SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

2
votes
1answer
163 views

Windows: SSL/TLS connection reset after ClientHello (ECONNRESET / write:errno=10054)

I'm using Windows Server 2012 as a workstation. The problem is that HTTPS connection initiated by node.js randomly fails. Probably this is system-wide issue and not only node is affected, but it ...
2
votes
1answer
245 views

Meaning of “dovecot: ssl-params: Error: epoll_ctl(del, 7) failed”?

During dovecot regeneration of ssl-params I noticed this sequence in my log file: Mar 13 10:37:37 mail dovecot: ssl-params: Generating SSL parameters Mar 13 10:37:52 mail dovecot: ssl-params: Error: ...
2
votes
1answer
2k views

Fedora 18 - error [Errno 14] Peer cert cannot be verified or peer cert invalid

When i run the command: sudo yum install perl-bioperl I get the error [Errno 14] Peer cert cannot be verified or peer cert invalid. My system details are: Linux localhost.localdomain ...
2
votes
1answer
132 views

Windows - service account default certificate store

I am writing a web app that connects to external web services. The external web services serve an intermediate certificate signed by Thawte SGC CA - G2. When I setup IIS to run the web app using ...
2
votes
1answer
156 views

Fedora 8: rubygems.org certificate validation failure. How to install GeoTrust CA?

Trying to get a gem: $gem install puppet ERROR: Could not find a valid gem 'puppet' (>= 0), here is why: Unable to download data from https://rubygems.org/ - SSL_connect returned=1 ...
2
votes
1answer
1k views

iOS: VPN over TCP. Any good service available?

Here's a very succinct description of my situation: I use an iPhone (and an iPad) in an environment where ports other than 80 and 443 are blocked. Therefore, it is impossible to use Siri, Maps, as ...
2
votes
1answer
816 views

Can not acces Gmail.com, SSL error

I'm using a wired router connected to a ADSL line to conect my computer to internet, When I try to access gmail.com using Firefox it gives following error, Secure Connection Failed An error occurred ...
2
votes
1answer
482 views

Enabling SSL on the ColdFusion 8 built-in web server

So I followed the instructions here with CF8 on winXP: http://www.cfchimp.com/wordpress/2008/08/enabling-ssl-on-the-coldfusion-8-built-in-web-server/ and got the following error: Any idea what is ...
2
votes
1answer
1k views

How to create/install a self signed certificate for Zend Server CE on Mac OS X?

I have a virtual host set up for one of my sites (http://local.mysite.com), now I want to be able to access it using SSL (https://local.mysite.com). How do I go about configuring Zend Server CE and ...
2
votes
1answer
9k views

How to configure GlassFish v3.1 to use SSL?

We are looking for simple step-by-step manuals how to configure GlassFish v3.1 to use SSL. We are running few legacy application under GlassFish and we hope there is no need to change them: so that ...
2
votes
1answer
442 views

SSL TurnKey Linux

I have a TurnKey Mantis linux appliance and I want to make the connection secure.I've bought from GlobeHost a certificate and got the following files :sub-domain_domain_net.ca-bundle and ...
1
vote
1answer
37 views

How to manage multiple certificates in the Apple Key Chain with Apple Mail in mind?

I would like to ask about proper management of SSL certificates in Keychain. An article on holeyn.com says: The only time it might be useful to have multiple key-pairs (...) In this situation, ...
1
vote
1answer
157 views

When using Kaspersky Anti-Virus Personal Root Certificate, can you view the website's certificate?

Use of Kaspersky Anti-Virus Personal Root Certificate with Firefox is discussed in this post, Which CA issued certificate for https://www.google.com. My question is (other than for google.com) is it ...
1
vote
1answer
47 views

How to store an ssl key as a variable in a script for use with ncat?

I am trying to write a wrapper script to start an ncat listener. I don't want to have to output the certificate and key to a file, rather I'd like to store it as a variable within the script, and call ...
1
vote
1answer
115 views

How do you verify a client rsa key via cli?

I am experiencing some issues with openvpn and I would like to verifiy the client's connecting key. I found a number of samples on how to verify the servers key: linux-3kfe:/usr/share/easy-rsa/keys # ...
1
vote
1answer
130 views

Is there a way to make Chrome assume a domain's certificate is valid (in other words, skip validating its certificate)?

