SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

2
votes
1answer
389 views

How do you hide the Extended Validation text in Firefox?

Certain sites have Extended Validation certificates. On top of the normal lock symbol, Firefox also shows the Organization name next to the lock symbol in green text. This gives users a nice, warm, ...
2
votes
1answer
560 views

SSL Redirect in VirtualHost causing url to break

I recently configured by website to direct all traffic through https. I did this by modifying the vhost file to show this <VirtualHost *:80> DocumentRoot "/srv/http/example" ServerName ...
2
votes
1answer
122 views

SSL failure fallback

I've successfully configured my Apache webserver to make use of public certificates as an authentication method, using following configuration: SSLVerifyClient require SSLVerifyDepth 1 ...
2
votes
1answer
78 views

Windows - service account default certificate store

I am writing a web app that connects to external web services. The external web services serve an intermediate certificate signed by Thawte SGC CA - G2. When I setup IIS to run the web app using ...
0
votes
1answer
666 views

How do I install my SSL certificate? [closed]

Looking at the Magento interface I don't see anywhere to put in my certificate. It has an option to turn on SSL (without a certificate apparently), but I'm told that will break the site (someone else ...
0
votes
1answer
513 views

Problems using tshark sniffing TLS encrypted traffic with .pem key

I am having problems decrypting TLS encrypted syslog-ng packets in a honeynet using tshark (command line Wireshark). The goal is to be able to intercept the packets going from the honeypots to a ...
1
vote
0answers
50 views

Is there a way to quickly disable all root certificates in Windows 7?

I'd like to temporarily disable all trusted root certificates and wondering if there is a quicker way than going through every single one of them, right-click Properties and selecting "Disable all ...
0
votes
2answers
132 views

Bandwidth Test for HTTPS Proxy Server

Is there a tool that would test bandwidth usage on a server. I've tried siege and Jmeter. Both are very good for direct web applications. However they give support for proxy, siege proxy did not work ...
3
votes
5answers
16k views

Enable TLS 1.1 and 1.2 for Clients on Java 7

Java 7 disables TLS 1.1 and 1.2 for clients. From Java Cryptography Architecture Oracle Providers Documentation: Although SunJSSE in the Java SE 7 release supports TLS 1.1 and TLS 1.2, neither ...
0
votes
1answer
279 views

Virtual hosting with nginx over SSL, without SNI (via a wildcard cert)

I'm trying to get https://survey.mediacru.sh to work without SNI. We have a wildcard cert and are using nginx as our http server. However, on browsers without SNI support (for example, the stock ...
0
votes
1answer
1k views

What is the role of cakey.pem and cacert.pem in addition to .key and .crt based encryption

I have .key file which holds the private key data, .crt file which would be certificate with public key and, to my knowledge, that's it for public key encryption, right? Not exactly. In order to ...
1
vote
2answers
3k views

Disable Specific Cipher Suites Apache with WHM/cPanel

We are operating a few web servers that have WHM/cPanel installed so we can easily mange our sites and projects. To ensure our information and users information is secured, we have been running some ...
3
votes
2answers
76 views

Is it normal for a hosting service to require that I buy a public IPv4 for using my own $25 certificate?

Self explanatory title, I guess. I'd love to have my website in https only, but they (the web hosting service) claim in the administration that I need to buy a public IPv4 address from them before ...
0
votes
1answer
66 views

Microsoft CA Certificate Request

I am new to MS CA and I have recently installed a MS CA setup on a VM. I used the web service provided "http://test.server.name.tld/certsrv" to request a certificate. I approved my test certificate ...
0
votes
1answer
385 views

Apache - Disabled SNI

I'm having a bit of trouble with my webserver. Whenever I connect to Apache using SSL, I get a 400 Bad Request. I've looked in Apache's error log, and I see: [ssl:error] [pid 30065] AH02032: ...
1
vote
3answers
5k views

Disable SSL browsing in Chrome

I need to disable SSL browsing completely in Chrome. If not completely, at least disable https://www.facebook.com and force http://www.facebook.com to load, FOR EXAMPLE (FB is just an example - i ...
0
votes
1answer
137 views

Why would an IP address fail, but the server (hardware and web server) and file system work?

Please forgive me if this is a duplicate, or better on network engineering SE. I have an account on BlueHost, and it provides me configuring multiple dedicated IP addresses and multiple SSL ...
2
votes
2answers
6k views

SSL https (http secure) sites won't display is client or server side?

