SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

5
votes
2answers
2k views

Prevent Internet Explorer from caching SSL client certificates

I use a particular HTTPS website, but I have to separate client certificates that I use to authenticate (sometimes I use one account, which requires certificate A and sometimes a different one, which ...
0
votes
3answers
4k views

How can I disable security alerts for self-signed certificates in Outlook 2010?

I've just switched from using unencrypted SMTP and IMAP for mail in Outlook 2010. My mail is hosted on a shared hosting setup and not my own, dedicated server. The certificate issued by the server is ...
0
votes
0answers
279 views

Apache SSL working with IP but not FQDN

All was well in my little network until I switch internet providers and had to change my IP address on my internal network from 172.16.0.x to 192.168.1.x, they have funky hardware and this is in my ...
0
votes
1answer
51 views

different ssl_protocols for seperate domains

I tried to configure one server for a specific domain to use TLSv2.0 only. Others should use TLSv1, TLSv1.1, and TLSv2.0. The configuration is valid, as nginx loads correctly, but the site with ...
1
vote
1answer
4k views

Using Wireshark to decrypt tls encrypted file with private key

I have a packet encrypted with TLS in a .pcap file. I also have the private key in a .priv file. How can I decrypt the .pcap file using Wireshark? I tried going to edit -> preferences -> protocols -> ...
0
votes
0answers
207 views

wireshark: decrypt live SSL traffic

w.r.t decryting SSL traffic with wireshark, I've seen the sample capture from wireshark website and it worked fine. What I'd like to achieve is to decode live traffic. So the key I guess is to ...
0
votes
1answer
79 views

Do I need to buy SSL when setting up my own OpenVPN Access Server?

I was able to quickly do the following: Setup an OpenVPN Access Server using a lowend VPS I was able to connect to it from my Windows PC using the OpenVPN Desktop Client It was able to change my ...
6
votes
2answers
2k views

Are SSL's default snake oil certificates truly snake oil as opposed to being genuine honest-to-good certificates?

SSL generates self-signed "snake oil" certificates by default, for example at /etc/ssl/certs/ssl-cert-snakeoil.pem. As per Wikipedia, snake oil is a cryptographic method or product that is considered ...
0
votes
1answer
100 views

ZNC Broke After Enable TUN/TAP on my VPS

After enabling TUN/TAP via my vps and then disabling (causing restarts to server as well), ZNC will no longer work. ZNC won't start on boot, or manually. Here are the errors: [ !! ] Binding to port ...
0
votes
1answer
2k views

How to do server fixation with HAProxy through HTTPS

I previously created a loadbalancer for web servers in HAProxy, but that one was HTTP, not HTTPS. This is he config I previously used. listen appname 0.0.0.0:80 mode http stats enable ...
1
vote
0answers
1k views

Chrome and Outlook can only make secure connections when user account has admin privileges

I have a co-worker who is set up as an admin user under Win XP SP3 and I'm trying to switch her to being a restricted user. The short story is that when I switch her account to restricted, Chrome ...
0
votes
1answer
56 views

Can an SSL cert (not self-signed) be used to create another SSL cert for another host in the same domain?

I have a regular SSL certificate issued by Network Solutions for a given host, say "host A". Can I create another SSL cert for the wiki host that has the host A cert in its trust path and therefore ...
1
vote
1answer
61 views

SSL not work for virtual IP

I have a website which was deployed with three real web servers and a load balancer with a virtual IP. I have applied an SSL certificate from a CA and imported to Tomcat using OpenSSL using the ...
1
vote
1answer
21 views

// Vs http:// when including remote content

My website content is served over SSL and my webpage uses Google Adsense. In The ad code the javascript file is included from: //pagead2.googlesyndication.com/pagead/js/adsbygoogle.js I would just ...
2
votes
2answers
501 views

Can I trick windows to “see” a remote tcp session as a console session?

At work I'm connecting to our company's portal in order the perform my job. I would like to take some of my work home and do it from there. As I cannot connect from home directly to teh company's ...
0
votes
0answers
991 views

How to disable SSL 2.0+ in OS X 10.7?

