SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

22
votes
1answer
66k views

Windows 7 will not install a root certificate

I have a web service that uses a self-signed certificate, so I need to install the certificate as a Trusted Root so that I can avoid all the security errors that having a self-signed certificate ...
0
votes
1answer
1k views

OpenSSL: socket: Connection refused connect:errno=111 Cent OS

I'm facing this problem.Actually I'm trying to disable SSLV3 and enable TLS 1.2 in my Cent OS production server.I found exact same question here. [root@186-aven-vps ~]# openssl s_client -connect ...
0
votes
0answers
13 views

Difference between JKS file and client certificates

I am accessing my partner URL using httpS. I was able to download the client certificates from Browser itself. However i got to know that it is not enough for us only to have the client certificates ...
67
votes
12answers
38k views

Why won't OS X trust GitHub's SSL certificate?

When I go to any github.com page in Chrome, I get a big ugly error: You attempted to reach github.com, but the server presented a certificate issued by an entity that is not trusted by your ...
2
votes
1answer
26 views

Difference between SSL certificates showing with name in browser bar and without

I noticed Chrome shows the owner of a SSL-certificate only in some cases in the adressbar. What is the difference between these types of certificates. Here is an example: With company Without ...
0
votes
0answers
24 views

SSL in apache does not recognize a path to https

I had a regular apache configuration in an ubuntu machine. I added SSL support for everything in the folder /var/www/marc However, when I go to https://myserver.com/marc, Firefox asks me to trust the ...
0
votes
0answers
85 views

How do I force Firefox and Chrome to use HSTS and a pinned certificate for a specific port on localhost?

I am wanting to use the browser-based notebook interface of Sage, a computer algebra system. Before I can do this I need to ensure that neither remote nor local privilege escalation is possible. To ...
0
votes
0answers
575 views

Unable to connect to sql server 2012 with SSL encryption enabled using sqljdbc4

I am trying to connect my web application to SQL server 2012 with SSL encryption enabled using sqljdbc4 but i get the below error : com.microsoft.sqlserver.jdbc.SQLServerException: The driver ...
0
votes
2answers
157 views

Why is session reuse useful in FTPS?

I noticed that not all FTPS clients support session reuse and I'm wondering whether it is a critical security option that should be left enabled on the server. My guess is that it's possible for an ...
1
vote
2answers
35 views

Is there a hardware appliance that can see VPN packet payloads? [closed]

My IT staff at work claims they have a hardware appliance that can see the payload of a packet that has been encrypted using a VPN. I was told this only works if the connection was established on a ...
1
vote
0answers
240 views

Secure stealth tunnel through a proxy to another proxy (STunnel, Squid)

How to stealth my traffic routed through a proxy server? There is a client computer with several restrictions. You cannot install any software and the access to the internet is only possible through ...
4
votes
3answers
17k views

Disable SSLv3 in major browsers

As the question suggests: How to disable support of the SSL version 3 and set TLS version 1 as minimum (oldest) protocol supported in order to defend against POODLE. One can test a browser with this ...
-2
votes
2answers
93 views

Youtube.com doesn't work on any browsers, throws multiple kinds of errors my way

I use mainly Chrome, but I checked out other browsers (like Edge) and it didn't work on them either. At first I couldn't connect to YouTube, because: the connection was not private" ...
-2
votes
2answers
100 views

Is the data sent from web server to browser is really more secured in https than http?

I was just reading about the differences between http and https briefly. And what I have not understood is the following possible scenario: Everyone has SSL public key right? So, anyone can get the ...
0
votes
3answers
49 views

https certificates for 2 IP addresses on the same server

We are working on a router-like device which can have it’s own access point and be connected to another router. We want to have https on the management web page using a valid certificate (not a ...
5
votes
2answers
25k views

Does openssl errno 104 mean that SSLv2 is disabled?

I want to check if my server has SSLv2 disabled. I am doing this by attempting to connect remotely with openssl with the following shell command. openssl s_client -connect HOSTNAME:443 -ssl2 Most ...
0
votes
0answers
119 views

Deadlock when adding untrusted certificate to keychain running MS Remote Desktop Client on Mac OS X 10.10.5

I am experiencing a strange, frustrating, and seemingly nondeterministic issue using the MS RDP client on Mac OS X 10.10.5. Here are the steps to reproduce the issue: Open Microsoft Remote Desktop ...
0
votes
1answer
71 views

How to generate a keystore file for a Jetty server from PEM file?

