SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

0
votes
0answers
359 views

Why the indicator for https condition at left side of URL bar alerted in yellow

Why the indicator for https condition at left side of URL bar alerted in yellow I would like to know why the indicator for https condition at left side of URL bar alerted in yellow even when I just ...
1
vote
1answer
22 views

What is the proper handling of an SSL request where SSL is not enabled?

Quick question. I have a server I am managing which does NOT use https. When I attempt to go to the website with an https url, I get a bizzarre error which is the result of the fact that I have more ...
0
votes
1answer
517 views

Secure web proxy using squid

I Recently installed squid as a web proxy, it works fine. But the problem is that connection to the proxy server is not encrypted, so it's visible to any mans in the middle by DPI (Deep Packet ...
0
votes
1answer
194 views

scramble https over http to avoid detection by Firewall

My campus has recently installed Fortigate Firewall and have started spoofing https certs. eg. Certificates appear to be invalid saying: "Google.com; verified by Fortinet CA" Is there a way to ...
1
vote
1answer
275 views

Dovecot: ssl-params: Generating SSL parameters

What is the message: dovecot: ssl-params: Generating SSL parameters inside logs telling me? I did not change anything on server settings.
1
vote
1answer
219 views

Chrome still shows red cross “https://” even with valid certificate

This happens on one of my users Mac laptop running ML or Mavericks. When she accesses https://www.somewebsite.com using either Chrome or Safari, she always got the warning related to the certificate ...
1
vote
3answers
203 views

Serve all content via HTTPS, regardless of web server settings

I've got a server running on port 80 on a Mac. I'd like to also have the same content that's being served on port 80 available on port 443. I'd like to know if there's a command line way or an easy ...
0
votes
2answers
523 views

Install SSL certificate from an untrusted website into the Certificates snap-in using IE

How can I install a certificate from an untrusted website into the Certificates snap-in (certmgr.msc) of Windows? I know how to do this with Firefox by exporting to a file and then importing it, ...
0
votes
0answers
31 views

FastCGI apache mod making HTTPS fail

We hired somebody last month to install FastCGI in place of suphp, so that we could install magento multisites on our server. We have monitors set to watch some of our websites on siteuptime.com, and ...
0
votes
1answer
83 views

Why ever purchase a wildcard SSL certificate?

I was looking at wildcard SSL certs recently, and the lowest price on Namecheap is $94/year. Now, a regular single domain SSL cert from them starts at $9/year. My question is this: why wouldn't I just ...
2
votes
0answers
28 views

How does one know if the Mail app on OSX is using SSL to connect to your email account or not?

I set up an email account, which is supposed to use SSL. But while setting it up Mail said that it "Could not send the password securely" to the server, and that If I send the password other people ...
0
votes
2answers
93 views

What is wrong if some network traffic is only working out of a bridged VM but not on the host OS?

I'm in the situation that IMAP/SSL connections from my PC to all imap servers are failing on my PC. (more details there) After experimenting, I have now established that: On the Win7 64bit host, ...
1
vote
1answer
1k views

Change the SSL ciphers used by Apache2 in Plesk 11.5 and Ubuntu 12.04

I want to change the configuration of my Apache2 server so that it accepts the following lines in order to disable weak TLS ciphers and enable perfect forward secrecy. SSLProtocol all -SSLv2 -SSLv3 ...
1
vote
3answers
2k views

SSL (imap) doesn't work from some machines - ssl handshake failure - how to narrow down further?

A few days ago our IMAP SSL (port 993) connections stopped working from our home network two Windows 7 PCs in our home network. Two other PCs, one with Windows XP, one also with Win7 professional ...
1
vote
0answers
264 views

How to develop a Chrome extension that overrides SSL certificate error for self-signed certificate? [closed]

The process of adding a self signed certificate to the list of trusted certificates in Chrome is manual and tedious. I frequently access a trusted website that uses a self-signed certificate. As I am ...
1
vote
2answers
123 views

Can I sign code with a website SSL certificate?

I have an SSL certificate installed and working on my web server. On another project I need to sign some code. Can I use the website SSL certificate to sign code, or is a code-signing certificate ...
0
votes
2answers
630 views

how to fix if a site is always redirected to another phishing site?