Oddly, python.org has suddenly become unreachable for me through the Archlinux repo version of Firefox (v27 and v28.0 update): Secure Connection Failed An error occurred during a connection ...
2
votes
2answers
700 views

Wildcard CNAME record complications?

So we're using Route53 and I wanted to set up a wildcard CNAME record to redirect any unmatched subdomains to our main domain. I tried it out and everything looks like it worked okay, but when I told ...
0
votes
1answer
159 views

Squid upgrade HTTP to HTTPS

I want to use Squid to upgrade HTTP request to HTTPS using my own certificate, in order to make clients handshake with a server (a reverse proxy) that requires mutual authentication. How can I ...
1
vote
2answers
846 views

s_client not failing on revoked certifcate?

I'm running Firefox with with the EFF's HTTPS Everywhere. I recently visited Lavabit's site to see if its accepting donations: The revocation is expected considering the history.... However, I'm ...
0
votes
0answers
351 views

Why is SSL broken for one domain on one computer?

I've been having a strange issue, where I cannot connect to https://www.humblebundle.com. Plain HTTP works fine, as does https://humblebundle.com. These all redirect to the above address. I haven't ...
1
vote
2answers
2k views

SSL Apache Proxy with hostname not working

We have decided to run a secure web proxy through apache. we assigned the server a domain name and then bought SSL certificate for that domain and then applied on Ubuntu 12.04 (precise) with ...
0
votes
1answer
81 views

Exchange 2010 Certificate Renewal

I am still learning how to configure Exchange 2010, so I hope that you can help me on some topics. The certificate for mail.xxxxxx.com has expired. The previous IT guy had OWA set up on the server, ...
1
vote
1answer
51 views

Does Heartbleed pose a risk for past HTTPS communications?

Heartbleed exposes a threat where computer memory for a vulnerable could be exposed. Consider an adversary with access to all cipher text input and output of your server (ISP, government, local ...
4
votes
2answers
366 views

How do I distinguish between these two certificate situations?

Situation 1 (safe): Website was vulnerable to heartbleed and using a certificate not valid before 2012-10-21 Website upgraded to an unvulnerable version of OpenSSL Website re-keyed and got a their ...
1
vote
3answers
687 views

How to setup Apache HTTP server with the vulnerable OpenSSL

I want to do some test, so I want to set up an Apache HTTP server with the vulnerable OpenSSL (specifically with the Heartbleed bug), and I'd better do it from source. How do I do that?
3
votes
1answer
3k views

Does Heartbleed Bug in OpenSSL affect ALL SSL certs

Does the Heartbleed Bug in OpenSSL affect ALL SSL certs, regardless of where I purchased or if I self-cert? For example, if I bought an SSL certificate from GoDaddy and set this up on my server ...
2
votes
1answer
2k views

Which versions of the Windows TLS/SSL file transfer software like WinSCP and FileZilla are not affected by Heartbleed?

I noticed that many people still use versions affected by the heartbleed vulnerability of wide spread TLS/SSL enabled Windows clients like WinSCP and Filezilla. To be able to make safe ...
6
votes
6answers
13k views

SSL certificate verification failure in Chrome, Heartbleed bug?

For some reasons I'm running into SSL problems since a few days. When trying to clone a git repository for example I receive the following error message: fatal: unable to access ...
0
votes
0answers
143 views

Blocking a trusted certificate in Google Chrome

Is it possible to somehow block a certain certificate that is currently trusted by my browser? The reason is the recently discovered Heartbleed-attack which I also found out to affect my netbanking ...
0
votes
0answers
201 views

Nginx/SNI: Return 444 if there's no certificate available for a specific domain hosted on the same IP

I'm stuck with configuring nginx regarding SSL and SNI support. In order to simplify my case let's say I have two domains, foo.com and bar.com. I have only one IP and both domains are mapped to this ...
4
votes
2answers
2k views

How do I convert a certificate to a private key?