I got a certificate.pem file from the CA, that have structure like below: -----BEGIN CERTIFICATE----- encrypted text of the public key -----END CERTIFICATE----- From this, we need to generate the ...
0
votes
0answers
50 views

Guest in VirtualBox 5.0.4 should act as router for SSLsplit

Recently I’ve been studying SSLSplit and TLS/SSL so I wanted to try it in VirtualBox. Host system: Windows 8.1. Guest: Ubuntu 14.04 with Bridged Network Adapter. On guest I allow forwarding in ...
4
votes
1answer
882 views

Configuring offlineimap for gmail: SSL error

I'm trying to configure offlineimap to download my gmail but am getting the error: OfflineIMAP 6.5.7 Licensed under the GNU GPL v2 or any later version (with an OpenSSL exception) Account sync ...
-1
votes
1answer
37 views

SSL Configuration for Nginx and Apache

I've server now running Nginx with SSL Wildcard installed but I need to add SSL to my new server running Apache, How to that? Case: The nginx server is still active with domain example.com and add ...
2
votes
1answer
44 views

SSL wildcard certificate for multiple subdomains / ip's?

I have multiple subdomains running web servers that I was to put SSL onto. Say they are linux.mydomain.com, windows.mydomain.com and mac.mydomain.com. each is its own vps and has its own IP (and a ...
0
votes
0answers
25 views

CERT Tapioca on Mac for Android app SSL testing

I'm attempting to use Cert Tapioca (http://www.cert.org/blogs/certcc/post.cfm?EntryID=203) in Virtual Box so that I can test the SSL/HTTPS security of Android Apps. After downloading and running the ...
0
votes
1answer
41 views

How to untrust proxy or antivirus certificate and/or certificate authority?

I have antivirus inspecting my web traffic including HTTPs. In this question we discovered, that it installed it's self certificates or certificate authority (not sure about terminology). Now I wish ...
0
votes
0answers
149 views

Unable to establish a secure connection with signin.ea.com

I've recently switched to another ISP, and since then I'm unable to connect to EA signin servers. At first I thought, that it was a temporary issue, but when I connect through my phone as a hotspot, ...
0
votes
0answers
87 views

How to use WinHTTP logging to determine SSL/TLS level negotiated

I've enabled WinHTTP Logging but the log files don't give me the SSL/TLS level negotiated. "Using WinHTTP Logging to Verify SSL/TLS Negotiation" only discusses error responses. Can I only determine ...
0
votes
0answers
56 views

SSL decrypting with Charles debugger

Situation I am using Charles Web Debugging proxy to analyze traffic and manipulate files. When I enable SSL Proxying for a certain web server, this server refuse me a connection with this error: ...
0
votes
1answer
15 views

SelfSLL, Microsoft Management Console, Certificate Not Displaying

I am currently attempting to create a self-signed certificate with the SelfSSL.exe tool from Microsoft's IIS 6.0 Resource Toolkit (I have the metabase compatability enabled); however, when creating ...
0
votes
1answer
252 views

SSL certificate from RapidSSL not working as expected on some Android phones [closed]

I bought an SSL certificate from RapidSSL for my website. It works on an iPhone and desktop browsers but it’s working on some Android phones; see picture below. The error is ...
-1
votes
2answers
136 views

Create an “IRC shell-account” on private IRC server [closed]

As this question did not receive any informative answers: [ Setting up linux shell accounts for public access ] I would like to rephrase the original question for my own purposes: I would like to ...
0
votes
0answers
273 views

vsftpd: Can't transfer files via FTP (SSL) when UFW is enabled

I have a Debian 8 server which runs vsftpd. I can successfully connect to it via Filezilla and browse directories. However, I can't transfer files (neither upload nor download) while I'm connected to ...
1
vote
2answers
533 views

OpenVPN server - SMB shares

I have a Windows 8.1 machine set up with OpenVPN server by following the instructions here:OpenVPN and its advanced features My Windows 8.1 client laptop can connect to the server no problem; but I ...
0
votes
2answers
191 views

How can any “replace your DNS and watch netflix from another country” company work with HTTPS traffic?