I am running Windows XP SP3. Before I used to do online banking using this computer without problem. But recently, when I will visit my bank to do online banking, https://www.mybdo.com.ph , it gives ...
5
votes
2answers
2k views

Prevent Internet Explorer from caching SSL client certificates

I use a particular HTTPS website, but I have to separate client certificates that I use to authenticate (sometimes I use one account, which requires certificate A and sometimes a different one, which ...
0
votes
0answers
257 views

Apache SSL working with IP but not FQDN

All was well in my little network until I switch internet providers and had to change my IP address on my internal network from 172.16.0.x to 192.168.1.x, they have funky hardware and this is in my ...
0
votes
0answers
49 views

Enabling PHP on a SSL website in Virtualmin

I have PHPMyAdmin installed on my server (from apt-get, Ubuntu 13.10) and force it to run secure. But when I go to it it just server the PHP pages as plain text. The main/default website works fine in ...
0
votes
1answer
45 views

different ssl_protocols for seperate domains

I tried to configure one server for a specific domain to use TLSv2.0 only. Others should use TLSv1, TLSv1.1, and TLSv2.0. The configuration is valid, as nginx loads correctly, but the site with ...
1
vote
1answer
3k views

Using Wireshark to decrypt tls encrypted file with private key

I have a packet encrypted with TLS in a .pcap file. I also have the private key in a .priv file. How can I decrypt the .pcap file using Wireshark? I tried going to edit -> preferences -> protocols -> ...
0
votes
0answers
177 views

wireshark: decrypt live SSL traffic

w.r.t decryting SSL traffic with wireshark, I've seen the sample capture from wireshark website and it worked fine. What I'd like to achieve is to decode live traffic. So the key I guess is to ...
0
votes
0answers
194 views

Qt5 ssleay32.dll SSL Handshake failed error

I have a Qt5 app that uses SSL. App works perfect on my computer and 20 VMs. On another 10 VMs it gets "SSL Handshake failed" error. Those 10 VMs have the same C++ runtimes and apps installed as ...
0
votes
1answer
77 views

Do I need to buy SSL when setting up my own OpenVPN Access Server?

I was able to quickly do the following: Setup an OpenVPN Access Server using a lowend VPS I was able to connect to it from my Windows PC using the OpenVPN Desktop Client It was able to change my ...
6
votes
2answers
1k views

Are SSL's default snake oil certificates truly snake oil as opposed to being genuine honest-to-good certificates?

SSL generates self-signed "snake oil" certificates by default, for example at /etc/ssl/certs/ssl-cert-snakeoil.pem. As per Wikipedia, snake oil is a cryptographic method or product that is considered ...
0
votes
1answer
81 views

ZNC Broke After Enable TUN/TAP on my VPS

After enabling TUN/TAP via my vps and then disabling (causing restarts to server as well), ZNC will no longer work. ZNC won't start on boot, or manually. Here are the errors: [ !! ] Binding to port ...
0
votes
0answers
220 views

curl with ftp URL works for SSL, but ftps URL doesn't: unknown protocol

I compiled and installed ProFTPD on my Mac for testing purposes and generated self-signed SSL certificates because I want to test ftps. When I do: curl --ftp-ssl-reqd --insecure ...
0
votes
1answer
2k views

How to do server fixation with HAProxy through HTTPS

I previously created a loadbalancer for web servers in HAProxy, but that one was HTTP, not HTTPS. This is he config I previously used. listen appname 0.0.0.0:80 mode http stats enable ...
1
vote
0answers
1k views

Chrome and Outlook can only make secure connections when user account has admin privileges

I have a co-worker who is set up as an admin user under Win XP SP3 and I'm trying to switch her to being a restricted user. The short story is that when I switch her account to restricted, Chrome ...
0
votes
1answer
54 views

Can an SSL cert (not self-signed) be used to create another SSL cert for another host in the same domain?

I have a regular SSL certificate issued by Network Solutions for a given host, say "host A". Can I create another SSL cert for the wiki host that has the host A cert in its trust path and therefore ...
1
vote
1answer
56 views

SSL not work for virtual IP

I have a website which was deployed with three real web servers and a load balancer with a virtual IP. I have applied an SSL certificate from a CA and imported to Tomcat using OpenSSL using the ...
1
vote
1answer
20 views

// Vs http:// when including remote content

My website content is served over SSL and my webpage uses Google Adsense. In The ad code the javascript file is included from: //pagead2.googlesyndication.com/pagead/js/adsbygoogle.js I would just ...
2
votes
2answers
428 views

Can I trick windows to “see” a remote tcp session as a console session?

