SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

0
votes
1answer
317 views

Website “unsafe” on Chrome and other browsers

I recently switches to HTTPS with a free certificate from WoSign (https://buy.wosign.com/free/ definitely recommend it because it provides free SSL for up to 3 year and free renewal and multiple ...
4
votes
1answer
239 views

How to install a self-signed certificate in chromium under Debian

I have a web server that uses https protocol. I want to create a self signed certificate so I did the following: Issued this command: openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout ...
0
votes
1answer
33 views

How can I get the list of the currently installed certificate authority on my ubuntu?

If I'm correct, the list of CA can be found in /etc/ssl/certs/ca-certificates.crt, but that's only the certificates. My question is how can I get the name of those CA ? I want to know if the CA my ...
0
votes
2answers
621 views

Apache Upgrade leads to SSL handshake failure with Java client

I have an apache 2.4.10 to upgrade to 2.4.12, underlying openssl 0.9.8, with the following SSL configuration: SSLCipherSuite DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!...
0
votes
1answer
39 views

Deleted “broken” certificate in OS X, need help to fix it

I experienced the Mavericks security update that broke one or more trusted root CAs. At the time I couldn't find any info on this, and in my infinite wisdom (and looming deadline) I tried deleting the ...
0
votes
1answer
57 views

Decrypt SSL at the TCP level

I'm trying to decrypt SSL at the TCP level for data that I'm sending to a remote server. The reason I'm doing this is because the remote host intermittently sends me RSTs, and I'm trying to identify a ...
0
votes
0answers
236 views

Configuring Chrome to Ignore or Accept Specific Untrusted Certificates

There are various personal websites and LAN addresses which I access through https. Obviously they're mine so they can be trusted, but since they all deploy a self-signed certificate, Chrome displays ...
1
vote
2answers
180 views

SonicWALL Net Extender, security?

I'm new to SonicWALL. How secure is the SonicWALL Net Extender? It seems to be using PTPP, but calls it SSL VPN, are they different. Am I secure? If its bad, whats better? Thanks
0
votes
1answer
56 views

Acessing a secure site via Putty SSH Tunnel outside the browser

I wish to access all requests to selected secure domain e.g. https://testdomain.com from anywhere on my pc (not just browsers) via putty ssh tunnel. I tried using a dynamic and this worked when I ...
-2
votes
1answer
205 views

Where to get client certificates for Java client that uses TLS? [closed]

I am writing a Java client to consume payment gateway rest services. If I want to create a HTTPS client that uses client certificates, from where to get certificate? Is it is something to ask from the ...
1
vote
1answer
456 views

Reverse Proxy? For devices(without internet access), in a LAN with an IIS(that has internet) + SSL external website [closed]

I am facing a situation where I have a LAN network, composed of multiples devices that have access to the LAN but not internet and within the LAN there is a computer with IIS 7 that has access to the ...
1
vote
2answers
73 views

Nessus on Linux detected SSL version 2 and 3 because of Samba. How to fix it?

We are using Nessus to confirm that our server does not have SSL 2 and 3 supported via any of the ports. We came down to the last product - samba (3.6.25.) This samba version does not support turning ...
0
votes
0answers
114 views

Enforcing RC4 cipher and testing enabled ciphers with OpenSSL

I am trying to enable and enforce the RC4 cipher on Apache 2.4. I checked the Apache SSL HOWTO. It says the RC4 cipher can be enabled in the two ways below: SSLCipherSuite RC4-SHA:AES128-SHA:HIGH:!...
1
vote
1answer
1k views

Thunderbird: Error: imap.server.com : server does not support RFC 5746, see CVE-2009-3555

I'm getting this error when checking my mail, and I can't download my mail. I recently updated Thundirbird yesterday, but it restarted and was working fine for many hours. I saw this question: How to ...
0
votes
1answer
435 views

Configuring Chrome to Ignore SSL Warning on Specific Addresses

I guess there no need to introduce the "Privacy error" page in Chrome that appears whenever one uses SSL to access an uncertified website that has no signed certificate (red "X" on the lock icon). ...
1
vote
1answer
2k views

Google Chrome gives “SHA1 for message authentication” with new GeoTrust certificates

I purchased the GeoTrust QuickSSL Premium certificate from ssls.com and installed it on my web server which is running Linux Apache on CentOS 6.5. Google Chrome on Windows 7 said "The connection ...
0
votes
2answers
92 views

