SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

0
votes
0answers
6 views

Signing OpenVPN server and clients certificates by Samba4 DC auto-signed CA.pem

I installed Samba4 and configured it to be domain controller, and it auto generated ca.pem, cert.pem, key.pem. And now I want to use the same CA of samba to sign the new certificates (maybe generated ...
0
votes
1answer
38 views

Can't connect to https on ubuntu - “Unknown SSL protocol error”

I can't seem to connect to a specific server over SSL from our Ubuntu servers. Locally, on my Mac, it works flawlessly. The server address: powerschool.spokaneschools.org curl -v https://...
0
votes
0answers
8 views

Nginx DDoS SSL Cert

Ok, So I have a Nginx reverse proxy that is blocking this incoming Layer 7 DDoS. The problem is, my outgoing is massive the only assumption I have come to is that my server is sending the SSL ...
0
votes
0answers
14 views

SSL site hosted in IIS shows certificate, but no such certificate is installed

I have a problem that is really leaving me scratching my head. I'm hoping it's something simple I've overlooked. I need to replace an expiring SSL server certificate on an IIS 7.5-hosted site on a ...
0
votes
2answers
37 views

CentOS 7 - Won't accept any SSL certificates

I have a problem on my CentOS 7 box doing anything that requires SSL, including curl, wget or updating via YUM. The output is always the same: [root@localhost ~]# curl -I -v https://google.com * ...
0
votes
1answer
16 views

Check Outlook 2007 Imap/Smtp ssl certificate details

Normally you can click on the browser url and check ssl certificates details. How to do this on Outlook 2007 for the certificates used by an imap or smtp connection over ssl ?
0
votes
0answers
13 views

vsftpd behind Router (passive mode) not working properly

I am currently running a vsftpd server behind a router. But unfortunately it is not working properly, I can connect, I see the files and sometimes I can download and upload but sometimes it just says ...
0
votes
1answer
21 views

Apache SSL error: Re-negotiation handshake failed: Not accepted by client?

I protect my wordpress administration by a client certificate. I had a trouble in march after upgrading from Wheezy to Jessie but it has been solved and everything ran well until my letsencrypt ...
0
votes
1answer
50 views

How to make a self-signed certificate trusted?

I've created a self signed certificate on my Windows 10 PC and would like to see it trusted by the web browsers on the same machine. To do this, I've added the certificate to the 'Trusted Root ...
5
votes
1answer
911 views

SSL handshake fails for google.com only, in all browsers

I can't connect to google.com via HTTPS on any browser (Safari, Firefox or Chrome). All other sites (HTTPS or not) are fine. The error I get is ERR_CONNECTION_CLOSED in Chrome, Secure Connection ...
1
vote
2answers
171 views

Our company claims that the DLP system can even monitor the contents of HTTPS traffic, how is this possible?

There is software installed on all client machines for DLP (Data Loss Prevention) and HIPAA compliance. Supposedly it can read HTTPS data clearly. I always thought that between the browser and the ...
0
votes
0answers
3 views

joomla https: Error 310, too many redirects

I have joomla 3.5.1 running under apache 2.4 behind an nginx reverse proxy. It works fine without SSL. My nginx does SSL fine, and then proxies the requests (in plain HTTP) to apache. I followed the ...
0
votes
2answers
3k views

FileZilla stuck at Initializing TLS

I am having an issue with FileZilla. I try to establish an FTP connection with my server but end up stuck at the same initial message after trying quite a few rounds. I am able to use the same host, ...
0
votes
0answers
60 views

Access QNap Web Dav via Map Network Drive

When trying to connect to my WebDav server I get "The mapped network drive could not be created because the following error has occurred: Mutual Authentication failed. The Server's password is out of ...
0
votes
1answer
13 views

How to use a certificate authority (CA) with a separate key file for SSL bumping in squid 4.x?

According to the squid article on SSL bumping one uses the cert parameter of the http_port [port] ssl-bump directive in order to specify a CA which has it's key included in one file (protected by OS ...
5
votes
1answer
3k views

How to tell `links` to ignore expired SSL certificate and proceed?

I'm using the links browser and trying to connect to an HTTPS site. I then get: Verification failure: certificate has expired this is "fine" (i.e. was decided to be tolerated) for this internal-...
2
votes
1answer
9k views

How to configure GlassFish v3.1 to use SSL?

