SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

2
votes
1answer
3k views

Securing Remote Desktop Connections With SSL Certificate From a Trusted Certificate Authority

Currently I'm using a desktop machine running Windows 7 Ultimate x64. Also have configured it to enable remote connections using MS Remote Desktop Services (RDS); however, since the machine issues its ...
3
votes
1answer
4k views

What is NSS error -5961 (PR_CONNECT_RESET_ERROR)

Can someone enlighten me the meaning of "NSS error -5961 (PR_CONNECT_RESET_ERROR)"? I am trying to connect to bitbucket.org with "https" protocol but got a refuse from the server. Then, I try to use ...
2
votes
1answer
4k views

Proper Apache redirection from http to https

I set up a new virtual host for a new site on my server, but it's acting strangely despite having the exact same settings as my original site. I want all requests to be redirected to HTTPS, simply ...
1
vote
0answers
95 views

How do I undo an apache2 ubuntu HTTP HTTPS redirect?

I've got an apache2 instance running, with HTTPS redirect running: <IfModule mod_ssl.c> <VirtualHost *:80> ServerAdmin support@myco.com DocumentRoot "/var/www" ServerName ...
1
vote
1answer
1k views

Apache Error After Upgrade: Cannot load module mod_ssl.so: undefined symbol: SSL_get_srp_userinfo"

After I upgrade the Apache to version 2.4.12, its giving error at the time of start. I used below commands to install apache. ./configure --prefix=/usr/local/apache2 --enable-so --enable-ssl ...
0
votes
1answer
3k views

Roundcube, php 5.6 and self-signed certificates

I am currently porting one of my servers to another. That server is running Postfix + Dovecot using a self-signed certificate. My web-frontend used to be roundcube. Now is the problem, that the new ...
2
votes
2answers
138 views

Prevent Google Chrome from treating all URLs with a common base as SSL connections

I host several websites via an ISP-provided DNS name, and I split them up beyond my router's port 80 using an installation of haproxy. It has worked very well for my (I think it's 11) unique websites ...
4
votes
0answers
2k views

Get OS X Chrome to accept self-signed SSL certificate for localhost

I've been trying to get this working all day, and I have a strong feeling that my issue is specific to Yosemite. I'm running OS X 10.10.3 on a retina Macbook Pro. I took instructions from ...
2
votes
0answers
33 views

SSL FAIL Mac to Security update 2015-004

After upgrading my Mac to Security update 2015-004 I started experiencing issues on website that use Thawte SSL certificate and with mandrillapp SMTP which as well use Thawte certificate. I'm running ...
0
votes
1answer
302 views

Apache: redirect to non SSL page if TLS negotiation fails

How can I configure apache to redirect user to a non ssl page, if the TLS connection negotiation fails (i.e. they don't agree on a common SSL protocol with supported cipher) It is using mod_ssl, ...
2
votes
0answers
21 views

How to instruct SVN print its CA list?

This is related to What does Subversion use for its CA list?. I want to have SVN tell me the CAs its using. svn help does not appear to discuss it (but I may have missed it, since its not obvious in ...
2
votes
1answer
219 views

What does Subversion use for its CA list?

I'm using SVN on Mac OS X. Often, when I checkout something from SourceForge, I am presented with: $ svn checkout https://svn.code.sf.net/p/cryptopp/code/trunk/c5 cryptopp-ecies Error validating ...
2
votes
3answers
1k views

SSL Root CA certificate is not recognized, although present in the trust store. Why?

Background: Ubuntu Server 14.10 64-bit on aws.amazon.com/ec2 Cheap PositiveSSL server certificate from COMODO 1 server certificate, 2 intermediate CA certificates and 1 Root CA certificate as ZIP ...
-1
votes
1answer
552 views

Renew Comodo free SSL certificate? [closed]

Is it possible to renew Comodo 3-month free SSL certificate, or at least issue a new one with entered information? I just set it up and it's pretty good.
0
votes
1answer
2k views

Windows 8.1 certificate problems: IE can't open google

I'm on Win8.1 and it appears I'm having problems with certificates. Date/Time is ok (and updates at microsoft)! I removed AVG 2015 (which I installed this week, and the problems started). Symptoms: ...
0
votes
2answers
4k views

Cannot map Synology WebDAV (HTTPS) share on Windows

I've tried everything from this post that applied as well as the answers from this post. I can connect successfully with Kodi on Android as well as NetDrive on Windows. I cannot connect with Kodi on ...
1
vote
1answer
701 views