Is there a way to make Chrome on Windows avoid validating the certificate for a domain such as (www.foo.com): Basically I want to avoid getting this warning message for that site every time I start ...
1
vote
1answer
281 views

Can't Install Homebrew on OS X Yosemite

Attempted to install Homebrew with the following command: ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)" Received this error: fatal: unable to access ...
1
vote
1answer
749 views

Is it possible to turn on TLS 1.2 in .jnlp file?

is it possible to turn on TLS 1.2 in .jnlp file to download .jar from HTTPS server where only TLS 1.2 is set? I've tried in many ways: <resources> <j2se (...) /> <jar (...) ...
1
vote
1answer
292 views

Creating PEM public key for Google App Engine

I am running a small company and unfortunately my IT support just quit. I am running a site on GAE. My SSL expired and I ordered a new one, receiving the following files: 3 .cer files in an SHA-1 ...
1
vote
1answer
1k views

Apache Error After Upgrade: Cannot load module mod_ssl.so: undefined symbol: SSL_get_srp_userinfo"

After I upgrade the Apache to version 2.4.12, its giving error at the time of start. I used below commands to install apache. ./configure --prefix=/usr/local/apache2 --enable-so --enable-ssl ...
1
vote
1answer
700 views

How to setup a HTTPS Proxy on a raspberry pi

I'm looking for a way to encrypt every data sent from my smartphone and laptop by using a proxy server on my raspberry pi. What I've got so far: - RPi with Squid3 Running What I'm still missing: - ...
1
vote
1answer
632 views

Filezilla can't connect with TLS on one domain name

I've two websites: one hosting by OVH, and I have no problems with connection with Filezilla (I can use FTP connexion with TLS) one another not hosting by OVH, and when I'm trying to connect with ...
1
vote
1answer
300 views

lighttpd complains about ssl.use-compression

I am trying to apply some of the tricks described here, and the problem is having ssl.use-compression = "disable" in lighttpd.conf, because server reports WARNING: unknown config-key: ...
1
vote
1answer
153 views

Iptables: Filtering string encrypted by ssl

I need to filter (send to BANRULES set) incoming http/https packets with a certain string (matchword). I do it easy when ssl is not in use (port 80): iptables -A INPUT -p tcp -m tcp --dport 80 -m ...
1
vote
1answer
180 views

webdav fails by https but not http

I'm trying to set up a webdav folder on a linux server to be used with a windows client (for now, cyberduck) Using http, everyting is fine. However, when using https, cyberduck warns me that my ...
1
vote
1answer
104 views

Why does firefox still display website ssl to be 128 bit encrypted after changing to 256

I recently renewed an ssl certificate to use SHA-2 but on firefox the website still shows to be SHA-1 and 128 bit encrypted, on all other browsers it show SHA-2 , 256 bit. Can anybody help me with ...
1
vote
1answer
2k views

Unable to read an email protected by Rights Management Service

My colleague received an email from H company. This email is protected by Microsoft Rights Management Service. His email client is Outlook Express, and he use POP3 to received it to local disk (the ...
1
vote
1answer
305 views

How can I make my computer trust a firewall web server certificate?

Every time I log into my firewall I get a message that says: The site's security certificate is not trusted! I know this is because my firewall doesn't have an identity certificate from a ...
1
vote
1answer
2k views

NET::ERR_CERT_DATE_INVALID error in Chrome when browsing python.org or github.com

Since one of the latest chrome updates, I'm getting this error that does not allow me to access some webs such as python.org or github.com. I've googled the problem but they say that it is generated ...
1
vote
1answer
84 views

Is there a program to check the list of root CAs in Firefox?

Motivated by this and this question, I'd like to ask if there is a way to check if additional certificates have been maliciously added to the list of root CAs of Firefox. Possible ways could be: an ...
1
vote
1answer
608 views

Chrome still shows red cross “https://” even with valid certificate

This happens on one of my users Mac laptop running ML or Mavericks. When she accesses https://www.somewebsite.com using either Chrome or Safari, she always got the warning related to the certificate ...
1
vote
1answer
82 views

SSL not work for virtual IP

I have a website which was deployed with three real web servers and a load balancer with a virtual IP. I have applied an SSL certificate from a CA and imported to Tomcat using OpenSSL using the ...
1
vote
1answer
278 views

Wireshark TLS communication shows green HTTP packets when using CCProxy proxy server?

