SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

1
vote
0answers
154 views

Not using CONNECT for SSL with Squid proxy

I want to disable encryption between my browser and my Squid so that I can get Squid to cache the pages. As using my own server and SSH port forw I'm not that worried about security. I already tried ...
0
votes
1answer
638 views

Apache proxy: Why is one vhost returning Forbidden while the other one works?

I have a Java application that needs to talk to another intranet website using HTTPS in both directions. After fighting with Java's SSL implementations for some time, I gave up on that, and have now ...
0
votes
1answer
534 views

How to dump the Subject Alternative Name (SAN) from an SSL certificate file

I know that I can dump the entire information from a PEM certificate file with this command: openssl x509 -in certfile -noout -text And I've already found another direct parameter to show me only ...
0
votes
0answers
195 views

Is it possible to use certutil to export multiple certificates from a local client machine store, to a .p7b file?

Is it possible to use certutil to export multiple certificates from a local client machine store, to a .p7b file? Scenario: We have a few legacy certificates based on some legacy templates (2012 R2). ...
0
votes
0answers
206 views

Tomcat6 - SSL received a record that exceeded the maximum permissible length

After following the instructions to setup a secure http connection on my tomcat server (link: https://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html), I had this error pop up when I requested ...
0
votes
0answers
51 views

Subversion is no longer working

Subversion has been fine. Today, I needed to set up SSL on the same server SVN is on, and there was an issue; both SSL and Subversion use port 433 So, in the Network tab in subversion, I changed it ...
1
vote
1answer
30 views

IIS7 set up issue

Not sure if SU or Server Fault is a better place to ask, but I'm setting up IIS7 with SSL on a Windows 2008 VPS I followed this site I complete the tutorial but the site will not start(Shows the ...
0
votes
1answer
391 views

Squid behind Apache 2.4

I need to locate a Squid instance as a forward proxy behind Apache 2.4.6. I don't have enough credits to add inline images. But here it is As Squid3.3 listens on localhost:3128 and works OK with ...
0
votes
1answer
251 views

Older e-mail client can't send through stunnel and Gmail SMTP server

I'm using an older e-mail client (Edit: Eudora 7.1.0.9 on Windows) which seems unable to send e-mail through Gmail's SMTP server, even after lowering the security per this article. So I tried adding ...
1
vote
2answers
140 views

SSL sniff VirtualBox

I'm trying to sniff ssl traffic from a VirtualBox I created (Android). I'm using the build-in pcap system of VirtualBox to sniff regular traffic, but obviously that doesn't work for ssl. What I'm ...
0
votes
0answers
105 views

Verify python request with wireshark or proxy HTTPS

I am working on a scraper, that is scraping data using python requests package. The website has a secured connection (https). I managed to get over the login part, over the search part, and now I have ...
0
votes
1answer
81 views

How do I force Firefox or any other browser to check for CRLs

I am trying to see if I can watch the traffic that is sent and received when a browser checks for CRLs. All I can see with the latest version of Firefox is setting for OCSP. I dont see anything where ...
2
votes
2answers
3k views

Disable weak SSL ciphers in lighttpd

The testing tool https://www.ssllabs.com/ssltest/index.html tells me that my server is offering/supporting: SSL_RSA_WITH_DES_CBC_SHA (0x9) WEAK 56 SSL_DHE_RSA_WITH_DES_CBC_SHA (0x15) DH ...
0
votes
1answer
193 views

Forcing SSL on phpmyadmin

I couldn't decide which website this question we be on (since I see it almost everywhere) so feel free to migrate. I've set up a self-signed SSL cert on my server to secure my installation of ...
2
votes
2answers
2k views

HTTP to HTTPS Tunnel

So the issue is that I have quite a few homebrew scripts/web testing programs that only work with HTTP. The problem is that the website only allows HTTPS connections. Does anyone know of a way to ...
0
votes
1answer
2k views

Mozilla NSS certutil binary

I have a problem with Firefox 32 and installed SSL certificates in cert8.db and I want to investigate it. I have found out that there is a tool called "certutil" from Mozilla that can work with this ...
6
votes
5answers
12k views

SSL certificate verification failure in Chrome, Heartbleed bug?

