SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

0
votes
2answers
44 views

Which is more secure, legacy RDP encryption or SSL?

Windows offers the option of using either RDP encryption or SSL (TLS 1.0) to secure a remote desktop connection. Which option is more secure? Given the recent discoveries, is TLS 1.0 still secure in ...
0
votes
2answers
35 views

SSLCipherSuite settings in Apache for supporting TLS 1.0, 1.1 and 1.2

I have an Apache 2.4.7 web server running multiple domain names using a single IP address. As a result of the Poodle vulnerability, I added the following SSLCipherSuite line. It worked fine for a ...
2
votes
2answers
2k views

How do add a certificate from a self-signed server to trusted certificates in Chrome?

I have a dedicated server with a wiki and want to secure it so nobody can read my articles by sniffing my pages. I do not want to pay for a valid certificate so I created a self-signed certificate. ...
0
votes
0answers
18 views

nginx http to https proxy with self-signed certificate

I have an nginx proxy to redirect http requests with a specified port to another https url. Here is my configuration so far: server { listen 59848; location / { resolver 8.8.8.8; ...
1
vote
0answers
7 views

lighttpd complains about ssl.use-compression

I am trying to apply some of the tricks described here, and the problem is having ssl.use-compression = "disable" in lighttpd.conf, because server reports WARNING: unknown config-key: ...
0
votes
0answers
9 views

Enable CRL Checks In Google Chrome

I'm pretty aware of how CRL lists work in Google Chrome, but I know that those only contain trusted certificate authorities. I want to test my own self signed certificates and update and revoke them, ...
0
votes
0answers
4 views

Can iOS devices be made to print over SSL? [migrated]

I configured the Avahi/CUPS combination here and we can now submit print-jobs from iPhones and iPads on the LAN. However, it seems, the job-submissions are not encrypted -- something, I'd like to ...
0
votes
1answer
23 views

Can’t connect to Apache webserver via HTTPS (HTTP works just fine)

I’m running a XAMPP 5.6.3 installation on my desktop Windows 8.1 system, and I have an issue with connecting to the Apache webserver. I can still connect normally through port 80 and HTTP, but if I ...
0
votes
0answers
19 views

Beaglebone Black OpenSSl crypto acceleration

I'm running Debian Wheezy at my Beaglebone Black. Is OpenSSL using the hardware crypto accelerator by default? If no, how can I enable it?
1
vote
0answers
28 views

I destroyed my Mac's PHP setup: SSL certification fails

Long story short, I deleted the PHP symlink on my Mac, and replaced it with a symlink from XAMPP. Now it seems that there's a problem with my SSL configuration or what seems to me, a lack thereof. ...
25
votes
2answers
2k views

What is the superfish SSL certificate and where did it originate

I recently bought a new laptop, every https:// connection I do to any site regardless of browser chain back to a root certificate issued by "superfish, inc". I have had a dig around but I can't seem ...
2
votes
1answer
3k views

Firefox, error when accessing https url

I'm connected through a public wifi hotspot. No problem when using IExplorer. When I use Firefox, I obtain the following error message after asking for any https url, as for example ...
0
votes
0answers
17 views

SSL succesfully installed but not working - Private server public domain name

I'm working on a private Centos server with a private IP (10.x.x.x) linked also to a domain name. DNS are correctly configured. Yesterday the sysadmin installed a SSL certificate, and got the ...
-1
votes
1answer
3k views

Windows 7 64-bit SSL untrusted certificate error when visiting any SSL website

I have installed Windows 7 64-bit and I get an untrusted certificate error when visiting any website served via SSL, like Google.com, Gmail.com, etc. I tried this using Firefox, IE and Chrome and it ...
0
votes
1answer
23 views

Firefox giving SSL error message after installing new certs

Firefox users are getting the message This connection is untrusted when going to our web site. under the technical details section it lists the reason as "The certificate is not trusted because the ...
3
votes
2answers
6k views