How to setup a HTTPS Proxy on a raspberry pi

I'm looking for a way to encrypt every data sent from my smartphone and laptop by using a proxy server on my raspberry pi. What I've got so far: - RPi with Squid3 Running What I'm still missing: - ...
0
votes
1answer
244 views

Apache HTTPD Configuration Errors During Restart

When I try to relaunch the Apache HTTP Daemon on OS X 10.10.4 'Yosemite' using either apachectl graceful or apachectl restart via Terminal, the software spouts the following error messages: AH00548: ...
0
votes
1answer
377 views

Thunderbird Certificate Alert keep popping up

I'm having the issue in the title since months now and is driving me crazy. I keep getting this warning: which translates to Add Security Exception You are going to modify the way ...
0
votes
1answer
83 views

converting 'cacert.crt' file to pks 12

This is the third or so in a chain of questions to implement ssl certificates. To date the public and private keys are created in the server and are operational, however the browsers do not recognize ...
-1
votes
2answers
9k views

How to renew Google Chrome certificate (NET::ERR_CERT_DATE_INVALID)?

After installing a new Windows 7 laptop, my time was set a few hours in the future. Consequently, Google Mail (and other sites like stack overflow or tumblr) are displaying NET::ERR_CERT_DATE_INVALID ...
0
votes
0answers
133 views

Hexchat cannot accept SSL

I've been trying to access an IRC Server recently, which I have been on before. I can access it on Windows but when I get into Ubuntu I cannot access it due to not being able to "Use SSl for all the ...
0
votes
1answer
1k views

Thunderbird gmail IMAP error

I am trying to setup a gmail account in the Thunderbird and I get the following error: Here are the IMAP settings (I have tried it with imap.gmail.com as well and it doesn't work): Here are the ...
0
votes
1answer
120 views

Cannot reach a SSL site using Internet Explorer 8

I cannot open a website using Internet Explorer 8, but can using either Firefox or Chrome. Under IE the page doesn't even open (as if it cannot be found). My problem is that the app I'm using to ...
3
votes
1answer
685 views

What is causing warning on a certificate's basicConstraints?

I created a self signed server certificate using OpenSSL's req -x509 command and a CONF file. The CONF file is shown below. When I examine the certificate using Microsoft certificate viewer, its ...
2
votes
1answer
2k views

How to fix chrome certificate issues after removing Fiddler root cert

I don't know very much about certificates, and I don't want to break anything trying to resolve this - so asking for some suggestions. At some point agreed to let Fiddler install an HTTPS certificate ...
2
votes
1answer
245 views

Meaning of “dovecot: ssl-params: Error: epoll_ctl(del, 7) failed”?

During dovecot regeneration of ssl-params I noticed this sequence in my log file: Mar 13 10:37:37 mail dovecot: ssl-params: Generating SSL parameters Mar 13 10:37:52 mail dovecot: ssl-params: Error: ...
2
votes
2answers
180 views

One SSL Certificate Two Services

I'm having trouble finding a clear answer to this question: In IIS (7.5 or 8) I plan on hosting a site that will have a bunch of secure HTML eforms (default port 443). They will be performing ajax ...
1
vote
3answers
5k views

Export installed certificate and private key from a command line remotely in Windows using something besides the certmgr.MSC tool

I need to be able to remotely export an installed computer certificate with the full certificate chain and private keys on a Windows server. The cert is used for IIS, and I want to use it for an ...
0
votes
0answers
98 views

Wireshark capture SSL only

I would like to capture SSL or HTTPS traffic only in Wireshark, this is not something that can be filtered after due to the length of the time I would be recording the data after and the size of the ...
0
votes
1answer
285 views

Apache2 Linux Mint URL without trailing slash not working for HTTP to HTTPS redirect/rewrite

I set up an Apache2 server on Linux Mint. I configured the default-ssl site to use a SSL certificate that I bought and the default site works just fine with SSL. However when I try to access a ...
1
vote
1answer
335 views

My Chrome “jumps” to non-existent HTTPS protocol

My Chrome (40.0.2214.115m) jumps to non-existent https : I type in http://johnwhitech.homeip.net:8080/ And Chrome redirect to http s ://johnwhitech.homeip.net:8080/ which does not exist. ...
1
vote
0answers
594 views

How to use .pfx in certificate store in CURL for Windows 7

I want to use cURL to access a remote server, and I need to identify myself using a private key or the remote server gives a 401 "Unauthorized". I'm on Windows 7 (work machine, not my choice) and my ...
1
vote
1answer
632 views

