SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

3
votes
0answers
2k views

How to tell `links` to ignore expired SSL certificate and proceed?

I'm using the links browser and trying to connect to an HTTPS site. I then get: Verification failure: certificate has expired this is "fine" (i.e. was decided to be tolerated) for this ...
2
votes
2answers
3k views

Disable weak SSL ciphers in lighttpd

The testing tool https://www.ssllabs.com/ssltest/index.html tells me that my server is offering/supporting: SSL_RSA_WITH_DES_CBC_SHA (0x9) WEAK 56 SSL_DHE_RSA_WITH_DES_CBC_SHA (0x15) DH ...
5
votes
2answers
1k views

Can I be a root certificate authority for my local network?

This may sound crazy, but can I be the root certificate authority? I mean, I have many computers and smart devices in my home. Remote Desktop warns for the certificate not being trusted, because it ...
0
votes
1answer
986 views

How to enable openssl in libcurl without recompling PHP

I'm trying to implement OpenID login in PHP by using php-openid library. But it did not work on my server probably because PHP libcurl is using NSS, not OpenSSL for SSL connection(according to ...
0
votes
0answers
585 views

501 Not Implemented error

I'm trying to setup WAMP to act as a local server and setup ssl so that I can develop facebook applications. But when I open my localhost over https and try to open the project the .js and .css files ...
5
votes
1answer
951 views

How do I disable HTTP-level compression?

BREACH, a new attack on SSL that targets HTTP compression, has recently been publicly announced. The emerging advice for how to defend against BREACH seems to be: turn off HTTP compression. So, how ...
0
votes
1answer
216 views

Apache Virtual Host with HTTP and HTTPS without duplicating the configuration

how can I create a vhost for HTTP AND HTTPS in Apache without dupicating the configuration like <VirtualHost mysite:80> <Directory "/Users/myusername/sitefolder"> Options ...
0
votes
1answer
68 views

I am examining a protocol on an iPhone app that works over SSL. What are my options for doing man in the middle?

I am trying to reverse engineer an app, and I need to examine traffic between the phone and the server. I know how to use MITM and network analyzing tools pretty well, however, I don't know how to do ...
1
vote
1answer
418 views

Is it possible to disable the “Add Exception” button in Firefox?

I want to disable/remove the "Add Exception..." button in Firefox to prevent users to accept invalid SSL certificates. How can I achieve this? Google does not show up any useful results.
9
votes
1answer
12k views

Can self-signed SSL certificate be renewed? How?

I'm fairly new to SSL certificates and would like to know if a self-signed certificate which I use for HTTPS can be renewed to extend its expiry date without all clients of the site having to go ...
2
votes
3answers
3k views

Thunderbird: SSL/TLS vs. STARTTLS

Following up this question on serverfault "Is STARTTLS more safe than TLS/SSL?" it came up that the question is rather a question about Thunderbird and not about the actual protocols. Also, if you ...
0
votes
1answer
144 views

SSL Certificates for Plesk dedicated server

We have a dedicated server that is using Plesk 11 and we would like to buy and install a certificate to acheive the following: Remove the "There is a problem with this website's security ...
8
votes
2answers
7k views

What is the difference between a certificate and a key with respect to SSL?

Whenever I try to understand anything about SSL I always have a hard time keeping track of what "key" and "certificate" refer to. I fear many people use them incorrectly or interchangeably. Is there ...
0
votes
2answers
1k views

How can I figure out why a specific website won't load?

Problem: I cannot connect to https://amps.dla.mil from my my office network. (Connection times out from all computers and different web browsers, no outbound firewall rules) I can connect from my ...
1
vote
0answers
53 views

How to only accept certificates issued by user-specified CA per domain?

Question Is it possible in Chromium or Firefox to only accept SSL certificates issued by a user-specified CA for a specific domain? Background When you have set up your own certificate authority ...
0
votes
1answer
79 views

Why can't I log in to Evernote when I am using Skitch?

I am running Evernote Skitch, latest version, on Windows 7 but when I attempt to log in to my Evernote account in Skitch, I receive the following error: Warning: Could not establish a valid SSL ...
2
votes
1answer
698 views

If I use openvpn, can vpn servers monitor my usernames/passwords?

