SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

0
votes
0answers
475 views

Why can't I proxy SSL connections in Charles under Linux (ubuntu)?

I want to proxy some API requests over SSL from a PHP application using Charles Proxy which should allow me to view unencrytped requests. I've done this on Windows before but on Linux, I'm seeing the ...
1
vote
1answer
2k views

changing the pass phrase on a key from openssl

A while ago I created a key with openssl genrsa -aes256 4096 > server.key. The process prompts for a pass phrase. I would now like to change that pass phrase, is that possible?
1
vote
1answer
304 views

Domain email, GMail, Postfix

So, after a long trek around the blog-o-tubes, I arrive here. I'm trying to set up email for my domain. I don't really want to do my own email hosting with my own mailserver, especially since my ...
1
vote
1answer
99 views

What type of ssl certificate to select

I have a commercial site and wanted to change to SSL at least for the logged in users. Hoping someone can provide some advice: I only have one domain, but ideally I'd like to test on our development ...
2
votes
1answer
472 views

AddTrust_External_Root.pem in fedora?

My campus network has switched its wifi network to protected EAP and requires me to provide AddTrust_External_Root.pem as a CA certificate. On Ubuntu the file is found in /etc/ssl/certs but in my ...
0
votes
3answers
38 views

What is the passphrase-file in apache2?

I'm referring to this question. What is the 'passphrase-file' mentioned in here? Please clarify.
1
vote
1answer
477 views

gksudo nautilus doesn't work. Ubuntu Terminal

I'm trying to open my /etc/apache2 folder through terminal. I tried running gksudo nautilus and gksu nautilus. Both doesn't show anything and do not show any errors in terminal. But nautilus works ...
1
vote
1answer
71 views

Must CSRs be generated on the server that will host the SSL certificate?

Is it necessary to generate the CSR (Certificate Signing Request) on the same machine that will host my web application and SSL certificate?
0
votes
2answers
116 views

Secure telnet for POP3 and others

I need a command to connect to POP3 server, set startTLS, and get secure connection. I neet something to use like telnet. Is there any program that can achieve it? --edit I'm just trying to write ...
6
votes
1answer
3k views

Why is SMTP over SSL between email servers not so popular? [closed]

In my understanding, most of email servers use SMTP/POP/IMAP over SSL to encrypt the email. It supports encryption when client (UA) send email to server (MTA) and UA receive email from MTA. However, ...
0
votes
1answer
381 views

Webdav between a OS X Server (self-signed certificate) and Windows 7?

Problem data: I have two freshly installed OS X Server 10.8.2 and Windows 7 SP1 (all updates to date). A self signed certificate on the OS X Server generated automatically and working for the exact ...
5
votes
2answers
835 views

Where to get certificates for Acrobat PDF

When sending an invoice in PDF format, it is useful (in some countries obligatory) to sign this PDF digitally. Of course, I could create a self-signed certificate via OpenSSL, but a warning "could ...
1
vote
2answers
2k views

ldap authentication not working with start_tls option after certificate upgrade

Ubuntu ldap authentication is not working on my client with ssl start_tls option enabled in the ldap.conf file. I can authenticate when I comment out ssl start_tls. I upgraded the ldap servers ...
0
votes
1answer
92 views

SSL Forging With Portable Firefox?

In Portable Firefox for Windows, I looked at the options where it lists SSL certificates. I know that Windows stores SSL certificates in its own store. Does Firefox use these certificates? I am ...
0
votes
2answers
151 views

Can SSL connection send my IP address to the host?

I don't have enough information about the difference between HTTP and HTTPS, but can an HTTPS request send my IP address to the host and store it? What are the kinds of data that are being ...
2
votes
3answers
1k views

SSL proxy with stunnel

I'm trying to set an SSL connection with stunnel. Some kind of SSL proxy. Final aim Connect http only CLIENT to https only SERVER. My plan is CLIENT: change endpoint to PROXY PROXY: use stunnel ...
0
votes
1answer
49 views

65K ports and SSL? [closed]

People connect to bank using SSL. Bank is opening its 443 port. but there is only 1 port of 443 , but it is a server so I guess he is using also the other ports. But that is means that it can only ...
1
vote
2answers
551 views

