SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

2
votes
2answers
68 views

How do I configure my system to trust a CA for a specific subset of domains?

The company I work for has a number of internal web services accessible over HTTPS. These services use SSL/TLS certificates signed by an internal certificate authority which is only trusted by ...
1
vote
3answers
154 views

How do you get an SNI certificate for internal host-names?

I have a Synology NAS at home, which has a web-based user-interface which I expose to the public Internet. Inside my LAN my NAS has the hostname nas.domain.local. and on the public Internet I have the ...
0
votes
0answers
79 views

Unable to connect to FTP server (pure-ftpd) with SSL/TLS enabled

I have two machines inside my private network: one running Ubuntu 10.04 with pure-ftpd FTP server with SSL/TLS enabled, and another running Windows 7. I have configured my FTP server for SSL/TLS for ...
17
votes
3answers
3k views

Website is securely not secure

I am accessing Pandora via SSL and notice a few icons by the URL. First is the exclamation point in a triangle, indicating the page is not fully secure: Next to it is a shield? This one says ...
10
votes
1answer
9k views

Tortoise SVN Error Validating Server Certificate

I just updated the certificate on one of my sites due to the old one expiring. The new certificate verifies fine in Internet Explorer 9, Chrome, and Firefox 4 - but when trying to browse/check out the ...
1
vote
1answer
73 views

Iptables: Filtering string encrypted by ssl

I need to filter (send to BANRULES set) incoming http/https packets with a certain string (matchword). I do it easy when ssl is not in use (port 80): iptables -A INPUT -p tcp -m tcp --dport 80 -m ...
0
votes
0answers
8 views

Adding a certificate to be used by MS SQL SERVER

I have MS SQL SERVER 2012 installed on my Windows 8.1. Now I wanted to enable SSL encryption in it. What I did was: 1. Run - > MMC 2. Add snap-in 3. Added certificate (personal) for local computer ...
0
votes
1answer
82 views

Redirect from secure site to non-secure site with wildcard subdomain

I have the following set up in apache2.conf: <Directory /var/www/html> RewriteEngine on RewriteCond %{HTTP_HOST} ^(www\.|)mydomain\.com$ RewriteCond %{SERVER_PORT} !^443$ ...
3
votes
3answers
1k views

SSL/TLS vs SSL/TLS-VPN

Whats the difference between using SSL/TLS in a web browser and an actual SSL/TLS VPN? Is SSL/TLS actually the pure technology and when one uses https:// in a browser this is a vpn connection?
0
votes
1answer
359 views

Unable to access external HTTPS websites…unable to download windows updates

I need help with two problems I'm having on a Windows 2008 R2 server. I believe they are connected. This server is not able to download windows updates and further checking I found out that I cannot ...
0
votes
2answers
56 views

What file to add to nginx certificate

I got a RaspberryPi on which I want to host Owncloud. So I followed this tutorial and it works well except the SSL part. I don't want to use self signed. I set my own subdomain and it works without ...
0
votes
0answers
8 views

Is it safe to use the same RSA key pair at the sender and the recipient?

Most questions on the internet are about using the same certificate on multiple clients, what about using the same certificate between two servers communicating with each other for example? Would that ...
0
votes
1answer
719 views

Using powershell, how do I extract the thumbprint from an SSL Certificate without installing it?

Every example I've found on StackExchange, and other internet forums, etc all tell me how to get the thumbprint from a certificate already installed into a certificate store. Alternatively, the ...
0
votes
0answers
437 views

testing cipher suite using openssl for tomcat server is resulting in wrong manner

I am using tomcat 6.0.28. and I have configured connector with "TLS_ECDHE_RSA_WITH_RC4_128_SHA" but when i am testing whether cipher is suited as follows I am getting following error: > ...
1
vote
1answer
77 views

webdav fails by https but not http

I'm trying to set up a webdav folder on a linux server to be used with a windows client (for now, cyberduck) Using http, everyting is fine. However, when using https, cyberduck warns me that my ...
0
votes
1answer
302 views

Install root certificate authority on Ubuntu [duplicate]

First off I am not sure whether I have the correct terminology. What I mean by certificate authority is a verified certificate distributor such that if I goto a website in my Browser that is HTTPS ...
0
votes
0answers
243 views

Guacamole, Tomcat, HTTPS-setup fails due to issues with certification

I'm using guacamole (http://guac-dev.org/) to access (parts of) my home (Debian) computer clientless, on the go. From my work computer (University Network) the screen is however not updating and only ...
0
votes
2answers
490 views

