SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

1
vote
4answers
3k views

I'm receiving an SSL error in various browsers, but I can't find non-SSL content

I'm receiving an error with my SSL connection. Using google chrome I see the following error: Your connection is encrypted with 128-bit encryption ... however this page includes other ...
3
votes
3answers
2k views

Mutt will not let me save an SSL certificate

I have just set up Mutt to connect to my firm's IMAP and SMTP server. Everything works; but when I launch mutt, I get a warning about the certificate, and am given the option to: (r)eject, accept ...
2
votes
3answers
1k views

SSL proxy with stunnel

I'm trying to set an SSL connection with stunnel. Some kind of SSL proxy. Final aim Connect http only CLIENT to https only SERVER. My plan is CLIENT: change endpoint to PROXY PROXY: use stunnel ...
0
votes
3answers
38 views

What is the passphrase-file in apache2?

I'm referring to this question. What is the 'passphrase-file' mentioned in here? Please clarify.
2
votes
2answers
2k views

How to force all Apache connections to use TLSv1.1 or TLSv1.2

I haven't been able to find a solution for this, if there is please do refer to it. Running: Windows7 x64 Apache 2.4.4 OpenSSL 1.0.1j and have the following in my httpd_ssl ...
1
vote
2answers
816 views

Links SSL Error

What version of links does the user called "bytepool" have that he's able to find this workaround? Refer to link below. How to tell `links` to ignore expired SSL certificate and proceed? He writes ...
1
vote
2answers
114 views

Client certificate selection

I have a https apache server that needs client verification. But when somebody is browsing this site there is need to select proper cert from list of certificates installed in browsers. What can I do ...
1
vote
2answers
650 views

How to lock down Win Vista Firewall for HTTPS only access?

When I'm on public WiFi (laptop), I want to configure my firewall through its advanced settings to allow only HTTPS web traffic. My first attempt was to block incoming and outgoing by default, then ...
0
votes
2answers
65 views

Apache Upgrade leads to SSL handshake failure with Java client

I have an apache 2.4.10 to upgrade to 2.4.12, underlying openssl 0.9.8, with the following SSL configuration: SSLCipherSuite ...
0
votes
2answers
32 views

Windows can't find the issuer of a client certificate

Hello and sorry about my bad english. I have a problem about a PKI which I did on Ubuntu using OpenSSL: when I installed the root certificate on Windows (it's a simple hierarchy: ROOT -> Intermediate ...
0
votes
2answers
187 views

how to change ssl certificate serial number

I upgraded the linux full release on a server. As part of the process I generated a new local ssl certificate key set with genkey. However the serial number remained the same and client apps such as ...
0
votes
2answers
114 views

Crazy Finished Message in TLS

I'm tried to uderstand what is the content of the Finished Message of TLS. I'm using wireshark to capture the traffic between my browser and the internet. I noticed a "stangeness" when the chosen ...
0
votes
2answers
1k views

How can I figure out why a specific website won't load?

Problem: I cannot connect to https://amps.dla.mil from my my office network. (Connection times out from all computers and different web browsers, no outbound firewall rules) I can connect from my ...
0
votes
2answers
299 views

How to intercept SSL authority certificate needed in a corporate environment?

My situation is the following: in our corporate network a special kind of SSL certificate issued by the company itself is used. Every time I open a site via https in Firefox a warning monit is ...
0
votes
2answers
382 views

No Padlock in Firefox on interior pages - no mixed content

I'm at a loss. Chrome shows my site with a green padlock throughout but I can't convince Firefox. My homepage shows a padlock in Firefox (https://www.pianopronto.com) However all the interior pages ...
0
votes
2answers
117 views

Tool to block SSL traffic on Windows

I'm trying to recreate some customer issue which requires me to block SSL packets coming from a server i.e. TCP connection steps should go ahead but SSL handshake should stall. Are there any tools ...
-1
votes
2answers
1k views

How to renew Google Chrome certificate (NET::ERR_CERT_DATE_INVALID)?

