SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

5
votes
1answer
947 views

SSL handshake fails for google.com only, in all browsers

I can't connect to google.com via HTTPS on any browser (Safari, Firefox or Chrome). All other sites (HTTPS or not) are fine. The error I get is ERR_CONNECTION_CLOSED in Chrome, Secure Connection ...
5
votes
1answer
3k views

How to tell `links` to ignore expired SSL certificate and proceed?

I'm using the links browser and trying to connect to an HTTPS site. I then get: Verification failure: certificate has expired this is "fine" (i.e. was decided to be tolerated) for this internal-...
4
votes
1answer
8k views

Firefox, error when accessing https url

I'm connected through a public wifi hotspot. No problem when using IExplorer. When I use Firefox, I obtain the following error message after asking for any https url, as for example https://www.google....
3
votes
1answer
828 views

dyld: Library not loaded: /usr/lib/libcurl.4.dylib curl SSL error

I'm not sure what happened to my system but I am having an issue with dyld/curl, affecting my overall computer performance. I am on Yosemite. I have a feeling it's the Conda openssl. How do I just ...
3
votes
1answer
358 views

Is there such thing like a port forwarding service out in the internet?

I'm looking for a service on the internet allowing me to redirect TCP connections. My company's firewall is very strict and allows only HTTP (through a transparent proxy) or SSL on only port 443. I ...
3
votes
1answer
1k views

Removing certificates in Firefox doesn't work

I'm trying to remove my certificates going to Preferences > Advanced > Encryption > View Certificates. Then I select the certificates I want to remove and delete them. But when I go again to the list,...
2
votes
1answer
292 views

Windows: SSL/TLS connection reset after ClientHello (ECONNRESET / write:errno=10054)

I'm using Windows Server 2012 as a workstation. The problem is that HTTPS connection initiated by node.js randomly fails. Probably this is system-wide issue and not only node is affected, but it ...
2
votes
1answer
272 views

Meaning of “dovecot: ssl-params: Error: epoll_ctl(del, 7) failed”?

During dovecot regeneration of ssl-params I noticed this sequence in my log file: Mar 13 10:37:37 mail dovecot: ssl-params: Generating SSL parameters Mar 13 10:37:52 mail dovecot: ssl-params: Error: ...
2
votes
1answer
578 views

IRC over SSL on Weechat

So I'm trying to see up SSL for IRC through weechat, but have been having issues. I've generated a .pem file for my nick and also have installed the ca-bundle.crt, but keep getting a TLS handshake ...
2
votes
1answer
2k views

Fedora 18 - error [Errno 14] Peer cert cannot be verified or peer cert invalid

When i run the command: sudo yum install perl-bioperl I get the error [Errno 14] Peer cert cannot be verified or peer cert invalid. My system details are: Linux localhost.localdomain 3.11.10-...
2
votes
1answer
143 views

Windows - service account default certificate store

I am writing a web app that connects to external web services. The external web services serve an intermediate certificate signed by Thawte SGC CA - G2. When I setup IIS to run the web app using ...
2
votes
1answer
159 views

Fedora 8: rubygems.org certificate validation failure. How to install GeoTrust CA?

Trying to get a gem: $gem install puppet ERROR: Could not find a valid gem 'puppet' (>= 0), here is why: Unable to download data from https://rubygems.org/ - SSL_connect returned=1 ...
2
votes
1answer
1k views

iOS: VPN over TCP. Any good service available?

Here's a very succinct description of my situation: I use an iPhone (and an iPad) in an environment where ports other than 80 and 443 are blocked. Therefore, it is impossible to use Siri, Maps, as ...
2
votes
1answer
822 views

Can not acces Gmail.com, SSL error

I'm using a wired router connected to a ADSL line to conect my computer to internet, When I try to access gmail.com using Firefox it gives following error, Secure Connection Failed An error occurred ...
2
votes
1answer
494 views

Enabling SSL on the ColdFusion 8 built-in web server

So I followed the instructions here with CF8 on winXP: http://www.cfchimp.com/wordpress/2008/08/enabling-ssl-on-the-coldfusion-8-built-in-web-server/ and got the following error: Any idea what is ...
2
votes
1answer
1k views

How to create/install a self signed certificate for Zend Server CE on Mac OS X?

I have a virtual host set up for one of my sites (http://local.mysite.com), now I want to be able to access it using SSL (https://local.mysite.com). How do I go about configuring Zend Server CE and ...
2
votes
1answer
9k views

How to configure GlassFish v3.1 to use SSL?

