SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

1
vote
1answer
218 views

Is it possible to disable the “Add Exception” button in Firefox?

I want to disable/remove the "Add Exception..." button in Firefox to prevent users to accept invalid SSL certificates. How can I achieve this? Google does not show up any useful results.
5
votes
1answer
5k views

Can self-signed SSL certificate be renewed? How?

I'm fairly new to SSL certificates and would like to know if a self-signed certificate which I use for HTTPS can be renewed to extend its expiry date without all clients of the site having to go ...
0
votes
0answers
57 views

Fiddler fails with some ssl websites

Running Fiddler2 to debug http, I've noticed some https connections no longer work with it - ie, https://google.com or https://facebook.com. Some other https sites still work. I thought I read about ...
0
votes
0answers
125 views

Apache won't start after changing SSL certificate

I've changed two SSL certificates on my server. Copied the old certificates to another directory Copied the new ones Changed the paths in each VirtualHost Changed LogLevel to Debug But Apache ...
2
votes
1answer
2k views

Thunderbird: SSL/TLS vs. STARTTLS

Following up this question on serverfault "Is STARTTLS more safe than TLS/SSL?" it came up that the question is rather a question about Thunderbird and not about the actual protocols. Also, if you ...
0
votes
1answer
103 views

SSL Certificates for Plesk dedicated server

We have a dedicated server that is using Plesk 11 and we would like to buy and install a certificate to acheive the following: Remove the "There is a problem with this website's security ...
1
vote
2answers
1k views

What is the difference between a certificate and a key with respect to SSL?

Whenever I try to understand anything about SSL I always have a hard time keeping track of what "key" and "certificate" refer to. I fear many people use them incorrectly or interchangeably. Is there ...
0
votes
2answers
721 views

How can I figure out why a specific website won't load?

Problem: I cannot connect to https://amps.dla.mil from my my office network. (Connection times out from all computers and different web browsers, no outbound firewall rules) I can connect from my ...
1
vote
0answers
35 views

How to only accept certificates issued by user-specified CA per domain?

Question Is it possible in Chromium or Firefox to only accept SSL certificates issued by a user-specified CA for a specific domain? Background When you have set up your own certificate authority ...
0
votes
1answer
58 views

Why can't I log in to Evernote when I am using Skitch?

I am running Evernote Skitch, latest version, on Windows 7 but when I attempt to log in to my Evernote account in Skitch, I receive the following error: Warning: Could not establish a valid SSL ...
2
votes
1answer
389 views

If I use openvpn, can vpn servers monitor my usernames/passwords?

Openvpn uses a type of encryption similar to ssl. This seems to suggest that even if I choose an incredibly shady VPN server, then my content will be secure. That is, the VPN server will be able to ...
0
votes
1answer
58 views

How to make use of a free SSL certificate?

I'm using Network Solutions, who want me to give them $50 or $100 per year to have SSL protection with my hosting. I keep hearing about free SSL certificates though. Can I really use one of those with ...
0
votes
1answer
294 views

Access HTTPS from different port

While web browsing, how do you redirect HTTPS URLs to a port other than the standard 443? Due to Windows XP's inability to handle name-based hosting with SSL, I'm forced to remap port 443 to a unique ...
-1
votes
2answers
3k views

Who provides SSL certificates to Google? [closed]

Out of curiousity I was wondering who provides Google's SSL certificates. I checked the certificate information in Chrome (on vanilla https://google.com) and it shows that it is authored by: Google ...
0
votes
1answer
92 views

Should I let JungleDisk replace my /Library/Preferences/cacert.pem?

About a week ago JungleDisk Desktop backup started warning it couldn't upload a "database" file (that it uses for speed), and was falling back to a regular upload, which succeeds. Example message: ...
0
votes
2answers
139 views

How to intercept SSL authority certificate needed in a corporate environment?

My situation is the following: in our corporate network a special kind of SSL certificate issued by the company itself is used. Every time I open a site via https in Firefox a warning monit is ...
4
votes
2answers
4k views

Why does Chrome always redirect me to https://www.google.com

Whenever I enter "http://www.google.de" (or any other google domain) in the addressbar, it is automatically replaced by "https://www.google.de". This happens regardless of beeing logged in with my ...
19
votes
4answers
5k views

Why won't OS X trust GitHub's SSL certificate?