After installing a new Windows 7 laptop, my time was set a few hours in the future. Consequently, Google Mail (and other sites like stack overflow or tumblr) are displaying NET::ERR_CERT_DATE_INVALID ...
0
votes
1answer
244 views

Forcing SSL on phpmyadmin

I couldn't decide which website this question we be on (since I see it almost everywhere) so feel free to migrate. I've set up a self-signed SSL cert on my server to secure my installation of ...
0
votes
1answer
47 views

How to get digicert high assurance in my Mac

I removed Digicert high assurance certificate from the keychain. Now when I visit facebook.com or other ssl websites from chrome, they don't open and I get an SSL error, e.g.: How can I to get ...
0
votes
1answer
149 views

Not getting prompted for certificate in IE8

I am unable to connect to a local intranet server using IE8. This server issues an unsigned certificate. When using IE8, it returns "Internet Explorer cannot display the webpage" instead of "there ...
0
votes
1answer
364 views

WHM/cPanel SSL Warning in Chrome

I'm managing a server running CentOS, and when I try to log in to WHM at xxx.xxx.xxx.xxx:2087 I've always got a warning saying "This is probably not the site you are looking for!" . I did a little ...
0
votes
1answer
287 views

Virtual hosting with nginx over SSL, without SNI (via a wildcard cert)

I'm trying to get https://survey.mediacru.sh to work without SNI. We have a wildcard cert and are using nginx as our http server. However, on browsers without SNI support (for example, the stock ...
0
votes
1answer
67 views

Microsoft CA Certificate Request

I am new to MS CA and I have recently installed a MS CA setup on a VM. I used the web service provided "http://test.server.name.tld/certsrv" to request a certificate. I approved my test certificate ...
0
votes
1answer
444 views

Apache - Disabled SNI

I'm having a bit of trouble with my webserver. Whenever I connect to Apache using SSL, I get a 400 Bad Request. I've looked in Apache's error log, and I see: [ssl:error] [pid 30065] AH02032: ...
0
votes
1answer
166 views

Squid upgrade HTTP to HTTPS

I want to use Squid to upgrade HTTP request to HTTPS using my own certificate, in order to make clients handshake with a server (a reverse proxy) that requires mutual authentication. How can I ...
0
votes
1answer
89 views

Exchange 2010 Certificate Renewal

I am still learning how to configure Exchange 2010, so I hope that you can help me on some topics. The certificate for mail.xxxxxx.com has expired. The previous IT guy had OWA set up on the server, ...
0
votes
1answer
450 views

Squid behind Apache 2.4

I need to locate a Squid instance as a forward proxy behind Apache 2.4.6. I don't have enough credits to add inline images. But here it is As Squid3.3 listens on localhost:3128 and works OK with ...
0
votes
1answer
760 views

Verifying Certificate using Mac Terminal

In Mac Terminal, we can use the command security to do many things related to certificates. I'm trying to know how to verify a certificate using this command. I wrote security verify-cert [.pem ...
0
votes
1answer
58 views

How to set up load balancer with SSL?

I currently have a single server with a Django stack. I have nginx with an SSL certificate for HTTPS. I want to scale the web layer by putting an nginx load balancer in front, and adding IP addresses ...
0
votes
1answer
51 views

What details would you view in a certificate to check if it is trustworthy?

I have a question need help: What details would you view in a certificate to check if it is a trustworthy website?
0
votes
1answer
935 views

Secure web proxy using squid

I Recently installed squid as a web proxy, it works fine. But the problem is that connection to the proxy server is not encrypted, so it's visible to any mans in the middle by DPI (Deep Packet ...
0
votes
1answer
66 views

different ssl_protocols for seperate domains

I tried to configure one server for a specific domain to use TLSv2.0 only. Others should use TLSv1, TLSv1.1, and TLSv2.0. The configuration is valid, as nginx loads correctly, but the site with ...
0
votes
1answer
661 views