Openvpn uses a type of encryption similar to ssl. This seems to suggest that even if I choose an incredibly shady VPN server, then my content will be secure. That is, the VPN server will be able to ...
0
votes
1answer
76 views

How to make use of a free SSL certificate?

I'm using Network Solutions, who want me to give them $50 or $100 per year to have SSL protection with my hosting. I keep hearing about free SSL certificates though. Can I really use one of those with ...
0
votes
1answer
726 views

Access HTTPS from different port

While web browsing, how do you redirect HTTPS URLs to a port other than the standard 443? Due to Windows XP's inability to handle name-based hosting with SSL, I'm forced to remap port 443 to a unique ...
-1
votes
2answers
6k views

Who provides SSL certificates to Google? [closed]

Out of curiousity I was wondering who provides Google's SSL certificates. I checked the certificate information in Chrome (on vanilla https://google.com) and it shows that it is authored by: Google ...
0
votes
1answer
122 views

Should I let JungleDisk replace my /Library/Preferences/cacert.pem?

About a week ago JungleDisk Desktop backup started warning it couldn't upload a "database" file (that it uses for speed), and was falling back to a regular upload, which succeeds. Example message: ...
0
votes
2answers
299 views

How to intercept SSL authority certificate needed in a corporate environment?

My situation is the following: in our corporate network a special kind of SSL certificate issued by the company itself is used. Every time I open a site via https in Firefox a warning monit is ...
5
votes
2answers
10k views

Why does Chrome always redirect me to https://www.google.com

Whenever I enter "http://www.google.de" (or any other google domain) in the addressbar, it is automatically replaced by "https://www.google.de". This happens regardless of beeing logged in with my ...
62
votes
11answers
29k views

Why won't OS X trust GitHub's SSL certificate?

When I go to any github.com page in Chrome, I get a big ugly error: You attempted to reach github.com, but the server presented a certificate issued by an entity that is not trusted by your ...
-1
votes
2answers
101 views

apply for SSL certificate for hidden websites [closed]

We have a proxy and several hidden web servers in different locations. Internet users can visit these hidden web servers only through the proxy, so only the proxy IP is public. The IPs of the web ...
0
votes
1answer
456 views

Certificate errors on irc.pirateirc.net

I'm having trouble making a secure connection to the IRC server at irc.pirateirc.net. gnutls doesn't recognise the SSL certificate issuer, even though the certificate is issued by a regular CA ...
1
vote
1answer
1k views

sshd service listening on multiple ports

Well, I need use multiple and distinct ports where sshd will be listening, for distincts clients. Each client connect a different ssh port in real time. Can I put sshd service listening on multiple ...
0
votes
1answer
566 views

How to add self signed certificate to certificate bundle?

How to add self signed certificate to certificate bundle so that the Curl http client can verify the self signed certificate as valid one?
2
votes
1answer
640 views

iOS: VPN over TCP. Any good service available?

Here's a very succinct description of my situation: I use an iPhone (and an iPad) in an environment where ports other than 80 and 443 are blocked. Therefore, it is impossible to use Siri, Maps, as ...
0
votes
2answers
382 views

No Padlock in Firefox on interior pages - no mixed content

I'm at a loss. Chrome shows my site with a green padlock throughout but I can't convince Firefox. My homepage shows a padlock in Firefox (https://www.pianopronto.com) However all the interior pages ...
0
votes
0answers
740 views

Windows 2003 (actually XP x64) can't read SSL signature if it's SHA-2 (SHA 256/384/512)

I have a Windows XP Professional x64 virtual machine to run some HLDS processes. I chose the x64 edition as I already have a license for it, and as it uses the Windows Server 2003 kernel it'll be more ...
0
votes
2answers
1k views

Can I access a network resources through SSL Vpn (OpenVpn)?

I'm really confused about some related things in the Vpn uses.. especially in sharing only the internet & accessing all the resources(printer, files..etc) that are available in the network and be ...
0
votes
1answer
945 views

Eudora 7 says SSL certificate out of date

After using (sponsored) Eudora 7.1.0.9 on Windows 7 for years, it suddenly stopped importing new mail. Error message says the server certificate was rejected as one cert in the chain has expired. It ...
2
votes
1answer
2k views

Where to store openssl private keys on Linux server?