For some reasons I'm running into SSL problems since a few days. When trying to clone a git repository for example I receive the following error message: fatal: unable to access ...
0
votes
0answers
69 views

Does a certificate from “open.nsa.gov” in firefox mean the browser defaultly trusts the NSA?

While exploring Firefox options I see that I have a certificate identifying the NSA, issued by the US Government. I don't recall adding this at any point and don't really want my machine trusting the ...
13
votes
2answers
42k views

Windows 7 will not install a root certificate

I have a web service that uses a self-signed certificate, so I need to install the certificate as a Trusted Root so that I can avoid all the security errors that having a self-signed certificate ...
22
votes
7answers
14k views

Is there an HTTPS Everywhere add on for Chrome, MSIE or safari?

I really like this HTTPS Everywhere add-on for Firefox. But I tend to browser hop, so have similar HTTPS-preferring add-ons been released for the other major browsers?
4
votes
2answers
12k views

How to disable SSL for some websites in Chrome?

I want to set chrome to load HTTP instead of HTTPS for some websites. So I searched internet but all the solutions was old. They said go to Under the hood tab which doesn't exist in my chrome 22. ...
0
votes
1answer
392 views

digicert secure server ca signed by unknown authority mac os

Related to: Why won't OS X trust GitHub's SSL certificate? Why when I download this certificate and drag/drop into my Keychain on OSX, it shows as I downloaded from here: ...
0
votes
1answer
60 views

Why can`t we treat SSL Certs like Pgp keys instead of trusting CAs? [closed]

I am dumb and stupid and I do not know all the technical aspects of SSL and server/client side implications and implementations. However I understand them good enough from user point of view to use ...
2
votes
1answer
436 views

Client unable to access OWA website after temporarily changing SSL certificate on the server

I have the following issue: One client computer (Windows XP) cannot access the OWA website. All other client computers can (Except another one in the same remote office). How this happened: I ...
0
votes
0answers
25 views

RootCertificate popup does install

When connecting to my university's wifi, it keeps popping up with a certificate (root) that needs to be install, I select yes [yes|no|view details] But I am not sure if it installs the certificate ...
0
votes
1answer
66 views

PKCS12 key from Winserver2008 cert authority

I have created a standalone cert authority in windows server 2008. I can use certreq (from that same box) to generate a cert with the appropriate CN, etc, and ensure that the private key is ...
0
votes
0answers
19 views

FTPS certificate email address has different domain than the Organization name

Wondering if this should be of any concern. We received a FTPS ip which is SSL enabled. (This is not SFTP). Filezilla - the FTP client shows a certificate where the organization name say 'XYZ Inc' and ...
0
votes
0answers
29 views

How can I recover my SSL certificates on OSX?

Alright, so I screwed up. I was installing testing SSL on dovecot/postfix servers and I accidentally deleted my MacBook's SSL certificates. I went to Keychain, highlighted everything in ...
1
vote
0answers
10 views

How to control SSL automatic activities in Wordpress php files

I have domain with one sub-domain. The domain has installed SSL with valid certificate but sub-domain doesn't have it. I installed two Wordpress, one for domain and one for sub-domain (clone it to ...
0
votes
2answers
1k views

curl and sni-enabled server

I am running curl against a sni-enabled server with the following command curl --cacert CustomCA.crt -H "Host: example.com" https://1.2.3.4/foo However, I am not getting the right certificate where ...
1
vote
1answer
481 views

Provide Session Master Key to Wireshark UI?

I'm working on an issue with HTTPS. I suspect its related to client certificates. I want to read some of the encrypted handshake messages that follows the ServerHelloDone message. (Once the ...
0
votes
1answer
46 views

How to get digicert high assurance in my Mac

I removed Digicert high assurance certificate from the keychain. Now when I visit facebook.com or other ssl websites from chrome, they don't open and I get an SSL error, e.g.: How can I to get ...
11
votes
5answers
19k views

How much information can my ISP see?

Is it possible for my ISP to see the passwords that I enter on websites and in chat programs? And what about SSL websites that start with https, do they encrypt my username and password before ...
0
votes
0answers
215 views

SSL certificate error attempting to download Homebrew?