When I go to any github.com page in Chrome, I get a big ugly error: You attempted to reach github.com, but the server presented a certificate issued by an entity that is not trusted by your ...
-1
votes
2answers
91 views

apply for SSL certificate for hidden websites [closed]

We have a proxy and several hidden web servers in different locations. Internet users can visit these hidden web servers only through the proxy, so only the proxy IP is public. The IPs of the web ...
0
votes
1answer
254 views

Certificate errors on irc.pirateirc.net

I'm having trouble making a secure connection to the IRC server at irc.pirateirc.net. gnutls doesn't recognise the SSL certificate issuer, even though the certificate is issued by a regular CA ...
0
votes
1answer
404 views

sshd service listening on multiple ports

Well, I need use multiple and distinct ports where sshd will be listening, for distincts clients. Each client connect a different ssh port in real time. Can I put sshd service listening on multiple ...
0
votes
1answer
385 views

How to add self signed certificate to certificate bundle?

How to add self signed certificate to certificate bundle so that the Curl http client can verify the self signed certificate as valid one?
1
vote
1answer
250 views

iOS: VPN over TCP. Any good service available?

Here's a very succinct description of my situation: I use an iPhone (and an iPad) in an environment where ports other than 80 and 443 are blocked. Therefore, it is impossible to use Siri, Maps, as ...
0
votes
2answers
180 views

No Padlock in Firefox on interior pages - no mixed content

I'm at a loss. Chrome shows my site with a green padlock throughout but I can't convince Firefox. My homepage shows a padlock in Firefox (https://www.pianopronto.com) However all the interior pages ...
0
votes
0answers
423 views

Windows 2003 (actually XP x64) can't read SSL signature if it's SHA-2 (SHA 256/384/512)

I have a Windows XP Professional x64 virtual machine to run some HLDS processes. I chose the x64 edition as I already have a license for it, and as it uses the Windows Server 2003 kernel it'll be more ...
0
votes
2answers
797 views

Can I access a network resources through SSL Vpn (OpenVpn)?

I'm really confused about some related things in the Vpn uses.. especially in sharing only the internet & accessing all the resources(printer, files..etc) that are available in the network and be ...
0
votes
1answer
347 views

Eudora 7 says SSL certificate out of date

After using (sponsored) Eudora 7.1.0.9 on Windows 7 for years, it suddenly stopped importing new mail. Error message says the server certificate was rejected as one cert in the chain has expired. It ...
1
vote
1answer
477 views

Where to store openssl private keys on Linux server?

I have a private SSL key on my VPS that's used by several applications (Apache, Postfix, etc). The problem is, I can't exactly set the permissions to 0600 (-rw-------) because these various ...
0
votes
1answer
409 views

readsocket: Connection reset by peer (WSAECONNRESET) (10054) [closed]

I'm using stunnel to tunnel SSL traffic to port 80. And up until today it's been working just fine. And indeed for a good amount of pages on my website it still works just fine but for some pages it ...
1
vote
0answers
813 views

Establish https on nonstandard port

I'm trying to estamblish https on port 55434 (different than standard 443). My nginx configuration looks like this: server { server_name example.org; listen 55434 ssl; ssl ...
1
vote
1answer
834 views

How to set up a server to use TLS-SRP authentication?

How to get it work at all? I used this manual. I created a verifier file and started openssl s_server with a self-signed RSA certificate. Now I can't connect to it. >gnutls-cli --srpusername user ...
0
votes
1answer
226 views

Using HTTPS with a squid proxy

I have a squid proxy set up on a few different servers. I am behind it on most applications (firefox, other apps that allow proxy config, etc). right now I'm not using https, and if I look in ...
0
votes
1answer
353 views

What do I do with my SSL certificates after buying them?

OK, I have an Apache server running on XAMPP, and I have generated my CSR and some fake certificates. I went to Thawte's website and got an SSL trial and they emailed me back with all these other ...
31
votes
2answers
2k views

Why do some websites show the company name next to the URL?

