SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

0
votes
0answers
82 views

Error when start of the apache2 service: version OPENSSL_1.0.1 not defined

I'm using a Debian Wheezy server where I have installed apache2, php5 and libapache2-mod-php5 packages via apt-get. But when I'm trying to start the apache2 the follow error occurs: service apache2 ...
1
vote
3answers
7k views

Decrypting SSL traffic in Wireshark. Only headers get decrypted

I'm trying to decrypt SSL traffic in Wireshark, and it partially works because I'm able to view the decrypted headers. The problem is that I don't see any of the packet contents, only their headers. ...
10
votes
1answer
1k views

How to know which Certificates to leave in my browser, and which to remove

I would like to tighten up security a bit, so I am disabling unneeded certs from my browsers. For instance, the "WoSign CA Limited" cert from China I obviously don't need, yet "Thawte Consulting cc" I ...
0
votes
0answers
376 views

Dropbox SSL Certificate issue on OS X in both Chrome and Safari

Currently unable to connect to www.dropbox.com via https. This is only happening on one machine on the network. The machine is running OS X 10.6.8. Safari gives - When trying to connect in chrome ...
1
vote
1answer
775 views

Why isn't openssl s_client passing my private key to proxytunnel?

I currently have HAProxy set up on my home PC and I am attempting to access it through a HTTP proxy. Currently I am accessing the SSH logon prompt like so: openssl ...
1
vote
2answers
797 views

Links SSL Error

What version of links does the user called "bytepool" have that he's able to find this workaround? Refer to link below. How to tell `links` to ignore expired SSL certificate and proceed? He writes ...
0
votes
1answer
217 views

Importing StartSSL Key

A few months ago I signed up for a Free StartSSL certificate but I didn't realize that you needed to install that certificate if you wanted to later log in to the control panel. Now I'm stuck trying ...
0
votes
1answer
238 views

ftp-client works fine. ftp-tls-client fails on one computer and works on another

Connecting to ftp - from a Windows Server 2012 - it works both secure (-over tls) and unsecure. From a Windows 7 it succeeds unsecure but fails when secure. (Using explicit TLS and passive mode.) ...
0
votes
1answer
539 views

Apache OpenSSL httpd-ssl.conf config stops Apache, no error except when httpd-ssl.conf include disabled

I followed directions to setup SSL on my custom WAPP stack (Windows/Apach/PHP/PostgreSQL) here... http://www.tehuber.com/article.php?story=20110315153800545 After back-tracking I discovered when ...
0
votes
1answer
4k views

Email without SSL

I have been trying to setup LabTech Email settings. Unfortunately, it accepts only email settings that are not encrypted; no SSL/TLS i.e POP 110 and SMTP 25. Tried to setup SMTPSSL in the same, but no ...
1
vote
0answers
59 views

Force browser to use HTTP because of HTTP proxy

I have a lot of HTTP proxies and I cannot access websites that are using SSL through those proxies. I have no access to configuring the proxies, so is it possible to force Firefox (in my case) to ...
0
votes
1answer
66 views

different ssl_protocols for seperate domains

I tried to configure one server for a specific domain to use TLSv2.0 only. Others should use TLSv1, TLSv1.1, and TLSv2.0. The configuration is valid, as nginx loads correctly, but the site with ...
0
votes
1answer
165 views

Firefox, IE and Chrome show certificate warnings

I've been asked to fix a laptop, which has had at least some malware (I think it's called Andromeda or similar) and at least 1 trojan. Please note this is a home used laptop, it's not used for work ...
0
votes
1answer
859 views

Fedora 18 - error [Errno 14] Peer cert cannot be verified or peer cert invalid

When i run the command: sudo yum install perl-bioperl I get the error [Errno 14] Peer cert cannot be verified or peer cert invalid. My system details are: Linux localhost.localdomain ...
1
vote
1answer
581 views

Unable to read an email protected by Rights Management Service

My colleague received an email from H company. This email is protected by Microsoft Rights Management Service. His email client is Outlook Express, and he use POP3 to received it to local disk (the ...
1
vote
2answers
409 views

Removing CBC ciphers specific to SSLv3

I need to disable SSLv3 specific CBC ciphers as a temporary solution to the POODLE vulnerability as there are legacy applications that need to use SSLv3. After consulting the OPENSSL docs, it seems ...
0
votes
1answer
42 views

Are URL based SSL / certificates possible at IIS?

