SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

1
vote
0answers
96 views

Apache configured for HSTS, but SSLLabs/Chrome not acknowledging

I'm setting up a webserver and I've been checking it against SSLLabs and Chrome 31 to make sure the security is up to snuff. However neither Chrome nor SSLLabs seems to believe that strict transport ...
0
votes
2answers
156 views

How can I tell whether PFS is enabled?

I have kinda 2 questions.. first, is this setting considered "secure" ? Second, how do I tell whether perfect forward secrecy is enabled? ssl_session_timeout 5m; ssl_protocols TLSv1 ...
2
votes
1answer
4k views

Every website is showing untrusted certificate warning on all browsers

I'm on windows 7. Every website is showing untrusted security warning. I tried every browser that I have. I tried using https. This is extremely odd, it never happened before, well it could happen ...
0
votes
0answers
59 views

All https requests are goes as TLS (windows 7 64bit)

I have installed a version of windows 7 64bit on my laptop. After it all software that are going to send request to https has failed because the OS are using TLS instead of SSL3. I find it because all ...
1
vote
0answers
91 views

SSL certificate for CNAME record

I have the CNAME record images.bob.com, which points to the images.susan.co.uk (images.bob.com. 1800 IN CNAME images.susan.co.uk.). I would like to ask for issuing SSL certificate for the ...
2
votes
0answers
199 views

Why doesn't Firefox accept different Ports for SSL encryption other than 443

There is an IIS Webserver with different Sites (SSL Binding) because I can't configure IIS to listen on same Address and Port with different Certificates so I set the SSL Port direction in the ...
0
votes
0answers
121 views

iptables messing up Tomcat?

I encountered the following problem(s) using Tomcat 7 with iptables on. 1) Namely, there's this Tomcat 7 instance that I run on server-1 (directly exposed), and this Tomcat instance hosts a REST ...
0
votes
1answer
494 views

squid ssl proxy (NON TRANSPARENT)

I have been searching google for hours, I know this is possible but all google gives is transparent proxy ssl results and I do NOT want squid transparent. I'm going to be pushing proxy settings via ...
0
votes
0answers
370 views

Rails 2 and Ngnix: https pages can't load css or js (but will load graphics)

ADMISSION: i've posted this same question on stackoverflow, before realising it's probabaly better suited to superuser, but it kind of depends on the answer: If it turns out to be a problem in my ...
0
votes
1answer
291 views

How to dump the Subject Alternative Name (SAN) from an SSL certificate file

I know that I can dump the entire information from a PEM certificate file with this command: openssl x509 -in certfile -noout -text And I've already found another direct parameter to show me only ...
0
votes
0answers
612 views

How to make Firefox remember a self signed certificate is trusted

I'm using some private server with a self-signed certificate for https connections. Firefox 25.0 warns me about the certificate being untrusted every time. For some reason, I can't make it remember ...
7
votes
3answers
29k views

How do you permanently disable the 'This Connection is Untrusted' page on Firefox

I'm going insane. Can someone please help me to COMPLETELY DISABLE the 'This Connection is Untrusted' page on Firefox. Facts: I am running Firefox 23.0 on an Ubuntu machine (downloaded and ...
2
votes
1answer
114 views

Fedora 8: rubygems.org certificate validation failure. How to install GeoTrust CA?

Trying to get a gem: $gem install puppet ERROR: Could not find a valid gem 'puppet' (>= 0), here is why: Unable to download data from https://rubygems.org/ - SSL_connect returned=1 ...
3
votes
1answer
160 views

Is there such thing like a port forwarding service out in the internet?

I'm looking for a service on the internet allowing me to redirect TCP connections. My company's firewall is very strict and allows only HTTP (through a transparent proxy) or SSL on only port 443. I ...
1
vote
0answers
987 views

SSL Error after upgrading to Windows 8.1

After upgrade my Windows 8 to Windows 8.1, I got this SSL Error: ...and this I have did some research and tried to change my system time up to date, reset my modem and use wireshark to see if ...
2
votes
0answers
74 views

SSL cert owner != localhost after creating SSH tunnel

I use an SSH tunnel to connect to my work's mail server, then tell my mail client to connect to server "localhost" on port "1993" (the port I chose for the tunnel). I have two different Ubuntu Precise ...
6
votes
1answer
5k views

Can I get around using “pip install --cert”?

