SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

0
votes
1answer
2k views

Email without SSL

I have been trying to setup LabTech Email settings. Unfortunately, it accepts only email settings that are not encrypted; no SSL/TLS i.e POP 110 and SMTP 25. Tried to setup SMTPSSL in the same, but no ...
0
votes
0answers
101 views

SSL failure on Auzre web farm with shared configuration and centralized certificates

[Sorry if this question is a bit long, there's lot of extra info in case it is relavent] Overview I'm having a problem with SSL on a 4 VM's load balanced farm in Azure. If the HTTPS request goes to ...
0
votes
1answer
99 views

How to see the handshaking messages of SSL/TLS in firefox using firebug?

I am trying to understand the internals/working of SSL. I would like to view the handshaking, key exchange, cypher exchange, session key, etc. messages communicated. So, I thought if I enable firebug ...
5
votes
1answer
1k views

What does the less sign (<) mean in dovecot.conf in front of ssl certificate path?

A couple of years ago I've configured a mail server with exim4 + dovecot 2.2.10 on debian and recently have been tweaking dovecot config. I use a self-signed x509 openSSL certificate, the paths to the ...
0
votes
1answer
80 views

How to update CRL automatically?

I have the following issue: I have a self-signed CA (certificate authority) mainly for persoanl use (mail encryption and signing, ...). I created several ceertificates and the CRLs (which are empty ...
0
votes
0answers
210 views

NAT - FTPS (Error : Failed to retrieve directory list)

I have setup ftp server (Ubuntu 13.04 / Picuntu 4.4) using vsftpd. The plain FTP works perfectly fine. In order to secure the connection, I added ssl encryption. The server accepts the login ...
1
vote
0answers
24 views

Remote management on WRT630N via HTTPS

I have a Linksys WRT630N wireless router and am trying to configure remote management via HTTPS. I've chosen a nonstandard port and can successfully connect and manage the router remotely via HTTP, ...
0
votes
0answers
187 views

Compiling squid 3.3.11 for linux 6 enterprice with dynamic certificate options enabled, with error [testPreCompiler.o] Error 1

Maybe someone can help shed some light on my current issue. trying to complie squid 3.3.11 on linux 6 error is: [root@rh6squid-proxy squid-3.3.11]# make check Making check in compat make[1]: Entering ...
1
vote
1answer
3k views

pip and SSL certificate errors

I am trying to install a library via pip. I have a problem with SSL certificate, even when using the --cert. Trying this on windows (pip version 1.5.4,python version 2.7.6): pip --cert ...
0
votes
0answers
559 views

IIS 8.5 Windows Authentication + Chrome not working

I have IIS 8.5 running with the Network Service in the App Pool. I have a wildcart cert installed. Anon auth false. Authentication and SSO works on Firefox and Chrome (after whitelisting) However ...
0
votes
0answers
26 views

My self signed certificates do not have organisation

I use the command openssl s_client -connect myServer.myCompany.be:2500 -showcerts > myServer.pem # it also works if you remove all but the base64 encoded key # and its surrounding comments If I ...
7
votes
1answer
314 views

What Trusted Root Certification Authorities should I trust?

After two recent Slashdot articles (#1 #2) about questionable Root Certificates installed on machines, I decided to take a closer look at what I have installed on my machines. (I use current versions ...
1
vote
1answer
328 views

Creating stronger self signed certificate

I've installed the calomel addon in Firefox, which gives information about the quality of an SSL certificate. I have created a self signed certificate, which scores full point on PFS and the Bulk ...
0
votes
1answer
4k views

vsftpd: 500 OOPS: could not bind listening IPv4 socket

I will use vsftpd as a ftp server. I did all changes on /etc/vsftpd.conf. These changes are (according to digitalocean): anonymous_enable=NO write_enable=YES local_enable=YES chroot_local_user=YES ...
1
vote
0answers
132 views

GnuTLS test 'chat' equivalent of OpenSSL s_client s_server

How can I set up a test encrypted "chat" with GnuTLS, equivalent to the OpenSSL s_client and s_server using GPG credentials? I would like to tell GnuTLS-serv and -cli to use keys generated with GPG ...
0
votes
1answer
46 views

What details would you view in a certificate to check if it is trustworthy?