Filezilla can't connect with TLS on one domain name

I've two websites: one hosting by OVH, and I have no problems with connection with Filezilla (I can use FTP connexion with TLS) one another not hosting by OVH, and when I'm trying to connect with ...
0
votes
1answer
203 views

Cannot connect to internal IP address from external IP address

I just installed the Apache2 webserver on my Raspberry Pi, and tried to forward port 80 & 443 to it. It has the internal IP 10.0.0.11. The Raspberry Pi is behind two routers. (router-IP ...
0
votes
2answers
1k views

In light of the discovered vulnerabilities in SSL/TLS, is legacy RDP encryption or SSL more secure? [duplicate]

Windows offers the option of using either RDP encryption or SSL (TLS 1.0) to secure a remote desktop connection. Which option is more secure? Given the recent discoveries, is TLS 1.0 still secure in ...
2
votes
0answers
267 views

nginx http to https proxy with self-signed certificate

I have an nginx proxy to redirect http requests with a specified port to another https url. Here is my configuration so far: server { listen 59848; location / { resolver 8.8.8.8; ...
3
votes
3answers
15k views

SSLCipherSuite settings in Apache for supporting TLS 1.0, 1.1 and 1.2

I have an Apache 2.4.7 web server running multiple domain names using a single IP address. As a result of the Poodle vulnerability, I added the following SSLCipherSuite line. It worked fine for a ...
1
vote
1answer
300 views

lighttpd complains about ssl.use-compression

I am trying to apply some of the tricks described here, and the problem is having ssl.use-compression = "disable" in lighttpd.conf, because server reports WARNING: unknown config-key: ...
0
votes
1answer
154 views

Can’t connect to Apache webserver via HTTPS (HTTP works just fine)

I’m running a XAMPP 5.6.3 installation on my desktop Windows 8.1 system, and I have an issue with connecting to the Apache webserver. I can still connect normally through port 80 and HTTP, but if I ...
2
votes
2answers
1k views

Beaglebone Black OpenSSl crypto acceleration

I'm running Debian Wheezy at my Beaglebone Black. Is OpenSSL using the hardware crypto accelerator by default? If no, how can I enable it?
1
vote
0answers
274 views

I destroyed my Mac's PHP setup: SSL certification fails

Long story short, I deleted the PHP symlink on my Mac, and replaced it with a symlink from XAMPP. Now it seems that there's a problem with my SSL configuration or what seems to me, a lack thereof. ...
0
votes
1answer
156 views

Firefox giving SSL error message after installing new certs

Firefox users are getting the message This connection is untrusted when going to our web site. under the technical details section it lists the reason as "The certificate is not trusted because the ...
3
votes
1answer
785 views

dyld: Library not loaded: /usr/lib/libcurl.4.dylib curl SSL error

I'm not sure what happened to my system but I am having an issue with dyld/curl, affecting my overall computer performance. I am on Yosemite. I have a feeling it's the Conda openssl. How do I just ...
1
vote
2answers
427 views

Make Chrome use SSL tunnel as a proxy (HTTP CONNECT) for HTTP requests

I want to make Chrome use SSL for all outgoing requests to a proxy (which I control). The proxy can accept a plain HTTPS connection (as a transparent proxy), and it also supports a non-encrypted HTTP ...
0
votes
0answers
232 views

SSLStrip and WWWW Issue

I have been playing around with the mana-toolkit (https://github.com/sensepost/mana) which uses a revised form of SSLstrip to support HSTS. I have noticed that SSLStrip adds an extra "w" to the ...
1
vote
0answers
79 views

ApacheDS: Where is the CA certificate?

ApacheDS auto-installs with an automatically generated certificate. For testing purposes, I'd like to just use this for now, but in order to trust it, I need the CA cert ...
4
votes
4answers
22k views

Disabling RC4 in the SSL cipher suite of an Apache server

I'm trying to disable RC4 for an Apache 2.2.29 server running on a CentOS 6.5 VPS and I can't seem to succeed. A recently purchased business-validated certificate is installed and SSL connections are ...
0
votes
1answer
8k views

Enable TLS 1.0 using registry

I am trying to enable TLS 1.0 in the client side computer .The client side computer is windows XP with IE 6 and server is windows server 2012 R2. In our server TLS 1.0 is enabled and SSL 3.0 and 2.0 ...
1
vote
2answers
2k views

get Firefox to trust expired Charles CA Certificate

When I use the security certificate supplied by Charles Proxy in Firefox (35.0) to decrypt SSL traffic, it results in Firefox showing The certificate is not trusted because the issuer certificate ...