Trying to figure out if there is a way that I can avoid using the --cert flag to pip when I am installing packages at work. There is some issue with the proxy that only allows me to download the ...
2
votes
0answers
516 views

Chrome ignores some imported certificates

On Windows 7 with Chrome 30. I have a few websites running on localhost over SSL. Visiting them always displays the standard "The site's security certificate is not trusted!" message from Chrome. I ...
1
vote
1answer
718 views

Multiple SSL certificates on one server

We're hosting two websites on our fairly tiny but dedicated production server. Both website require SSL authentication. So, we have virtualhosts set up for both of them. They both reference their own ...
0
votes
1answer
343 views

Multiple websites on one server/IP; only one with SSL

I recently acquired an SSL certificate for my primary site (https://wemarsh.com/). It works great, and I've even set up an .htaccess rule so all traffic on that site is encrypted. (I'm running ...
0
votes
0answers
208 views

How to disable fake SSL check in development phase for Opera 17+ and Chrom 30+

During the test, we are configuring our web server(Tomcat) to be connected to with test SSL When we try to connect to this site with IE, we face this error: There is a problem with this website's ...
1
vote
1answer
205 views

Intermediate SSL Cert

I have an SSL certificate that is self-signed, and therefore uses an intermediate certificate. I am using Node.js and returning both the certificate as well as the certificate chain which includes ...
2
votes
4answers
4k views

Custom Protocol Handler not working in Chrome on SSL page

I've successfully created and registered a custom protocol handler in my web application and it's working fine in all browsers. There's the initial warning dialog about launching an external ...
1
vote
0answers
545 views

CIFS share via LDAP + SSL

I have NAS drive which is bound to an Open Directory LDAP server for authentication with SSL enabled. The NAS allows for CIFS shares to be accessed via LDAP authentication. (in this case the NAS is a ...
1
vote
2answers
568 views

Force https performance

How can i force https on my site without affecting performance. I'm presently using mod_rewrite in .htaccess and it seems to be impacting performance of the site.
0
votes
1answer
259 views

What I must do to get TLSv1.2 support in Google Chrome 30?

Here one can read that Google Chrome 30 support TLSv1.2, but I can't access a server using it on Ubuntu 13.04. The server just support TLSv1.2 and have cipher TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 ...
2
votes
1answer
3k views

Firefox, error when accessing https url

I'm connected through a public wifi hotspot. No problem when using IExplorer. When I use Firefox, I obtain the following error message after asking for any https url, as for example ...
0
votes
1answer
358 views

Where to install SSL Cert

I have Bluehost hosting my landing page and a few subdomains. One of the subdomains has a A-Record that points to an Amazon EC2 instance running tomcat. I would like the tomcat application to be ...
0
votes
0answers
55 views

SSL Certificate updates

In Windows or Linux system, how does the SSL certificate gets "updated" or "revoked"? By default some certificate comes while installing the OS / Browser. But later when that needs to be updated how ...
-1
votes
1answer
419 views

Can I run two FTP sites on one server using two different IP addresses?

So we currently have our FTP site running on one computer (Mac OS-X) with one IP address. We are trying to host a second FTP site running off of the same computer, but with a different IP address. Is ...
0
votes
1answer
31 views

How to enable SSL on Tomcat

I have a license server that is running Tomcat. I have been asked to enable SSL and I am clueless as where to start. I have the following files: FQDM.csr FQDM.key FQDM.crt FQDM.pkcs7 Outside of the ...
0
votes
1answer
3k views

How to search non ssl google? [duplicate]

Even when I visit nosslsearch.google.com I ultimately get redirected to https://www.google.com. Why is this? (I'm not signed in to google, and I'm entering these in the urlbar, not the search ...
0
votes
2answers
1k views

Google is not open in any browser

www.google.com will not open in any browser. I try to open www.google.com in Google Chrome and also in Firefox but it given below error message. In Google chrome I got this error message SSL ...
4
votes
1answer
4k views

How do you fix an incomplete SSL chain

I have a Go Daddy SSL cert installed, and works fine everywhere except Android. https://www.ssllabs.com/ssltest/analyze.html says the chain is incomplete, and I read on stack overflow that an SSL ...
0
votes
2answers
773 views

Parameters to create a self-signed DSA certificate on Ubuntu 12.04?