Tortoise SVN v1.66 - authorization failed: Could not authenticate to server: could not parse

So a co-worker is having an issue with connecting to a SVN repo over HTTPS. Here are the details: OS: Windows 7 Enterprise x64 SVN Client: Tortoise SVN 1.6.6 x64 So, whenever he connects (via a ...
0
votes
1answer
60 views

Probing server in Mozilla Thunderbird won't finish

I am trying to configure an e-mail account in Mozilla Firefox that some months ago used to work. However, when I try to configure it, it will stop when "Probing server", it keeps forever probing the ...
0
votes
3answers
2k views

puppetd --test err: Could not request certificate: Connection refused - connect(2) Exiting; failed to retrieve certificate and waitforcert is disabled

I m new to puppet and i m trying to have connection to my puppet server, when i ping to my puppetmaster it runs well but when i run puppetd --test t shows me following error. puppetd --test info: ...
1
vote
4answers
3k views

I'm receiving an SSL error in various browsers, but I can't find non-SSL content

I'm receiving an error with my SSL connection. Using google chrome I see the following error: Your connection is encrypted with 128-bit encryption ... however this page includes other ...
0
votes
1answer
139 views

openSSL and gnuTLS can't connect to OpenWRT web interface, why not?

I have some weirdness securely connecting to OpenWRT from IceWeasel (debian Firefox). I find recent Firefox's error messages less useful for troubleshooting. So I want some HTTPS tool to run tests ...
-1
votes
0answers
18 views

I cannot access the github website through Chrome

I am getting the following error when I enter github.com into my chrome web browser: SSL connection error Hide details Unable to make a secure connection to the server. This may be a problem with ...
11
votes
3answers
4k views

Do web browsers cache SSL certificates?

Do any web browsers cache SSL server certificates? For example, if I change the SSL certificate on a web server, will all of the web browsers pick up the new certificate when they connect via SSL, or ...
15
votes
7answers
2k views

Why is an unsigned SSL cert treated worse than no SSL cert?

If I view a site that has a unsigned or self-signed SSL cert, my browser gives me a warning. Yet the same browser has no problem allowing credentials to be sent across unsecured pages. Why is the ...
2
votes
1answer
73 views

dyld: Library not loaded: /usr/lib/libcurl.4.dylib curl SSL error

I'm not sure what happened to my system but I am having an issue with dyld/curl, affecting my overall computer performance. I am on Yosemite. I have a feeling it's the Conda openssl. How do I just ...
2
votes
1answer
7k views

How to configure GlassFish v3.1 to use SSL?

We are looking for simple step-by-step manuals how to configure GlassFish v3.1 to use SSL. We are running few legacy application under GlassFish and we hope there is no need to change them: so that ...
1
vote
2answers
38 views

Make Chrome use SSL tunnel as a proxy (HTTP CONNECT) for HTTP requests

I want to make Chrome use SSL for all outgoing requests to a proxy (which I control). The proxy can accept a plain HTTPS connection (as a transparent proxy), and it also supports a non-encrypted HTTP ...
0
votes
0answers
166 views

Nginx/SNI: Return 444 if there's no certificate available for a specific domain hosted on the same IP

I'm stuck with configuring nginx regarding SSL and SNI support. In order to simplify my case let's say I have two domains, foo.com and bar.com. I have only one IP and both domains are mapped to this ...
0
votes
0answers
12 views

How to get current SSH passprase from Apache2 server?