I have a private SSL key on my VPS that's used by several applications (Apache, Postfix, etc). The problem is, I can't exactly set the permissions to 0600 (-rw-------) because these various ...
0
votes
1answer
768 views

readsocket: Connection reset by peer (WSAECONNRESET) (10054) [closed]

I'm using stunnel to tunnel SSL traffic to port 80. And up until today it's been working just fine. And indeed for a good amount of pages on my website it still works just fine but for some pages it ...
2
votes
0answers
2k views

Establish https on nonstandard port

I'm trying to estamblish https on port 55434 (different than standard 443). My nginx configuration looks like this: server { server_name example.org; listen 55434 ssl; ssl ...
3
votes
1answer
2k views

How to set up a server to use TLS-SRP authentication?

How to get it work at all? I used this manual. I created a verifier file and started openssl s_server with a self-signed RSA certificate. Now I can't connect to it. >gnutls-cli --srpusername user ...
0
votes
1answer
284 views

Using HTTPS with a squid proxy

I have a squid proxy set up on a few different servers. I am behind it on most applications (firefox, other apps that allow proxy config, etc). right now I'm not using https, and if I look in ...
0
votes
1answer
565 views

What do I do with my SSL certificates after buying them?

OK, I have an Apache server running on XAMPP, and I have generated my CSR and some fake certificates. I went to Thawte's website and got an SSL trial and they emailed me back with all these other ...
38
votes
2answers
4k views

Why do some websites show the company name next to the URL?

Some websites show the company name next to the URL (in Chrome) and some don't. How do I set this up for my website? Is there a reason why or why I wouldn't want to do this?
2
votes
3answers
5k views

How ISP sees the HTTPS traffic? [duplicate]

If I am visiting a https url say https://www.youtube.com/watch?v=7HKoqNJtMTQ. What exactly my ISP will see ?
3
votes
1answer
292 views

How to make a self-signed client SSL certificate?

Well, how to make a client SSL certificate, which doesn't need an (external) certification authority? Is there a way and is any profit to use elliptic curves for that? What should i do to use it on ...
2
votes
1answer
5k views

Permissions for SSL key?

I'm trying to set up a secure connection (https) in nginx. But I'm a bit worried about the private key's permissions, which aren't mentioned in any tutorial. Should I change them? To what?
0
votes
1answer
465 views

How to create a SSL certificate signed by an intermediate certificate

I am building a web site with HTTPS. The host has both a DNS name and an IP address and I'd like the SSL certificate(s) to cover both. I've been given a certificate that is signed by a trusted party - ...
1
vote
2answers
648 views

How to install SSL for Darwin Streaming Server on OS X Mountain Lion?

I downloaded Darwin Streaming Server and while I'm installing I want to enable SSL, but this requires that I have a valid streaming server SSL certificate installed. How can I install an SSL ...
0
votes
0answers
501 views

Why can't I proxy SSL connections in Charles under Linux (ubuntu)?

I want to proxy some API requests over SSL from a PHP application using Charles Proxy which should allow me to view unencrytped requests. I've done this on Windows before but on Linux, I'm seeing the ...
1
vote
1answer
3k views

changing the pass phrase on a key from openssl

A while ago I created a key with openssl genrsa -aes256 4096 > server.key. The process prompts for a pass phrase. I would now like to change that pass phrase, is that possible?
1
vote
1answer
316 views

Domain email, GMail, Postfix

So, after a long trek around the blog-o-tubes, I arrive here. I'm trying to set up email for my domain. I don't really want to do my own email hosting with my own mailserver, especially since my ...
1
vote
1answer
105 views

What type of ssl certificate to select

I have a commercial site and wanted to change to SSL at least for the logged in users. Hoping someone can provide some advice: I only have one domain, but ideally I'd like to test on our development ...
2
votes
1answer
542 views

AddTrust_External_Root.pem in fedora?

My campus network has switched its wifi network to protected EAP and requires me to provide AddTrust_External_Root.pem as a CA certificate. On Ubuntu the file is found in /etc/ssl/certs but in my ...