We are looking for simple step-by-step manuals how to configure GlassFish v3.1 to use SSL. We are running few legacy application under GlassFish and we hope there is no need to change them: so that ...
4
votes
1answer
8k views

Firefox, error when accessing https url

I'm connected through a public wifi hotspot. No problem when using IExplorer. When I use Firefox, I obtain the following error message after asking for any https url, as for example https://www.google....
5
votes
3answers
3k views

Mutt will not let me save an SSL certificate

I have just set up Mutt to connect to my firm's IMAP and SMTP server. Everything works; but when I launch mutt, I get a warning about the certificate, and am given the option to: (r)eject, accept (o)...
0
votes
0answers
19 views

Occasional SSL problems on private WiFi

Once in a while I would get a problem like this: It happens to any website (e.g., even in Gmail). After a few hours the problem's gone even if I didn't do anything to fix it. What could be causing ...
-1
votes
1answer
89 views

How do I deal with NET:ERR_CERT_AUTHORITY_INVALID in Chrome?

My work place intercepts SSL connections, looks at their contents, and then passes the data to and from my machine and remote hosts - a kind of man-in-the-middle attack. This is not uncommon in ...
0
votes
0answers
316 views

Replaying Client Hello from previous session

I am basically testing an SSL server. I need to capture the client hello and then replay the same client hello with exact same field values. Here are the steps that I performed- 1) Captured the client ...
1
vote
1answer
28 views

Can it be found out, what websites/domains an SSL (pem) certificate approves of?

An SSL certificate (non-wildcard) can be issued to match multiple domains and subdomains, like mysub1.example1.com, and www.example2.com, and many others, all in one certificate with the same private ...
0
votes
1answer
5k views

https redirect to virtual host directory and http not working

System configuration ubuntu14.04 (64bit) XAMPP 1.8.3-5 Apache/2.4.10 (Unix) OpenSSL/1.0.1i PHP/5.5.15 mod_perl/2.0.8-dev Perl/v5.16.3 I have read on new features of apache 2.4 ...
0
votes
0answers
21 views

OpenSSL with added CA certificate on CentOS

So the problem is: I'm trying to add CA certificate on CentOS (on server) and check the working of SSL of one of my clients domain. The same thing works perfectly on Ubuntu: How do you add a ...
-1
votes
1answer
16 views

Plesk backend with Letsencrypt

I have a debian server with plesk and letsencrypt (via plesk) installed. Is it possible to use these plesk-generated certificates which are normally only for the subscriptions/domains to secure the ...
0
votes
0answers
11 views

What happens when certificates created by Acrobat expire?

If I create a certificate using Adobe Acrobat to encrypt PDFs, I notice that the certificate has an expiration date (5 years after its creation date) when looking them up on Certmgr. My question is, ...
0
votes
0answers
38 views

OpenLDAP TLS negotiation failure ldap_start_tls: Connect error (-11) additional info: A TLS packet with unexpected length was received

I have tried to configure Openldap with TLS. I have an TLS certificates and configured with .ldif file and changed necessary configuration in ldap.conf file. I am using ubuntu 14.04 LTS operating ...
3
votes
0answers
286 views

How to set TLS protocols as default after applying KB3140245?

This is about instructions to Windows update KB3140245 on a 64-bit Windows 7 machine. Microsoft released this update some time ago that "allows users to change system-wide default protocols for ...
0
votes
1answer
3k views

Roundcube, php 5.6 and self-signed certificates

I am currently porting one of my servers to another. That server is running Postfix + Dovecot using a self-signed certificate. My web-frontend used to be roundcube. Now is the problem, that the new ...
1
vote
1answer
64 views

How to speed up SSL connection establishment?

I have an OpenSSL setup on my Linux PC using Apache2. NO, I haven't enabled DNS resolving. I have the certificate on the machine, LOCALLY. Still, Chrome devtools tell me that Initial Connection took ...
0
votes
1answer
23 views

Human readable SSL/TLS packets

If I have a protocol-analyzer/packet-sniffer, such as wireshark installed on a particular device.. (or in this case; tcpdump & tshark etc. on my smartphone..) ..should I be able to read ...
0
votes
0answers
42 views

Can't connect with TLS1.2/Client auth from IE/Chrome. Only works with Firefox

I have a client for which I'm developing an app. That app must connect to their server, which sits behind a NetScaler load balancer configured with TLS1.2 only and requires client certificate ...
0
votes
1answer
50 views

How do I access an https site that still uses RC4?