Some websites show the company name next to the URL (in Chrome) and some don't. How do I set this up for my website? Is there a reason why or why I wouldn't want to do this?
0
votes
3answers
1k views

How ISP sees the HTTPS traffic? [duplicate]

If I am visiting a https url say https://www.youtube.com/watch?v=7HKoqNJtMTQ. What exactly my ISP will see ?
3
votes
1answer
223 views

How to make a self-signed client SSL certificate?

Well, how to make a client SSL certificate, which doesn't need an (external) certification authority? Is there a way and is any profit to use elliptic curves for that? What should i do to use it on ...
2
votes
1answer
2k views

Permissions for SSL key?

I'm trying to set up a secure connection (https) in nginx. But I'm a bit worried about the private key's permissions, which aren't mentioned in any tutorial. Should I change them? To what?
0
votes
1answer
345 views

How to create a SSL certificate signed by an intermediate certificate

I am building a web site with HTTPS. The host has both a DNS name and an IP address and I'd like the SSL certificate(s) to cover both. I've been given a certificate that is signed by a trusted party - ...
1
vote
2answers
493 views

How to install SSL for Darwin Streaming Server on OS X Mountain Lion?

I downloaded Darwin Streaming Server and while I'm installing I want to enable SSL, but this requires that I have a valid streaming server SSL certificate installed. How can I install an SSL ...
0
votes
0answers
323 views

Why can't I proxy SSL connections in Charles under Linux (ubuntu)?

I want to proxy some API requests over SSL from a PHP application using Charles Proxy which should allow me to view unencrytped requests. I've done this on Windows before but on Linux, I'm seeing the ...
1
vote
1answer
831 views

changing the pass phrase on a key from openssl

A while ago I created a key with openssl genrsa -aes256 4096 > server.key. The process prompts for a pass phrase. I would now like to change that pass phrase, is that possible?
1
vote
1answer
254 views

Domain email, GMail, Postfix

So, after a long trek around the blog-o-tubes, I arrive here. I'm trying to set up email for my domain. I don't really want to do my own email hosting with my own mailserver, especially since my ...
1
vote
1answer
83 views

What type of ssl certificate to select

I have a commercial site and wanted to change to SSL at least for the logged in users. Hoping someone can provide some advice: I only have one domain, but ideally I'd like to test on our development ...
2
votes
1answer
200 views

AddTrust_External_Root.pem in fedora?

My campus network has switched its wifi network to protected EAP and requires me to provide AddTrust_External_Root.pem as a CA certificate. On Ubuntu the file is found in /etc/ssl/certs but in my ...
0
votes
3answers
36 views

What is the passphrase-file in apache2?

I'm referring to this question. What is the 'passphrase-file' mentioned in here? Please clarify.
1
vote
1answer
300 views

gksudo nautilus doesn't work. Ubuntu Terminal

I'm trying to open my /etc/apache2 folder through terminal. I tried running gksudo nautilus and gksu nautilus. Both doesn't show anything and do not show any errors in terminal. But nautilus works ...
1
vote
1answer
59 views

Must CSRs be generated on the server that will host the SSL certificate?

Is it necessary to generate the CSR (Certificate Signing Request) on the same machine that will host my web application and SSL certificate?
0
votes
2answers
105 views

Secure telnet for POP3 and others

I need a command to connect to POP3 server, set startTLS, and get secure connection. I neet something to use like telnet. Is there any program that can achieve it? --edit I'm just trying to write ...
5
votes
1answer
1k views

Why is SMTP over SSL between email servers not so popular? [closed]

In my understanding, most of email servers use SMTP/POP/IMAP over SSL to encrypt the email. It supports encryption when client (UA) send email to server (MTA) and UA receive email from MTA. However, ...
0
votes
0answers
271 views

Webdav between a OS X Server (self-signed certificate) and Windows 7?

Problem data: I have two freshly installed OS X Server 10.8.2 and Windows 7 SP1 (all updates to date). A self signed certificate on the OS X Server generated automatically and working for the exact ...