Find SSL Certificate in use

I would like to know which SSL certificate is used for accessing a certain website. In my browser (Chrome, FF), the icon next to the URL does not show a SSL connection. Also in Chrome it states "Your ...
1
vote
1answer
686 views

Proper Rules For SSL Redirect For Subdomains

RewriteCond %{HTTP_HOST} ^(.*\.)*subexample.example.com$ [NC] RewriteCond %{SERVER_PORT} !^443$ RewriteRule ^(.*)$ https://subexample.example.com/$1 [R] Is what I have been using. It works as ...
0
votes
1answer
61 views

openssl: register a CA as an unprivileged user

I'm in a situation where I have a Certificate Authority (CA) that I need to register with openssl, but no root access. Even if I had root access, I don't think it would be right to register this at a ...
0
votes
3answers
980 views

How to make netcat support ssl by combining openssl?

Original netcat doesn't support ssl. ncat from nmap project does. In linux, we can connect multiple commands with pipeline. Is it possible to combine netcat and openssl to create a ncat?
1
vote
1answer
2k views

Why do I have untrusted certificates for Google, Yahoo, Mozilla and others?

In the HTTPS/SSL section of chrome://chrome/settings, I see the following: What does this mean, and is there something wrong? I have a basic understanding of SSL/TLS - I'm not claiming to be ...
1
vote
0answers
87 views

Using Apache as a debug proxy for https traffic

I know that I should be using mitmproxy (or Charles, or Fiddler, or Burp Proxy), and that I can use Squid, but is it possible to use Apache to debug out going https traffic from my computer? That is, ...
0
votes
0answers
39 views

firefox no internet

In our company we have a proxy that verifies all ssl certificates and terminates the ssl connection itself (i.e. decrypts in the middle), then reencrypts and passes the website to the browser with its ...
0
votes
1answer
440 views

Is it possible to set up a Squid proxy server that uses SSL for proxy connections?

Is it possible to set up a Squid proxy server that uses SSL for proxy connections? Currently all the stuff I send to Squid are not encrypted and I don't if it's possible to connect to Squid using ...
1
vote
1answer
2k views

use postfix with ssl certificate that has a password

i have gone through a couple of tutorials on how to set up postfix on ubuntu with support for my ssl certificate: https://help.ubuntu.com/community/Postfix ...
2
votes
2answers
4k views

Receiving SSL certificate errors only from some clients

I am receiving SSL certificate errors from Chrome (latest version (23.0.1271.52 beta-m) and Internet Explorer 6 (not used) on my home desktop machine (Windows XP SP2). In Firefox, the site works fine ...
0
votes
2answers
2k views

dovecot imap ssl certificate issues

i have been trying to configure my dovecot imap server (version 1.0.10 - upgrading is not an option at this stage) with a new ssl certificate on ubuntu like so: $ grep ^ssl /etc/dovecot/dovecot.conf ...
0
votes
1answer
209 views

Trying to setup a local (http) proxy on port 80, to a remote https location

My goal is to intercept traffic from my machine, and do some reverse engineering on existing prototocols. To do so I have a closed-source client, and a closed-source remote server. The remote server ...
3
votes
2answers
6k views

Tortoise SVN v1.66 - authorization failed: Could not authenticate to server: could not parse

So a co-worker is having an issue with connecting to a SVN repo over HTTPS. Here are the details: OS: Windows 7 Enterprise x64 SVN Client: Tortoise SVN 1.6.6 x64 So, whenever he connects (via a ...
1
vote
1answer
259 views

Why apache doesn't restart after configuring SSL?

I've installed apache2 and then configure it to work with SSL following this and this tutorials, the problem becomes when I try to restart the service, the following error throws: ...
0
votes
2answers
174 views

Server unresponsive after successful OpenSSL connection

I'm testing server connections using OpenSSL, with varying results Server A: connection is successful, as are user login and the other commands I expected to work Server B: connection is successful, ...
4
votes
2answers
12k views

How to disable SSL for some websites in Chrome?