I am currently encountering a problem with my Webkit browsers (Chrome v31.0.1650.63 and Safari) on my MBP running OS X 10.7.5. The browsers are not able to establish any SSL connections. The Google ...
2
votes
1answer
2k views

List installed personal certificates in command line

I use a few secure websites that require me to install a PFX certificate to access them. I have multiple computers I do this from, and I need a quick way of determining which ones in which I still ...
1
vote
1answer
187 views

Wireshark TLS communication shows green HTTP packets when using CCProxy proxy server?

Client <--> CCProxy <--> Server I have IE configured to use a proxy server for HTTP and Secure connections. I also have a proxy server is set up with CCProxy. It is my understanding that ...
1
vote
0answers
104 views

Apache configured for HSTS, but SSLLabs/Chrome not acknowledging

I'm setting up a webserver and I've been checking it against SSLLabs and Chrome 31 to make sure the security is up to snuff. However neither Chrome nor SSLLabs seems to believe that strict transport ...
0
votes
2answers
164 views

How can I tell whether PFS is enabled?

I have kinda 2 questions.. first, is this setting considered "secure" ? Second, how do I tell whether perfect forward secrecy is enabled? ssl_session_timeout 5m; ssl_protocols TLSv1 ...
2
votes
1answer
5k views

Every website is showing untrusted certificate warning on all browsers

I'm on windows 7. Every website is showing untrusted security warning. I tried every browser that I have. I tried using https. This is extremely odd, it never happened before, well it could happen ...
0
votes
0answers
59 views

All https requests are goes as TLS (windows 7 64bit)

I have installed a version of windows 7 64bit on my laptop. After it all software that are going to send request to https has failed because the OS are using TLS instead of SSL3. I find it because all ...
1
vote
0answers
94 views

SSL certificate for CNAME record

I have the CNAME record images.bob.com, which points to the images.susan.co.uk (images.bob.com. 1800 IN CNAME images.susan.co.uk.). I would like to ask for issuing SSL certificate for the ...
2
votes
0answers
210 views

Why doesn't Firefox accept different Ports for SSL encryption other than 443

There is an IIS Webserver with different Sites (SSL Binding) because I can't configure IIS to listen on same Address and Port with different Certificates so I set the SSL Port direction in the ...
0
votes
0answers
126 views

iptables messing up Tomcat?

I encountered the following problem(s) using Tomcat 7 with iptables on. 1) Namely, there's this Tomcat 7 instance that I run on server-1 (directly exposed), and this Tomcat instance hosts a REST ...
0
votes
1answer
533 views

squid ssl proxy (NON TRANSPARENT)

I have been searching google for hours, I know this is possible but all google gives is transparent proxy ssl results and I do NOT want squid transparent. I'm going to be pushing proxy settings via ...
0
votes
0answers
379 views

Rails 2 and Ngnix: https pages can't load css or js (but will load graphics)

ADMISSION: i've posted this same question on stackoverflow, before realising it's probabaly better suited to superuser, but it kind of depends on the answer: If it turns out to be a problem in my ...
0
votes
1answer
336 views

How to dump the Subject Alternative Name (SAN) from an SSL certificate file

I know that I can dump the entire information from a PEM certificate file with this command: openssl x509 -in certfile -noout -text And I've already found another direct parameter to show me only ...
0
votes
0answers
625 views

How to make Firefox remember a self signed certificate is trusted

I'm using some private server with a self-signed certificate for https connections. Firefox 25.0 warns me about the certificate being untrusted every time. For some reason, I can't make it remember ...
7
votes
3answers
33k views

How do you permanently disable the 'This Connection is Untrusted' page on Firefox

I'm going insane. Can someone please help me to COMPLETELY DISABLE the 'This Connection is Untrusted' page on Firefox. Facts: I am running Firefox 23.0 on an Ubuntu machine (downloaded and ...
2
votes
1answer
123 views

Fedora 8: rubygems.org certificate validation failure. How to install GeoTrust CA?

Trying to get a gem: $gem install puppet ERROR: Could not find a valid gem 'puppet' (>= 0), here is why: Unable to download data from https://rubygems.org/ - SSL_connect returned=1 ...
3
votes
1answer
177 views

Is there such thing like a port forwarding service out in the internet?