How to dump the Subject Alternative Name (SAN) from an SSL certificate file

I know that I can dump the entire information from a PEM certificate file with this command: openssl x509 -in certfile -noout -text And I've already found another direct parameter to show me only ...
0
votes
1answer
457 views

Multiple websites on one server/IP; only one with SSL

I recently acquired an SSL certificate for my primary site (https://wemarsh.com/). It works great, and I've even set up an .htaccess rule so all traffic on that site is encrypted. (I'm running ...
0
votes
1answer
270 views

Intermediate SSL Cert

I have an SSL certificate that is self-signed, and therefore uses an intermediate certificate. I am using Node.js and returning both the certificate as well as the certificate chain which includes ...
0
votes
1answer
329 views

Pages don't load after installing a certificate on tomcat, restart required

I posted this question before but not in the correct forum. I have configured tomcat7 to use SSL and have made it point to a keystore. The keystore has a self signed certificate by default. There are ...
0
votes
1answer
445 views

Error with curl

I'm having this error with curl: curl https://www.google.com -v * About to connect() to www.google.com port 443 (#0) * Trying 2607:f8b0:400e:c01::67... * Failed to connect to ...
0
votes
1answer
144 views

SSL Certificates for Plesk dedicated server

We have a dedicated server that is using Plesk 11 and we would like to buy and install a certificate to acheive the following: Remove the "There is a problem with this website's security ...
0
votes
1answer
122 views

Should I let JungleDisk replace my /Library/Preferences/cacert.pem?

About a week ago JungleDisk Desktop backup started warning it couldn't upload a "database" file (that it uses for speed), and was falling back to a regular upload, which succeeds. Example message: ...
0
votes
1answer
566 views

How to add self signed certificate to certificate bundle?

How to add self signed certificate to certificate bundle so that the Curl http client can verify the self signed certificate as valid one?
0
votes
1answer
945 views

Eudora 7 says SSL certificate out of date

After using (sponsored) Eudora 7.1.0.9 on Windows 7 for years, it suddenly stopped importing new mail. Error message says the server certificate was rejected as one cert in the chain has expired. It ...
0
votes
1answer
284 views

Using HTTPS with a squid proxy

I have a squid proxy set up on a few different servers. I am behind it on most applications (firefox, other apps that allow proxy config, etc). right now I'm not using https, and if I look in ...
0
votes
1answer
1k views

How to use SSL tunnelling to give full internet access to some applications while you are on a restrictive corporate network?

How to use SSL tunnelling to give full internet access to some applications while you are on a restrictive corporate network? Use cases: you want to be able to access some restricted destinations ...
0
votes
1answer
1k views

Apache Tomcat Server failure

I'm trying to set up Apache Tomcat 6 with SSL and once I edited the server.xml file to include the following definitions the server started to fail as soon as I hit startup.bat: UPDATE: I fixed the ...
0
votes
1answer
1k views

https post message fail, where is server log?

I am receiving an error when sending a https post message to my server and I am looking to get more information. I am looking for ssl error log in apache but I cannot find it. I have looked in ...
0
votes
1answer
330 views

Win 7: Cannot access SSL sites

I haven't been able to access any site using ssl since yesterday. When I, for example, try to visit Gmail nothing happens expect a blank screen. I have tried fixing this by checking that date/time is ...
-1
votes
1answer
109 views

Connecting to Apache server over SSL when it's behind NAT and the public IP & port are known?

I want to connect to an Apache server over SSL (with both client & server certificates) when both the client and server are behind NAT firewalls. I can't port-forward and I have to assume that all ...
-1
votes
1answer
99 views

GitHub Not Accessible for any browser

I can't access https://github.com/ website. I have try all browser. but, it is not run site. I get server not found error. Why is not run Only github site?
-1
votes
1answer
612 views

Can I run two FTP sites on one server using two different IP addresses?

So we currently have our FTP site running on one computer (Mac OS-X) with one IP address. We are trying to host a second FTP site running off of the same computer, but with a different IP address. Is ...