SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

2
votes
1answer
2k views

HTTP to HTTPS Tunnel

So the issue is that I have quite a few homebrew scripts/web testing programs that only work with HTTP. The problem is that the website only allows HTTPS connections. Does anyone know of a way to ...
2
votes
2answers
2k views

How do add a certificate from a self-signed server to trusted certificates in Chrome?

I have a dedicated server with a wiki and want to secure it so nobody can read my articles by sniffing my pages. I do not want to pay for a valid certificate so I created a self-signed certificate. ...
2
votes
1answer
12k views

Does openssl errno 104 mean that SSLv2 is disabled?

I want to check if my server has SSLv2 disabled. I am doing this by attempting to connect remotely with openssl with the following shell command. openssl s_client -connect HOSTNAME:443 -ssl2 Most ...
0
votes
3answers
2k views

I'm receiving an SSL error in various browsers, but I can't find non-SSL content

I'm receiving an error with my SSL connection. Using google chrome I see the following error: Your connection is encrypted with 128-bit encryption ... however this page includes other ...
-1
votes
1answer
72 views

How to setup Chrome Browser on MacOS (or Windows) so that only SSL connections are allowed?

Due to security concerns we would like to Chrome Browser on MacOS (or Windows) allows only SSL (https) connections. I.e., if host does not support https then it will not allowed. Is that possible?
1
vote
1answer
1k views

How to create/install a self signed certificate for Zend Server CE on Mac OS X?

I have a virtual host set up for one of my sites (http://local.mysite.com), now I want to be able to access it using SSL (https://local.mysite.com). How do I go about configuring Zend Server CE and ...
2
votes
1answer
6k views

How to configure GlassFish v3.1 to use SSL?

We are looking for simple step-by-step manuals how to configure GlassFish v3.1 to use SSL. We are running few legacy application under GlassFish and we hope there is no need to change them: so that ...
0
votes
2answers
107 views

Tool to block SSL traffic on Windows

I'm trying to recreate some customer issue which requires me to block SSL packets coming from a server i.e. TCP connection steps should go ahead but SSL handshake should stall. Are there any tools ...
1
vote
1answer
305 views

Syncrify and SSL support

I installed the Syncrify server and client on a Linux box. From what I've read on their site, Syncrify comes with a built in self-signed SSL certificate. However after setting the SSL port on the ...
3
votes
2answers
123 views

How is encryption handled when different email clients send emails securely?

Whose public key is used to encrypt email from me@myemailservice.com to you@youremailservice.com? My email client can't have the public key of every person in the world I could possibly write an email ...
3
votes
2answers
345 views

What is the true level of danger when a SSL certificate is invalid?

I'm relatively tech-savvy, but I'm no security expert. To my understanding, an invalid SSL certificate is only a problem if you're going to provide some sort of potentially exploitable information to ...
1
vote
2answers
2k views

Which symmetric key algorithm does SSL use?

I understand that thru SSL, the browser gets public key of the secured website and thru public key encryption rsa algorithm, these 2 establish session key and then continue communication thru some ...
2
votes
1answer
470 views

LightHTTPD; how do i disable http so only https is available on a single port?

I have a project that should be available only through ssl connection. It's being served by Lighthttpd, but I can't figure out how to set up the ssl on the port. When I use the guides I find with ...
5
votes
2answers
253 views

How Safe Is SSL In a Public Place (Airport/Coffee Shop)

If someone is monitoring all of the traffic on a network, and then I connect to it, and log into a website that is protected with SSL - is there any security risk?
0
votes
0answers
443 views

Outlook won't accept my certificate for OMS (sms messaging service)

I have implemented an OMS service. Outlook requires that OMS uses https, so I have also created a self-signed cert with SelfSSL.exe, and imported the cert to my computer (Trusted Root Certification ...
4
votes
1answer
594 views

How to add self-signed certificates to different browsers?