I have a question need help: What details would you view in a certificate to check if it is a trustworthy website?
0
votes
0answers
740 views

SSL input filter read failed

Am using apache-httpd-2.4.3 in Red Hat Enterprise Linux Server release 5.5 (Tikanga). when am trying to hit browser using URL, getting this messages in webserver's ssl_error_log. [Tue Feb 25 ...
0
votes
0answers
426 views

Why the indicator for https condition at left side of URL bar alerted in yellow

Why the indicator for https condition at left side of URL bar alerted in yellow I would like to know why the indicator for https condition at left side of URL bar alerted in yellow even when I just ...
1
vote
1answer
23 views

What is the proper handling of an SSL request where SSL is not enabled?

Quick question. I have a server I am managing which does NOT use https. When I attempt to go to the website with an https url, I get a bizzarre error which is the result of the fact that I have more ...
0
votes
1answer
557 views

Secure web proxy using squid

I Recently installed squid as a web proxy, it works fine. But the problem is that connection to the proxy server is not encrypted, so it's visible to any mans in the middle by DPI (Deep Packet ...
0
votes
1answer
215 views

scramble https over http to avoid detection by Firewall

My campus has recently installed Fortigate Firewall and have started spoofing https certs. eg. Certificates appear to be invalid saying: "Google.com; verified by Fortinet CA" Is there a way to ...
1
vote
1answer
301 views

Dovecot: ssl-params: Generating SSL parameters

What is the message: dovecot: ssl-params: Generating SSL parameters inside logs telling me? I did not change anything on server settings.
1
vote
1answer
228 views

Chrome still shows red cross “https://” even with valid certificate

This happens on one of my users Mac laptop running ML or Mavericks. When she accesses https://www.somewebsite.com using either Chrome or Safari, she always got the warning related to the certificate ...
1
vote
3answers
207 views

Serve all content via HTTPS, regardless of web server settings

I've got a server running on port 80 on a Mac. I'd like to also have the same content that's being served on port 80 available on port 443. I'd like to know if there's a command line way or an easy ...
1
vote
2answers
672 views

Install SSL certificate from an untrusted website into the Certificates snap-in using IE

How can I install a certificate from an untrusted website into the Certificates snap-in (certmgr.msc) of Windows? I know how to do this with Firefox by exporting to a file and then importing it, ...
0
votes
0answers
32 views

FastCGI apache mod making HTTPS fail

We hired somebody last month to install FastCGI in place of suphp, so that we could install magento multisites on our server. We have monitors set to watch some of our websites on siteuptime.com, and ...
0
votes
1answer
93 views

Why ever purchase a wildcard SSL certificate?

I was looking at wildcard SSL certs recently, and the lowest price on Namecheap is $94/year. Now, a regular single domain SSL cert from them starts at $9/year. My question is this: why wouldn't I just ...
2
votes
0answers
28 views

How does one know if the Mail app on OSX is using SSL to connect to your email account or not?

I set up an email account, which is supposed to use SSL. But while setting it up Mail said that it "Could not send the password securely" to the server, and that If I send the password other people ...
0
votes
2answers
95 views

What is wrong if some network traffic is only working out of a bridged VM but not on the host OS?

I'm in the situation that IMAP/SSL connections from my PC to all imap servers are failing on my PC. (more details there) After experimenting, I have now established that: On the Win7 64bit host, ...
1
vote
1answer
1k views

Change the SSL ciphers used by Apache2 in Plesk 11.5 and Ubuntu 12.04

I want to change the configuration of my Apache2 server so that it accepts the following lines in order to disable weak TLS ciphers and enable perfect forward secrecy. SSLProtocol all -SSLv2 -SSLv3 ...
1
vote
3answers
2k views

SSL (imap) doesn't work from some machines - ssl handshake failure - how to narrow down further?

A few days ago our IMAP SSL (port 993) connections stopped working from our home network two Windows 7 PCs in our home network. Two other PCs, one with Windows XP, one also with Win7 professional ...
1
vote
0answers
267 views

How to develop a Chrome extension that overrides SSL certificate error for self-signed certificate? [closed]

The process of adding a self signed certificate to the list of trusted certificates in Chrome is manual and tedious. I frequently access a trusted website that uses a self-signed certificate. As I am ...
1
vote
2answers
127 views

Can I sign code with a website SSL certificate?

I have an SSL certificate installed and working on my web server. On another project I need to sign some code. Can I use the website SSL certificate to sign code, or is a code-signing certificate ...
0
votes
2answers
721 views

how to fix if a site is always redirected to another phishing site?