There are many services like "unblock-us.com" that make it possible to use geo-restricted services from other countries. The setup is always the same: just replace DNS and that's it. My question is: ...
1
vote
2answers
4k views

changing the pass phrase on a key from openssl

A while ago I created a key with openssl genrsa -aes256 4096 > server.key. The process prompts for a pass phrase. I would now like to change that pass phrase, is that possible?
1
vote
2answers
5k views

Mozilla NSS certutil binary

I have a problem with Firefox 32 and installed SSL certificates in cert8.db and I want to investigate it. I have found out that there is a tool called "certutil" from Mozilla that can work with this ...
3
votes
1answer
1k views

HAProxy works fine ran manually, but as a Systemd-service fails to load SSL pem-file

I'm trying to set up SSL on a Fedora 22 -server running HAProxy. Here's the config (/etc/haproxy/haproxy.cfg): global log 127.0.0.1 local2 chroot /var/lib/haproxy pidfile ...
1
vote
1answer
136 views

Is there a way to make Chrome assume a domain's certificate is valid (in other words, skip validating its certificate)?

Is there a way to make Chrome on Windows avoid validating the certificate for a domain such as (www.foo.com): Basically I want to avoid getting this warning message for that site every time I start ...
40
votes
2answers
8k views

Why do some websites show the company name next to the URL?

Some websites show the company name next to the URL (in Chrome) and some don't. How do I set this up for my website? Is there a reason why or why I wouldn't want to do this?
17
votes
3answers
3k views

Website is securely not secure

I am accessing Pandora via SSL and notice a few icons by the URL. First is the exclamation point in a triangle, indicating the page is not fully secure: Next to it is a shield? This one says ...
0
votes
1answer
61 views

every SSL certificate fails in chrome

I have downgraded from Windows 10 to Windows 7 today. Now EVERY time i call ANY https:// url in chrome, it tells me that the connection is not secure. My time settings are correct and the sites work ...
9
votes
3answers
71k views

How do you permanently disable the 'This Connection is Untrusted' page on Firefox

I'm going insane. Can someone please help me to COMPLETELY DISABLE the 'This Connection is Untrusted' page on Firefox. Facts: I am running Firefox 23.0 on an Ubuntu machine (downloaded and ...
1
vote
1answer
1k views

How do I remove security certificate exceptions from Google Chrome?

I am a developer and have created a certificate for my application. The first time I access it Chrome states that the certificate is not recognized and suggests to leave the website. There is however ...
0
votes
1answer
41 views

How secure is a mail account without TLS/SSL but encrypted password on Thunderbird

I am working with a new partner who has provided an 'internal' messaging service using an email server. It is designed to provide secure communications between geographically widespread individuals ...
6
votes
6answers
15k views

SSL certificate verification failure in Chrome, Heartbleed bug?

For some reasons I'm running into SSL problems since a few days. When trying to clone a git repository for example I receive the following error message: fatal: unable to access ...
0
votes
0answers
96 views

How to resolve SSL connection error in powershell

When I am running a powershell script an error occurs: Connecting to remote server SERVERNAME failed with the following error message : The SSL connection cannot be established. Verify that the ...
1
vote
0answers
107 views

Chrome master_preferences file appears to be encrypted

I am trying to disable the privacy error flag feature in Chrome; long story long, Chrome refuses to accept my local host's SSL certificate for a website I’m deploying in dev, and I don’t have time to ...
0
votes
0answers
29 views

Apache and ECC Curve Order

I have Ubuntu 15.04 with Apache 2.4.10 (OpenSSL 1.0.1f) and I would like to configure Apache SSL.conf specifically for "ECC Curve Order" as on Windows 10, where I select the preferred order of ...
1
vote
1answer
143 views

This website contains unencrypted elements?

I purchased a SSL certificate for my website and it is displaying a warning icon and warning message. This website does not supply identity information. The connection to this website is ...
1
vote
1answer
103 views

Same SSL Cert on 2 Servers, 1 Passes & Other Doesn't

I run a few small sites, and last year installed SSL certificates on each of them. Last week a visitor contacted me with a question about my SSL certificate, which prompted me to run a couple of SSL ...
2
votes
1answer
180 views

Strange null bytes in CN from openssl req

I need to send CSR (certificate signing request) to the SSL authority for our wildcard domain SSL certificate. I see strange values in the CN (common name) field, for example ...