I'm looking for a service on the internet allowing me to redirect TCP connections. My company's firewall is very strict and allows only HTTP (through a transparent proxy) or SSL on only port 443. I ...
1
vote
0answers
1k views

SSL Error after upgrading to Windows 8.1

After upgrade my Windows 8 to Windows 8.1, I got this SSL Error: ...and this I have did some research and tried to change my system time up to date, reset my modem and use wireshark to see if ...
2
votes
0answers
79 views

SSL cert owner != localhost after creating SSH tunnel

I use an SSH tunnel to connect to my work's mail server, then tell my mail client to connect to server "localhost" on port "1993" (the port I chose for the tunnel). I have two different Ubuntu Precise ...
6
votes
1answer
5k views

Can I get around using “pip install --cert”?

Trying to figure out if there is a way that I can avoid using the --cert flag to pip when I am installing packages at work. There is some issue with the proxy that only allows me to download the ...
2
votes
0answers
567 views

Chrome ignores some imported certificates

On Windows 7 with Chrome 30. I have a few websites running on localhost over SSL. Visiting them always displays the standard "The site's security certificate is not trusted!" message from Chrome. I ...
1
vote
1answer
771 views

Multiple SSL certificates on one server

We're hosting two websites on our fairly tiny but dedicated production server. Both website require SSL authentication. So, we have virtualhosts set up for both of them. They both reference their own ...
0
votes
1answer
366 views

Multiple websites on one server/IP; only one with SSL

I recently acquired an SSL certificate for my primary site (https://wemarsh.com/). It works great, and I've even set up an .htaccess rule so all traffic on that site is encrypted. (I'm running ...
0
votes
0answers
211 views

How to disable fake SSL check in development phase for Opera 17+ and Chrom 30+

During the test, we are configuring our web server(Tomcat) to be connected to with test SSL When we try to connect to this site with IE, we face this error: There is a problem with this website's ...
1
vote
1answer
218 views

Intermediate SSL Cert

I have an SSL certificate that is self-signed, and therefore uses an intermediate certificate. I am using Node.js and returning both the certificate as well as the certificate chain which includes ...
2
votes
4answers
4k views

Custom Protocol Handler not working in Chrome on SSL page

I've successfully created and registered a custom protocol handler in my web application and it's working fine in all browsers. There's the initial warning dialog about launching an external ...
1
vote
0answers
586 views

CIFS share via LDAP + SSL

I have NAS drive which is bound to an Open Directory LDAP server for authentication with SSL enabled. The NAS allows for CIFS shares to be accessed via LDAP authentication. (in this case the NAS is a ...
1
vote
2answers
604 views

Force https performance

How can i force https on my site without affecting performance. I'm presently using mod_rewrite in .htaccess and it seems to be impacting performance of the site.
0
votes
1answer
263 views

What I must do to get TLSv1.2 support in Google Chrome 30?

Here one can read that Google Chrome 30 support TLSv1.2, but I can't access a server using it on Ubuntu 13.04. The server just support TLSv1.2 and have cipher TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 ...
2
votes
1answer
3k views

Firefox, error when accessing https url

I'm connected through a public wifi hotspot. No problem when using IExplorer. When I use Firefox, I obtain the following error message after asking for any https url, as for example ...
0
votes
1answer
375 views

Where to install SSL Cert

I have Bluehost hosting my landing page and a few subdomains. One of the subdomains has a A-Record that points to an Amazon EC2 instance running tomcat. I would like the tomcat application to be ...
0
votes
0answers
55 views

SSL Certificate updates

In Windows or Linux system, how does the SSL certificate gets "updated" or "revoked"? By default some certificate comes while installing the OS / Browser. But later when that needs to be updated how ...
-1
votes
1answer
445 views

Can I run two FTP sites on one server using two different IP addresses?

So we currently have our FTP site running on one computer (Mac OS-X) with one IP address. We are trying to host a second FTP site running off of the same computer, but with a different IP address. Is ...
0
votes
1answer
31 views

How to enable SSL on Tomcat

I have a license server that is running Tomcat. I have been asked to enable SSL and I am clueless as where to start. I have the following files: FQDM.csr FQDM.key FQDM.crt FQDM.pkcs7 Outside of the ...
0
votes
1answer
4k views

How to search non ssl google? [duplicate]

Even when I visit nosslsearch.google.com I ultimately get redirected to https://www.google.com. Why is this? (I'm not signed in to google, and I'm entering these in the urlbar, not the search ...