At work I'm connecting to our company's portal in order the perform my job. I would like to take some of my work home and do it from there. As I cannot connect from home directly to teh company's ...
0
votes
0answers
943 views

How to disable SSL 2.0+ in OS X 10.7?

I am currently encountering a problem with my Webkit browsers (Chrome v31.0.1650.63 and Safari) on my MBP running OS X 10.7.5. The browsers are not able to establish any SSL connections. The Google ...
1
vote
1answer
2k views

List installed personal certificates in command line

I use a few secure websites that require me to install a PFX certificate to access them. I have multiple computers I do this from, and I need a quick way of determining which ones in which I still ...
1
vote
1answer
162 views

Wireshark TLS communication shows green HTTP packets when using CCProxy proxy server?

Client <--> CCProxy <--> Server I have IE configured to use a proxy server for HTTP and Secure connections. I also have a proxy server is set up with CCProxy. It is my understanding that ...
1
vote
0answers
92 views

Apache configured for HSTS, but SSLLabs/Chrome not acknowledging

I'm setting up a webserver and I've been checking it against SSLLabs and Chrome 31 to make sure the security is up to snuff. However neither Chrome nor SSLLabs seems to believe that strict transport ...
0
votes
2answers
153 views

How can I tell whether PFS is enabled?

I have kinda 2 questions.. first, is this setting considered "secure" ? Second, how do I tell whether perfect forward secrecy is enabled? ssl_session_timeout 5m; ssl_protocols TLSv1 ...
2
votes
1answer
4k views

Every website is showing untrusted certificate warning on all browsers

I'm on windows 7. Every website is showing untrusted security warning. I tried every browser that I have. I tried using https. This is extremely odd, it never happened before, well it could happen ...
0
votes
0answers
58 views

All https requests are goes as TLS (windows 7 64bit)

I have installed a version of windows 7 64bit on my laptop. After it all software that are going to send request to https has failed because the OS are using TLS instead of SSL3. I find it because all ...
1
vote
0answers
86 views

SSL certificate for CNAME record

I have the CNAME record images.bob.com, which points to the images.susan.co.uk (images.bob.com. 1800 IN CNAME images.susan.co.uk.). I would like to ask for issuing SSL certificate for the ...
2
votes
0answers
192 views

Why doesn't Firefox accept different Ports for SSL encryption other than 443

There is an IIS Webserver with different Sites (SSL Binding) because I can't configure IIS to listen on same Address and Port with different Certificates so I set the SSL Port direction in the ...
0
votes
0answers
116 views

iptables messing up Tomcat?

I encountered the following problem(s) using Tomcat 7 with iptables on. 1) Namely, there's this Tomcat 7 instance that I run on server-1 (directly exposed), and this Tomcat instance hosts a REST ...
0
votes
1answer
468 views

squid ssl proxy (NON TRANSPARENT)

I have been searching google for hours, I know this is possible but all google gives is transparent proxy ssl results and I do NOT want squid transparent. I'm going to be pushing proxy settings via ...
0
votes
0answers
361 views

Rails 2 and Ngnix: https pages can't load css or js (but will load graphics)

ADMISSION: i've posted this same question on stackoverflow, before realising it's probabaly better suited to superuser, but it kind of depends on the answer: If it turns out to be a problem in my ...
0
votes
1answer
255 views

How to dump the Subject Alternative Name (SAN) from an SSL certificate file

I know that I can dump the entire information from a PEM certificate file with this command: openssl x509 -in certfile -noout -text And I've already found another direct parameter to show me only ...
0
votes
0answers
591 views

How to make Firefox remember a self signed certificate is trusted

I'm using some private server with a self-signed certificate for https connections. Firefox 25.0 warns me about the certificate being untrusted every time. For some reason, I can't make it remember ...
7
votes
3answers
27k views

How do you permanently disable the 'This Connection is Untrusted' page on Firefox

I'm going insane. Can someone please help me to COMPLETELY DISABLE the 'This Connection is Untrusted' page on Firefox. Facts: I am running Firefox 23.0 on an Ubuntu machine (downloaded and ...
2
votes
1answer
100 views

Fedora 8: rubygems.org certificate validation failure. How to install GeoTrust CA?

Trying to get a gem: $gem install puppet ERROR: Could not find a valid gem 'puppet' (>= 0), here is why: Unable to download data from https://rubygems.org/ - SSL_connect returned=1 ...