Windows can't find the issuer of a client certificate

Hello and sorry about my bad english. I have a problem about a PKI which I did on Ubuntu using OpenSSL: when I installed the root certificate on Windows (it's a simple hierarchy: ROOT -> Intermediate -...
0
votes
0answers
57 views

Unable to open two (so far) SSL sites, all others work normally

I have tried IE, Chrome, and FF. I have turned off WiFi on my mobile device and the connection goes through normally. From my computers connected to my internet, I'm unable to load the pages, it just ...
4
votes
1answer
1k views

Configuring offlineimap for gmail: SSL error

I'm trying to configure offlineimap to download my gmail but am getting the error: OfflineIMAP 6.5.7 Licensed under the GNU GPL v2 or any later version (with an OpenSSL exception) Account sync ...
0
votes
1answer
33 views

script a list of websites to determine ciphers

Have a list of websites I would like to check the ciphers. We will be using SSL decryption and want to see if I can in advance check the sites that will not support our decipher. We have some ...
1
vote
0answers
112 views

Running two FTP sites both with SSL on the same server?

I have built an internal ftp server on our network and am having it be accessed from the outside. The server is running 2012 R2 and has IIS 8.5. When I set up the sites I have the data channel open ...
3
votes
0answers
378 views

MAMP in MAC Yosemite SSL,WSGI

I installed MAMP after testing with XAMPP , I require to install Openssl or generate SSL certificates and a controller in wsgi run in XAMPP not make it but I wonder if someone can help me configure ...
2
votes
0answers
681 views

SSL issue: The private key did not match the public key provided

I followed the instructions outlined here by amazon. A quick summary: Created a private key openssl genrsa -out my-private-key.pem 2048 Created a CSRopenssl req -sha256 -new -key my-private-key....
0
votes
1answer
409 views

Unable to access github, getting ERR_SSL_PROTOCOL_ERROR error

When I access github.com from my office I am getting this error on https://assets-cdn.github.com, SSL connection error ERR_SSL_PROTOCOL_ERROR Unable to make a secure connection to the server. This ...
1
vote
2answers
2k views

Disable Chrome from checking SSL certificates completely

I have to enter a website that has an invalid certificate and I can't because Chrome won't let me (to protect me, how hilarious!). I don't want or need to be protected, so I just want to completely ...
1
vote
1answer
327 views

Creating PEM public key for Google App Engine

I am running a small company and unfortunately my IT support just quit. I am running a site on GAE. My SSL expired and I ordered a new one, receiving the following files: 3 .cer files in an SHA-1 ...
0
votes
0answers
326 views

Apache fails to start with TLSv1 disabled and does not recognize TLSv1.1 and TLSv1.2

I'm having issues trying to disable TLS 1.0 on apache as described here: http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslprotocol $ apache2 -v Server version: Apache/2.2.22 (Ubuntu) Server built:...
0
votes
0answers
51 views

Multi hop SSH with certificate on bastion server

I have this situtation: my local machine a login server (with token implementation) a set of machines accessible only with another authentication from login server (token implementation too) this ...
7
votes
3answers
11k views

How to troubleshoot “Secure Connection Failed” in Firefox appearing since the version 38?

Since I upgraded Firefox to the version 38 I encounter problem while sending a certain form on the website https://usercenter.checkpoint.com/ Most of the website works normally but sending a form ...
3
votes
1answer
425 views

Apache serves an old SSL certificate

I'm hosting a webpage with Apache on a Raspberry Pi (Debian), and can't seem to get the server to issue the current certificate. I generated a self-signed SSL certificate in /home/pi/ssl/ with: ...
2
votes
1answer
34 views

Testing websites locally with the original URL?

We're a team of web developers, we have local versions of our clients' websites and we want to test them locally before uploading. In order to run the websites with their original URL, we decided to ...
2
votes
1answer
4k views

Securing Remote Desktop Connections With SSL Certificate From a Trusted Certificate Authority

Currently I'm using a desktop machine running Windows 7 Ultimate x64. Also have configured it to enable remote connections using MS Remote Desktop Services (RDS); however, since the machine issues its ...
3
votes
1answer
5k views

What is NSS error -5961 (PR_CONNECT_RESET_ERROR)

Can someone enlighten me the meaning of "NSS error -5961 (PR_CONNECT_RESET_ERROR)"? I am trying to connect to bitbucket.org with "https" protocol but got a refuse from the server. Then, I try to use ...
2
votes
1answer
6k views

Proper Apache redirection from http to https

I set up a new virtual host for a new site on my server, but it's acting strangely despite having the exact same settings as my original site. I want all requests to be redirected to HTTPS, simply ...
1
vote
0answers
98 views

How do I undo an apache2 ubuntu HTTP HTTPS redirect?