We are looking for simple step-by-step manuals how to configure GlassFish v3.1 to use SSL. We are running few legacy application under GlassFish and we hope there is no need to change them: so that ...
2
votes
1answer
458 views

SSL TurnKey Linux

I have a TurnKey Mantis linux appliance and I want to make the connection secure.I've bought from GlobeHost a certificate and got the following files :sub-domain_domain_net.ca-bundle and sub-...
1
vote
1answer
57 views

SSH from Windows (Putty) to Ubuntu via HTTPS

I'm trying to connect to Ubuntu using Putty via HTTPS (SSH via port 22 is blocked via the firewall). I read so many tutorials and sites about SSL, SSH, tunneling, ... that I'm kind of confused now. I ...
1
vote
1answer
49 views

How to manage multiple certificates in the Apple Key Chain with Apple Mail in mind?

I would like to ask about proper management of SSL certificates in Keychain. An article on holeyn.com says: The only time it might be useful to have multiple key-pairs (...) In this situation, ...
1
vote
1answer
240 views

When using Kaspersky Anti-Virus Personal Root Certificate, can you view the website's certificate?

Use of Kaspersky Anti-Virus Personal Root Certificate with Firefox is discussed in this post, Which CA issued certificate for https://www.google.com. My question is (other than for google.com) is it ...
1
vote
1answer
1k views

“Java is unavailable” in Firefox 32 bits

I'm trying to connect to a VPN using SSL Network Extender, and am getting Java is unavailable error.This occurs in 32 bits Java on 32 bits Firefox in Windows 7 (64 bits). Since both browser and Java ...
1
vote
1answer
66 views

How to store an ssl key as a variable in a script for use with ncat?

I am trying to write a wrapper script to start an ncat listener. I don't want to have to output the certificate and key to a file, rather I'd like to store it as a variable within the script, and call ...
1
vote
1answer
132 views

How do you verify a client rsa key via cli?

I am experiencing some issues with openvpn and I would like to verifiy the client's connecting key. I found a number of samples on how to verify the servers key: linux-3kfe:/usr/share/easy-rsa/keys # ...
1
vote
1answer
165 views

Is there a way to make Chrome assume a domain's certificate is valid (in other words, skip validating its certificate)?

Is there a way to make Chrome on Windows avoid validating the certificate for a domain such as (www.foo.com): Basically I want to avoid getting this warning message for that site every time I start ...
1
vote
1answer
325 views

Can't Install Homebrew on OS X Yosemite

Attempted to install Homebrew with the following command: ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)" Received this error: fatal: unable to access 'https:...
1
vote
1answer
876 views

Is it possible to turn on TLS 1.2 in .jnlp file?

is it possible to turn on TLS 1.2 in .jnlp file to download .jar from HTTPS server where only TLS 1.2 is set? I've tried in many ways: <resources> <j2se (...) /> <jar (...) /&...
1
vote
1answer
327 views

Creating PEM public key for Google App Engine

I am running a small company and unfortunately my IT support just quit. I am running a site on GAE. My SSL expired and I ordered a new one, receiving the following files: 3 .cer files in an SHA-1 ...
1
vote
1answer
1k views

Apache Error After Upgrade: Cannot load module mod_ssl.so: undefined symbol: SSL_get_srp_userinfo"

After I upgrade the Apache to version 2.4.12, its giving error at the time of start. I used below commands to install apache. ./configure --prefix=/usr/local/apache2 --enable-so --enable-ssl --...
1
vote
1answer
755 views

How to setup a HTTPS Proxy on a raspberry pi

I'm looking for a way to encrypt every data sent from my smartphone and laptop by using a proxy server on my raspberry pi. What I've got so far: - RPi with Squid3 Running What I'm still missing: - ...
1
vote
1answer
685 views

How to use .pfx in certificate store in CURL for Windows 7

I want to use cURL to access a remote server, and I need to identify myself using a private key or the remote server gives a 401 "Unauthorized". I'm on Windows 7 (work machine, not my choice) and my ...
1
vote
1answer
711 views

Filezilla can't connect with TLS on one domain name

I've two websites: one hosting by OVH, and I have no problems with connection with Filezilla (I can use FTP connexion with TLS) one another not hosting by OVH, and when I'm trying to connect with ...
1
vote
1answer
345 views

lighttpd complains about ssl.use-compression

I am trying to apply some of the tricks described here, and the problem is having ssl.use-compression = "disable" in lighttpd.conf, because server reports WARNING: unknown config-key: ssl.use-...
1
vote
1answer
171 views