I would like to create a self-signed DSA certificate on Ubuntu 12.04 for use with a webserver and TLS 1.2 (HTTPS) connection. I found that you can run the following command to create an RSA one: ...
0
votes
3answers
2k views

puppetd --test err: Could not request certificate: Connection refused - connect(2) Exiting; failed to retrieve certificate and waitforcert is disabled

I m new to puppet and i m trying to have connection to my puppet server, when i ping to my puppetmaster it runs well but when i run puppetd --test t shows me following error. puppetd --test info: ...
0
votes
1answer
227 views

Pages don't load after installing a certificate on tomcat, restart required

I posted this question before but not in the correct forum. I have configured tomcat7 to use SSL and have made it point to a keystore. The keystore has a self signed certificate by default. There are ...
2
votes
1answer
683 views

How to disable google SSL in opera?

I want to use google in opera in normal http to speed up search; how can I disable google SSL in opera?
0
votes
1answer
287 views

Error with curl

I'm having this error with curl: curl https://www.google.com -v * About to connect() to www.google.com port 443 (#0) * Trying 2607:f8b0:400e:c01::67... * Failed to connect to ...
1
vote
1answer
3k views

Redirect incoming https to local ip with iptables

I have a router with 1 network interface (eth0, public ip) and an alias for eth0:0, local ip 192.168.1.1. I want to redirect all incoming https (443) traffic to another server. I tried it with ...
1
vote
1answer
425 views

Multiple IP addresses through the same interface and iptables

System Admin is not my strong point. My situation is we have 1 website that has 4 domains. The website itself serves different templates/content depending on which domain is used, simulating 4 ...
1
vote
1answer
853 views

How to tell `links` to ignore expired SSL certificate and proceed?

I'm using the links browser and trying to connect to an HTTPS site. I then get: Verification failure: certificate has expired this is "fine" (i.e. was decided to be tolerated) for this ...
2
votes
2answers
2k views

Disable weak SSL ciphers in lighttpd

The testing tool https://www.ssllabs.com/ssltest/index.html tells me that my server is offering/supporting: SSL_RSA_WITH_DES_CBC_SHA (0x9) WEAK 56 SSL_DHE_RSA_WITH_DES_CBC_SHA (0x15) DH ...
2
votes
1answer
769 views

Can I be a root certificate authority for my local network?

This may sound crazy, but can I be the root certificate authority? I mean, I have many computers and smart devices in my home. Remote Desktop warns for the certificate not being trusted, because it ...
0
votes
1answer
598 views

How to enable openssl in libcurl without recompling PHP

I'm trying to implement OpenID login in PHP by using php-openid library. But it did not work on my server probably because PHP libcurl is using NSS, not OpenSSL for SSL connection(according to ...
0
votes
0answers
414 views

501 Not Implemented error

I'm trying to setup WAMP to act as a local server and setup ssl so that I can develop facebook applications. But when I open my localhost over https and try to open the project the .js and .css files ...
5
votes
1answer
782 views

How do I disable HTTP-level compression?

BREACH, a new attack on SSL that targets HTTP compression, has recently been publicly announced. The emerging advice for how to defend against BREACH seems to be: turn off HTTP compression. So, how ...
0
votes
1answer
171 views

Apache Virtual Host with HTTP and HTTPS without duplicating the configuration

how can I create a vhost for HTTP AND HTTPS in Apache without dupicating the configuration like <VirtualHost mysite:80> <Directory "/Users/myusername/sitefolder"> Options ...
0
votes
1answer
67 views

I am examining a protocol on an iPhone app that works over SSL. What are my options for doing man in the middle?

I am trying to reverse engineer an app, and I need to examine traffic between the phone and the server. I know how to use MITM and network analyzing tools pretty well, however, I don't know how to do ...
1
vote
1answer
296 views

Is it possible to disable the “Add Exception” button in Firefox?

I want to disable/remove the "Add Exception..." button in Firefox to prevent users to accept invalid SSL certificates. How can I achieve this? Google does not show up any useful results.