How can I add self-signed certificates to e.g: Google Chrome under Linux (from the command line)? Thank you!
5
votes
1answer
7k views

Tortoise SVN Error Validating Server Certificate

I just updated the certificate on one of my sites due to the old one expiring. The new certificate verifies fine in Internet Explorer 9, Chrome, and Firefox 4 - but when trying to browse/check out the ...
1
vote
2answers
2k views

Cannot use SSL/TLS on Mac OS X

I'm using a Mac I don't have administration rights on, so I can't create new accounts or anything like that. However, in my account (there's a general account in which everything works fine) I can't ...
5
votes
1answer
537 views

What happened to the Https Lock in Firefox 4?

Previous versions of Firefox used to have a padlock icon in the address bar whenever you browsed to a HTTPS site. Since Firefox 4 it no longer seems to be there. What happened to it? Is there any way ...
1
vote
1answer
626 views

auto-accept SSL certificates in chatzilla

I use Chatzilla to chat on IRC. When I connect to an SSL port, I'll often get the message that I need to add an exception because the security certificate is invalid. In fact, this is the rule rather ...
2
votes
2answers
1k views

“security.OCSP.require” in Google Chrome

https://blog.torproject.org/blog/detecting-certificate-authority-compromises-and-web-browser-collusion "Users of Mozilla Firefox that are concerned about this issue should enable ...
0
votes
0answers
188 views

“security.OCSP.require” in Google Chrome

https://blog.torproject.org/blog/detecting-certificate-authority-compromises-and-web-browser-collusion "Users of Mozilla Firefox that are concerned about this issue should enable ...
4
votes
1answer
436 views

Dynamic images served over HTTPS display broken image in word when opening an HTTP document

We have an application that produces HTML documents which the user opens in word from the web server, so they open: https://ourserver/ourapp/somepath/generateddocument.htm That document contains ...
0
votes
1answer
578 views

How can I create an external SSL wrapper/tunnel page for an insecure webpage behind a firewall?

I have an security cam with a built-in webpage inside my home network. That camera is using basic HTTP authentication instead of SSL. I want to be able to access the camera's webpage from outside my ...
2
votes
1answer
1k views

Removing certificates in Firefox doesn't work

I'm trying to remove my certificates going to Preferences > Advanced > Encryption > View Certificates. Then I select the certificates I want to remove and delete them. But when I go again to the ...
5
votes
1answer
5k views

SSL - what's the reason for disabling SSL v2 support?

I have noticed many guides saying you should disable the SSL v2 support while setting up SSL on a web server. I can't understand the reason. Can somebody tell me why, please?
3
votes
0answers
925 views

SSL timeout on some sites, across all browsers, on Mac OS X Snow Leopard

For the past several weeks, I've been receiving "Error 7 (net::ERR_TIMED_OUT): The operation timed out" when I attempt to connect to either Twitter or Paypal via SSL. I get this specific error in ...
0
votes
1answer
609 views

Intermittent POP3 errors - Re-Authentication Failure

I have an application that connects through POP3 over SSL. It mostly works correctly--but the last few days, I have been repeatedly getting this error: -ERR Re-Authentication Failure What could ...
3
votes
1answer
5k views

Configure Apache to serve multiple subdomains via HTTP + HTTPS

I have a virtual server hosted at ISP with 2 public IPv4 addresses. I want to run several subdomains (more than 2) with Apache and serve them via both HTTP and HTTPS. The SSL cert is a wildcard one ...
0
votes
1answer
1k views

How Do I Set Up Authentication with Client Certifcates on WebSphere 7

Can someone point me to documentation on setting up authentication using client certificates on Websphere 7? What does WAS send to the browser so the browser knows to send a certificate to the ...
1
vote
1answer
1k views

Avast hangs Outlook beacuse of STARTTLS

I have a problem getting mail from my university's IMAP server. I have found that if you try to use STARTTLS in your client, connection hangs forever. I reported the problem, but they didn't solve it. ...
7
votes
2answers
643 views

How to tell which resources are loaded “insecurely” with Chrome using https

I understand this is because I'm loading some stuff via http:// but does that mean a single http reference can't appear in the source? Even in examples like <a href="http://...">...</a>? ...
6
votes
5answers
14k views

How much information can my ISP see?

Is it possible for my ISP to see the passwords that I enter on websites and in chat programs? And what about SSL websites that start with https, do they encrypt my username and password before ...
2
votes
2answers
236 views

Primary 'common name' in subjectAltName?