I've got an apache2 instance running, with HTTPS redirect running: <IfModule mod_ssl.c> <VirtualHost *:80> ServerAdmin support@myco.com DocumentRoot "/var/www" ServerName www....
1
vote
1answer
1k views

Apache Error After Upgrade: Cannot load module mod_ssl.so: undefined symbol: SSL_get_srp_userinfo"

After I upgrade the Apache to version 2.4.12, its giving error at the time of start. I used below commands to install apache. ./configure --prefix=/usr/local/apache2 --enable-so --enable-ssl --...
0
votes
1answer
3k views

Roundcube, php 5.6 and self-signed certificates

I am currently porting one of my servers to another. That server is running Postfix + Dovecot using a self-signed certificate. My web-frontend used to be roundcube. Now is the problem, that the new ...
2
votes
2answers
159 views

Prevent Google Chrome from treating all URLs with a common base as SSL connections

I host several websites via an ISP-provided DNS name, and I split them up beyond my router's port 80 using an installation of haproxy. It has worked very well for my (I think it's 11) unique websites ...
4
votes
0answers
2k views

Get OS X Chrome to accept self-signed SSL certificate for localhost

I've been trying to get this working all day, and I have a strong feeling that my issue is specific to Yosemite. I'm running OS X 10.10.3 on a retina Macbook Pro. I took instructions from http://www....
2
votes
0answers
33 views

SSL FAIL Mac to Security update 2015-004

After upgrading my Mac to Security update 2015-004 I started experiencing issues on website that use Thawte SSL certificate and with mandrillapp SMTP which as well use Thawte certificate. I'm running ...
0
votes
1answer
354 views

Apache: redirect to non SSL page if TLS negotiation fails

How can I configure apache to redirect user to a non ssl page, if the TLS connection negotiation fails (i.e. they don't agree on a common SSL protocol with supported cipher) It is using mod_ssl, ...
2
votes
0answers
22 views

How to instruct SVN print its CA list?

This is related to What does Subversion use for its CA list?. I want to have SVN tell me the CAs its using. svn help does not appear to discuss it (but I may have missed it, since its not obvious in ...
2
votes
1answer
238 views

What does Subversion use for its CA list?

I'm using SVN on Mac OS X. Often, when I checkout something from SourceForge, I am presented with: $ svn checkout https://svn.code.sf.net/p/cryptopp/code/trunk/c5 cryptopp-ecies Error validating ...
2
votes
3answers
1k views

SSL Root CA certificate is not recognized, although present in the trust store. Why?

Background: Ubuntu Server 14.10 64-bit on aws.amazon.com/ec2 Cheap PositiveSSL server certificate from COMODO 1 server certificate, 2 intermediate CA certificates and 1 Root CA certificate as ZIP ...
-1
votes
1answer
638 views

Renew Comodo free SSL certificate? [closed]

Is it possible to renew Comodo 3-month free SSL certificate, or at least issue a new one with entered information? I just set it up and it's pretty good.
0
votes
1answer
2k views

Windows 8.1 certificate problems: IE can't open google

I'm on Win8.1 and it appears I'm having problems with certificates. Date/Time is ok (and updates at microsoft)! I removed AVG 2015 (which I installed this week, and the problems started). Symptoms: ...
0
votes
2answers
4k views

Cannot map Synology WebDAV (HTTPS) share on Windows

I've tried everything from this post that applied as well as the answers from this post. I can connect successfully with Kodi on Android as well as NetDrive on Windows. I cannot connect with Kodi on ...
1
vote
1answer
751 views

How to setup a HTTPS Proxy on a raspberry pi

I'm looking for a way to encrypt every data sent from my smartphone and laptop by using a proxy server on my raspberry pi. What I've got so far: - RPi with Squid3 Running What I'm still missing: - ...
0
votes
1answer
266 views

Apache HTTPD Configuration Errors During Restart

When I try to relaunch the Apache HTTP Daemon on OS X 10.10.4 'Yosemite' using either apachectl graceful or apachectl restart via Terminal, the software spouts the following error messages: AH00548: ...
0
votes
1answer
430 views

Thunderbird Certificate Alert keep popping up

I'm having the issue in the title since months now and is driving me crazy. I keep getting this warning: which translates to Add Security Exception You are going to modify the way ...