I have an old wireless router that I haven't needed to change the configuration on for years. Recently I ran into some issues with my network and needed to turn on it's dhcp server. When i went to ...
1
vote
2answers
29k views

Self signed certificate is not appearing in Chrome after importing

I have a Synology NAS that creates a self signed certificate for SSL access. I'm using the latest Chrome on Windows 7. Upon visiting the NAS's landing page, Chrome presents a red warning to say that ...
1
vote
2answers
107 views

Chrome ERR_SSL_PROTOCOL_ERROR on known working site

When I connect to https://www.feeguarantee.com, Chrome gives me an ERR_SSL_PROTOCOL_ERROR. Firefox gives SSL_ERROR_RX_RECORD_TOO_LONG. Edge gives some generic error. All other sites appear to ...
0
votes
0answers
7 views

Courier does not work with courier-ssl installed

I have been trying to enable SSL on my courier IMAP server running Ubuntu 14.04. I installed courier-ssl and courier-imap-ssl. Then the server stopped working completely, with an "authentication error"...
0
votes
0answers
16 views

SSL/TLS validation errors on requests

Every single website I try to access is giving me a certificate error. I've tried checking the system's time, but it's correct. Thanks.
-1
votes
1answer
102 views

internet has been intermittently cutting off

So since last week, my internet has been intermittently cutting off. And it wouldn't completely cut off, rather all SSL sites would give me SSL errors, and everything else just wouldn't work. I ...
4
votes
4answers
21k views

How to install a CA key (self signed SSL) on ubuntu? [duplicate]

I have a bunch of machines that need to fetch https: off a server (or collection of servers). I'm operating a CA and self-signing the certificates on the server(s). The client machines are running ...
-1
votes
2answers
88 views

SSL certificate warning error for a website running on http and https

We have the website which is running on both http(80) and https (443). We purchased the SSL certificate and installed. It is working well for the web sites running only on https. If we access the ...
0
votes
0answers
82 views

502 Bad Gateway with Nginx as proxy for Jenkins

I'm using Centos 7 with Nginx and a SSL from letsencrypt to use as a proxy for jenkins on the same droplet. Everything was working up to the point I tried to proxy Jenkins.. which gave a 502 Bad ...
22
votes
4answers
19k views

What is the difference between a certificate and a key with respect to SSL?

Whenever I try to understand anything about SSL I always have a hard time keeping track of what "key" and "certificate" refer to. I fear many people use them incorrectly or interchangeably. Is there ...
0
votes
2answers
4k views

Cannot map Synology WebDAV (HTTPS) share on Windows

I've tried everything from this post that applied as well as the answers from this post. I can connect successfully with Kodi on Android as well as NetDrive on Windows. I cannot connect with Kodi on ...
1
vote
3answers
69 views

self signed certificate with openssl for server at home and no domain name

All of the articles I read online talk about creating a self-signed certificate for a domain you own. I have Apache2 set up on an Ubuntu 16.04 server at home. My ISP gives me a dynamic IP so I use No-...
0
votes
1answer
32 views

No “Proceed Anyway” option on ERR_CERT_COMMON_NAME_INVALID in Chrome

I want to go to this link. Chrome won't let me as there is no option on the "Privacy Error" screen shown below. I don't care if this connection is private. It's just a forum post that I wanted to ...
1
vote
1answer
1k views

How to bypass ERR_SSL_FALLBACK_BEYOND_MINIMUM_VERSION error?

I am using Chrome v48 and I am getting an error: ERR_SSL_FALLBACK_BEYOND_MINIMUM_VERSION I understand the reason for the error (server is using an unsupported SSL version; SSLv3 I am guessing). ...
1
vote
1answer
809 views

Is it possible to turn on TLS 1.2 in .jnlp file?

is it possible to turn on TLS 1.2 in .jnlp file to download .jar from HTTPS server where only TLS 1.2 is set? I've tried in many ways: <resources> <j2se (...) /> <jar (...) /&...
1
vote
1answer
64 views

How to install let's Encrypt on Amazon Linux

How do I install Let's Encrypt Certificates on amazon Linux I already have a WordPress website hosted. Can anyone tell me the steps how do i start with it and what are the commands and what ...
0
votes
1answer
180 views

How to create SSL certificate with multiple DNS entries, signed with my own CA certificate

I need help creating SSL certificate with multiple subjectAltNames, signed with my own selfbrewed CA certificate. What I need: I'm on OSX 10.10.5 I have myCA.cer which I use to sign another SSL ...