Iptables: Filtering string encrypted by ssl

I need to filter (send to BANRULES set) incoming http/https packets with a certain string (matchword). I do it easy when ssl is not in use (port 80): iptables -A INPUT -p tcp -m tcp --dport 80 -m ...
1
vote
1answer
196 views

webdav fails by https but not http

I'm trying to set up a webdav folder on a linux server to be used with a windows client (for now, cyberduck) Using http, everyting is fine. However, when using https, cyberduck warns me that my ...
1
vote
1answer
107 views

Why does firefox still display website ssl to be 128 bit encrypted after changing to 256

I recently renewed an ssl certificate to use SHA-2 but on firefox the website still shows to be SHA-1 and 128 bit encrypted, on all other browsers it show SHA-2 , 256 bit. Can anybody help me with ...
1
vote
1answer
2k views

Unable to read an email protected by Rights Management Service

My colleague received an email from H company. This email is protected by Microsoft Rights Management Service. His email client is Outlook Express, and he use POP3 to received it to local disk (the ...
1
vote
1answer
337 views

How can I make my computer trust a firewall web server certificate?

Every time I log into my firewall I get a message that says: The site's security certificate is not trusted! I know this is because my firewall doesn't have an identity certificate from a ...
1
vote
1answer
2k views

NET::ERR_CERT_DATE_INVALID error in Chrome when browsing python.org or github.com

Since one of the latest chrome updates, I'm getting this error that does not allow me to access some webs such as python.org or github.com. I've googled the problem but they say that it is generated ...
1
vote
1answer
85 views

Is there a program to check the list of root CAs in Firefox?

Motivated by this and this question, I'd like to ask if there is a way to check if additional certificates have been maliciously added to the list of root CAs of Firefox. Possible ways could be: an ...
1
vote
1answer
622 views

Chrome still shows red cross “https://” even with valid certificate

This happens on one of my users Mac laptop running ML or Mavericks. When she accesses https://www.somewebsite.com using either Chrome or Safari, she always got the warning related to the certificate ...
1
vote
1answer
83 views

SSL not work for virtual IP

I have a website which was deployed with three real web servers and a load balancer with a virtual IP. I have applied an SSL certificate from a CA and imported to Tomcat using OpenSSL using the ...
1
vote
1answer
290 views

Wireshark TLS communication shows green HTTP packets when using CCProxy proxy server?

Client <--> CCProxy <--> Server I have IE configured to use a proxy server for HTTP and Secure connections. I also have a proxy server is set up with CCProxy. It is my understanding that ...
1
vote
1answer
696 views

gksudo nautilus doesn't work. Ubuntu Terminal

I'm trying to open my /etc/apache2 folder through terminal. I tried running gksudo nautilus and gksu nautilus. Both doesn't show anything and do not show any errors in terminal. But nautilus works ...
1
vote
1answer
259 views

How do I get tor exit node information of a certain connection I made

At some point today my email client warned about an smtp certificate change of self signed certs. I took a screenshot of the certificate fingerprints and refused the connection because it does not ...
1
vote
1answer
781 views

Setting up IMAP/SSL on Ubuntu with Dovecot, Thunderbird, and a self-signed certificate

I have a new server that I am setting up. It currently has a very limited audience (just me), but I am trying to set up IMAPSSL and secure SMTP. Since the audience is so limited, I have decided to ...
0
votes
0answers
832 views

How does SSL-VPN tunneling and encryption work?

I have a few questions on SSL-VPN (Tunnel, not portal version). Question 1 is probably the one I'd like answered the most, out of my four questions. How exactly does SSL-VPN tunneling work (Feel ...
0
votes
0answers
544 views

Outlook won't accept my certificate for OMS (sms messaging service)

I have implemented an OMS service. Outlook requires that OMS uses https, so I have also created a self-signed cert with SelfSSL.exe, and imported the cert to my computer (Trusted Root Certification ...
-1
votes
0answers
20 views

Decrypting TLS Browser Traffic With Wireshark - Body is still encrypted

I was trying to reverse engineer a protocol using wireshark. I followed this article and tried to decrypt TLS Browser Traffic using SSLKEYLOGFILE since decrypting using private key didn't work for me. ...
-1
votes
0answers
18 views

How would I host an https site on intranet?

I can add a self signed certificate to a webserver to get ssl sites, however, self signed certificates are not validated by a CA and any webapplication that accesses them will get a nasty warning that ...