Mozilla Sync (wsgi via apache) through SSL causes error 500, no log entries

I have been following (among others) these instructions to setup a Mozilla sync server. It runs fine when I connect to http://mydomain.com:5000/ but when I use https instead of http and remove the ...
1
vote
1answer
74 views

Why does firefox still display website ssl to be 128 bit encrypted after changing to 256

I recently renewed an ssl certificate to use SHA-2 but on firefox the website still shows to be SHA-1 and 128 bit encrypted, on all other browsers it show SHA-2 , 256 bit. Can anybody help me with ...
-1
votes
0answers
294 views

Encrypted alert with code 21 for connection [closed]

I've got a device that connected to the server and successfully did the handshake and received application data, however later when client sends keep-alive requests server sends back encrypted alert ...
0
votes
1answer
103 views

Exchange 2010 Certificate Renewal

I am still learning how to configure Exchange 2010, so I hope that you can help me on some topics. The certificate for mail.xxxxxx.com has expired. The previous IT guy had OWA set up on the server, ...
0
votes
0answers
85 views

Error when start of the apache2 service: version OPENSSL_1.0.1 not defined

I'm using a Debian Wheezy server where I have installed apache2, php5 and libapache2-mod-php5 packages via apt-get. But when I'm trying to start the apache2 the follow error occurs: service apache2 ...
1
vote
3answers
7k views

Decrypting SSL traffic in Wireshark. Only headers get decrypted

I'm trying to decrypt SSL traffic in Wireshark, and it partially works because I'm able to view the decrypted headers. The problem is that I don't see any of the packet contents, only their headers. ...
10
votes
1answer
1k views

How to know which Certificates to leave in my browser, and which to remove

I would like to tighten up security a bit, so I am disabling unneeded certs from my browsers. For instance, the "WoSign CA Limited" cert from China I obviously don't need, yet "Thawte Consulting cc" I ...
0
votes
0answers
384 views

Dropbox SSL Certificate issue on OS X in both Chrome and Safari

Currently unable to connect to www.dropbox.com via https. This is only happening on one machine on the network. The machine is running OS X 10.6.8. Safari gives - When trying to connect in chrome ...
1
vote
1answer
867 views

Why isn't openssl s_client passing my private key to proxytunnel?

I currently have HAProxy set up on my home PC and I am attempting to access it through a HTTP proxy. Currently I am accessing the SSH logon prompt like so: openssl ...
1
vote
2answers
972 views

Links SSL Error

What version of links does the user called "bytepool" have that he's able to find this workaround? Refer to link below. How to tell `links` to ignore expired SSL certificate and proceed? He writes ...
0
votes
1answer
292 views

Importing StartSSL Key

A few months ago I signed up for a Free StartSSL certificate but I didn't realize that you needed to install that certificate if you wanted to later log in to the control panel. Now I'm stuck trying ...
0
votes
1answer
251 views

ftp-client works fine. ftp-tls-client fails on one computer and works on another

Connecting to ftp - from a Windows Server 2012 - it works both secure (-over tls) and unsecure. From a Windows 7 it succeeds unsecure but fails when secure. (Using explicit TLS and passive mode.) ...
0
votes
1answer
587 views

Apache OpenSSL httpd-ssl.conf config stops Apache, no error except when httpd-ssl.conf include disabled

I followed directions to setup SSL on my custom WAPP stack (Windows/Apach/PHP/PostgreSQL) here... http://www.tehuber.com/article.php?story=20110315153800545 After back-tracking I discovered when ...
0
votes
1answer
4k views

Email without SSL

I have been trying to setup LabTech Email settings. Unfortunately, it accepts only email settings that are not encrypted; no SSL/TLS i.e POP 110 and SMTP 25. Tried to setup SMTPSSL in the same, but no ...
1
vote
0answers
62 views

Force browser to use HTTP because of HTTP proxy

I have a lot of HTTP proxies and I cannot access websites that are using SSL through those proxies. I have no access to configuring the proxies, so is it possible to force Firefox (in my case) to ...
0
votes
1answer
69 views

different ssl_protocols for seperate domains

I tried to configure one server for a specific domain to use TLSv2.0 only. Others should use TLSv1, TLSv1.1, and TLSv2.0. The configuration is valid, as nginx loads correctly, but the site with ...
0
votes
1answer
183 views