Client <--> CCProxy <--> Server I have IE configured to use a proxy server for HTTP and Secure connections. I also have a proxy server is set up with CCProxy. It is my understanding that ...
1
vote
1answer
671 views

gksudo nautilus doesn't work. Ubuntu Terminal

I'm trying to open my /etc/apache2 folder through terminal. I tried running gksudo nautilus and gksu nautilus. Both doesn't show anything and do not show any errors in terminal. But nautilus works ...
1
vote
1answer
259 views

How do I get tor exit node information of a certain connection I made

At some point today my email client warned about an smtp certificate change of self signed certs. I took a screenshot of the certificate fingerprints and refused the connection because it does not ...
1
vote
1answer
765 views

Setting up IMAP/SSL on Ubuntu with Dovecot, Thunderbird, and a self-signed certificate

I have a new server that I am setting up. It currently has a very limited audience (just me), but I am trying to set up IMAPSSL and secure SMTP. Since the audience is so limited, I have decided to ...
1
vote
1answer
359 views

Syncrify and SSL support

I installed the Syncrify server and client on a Linux box. From what I've read on their site, Syncrify comes with a built in self-signed SSL certificate. However after setting the SSL port on the ...
1
vote
1answer
2k views

Enable security settings in Internet Explorer 7 via registry

I used to have a list of keys to enable various security settings within Internet Explorer 7 via the Registry. Specifically, I'm looking for the keys that enable SSL 2 and 3.
0
votes
1answer
18 views

Human readable SSL/TLS packets

If I have a protocol-analyzer/packet-sniffer, such as wireshark installed on a particular device.. (or in this case; tcpdump & tshark etc. on my smartphone..) ..should I be able to read ...
0
votes
1answer
22 views

How do I access an https site that still uses RC4?

I have an old wireless router that I haven't needed to change the configuration on for years. Recently I ran into some issues with my network and needed to turn on it's dhcp server. When i went to ...
0
votes
1answer
65 views

Browser (any) on Windows 7 loads bad (localhost) https certificate

On Windows 7 in Chrome, but also in any other browser, for one particular (external) website a bad HTTPS certificate is loaded. When I open the certificate it says that Windows does not have enough ...
0
votes
1answer
26 views

Trouble connecting to some HTTPS urls

I am having trouble connecting to some websites using https. wget and curl complain about not being able to verify the certificate. I presume this is to missing root certificates on my NAS. For ...
0
votes
1answer
38 views

Adding --no-check-certificate to yum repositories

I have added virtio-win.repo according to this guide. The content of /etc/yum.repo.d/virtio-win.repo is now [virtio-win-stable] name=virtio-win builds roughly matching what was shipped in latest ...
0
votes
1answer
33 views

Load runner Vugen unable by pass the SSL negotiotion

We are working on POC for service now app whose version name is Fuji and in order to login to this app with different test users we use the SSL certificates. Here the problem we face is an SSL ...
0
votes
1answer
46 views

Firefox doesn't ask me for a certificate when visiting a site that needs one

I use Firefox 44.0.2 on a Linux Xubuntu system. I'm trying to access a company website that requires a certificate. I can confirm I have the correct certificate in ...
0
votes
1answer
106 views

Unable to disable SSLv3 in Apache 2.4.18

One of my client wanted me to upgrade openssl and Apache on his server because he want to receive an A from SSLLabs. I went ahead and upgraded to Apache 2.4.18 and openssl to version 1.0.2e. I then ...
0
votes
1answer
106 views

GIT warning: unsupported ssl version tlsv1.2: using default

I am trying to clone a git repository and receiving the following warning and error message: Cloning into 'projectname'... warning: unsupported ssl version tlsv1.2: using default * Couldn't find host ...
0
votes
1answer
24 views

Generating machine TLS certificates in software

I am working with a distributed software solution where machines may communicate over the internet. Automatically for sensitive data this means you have to encrypt the traffic. Using a public tool ...
0
votes
1answer
681 views

Piratebay ERR_SSL_VERSION_OR_CIPHER_MISMATCH

Since a few months ago I've been using proxy sites to access the pirate bay, but now I'm in need to create an account, and those proxy sites won't allow me to do that. The problem is because TPB is ...
0
votes
1answer
526 views

“Java is unavailable” in Firefox 32 bits

I'm trying to connect to a VPN using SSL Network Extender, and am getting Java is unavailable error.This occurs in 32 bits Java on 32 bits Firefox in Windows 7 (64 bits). Since both browser and Java ...