I have my own X.509 CA. When issuing certificates for hosts, if I have Subject: .../CN=foobox.grawity.tld and subjectAltName: DNS:foobox.local, do I still have to put DNS:foobox.grawity.tld as a ...
1
vote
2answers
104 views

Client certificate selection

I have a https apache server that needs client verification. But when somebody is browsing this site there is need to select proper cert from list of certificates installed in browsers. What can I do ...
2
votes
3answers
13k views

SVN over HTTPS and SSL handshake fails

I am trying to checkout from my team's svn server. It requires client side authentication. I'm running Ubuntu 10.04. Here's what I get: $ svn checkout https://myproject.myserver.org/svn/project/ ...
1
vote
1answer
1k views

Heroku Hostname based SSL: How does it work? [closed]

Heroku offers the option to use Hostname based SSL. Apparently this is a solution which they use to offer multiple SSL hostnames on the same IP address, without using SNI (which doesn't work on ...
3
votes
1answer
2k views

Is there a way to extract a “private certificate key” from Chrome and import it into Firefox?

This is a classical Catch-22 situation. I was using online banking the other day under Chrome. I had to order a digital certificate so that I could extend my privileges. The stupid thing is that when ...
1
vote
2answers
575 views

How to lock down Win Vista Firewall for HTTPS only access?

When I'm on public WiFi (laptop), I want to configure my firewall through its advanced settings to allow only HTTPS web traffic. My first attempt was to block incoming and outgoing by default, then ...
2
votes
1answer
403 views

Is HTTPS TLS or SSL?

How to know a HTTPS connection in use is TLS-based or SSL-based? If I want to use TLS instead of SSL in Apache2, is there anything special to config?
0
votes
1answer
921 views

https post message fail, where is server log?

I am receiving an error when sending a https post message to my server and I am looking to get more information. I am looking for ssl error log in apache but I cannot find it. I have looked in ...
3
votes
2answers
125 views

Windows/global setting to allow only SSL when on public Wifi?

Rather than going through each of my apps and modifying settings, or tweaking individual browser settings (I use three different browsers) or just being careful not to type non-SSL URLs into the web ...
2
votes
0answers
3k views

Disable SSL hostname check in Chrome

How I disable SSL certificate error when CN does not match DNS name in Chrome? In IE, this is done by Tools -> Internet Options -> Advanced (tab) -> Scroll down to section "Security" -> checkbox: ...
7
votes
1answer
3k views

Checking ssh keys have passphrases

I have a bunch of users, who with SSH keys have access to accounts on other servers. Currently I have a script which collects up the ssh public keys and distributes them to the correct account on the ...
0
votes
1answer
316 views

Win 7: Cannot access SSL sites

I haven't been able to access any site using ssl since yesterday. When I, for example, try to visit Gmail nothing happens expect a blank screen. I have tried fixing this by checking that date/time is ...
2
votes
1answer
351 views

Are there any good resources that describe how https/SSL/TLS works?

I find it really hard to find online resources which go through the details of the following aspects of SSL work. Is a certificate of a website signed with the public key of a Certificate Authority, ...
6
votes
3answers
20k views

Why is chrome slashing my HTTPS?

In Chrome when I view my page the https in the URL has a red slash through it. When I click it, it says: Your connection to www.example.com is encrypted with 256-bit encryption. However, this page ...
1
vote
1answer
881 views

Upgraded to Chrome 6, and now some SSL sites don't load

I recently auto-updated my laptop (Macbook Pro with 10.6, it it matters) to Chrome 6. My current employer has an annoying firewall that intercepts all incoming traffic, mainly to filter non-work ...
6
votes
2answers
2k views

Is there a way in Chrome to use SSL by default?

What I would like to do is have Chrome automatically switch me to SSL connections if a site supports it. So if I type for example: www.somesite.com in the browser I want Chrome to try to connect me ...
0
votes
1answer
1k views

Continuous SSL Error

I recently re-imaged my work machine after installing a new hard drive. After getting Windows 7 x64 installed and added to the domain, I found that many, almost all really, of the certs being issued ...