I am running Windows XP SP3. Before I used to do online banking using this computer without problem. But recently, when I will visit my bank to do online banking, https://www.mybdo.com.ph , it gives ...
5
votes
2answers
2k views

Prevent Internet Explorer from caching SSL client certificates

I use a particular HTTPS website, but I have to separate client certificates that I use to authenticate (sometimes I use one account, which requires certificate A and sometimes a different one, which ...
0
votes
0answers
270 views

Apache SSL working with IP but not FQDN

All was well in my little network until I switch internet providers and had to change my IP address on my internal network from 172.16.0.x to 192.168.1.x, they have funky hardware and this is in my ...
0
votes
0answers
51 views

Enabling PHP on a SSL website in Virtualmin

I have PHPMyAdmin installed on my server (from apt-get, Ubuntu 13.10) and force it to run secure. But when I go to it it just server the PHP pages as plain text. The main/default website works fine in ...
0
votes
1answer
49 views

different ssl_protocols for seperate domains

I tried to configure one server for a specific domain to use TLSv2.0 only. Others should use TLSv1, TLSv1.1, and TLSv2.0. The configuration is valid, as nginx loads correctly, but the site with ...
1
vote
1answer
4k views

Using Wireshark to decrypt tls encrypted file with private key

I have a packet encrypted with TLS in a .pcap file. I also have the private key in a .priv file. How can I decrypt the .pcap file using Wireshark? I tried going to edit -> preferences -> protocols -> ...
0
votes
0answers
190 views

wireshark: decrypt live SSL traffic

w.r.t decryting SSL traffic with wireshark, I've seen the sample capture from wireshark website and it worked fine. What I'd like to achieve is to decode live traffic. So the key I guess is to ...
0
votes
0answers
213 views

Qt5 ssleay32.dll SSL Handshake failed error

I have a Qt5 app that uses SSL. App works perfect on my computer and 20 VMs. On another 10 VMs it gets "SSL Handshake failed" error. Those 10 VMs have the same C++ runtimes and apps installed as ...
0
votes
1answer
77 views

Do I need to buy SSL when setting up my own OpenVPN Access Server?

I was able to quickly do the following: Setup an OpenVPN Access Server using a lowend VPS I was able to connect to it from my Windows PC using the OpenVPN Desktop Client It was able to change my ...
6
votes
2answers
1k views

Are SSL's default snake oil certificates truly snake oil as opposed to being genuine honest-to-good certificates?

SSL generates self-signed "snake oil" certificates by default, for example at /etc/ssl/certs/ssl-cert-snakeoil.pem. As per Wikipedia, snake oil is a cryptographic method or product that is considered ...
0
votes
1answer
86 views

ZNC Broke After Enable TUN/TAP on my VPS

After enabling TUN/TAP via my vps and then disabling (causing restarts to server as well), ZNC will no longer work. ZNC won't start on boot, or manually. Here are the errors: [ !! ] Binding to port ...
0
votes
0answers
223 views

curl with ftp URL works for SSL, but ftps URL doesn't: unknown protocol

I compiled and installed ProFTPD on my Mac for testing purposes and generated self-signed SSL certificates because I want to test ftps. When I do: curl --ftp-ssl-reqd --insecure ...
0
votes
1answer
2k views

How to do server fixation with HAProxy through HTTPS

I previously created a loadbalancer for web servers in HAProxy, but that one was HTTP, not HTTPS. This is he config I previously used. listen appname 0.0.0.0:80 mode http stats enable ...
1
vote
0answers
1k views

Chrome and Outlook can only make secure connections when user account has admin privileges

I have a co-worker who is set up as an admin user under Win XP SP3 and I'm trying to switch her to being a restricted user. The short story is that when I switch her account to restricted, Chrome ...
0
votes
1answer
56 views

Can an SSL cert (not self-signed) be used to create another SSL cert for another host in the same domain?

I have a regular SSL certificate issued by Network Solutions for a given host, say "host A". Can I create another SSL cert for the wiki host that has the host A cert in its trust path and therefore ...
1
vote
1answer
59 views

SSL not work for virtual IP

I have a website which was deployed with three real web servers and a load balancer with a virtual IP. I have applied an SSL certificate from a CA and imported to Tomcat using OpenSSL using the ...
1
vote
1answer
21 views

// Vs http:// when including remote content

My website content is served over SSL and my webpage uses Google Adsense. In The ad code the javascript file is included from: //pagead2.googlesyndication.com/pagead/js/adsbygoogle.js I would just ...