I want to set chrome to load HTTP instead of HTTPS for some websites. So I searched internet but all the solutions was old. They said go to Under the hood tab which doesn't exist in my chrome 22. ...
2
votes
0answers
370 views

Decode SSL packets in WireShark

I have cert.cer, base64 x509 and a Wireshark dump in .pcap format. The packets are encoded, so how do I decode them? Now: [site-ip],443,http,xe.cer but it's still not working.
1
vote
1answer
639 views

Can I use torrent while I'm on the SSL VPN of my college network? [closed]

I'm using μTorrent But I connected on my college network by SSL VPN, torrent is stopped. How can I use torrent while I'm still on my SSL VPN network?
0
votes
0answers
908 views

Iptables - having trouble opening port 443

I am attempting to set up https, but I am having difficulty opening that port. Nmap scan report for localhost (127.0.0.1) Host is up (0.000073s latency). PORT STATE SERVICE 443/tcp closed https ...
1
vote
0answers
228 views

How to run secure voip traffic without using vpn

I use quintum tenor for voip traffic using VPN SSL Tunnel. VPN server is based in another country. VPN used enough bandwidth, and we need to reduce bandwidth consumption. Is there any SECURE way to ...
1
vote
2answers
2k views

Google account gives ERR_SSL_BAD_RECORD_MAC_ALERT errors

A couple of days ago, I started being unable to connect to accounts.google.com, which handles logins to all kinds of google services. I get this error in Chrome: Error 126 ...
0
votes
1answer
285 views

Intermediate certificates on NLB load balanced servers

I am fairly sure I know how to install the 'main' certificate on load balanced servers (install on one, export, import to the others) but I'm not quite sure what to do about the intermediate ...
0
votes
0answers
512 views

Internet Explorer 9 - website certificate expired

My Internet Explorer 9, for every page, shows this messege to me: There is a problem with this website"s security certificate. The security certificate presented by website has expired or is ...
0
votes
1answer
467 views

Decrypt file that was encrypted using a public key created from PuttyGen

I have a file that our customer encrypted using our public key. I know how to decrypt it using our ppk file programmatically, but I am unsure of how to do this from the command line, or using PuTTYGen ...
0
votes
0answers
68 views

Can one use SSL certificates for user authentication to websites?

I hear that it is possible to create SSL certificates and use them instead of password authentication. Is this true and how to do it? And do all SSL enabled sites allow this?
2
votes
1answer
59 views

Can port numbers of SSL connections be sniffed?

I know that using SSL doesn't stop third parties from seeing what you're connecting to. Does it also not protect against third parties seeing what port you're connecting on?
2
votes
1answer
822 views

Firefox extension for one-click SSL override?

When I visit a site with an invalid SSL certificate, I get a message saying "This connection is untrusted". If I want to visit it nevertheless, I have to click "I understand the risks", uncheck ...
4
votes
1answer
4k views

Adding Self Signed Certificate to trusted root certificate store using Command Line

Is there any way to add certificate to Local Computer's Trusted Root Certification Authority using command line? I tried using certmgr.exe, it shows success but when i check root CA, i don't see my ...
1
vote
1answer
241 views

How do I get tor exit node information of a certain connection I made

At some point today my email client warned about an smtp certificate change of self signed certs. I took a screenshot of the certificate fingerprints and refused the connection because it does not ...
1
vote
1answer
1k views

SSL certificate issue on Firefox, Ubuntu on a Windows network behind a proxy

My Problem: SSL enabled sites (HTTPS) do not render properly on my Firefox browser. The network team at office says that the issue is because the proxy server isn't able to identify my system ...
2
votes
1answer
425 views

Relation of IPSec and IPv6 to SSL/TLS

My understanding is that IPSec is a security layer added inside the IP protocol to make IP itself a secure transport. My understanding of IPv6 is that it is the newest version of IP that will (for ...
1
vote
1answer
629 views

Setting up IMAP/SSL on Ubuntu with Dovecot, Thunderbird, and a self-signed certificate

I have a new server that I am setting up. It currently has a very limited audience (just me), but I am trying to set up IMAPSSL and secure SMTP. Since the audience is so limited, I have decided to ...
12
votes
3answers
35k views

The certificate is not trusted because no issuer chain was provided

Could anyone explain the meaning of this error message in plain English? Should I add an exception or I should not continue on this website? Technical details: the URL is here, the browser is ...