I'm trying to setup certificates for a web server (Splunk, in particular), and don't think I have them in the right format. I need to provide the path to a private key file, and a CA certificate. ...
0
votes
1answer
2k views

OpenSSL CA keyUsage extension

I want to set up a chain of certificates, with a self signed 'root' CA at the top that signs sub CAs, which can then sign client and server certificates. When setting up openssl.cnf, I noticed a ...
0
votes
1answer
420 views

Squid behind Apache 2.4

I need to locate a Squid instance as a forward proxy behind Apache 2.4.6. I don't have enough credits to add inline images. But here it is As Squid3.3 listens on localhost:3128 and works OK with ...
0
votes
1answer
692 views

Verifying Certificate using Mac Terminal

In Mac Terminal, we can use the command security to do many things related to certificates. I'm trying to know how to verify a certificate using this command. I wrote security verify-cert [.pem ...
0
votes
1answer
57 views

How to set up load balancer with SSL?

I currently have a single server with a Django stack. I have nginx with an SSL certificate for HTTPS. I want to scale the web layer by putting an nginx load balancer in front, and adding IP addresses ...
1
vote
1answer
208 views

Could be public key cryptography used in Wifi authentication?

Its known that all wifi encryption methods to secure your network from attackers are broken, WEP, WPA, WPA2... With some amount of time someone can break in in your network. Why we can't use some ...
1
vote
0answers
899 views

SSL connection error when browsing Facebook and Twitter

I get this error not always but most of the times I try to go to Facebook or Twitter: SSL connection error Unable to make a secure connection to the server. This may be a problem with the ...
1
vote
1answer
43 views

Is there a program to check the list of root CAs in Firefox?

Motivated by this and this question, I'd like to ask if there is a way to check if additional certificates have been maliciously added to the list of root CAs of Firefox. Possible ways could be: an ...
1
vote
1answer
404 views

Is it safe to add an untrusted certificate to Trusted Root Certification Authorities?

Before I access the internet at work I have to sign-on to their system. The sign-on page is ipass.swu.ac.th. Unfortunately the security certificate they use appears as not trusted (in Chrome). I have ...
0
votes
1answer
4k views

Email without SSL

I have been trying to setup LabTech Email settings. Unfortunately, it accepts only email settings that are not encrypted; no SSL/TLS i.e POP 110 and SMTP 25. Tried to setup SMTPSSL in the same, but no ...
0
votes
0answers
153 views

SSL failure on Auzre web farm with shared configuration and centralized certificates

[Sorry if this question is a bit long, there's lot of extra info in case it is relavent] Overview I'm having a problem with SSL on a 4 VM's load balanced farm in Azure. If the HTTPS request goes to ...
1
vote
1answer
168 views

How to see the handshaking messages of SSL/TLS in firefox using firebug?

I am trying to understand the internals/working of SSL. I would like to view the handshaking, key exchange, cypher exchange, session key, etc. messages communicated. So, I thought if I enable firebug ...
6
votes
1answer
2k views

What does the less sign (<) mean in dovecot.conf in front of ssl certificate path?

A couple of years ago I've configured a mail server with exim4 + dovecot 2.2.10 on debian and recently have been tweaking dovecot config. I use a self-signed x509 openSSL certificate, the paths to the ...
0
votes
1answer
139 views

How to update CRL automatically?

I have the following issue: I have a self-signed CA (certificate authority) mainly for persoanl use (mail encryption and signing, ...). I created several ceertificates and the CRLs (which are empty ...
0
votes
0answers
272 views

NAT - FTPS (Error : Failed to retrieve directory list)

I have setup ftp server (Ubuntu 13.04 / Picuntu 4.4) using vsftpd. The plain FTP works perfectly fine. In order to secure the connection, I added ssl encryption. The server accepts the login ...
1
vote
0answers
27 views

Remote management on WRT630N via HTTPS

I have a Linksys WRT630N wireless router and am trying to configure remote management via HTTPS. I've chosen a nonstandard port and can successfully connect and manage the router remotely via HTTP, ...
0
votes
0answers
240 views

Compiling squid 3.3.11 for linux 6 enterprice with dynamic certificate options enabled, with error [testPreCompiler.o] Error 1

Maybe someone can help shed some light on my current issue. trying to complie squid 3.3.11 on linux 6 error is: [root@rh6squid-proxy squid-3.3.11]# make check Making check in compat make[1]: Entering ...
2
votes
1answer
4k views

pip and SSL certificate errors

I am trying to install a library via pip. I have a problem with SSL certificate, even when using the --cert. Trying this on windows (pip version 1.5.4,python version 2.7.6): pip --cert ...