I've been trying to download and install Homebrew for my Mac (OS 10.9.4) using the install script on the home page, but the download fails with a SSL certificate error (see log below). I understand ...
0
votes
0answers
180 views

Chrome won't trust DigiCert SSL. I have to trust it manually.

I have been having this problem for a while. I have found this thread which exactly my problem but it didn't solve my problem. Why won't OS X trust GitHub's SSL certificate? I also tried ...
0
votes
2answers
63 views

HTTPS over private network

My web server runs over a LAN(that means, I don't have a public IP address(domain name) to give to a Certificate Authority to get SSL work for me). My IP is a private one(10.100.10.239), but the ...
3
votes
3answers
11k views

Can I use another port other than 443 for SSL communication?

I have an application that communicates via SSL, however, Port 443 is already in use by an IIS instance on that same server. Can I use another port other than 443 for SSL communication?
5
votes
2answers
3k views

Why does https://gmail.com/ produce no SSL error while using a bad certificate?

It looks like https://gmail.com uses an SSL certificate which is for the hostname mail.google.com. As the SSL certificate hostname does not match the browser URL, why does this work? I should get a ...
0
votes
1answer
283 views

Linux/Postfix with relay: I can openssl to relay host on port 465, but postfix does not seem to connect

This looks like a tough one to me: I'm configuring postfix on my local home server running ubuntu server 14.04 LTS I was able to send outgoing mail through my relayhost on port 26, everything worked ...
0
votes
0answers
74 views

Github stopped working recently, 07/26/2014? [duplicate]

I'm a pro user of github until it stopped working on the last saturday, the 26. of July, 2014. Since then, i'm becoming in my browser following SSL error: My IDE (IntelliJ) is becoming the same ...
5
votes
2answers
858 views

Netflix SSL certificate shows up when trying to visit https://www.google.com

I'm on a hotel Wi-Fi network where occasionally the following message shows up in Chrome when trying to visit any Google sites over HTTPS: The SSL certificate reported when this happens is This ...
0
votes
0answers
15 views

Regarding CRL Updation - Compliance

Could someone let me know if automatic updation of Certificate Revocation List is a mandatory requirement as per SSL specifications ? Thanks
20
votes
2answers
2k views

Paypal.com SSL certificate invalid, issued to BitPay.com

Trying to buy some games from GoG, click Paypal and Chrome shows me this page: I'm not entirely sure how to work out what's going on here. I am a Bitcoin user so my immediate fear is my ...
0
votes
1answer
105 views

How can I connect to a HTTPS site via HTTP

We have CheckPoint in our company. I am using Anonymox to bypass CheckPoint. Everything is OK except when I try to connect HTTPS sites I cannot bypass CheckPoint. For example I can watch videos on ...
2
votes
0answers
17 views

Unable to browse to certain sites

I have a few guests on a XenServer host, and some sites ( both SSL and non SSL ) cannot be accessed by the XenHost and the Guests. Other machines on the same network can access these sites just fine, ...
0
votes
1answer
52 views

Adding cert to trusted certs

I'm trying to access a web service from a certain website. Since this is a service I can't just click somewhere "go to this site anyway". I just get an endpoint exception in my code. I downloaded ...
0
votes
0answers
85 views

Server Certificates Missing in IIS

On my Windows Server 2012 R2 box, when I connect to it through Remote Desktop, I'm trying to setup a server certificate but in IIS, in the "IIS" group, there is no Server Certificates feature. I ...
4
votes
2answers
3k views

Outlook shows certificate security warning in local LAN although certificate is only associated to IIS

I have the following configuration with Exchange Server 2010: I have a self-signed certificate which is associated with all the services (POP, SMTP etc..) except IIS (which is associated with a ...
2
votes
0answers
108 views

Strange null bytes in CN from openssl req

I need to send CSR (certificate signing request) to the SSL authority for our wildcard domain SSL certificate. I see strange values in the CN (common name) field, for example ...
0
votes
2answers
155 views

Is Firefox using its own isolated Certificate STore

I am using the latest Firefox. However, my campus uses their own certificate for all internet browsing and asks us to install their certificate as Root CA. Since, i don't trust them with my ...