Is there a way to change the used certificate / ssl encryption depending on the visited url? We are using IIS 7 and later. Edit: We plan to develop and deploy web applications to our customers. It ...
2
votes
2answers
622 views

Disable SSLv3 in email servers [closed]

After the recent POODLE vulnerability, I would like to disable SSLv3 on my mail servers (for POP, IMAP, and SMTP). My concern is whether that will break my clients' access. I have been looking online ...
0
votes
1answer
607 views

IE10: Website security certificate issue + “continue” button missing

I am developing a web app and am using self-signed SSL certificates. I'm trying to test my site on Internet Explorer 10 in a modern.ie VM (in VirtualBox). When I visit the site, ...
0
votes
2answers
186 views

how to change ssl certificate serial number

I upgraded the linux full release on a server. As part of the process I generated a new local ssl certificate key set with genkey. However the serial number remained the same and client apps such as ...
1
vote
2answers
3k views

ldap authentication not working with start_tls option after certificate upgrade

Ubuntu ldap authentication is not working on my client with ssl start_tls option enabled in the ldap.conf file. I can authenticate when I comment out ssl start_tls. I upgraded the ldap servers ...
2
votes
1answer
156 views

Why some hostNames are not resolved by my browser once dns-reversed?

I have some newby questions about dns. Here are the steps that lead me to those : C:\Windows\system32>nslookup google.ca Serveur : p81-004.pixelweb.net Address: 206.41.81.4 Réponse ne ...
1
vote
1answer
25 views

Is it particularly necessary to install an SSL certificate on a new cPanel installation on a dedicated server?

I have a dedicated server and I am installing cPanel on it. I am wondering if I should also install an SSL certificate (that I will have to buy) just for the cpanel install itself.
0
votes
0answers
35 views

ssl connection error with VPN

So today I went on a site that required secure connection (betting site) and I got this error. http://s30.postimg.org/kskk0jupd/Untitled.jpg Yesterday, it was all working fine. I am using a VPN ...
0
votes
0answers
35 views

Making a connection between puppet and puppet agent.

I know this question has been asked before in many different variant. I read all the post related to the problem but I cannot get agent and master talking to each other. I boot up 2 vm via vmwork ...
1
vote
1answer
19k views

Self signed certificate is not appearing in Chrome after importing

I have a Synology NAS that creates a self signed certificate for SSL access. I'm using the latest Chrome on Windows 7. Upon visiting the NAS's landing page, Chrome presents a red warning to say that ...
0
votes
0answers
58 views

SSL on freenode Irssi seems to connect, but everything I type is scrambled

I followed these instructions from freenode to configure SSL from my raspberry pi that I'm running headless. I can connect to freenode. It asks me for my password. It accepts my password, but every ...
0
votes
0answers
93 views

Chrome for Windows 8 Blocks Insecure Content with No Option to Allow

My company uses an idiotic security product that basically reissues certs for secure websites, which causes security warnings in the browser for any SSL-based URLs. Usually the browser will present ...
2
votes
1answer
771 views

SSL handshake failure when using Logstash

I am using Logstash, and it works on most machines I have running. But on some, I get this error: Failed to tls handshake with x.x.x.x x509: certificate is valid for , not dns_name I read on ...
3
votes
3answers
3k views

ssl on localhost and apache server

How do I do SSL on localhost? How do I do it on live server?
1
vote
1answer
2k views

Enable security settings in Internet Explorer 7 via registry

I used to have a list of keys to enable various security settings within Internet Explorer 7 via the Registry. Specifically, I'm looking for the keys that enable SSL 2 and 3.
4
votes
3answers
13k views

Disable SSLv3 in major browsers

As the question suggests: How to disable support of the SSL version 3 and set TLS version 1 as minimum (oldest) protocol supported in order to defend against POODLE. One can test a browser with this ...
3
votes
3answers
2k views

Mutt will not let me save an SSL certificate

I have just set up Mutt to connect to my firm's IMAP and SMTP server. Everything works; but when I launch mutt, I get a warning about the certificate, and am given the option to: (r)eject, accept ...
0
votes
2answers
2k views

Postfix SMTP SSL config: Can't send email but can receive it with SSL

I am trying to finish configuring my postfix/dovecot mail server that sits behind my home's router/firewall. I'm on Mint/Ubuntu 12.04. I'm close. I can connect/retrieve emails via SSL but can only ...
1
vote
0answers
865 views