Firefox, IE and Chrome show certificate warnings

I've been asked to fix a laptop, which has had at least some malware (I think it's called Andromeda or similar) and at least 1 trojan. Please note this is a home used laptop, it's not used for work ...
0
votes
1answer
989 views

Fedora 18 - error [Errno 14] Peer cert cannot be verified or peer cert invalid

When i run the command: sudo yum install perl-bioperl I get the error [Errno 14] Peer cert cannot be verified or peer cert invalid. My system details are: Linux localhost.localdomain ...
1
vote
1answer
718 views

Unable to read an email protected by Rights Management Service

My colleague received an email from H company. This email is protected by Microsoft Rights Management Service. His email client is Outlook Express, and he use POP3 to received it to local disk (the ...
1
vote
2answers
450 views

Removing CBC ciphers specific to SSLv3

I need to disable SSLv3 specific CBC ciphers as a temporary solution to the POODLE vulnerability as there are legacy applications that need to use SSLv3. After consulting the OPENSSL docs, it seems ...
0
votes
1answer
44 views

Are URL based SSL / certificates possible at IIS?

Is there a way to change the used certificate / ssl encryption depending on the visited url? We are using IIS 7 and later. Edit: We plan to develop and deploy web applications to our customers. It ...
2
votes
2answers
700 views

Disable SSLv3 in email servers [closed]

After the recent POODLE vulnerability, I would like to disable SSLv3 on my mail servers (for POP, IMAP, and SMTP). My concern is whether that will break my clients' access. I have been looking online ...
0
votes
1answer
675 views

IE10: Website security certificate issue + “continue” button missing

I am developing a web app and am using self-signed SSL certificates. I'm trying to test my site on Internet Explorer 10 in a modern.ie VM (in VirtualBox). When I visit the site, ...
0
votes
2answers
201 views

how to change ssl certificate serial number

I upgraded the linux full release on a server. As part of the process I generated a new local ssl certificate key set with genkey. However the serial number remained the same and client apps such as ...
1
vote
2answers
3k views

ldap authentication not working with start_tls option after certificate upgrade

Ubuntu ldap authentication is not working on my client with ssl start_tls option enabled in the ldap.conf file. I can authenticate when I comment out ssl start_tls. I upgraded the ldap servers ...
2
votes
1answer
181 views

Why some hostNames are not resolved by my browser once dns-reversed?

I have some newby questions about dns. Here are the steps that lead me to those : C:\Windows\system32>nslookup google.ca Serveur : p81-004.pixelweb.net Address: 206.41.81.4 Réponse ne ...
1
vote
1answer
30 views

Is it particularly necessary to install an SSL certificate on a new cPanel installation on a dedicated server?

I have a dedicated server and I am installing cPanel on it. I am wondering if I should also install an SSL certificate (that I will have to buy) just for the cpanel install itself.
0
votes
0answers
44 views

ssl connection error with VPN

So today I went on a site that required secure connection (betting site) and I got this error. http://s30.postimg.org/kskk0jupd/Untitled.jpg Yesterday, it was all working fine. I am using a VPN ...
0
votes
0answers
37 views

Making a connection between puppet and puppet agent.

I know this question has been asked before in many different variant. I read all the post related to the problem but I cannot get agent and master talking to each other. I boot up 2 vm via vmwork ...
1
vote
1answer
22k views

Self signed certificate is not appearing in Chrome after importing

I have a Synology NAS that creates a self signed certificate for SSL access. I'm using the latest Chrome on Windows 7. Upon visiting the NAS's landing page, Chrome presents a red warning to say that ...
0
votes
0answers
61 views

SSL on freenode Irssi seems to connect, but everything I type is scrambled

I followed these instructions from freenode to configure SSL from my raspberry pi that I'm running headless. I can connect to freenode. It asks me for my password. It accepts my password, but every ...
0
votes
0answers
101 views

Chrome for Windows 8 Blocks Insecure Content with No Option to Allow

My company uses an idiotic security product that basically reissues certs for secure websites, which causes security warnings in the browser for any SSL-based URLs. Usually the browser will present ...
2
votes
1answer
944 views

SSL handshake failure when using Logstash

I am using Logstash, and it works on most machines I have running. But on some, I get this error: Failed to tls handshake with x.x.x.x x509: certificate is valid for , not dns_name I read on ...