Charles under Linux (ubuntu)?

I want to proxy some API requests over SSL from a PHP application using Charles Proxy which should allow me to view unencrytped requests. I've done this on Windows before but on Linux, I'm seeing the ...
0
votes
0answers
41 views

firefox no internet

In our company we have a proxy that verifies all ssl certificates and terminates the ssl connection itself (i.e. decrypts in the middle), then reencrypts and passes the website to the browser with its ...
0
votes
0answers
1k views

Iptables - having trouble opening port 443

I am attempting to set up https, but I am having difficulty opening that port. Nmap scan report for localhost (127.0.0.1) Host is up (0.000073s latency). PORT STATE SERVICE 443/tcp closed https ...
0
votes
0answers
577 views

Internet Explorer 9 - website certificate expired

My Internet Explorer 9, for every page, shows this messege to me: There is a problem with this website"s security certificate. The security certificate presented by website has expired or is ...
0
votes
0answers
73 views

Can one use SSL certificates for user authentication to websites?

I hear that it is possible to create SSL certificates and use them instead of password authentication. Is this true and how to do it? And do all SSL enabled sites allow this?
0
votes
0answers
198 views

How to ssl-secure mysql connection on Windows XP?

I use MS Access to connect my remote MySQL database, and use MySQL ODBC connector for that. I would like to secure the connection with SSL. ODBC connector offers some SSL setup, but I don't have idea ...