IIS 8.5 TLS 1.2 not working

I have Windows 8.1 with IIS 8.5 and have run the script from http://www.hass.de/content/setup-your-iis-ssl-perfect-forward-secrecy-and-tls-12 to enable TLS 1.2, but Qualys SSLLabs says my server ...
5
votes
2answers
2k views

Disabling SSL 3 on 64bit Chrome for Windows [duplicate]

I see lots of different places with the same response for disabling SSL3 on chrome (adding --ssl-version-min=tls1 to the end of the execution of chrome.exe). But apparently this isn't working for my ...
0
votes
0answers
79 views

SSLv3 Disabled - Mild error message

Due to POODLE there is now a need to disable SSLv3 on servers. If a client connects to a server that no longer support SSLv3, and the client does not have TLS available the client displays some kind ...
3
votes
1answer
345 views

Does Firefox support TLS on non-standard ports?

My presumption was that TLS 1.0+ is supported by Firefox on ports other than 443. However, a tweet crossed my path that seems to debunk this. Turns out that Firefox does not support TLS on any ...
0
votes
1answer
104 views

SSL: generating a CSR for a domain with and without www on ubuntu 14.04 / apache2

I want to create a CSR for my domain, but I was unable to find details online about this. Is the CSR generation different when I want to use addresses with www and without on the mentioned ...
3
votes
1answer
299 views

View text version of remote server SSL certificate from linux command line

Does anyone know of a linux one-liner that can be used to download an SSL certificate from a remote server and decode it to text? I think the last step would involve openssl x509 -text -noout but the ...
1
vote
1answer
136 views

How can I make my computer trust a firewall web server certificate?

Every time I log into my firewall I get a message that says: The site's security certificate is not trusted! I know this is because my firewall doesn't have an identity certificate from a ...
1
vote
1answer
128 views

Using CERT Tapioca on VirtualBox

I'm attempting to use Cert Tapioca (http://www.cert.org/blogs/certcc/post.cfm?EntryID=203) in Virtual Box so that I can test the SSL/HTTPS security of all the sites I have browsed. What I did is, ...
3
votes
2answers
4k views

SHA2 support for windows XP SP2 : any hotfix or dll available?

SSL with SHA2 does not work in windows XP SP2 and below.Th websites does not open if it has SSL with sha2. It requires SP3 and above. So is there any hotfix or files other than completely installing ...
1
vote
0answers
37 views

Why does Thunderbird permanently asks to “verify xb7481.xb7.serverdomain.org:143”?

After using Thunderbird for 5+ years now, I suddenly get this weird popup asking to "Verify this security exception rule" [translated from german]. This happens without any reason, without looking at ...
2
votes
2answers
132 views

How to deal with mail senders failing on STARTTLS?

I try to use my mail server richtercloud.de for subscriptions to vger.kernel.org mailing lists. I set up postfix 2.11 running on Ubuntu 14.04 and sending and reception works. I set up postfix to ...
0
votes
1answer
19 views

Accessing a particular directory via HTTPS

I am trying to create a particular directory on my LAMP installation folder to be HTTPS enabled. I was reading about that and i found out it can be done in httpd.conf. However i do not have https.conf ...
1
vote
1answer
7k views

Using Wireshark to decrypt tls encrypted file with private key

I have a packet encrypted with TLS in a .pcap file. I also have the private key in a .priv file. How can I decrypt the .pcap file using Wireshark? I tried going to edit -> preferences -> protocols -> ...
1
vote
1answer
146 views

Using CERT Tapioca on VM

I have been attempting to get CERT Tapioca (http://www.cert.org/blogs/certcc/post.cfm?EntryID=203) running on my Mac so that I can test the SSL/HTTPS security of our Android app. Up to this point, I ...
2
votes
1answer
4k views

pip and SSL certificate errors

I am trying to install a library via pip. I have a problem with SSL certificate, even when using the --cert. Trying this on windows (pip version 1.5.4,python version 2.7.6): pip --cert ...
0
votes
0answers
300 views

Can I extract a certificate private key from the windows certificate store in a disk image?

After re-installing Windows 7 I notice that I seem to have failed to export the private key for one of my client certificates (for Internet Explorer use). When viewing the certificate in IE, it ...