I’ve fogotten passphrase for my SSL certificate private key, however, I’ve got running Apache sever, that uses that key. Is there any way to get passprase or unencrypted version of private key from ...
0
votes
2answers
483 views

Disabling RC4 in the SSL cipher suite of an Apache server

I'm trying to disable RC4 for an Apache 2.2.29 server running on a CentOS 6.5 VPS and I can't seem to succeed. A recently purchased business-validated certificate is installed and SSL connections are ...
0
votes
2answers
5k views

vsftpd: 500 OOPS: could not bind listening IPv4 socket

I will use vsftpd as a ftp server. I did all changes on /etc/vsftpd.conf. These changes are (according to digitalocean): anonymous_enable=NO write_enable=YES local_enable=YES chroot_local_user=YES ...
0
votes
0answers
70 views

SSLStrip and WWWW Issue

I have been playing around with the mana-toolkit (https://github.com/sensepost/mana) which uses a revised form of SSLstrip to support HSTS. I have noticed that SSLStrip adds an extra "w" to the ...
2
votes
3answers
880 views

SSL proxy with stunnel

I'm trying to set an SSL connection with stunnel. Some kind of SSL proxy. Final aim Connect http only CLIENT to https only SERVER. My plan is CLIENT: change endpoint to PROXY PROXY: use stunnel ...
1
vote
0answers
14 views

ApacheDS: Where is the CA certificate?

ApacheDS auto-installs with an automatically generated certificate. For testing purposes, I'd like to just use this for now, but in order to trust it, I need the CA cert ...
0
votes
1answer
215 views

Enable TLS 1.0 using registry

I am trying to enable TLS 1.0 in the client side computer .The client side computer is windows XP with IE 6 and server is windows server 2012 R2. In our server TLS 1.0 is enabled and SSL 3.0 and 2.0 ...
4
votes
2answers
5k views

How do you fix an incomplete SSL chain

I have a Go Daddy SSL cert installed, and works fine everywhere except Android. https://www.ssllabs.com/ssltest/analyze.html says the chain is incomplete, and I read on stack overflow that an SSL ...
1
vote
2answers
211 views

get Firefox to trust expired Charles CA Certificate

When I use the security certificate supplied by Charles Proxy in Firefox (35.0) to decrypt SSL traffic, it results in Firefox showing The certificate is not trusted because the issuer certificate ...
0
votes
0answers
2k views

Dropbox website does not open and gives SSL related error

When I open the website www.dropbox.com in my Windows server 2003 R2 service pack 2 PC, I get error as shown below: I checked settings of Internet explorer and everything seems to be ok. Also, date ...
82
votes
17answers
84k views

Is there a tool that can test what SSL/TLS cipher suites a particular website offers?

Is there a tool that can test what SSL/TLS cipher suites a particular website offers? I've tried openssl, but if you examine the output: $ echo -n | openssl s_client -connect www.google.com:443 ...
0
votes
1answer
55 views

Firefox import PEM certificate chain fails

I am trying to import a cert chain into Firefox 31.3 ESR. The origin chain is a p7b file which I have converted with OpenSSL to PEM format. curl happily accepts that chain and establishes the ...
-1
votes
1answer
25 views

Connecting to Apache server over SSL when it's behind NAT and the public IP & port are known?

I want to connect to an Apache server over SSL (with both client & server certificates) when both the client and server are behind NAT firewalls. I can't port-forward and I have to assume that all ...
1
vote
1answer
600 views

Setting up IMAP/SSL on Ubuntu with Dovecot, Thunderbird, and a self-signed certificate

I have a new server that I am setting up. It currently has a very limited audience (just me), but I am trying to set up IMAPSSL and secure SMTP. Since the audience is so limited, I have decided to ...
0
votes
1answer
52 views

Proxy at work makes https sites show as invalid cert authority, how to fix?

The proxy at work makes https sites show up as invalid cert authority, I would prefer not to ever see that screen again, any ideas or hints on how to get around that screen, whether globally on the ...
0
votes
0answers
54 views

Mumble Server (Murmur) 3rd Party SSL Installation on Ubuntu

I recently purchased a wildcard certificate for my website and would like to also add it to my murmur server but I am having trouble finding out the proper steps to take to do this. The certificate I ...
0
votes
3answers
4k views

How can I disable security alerts for self-signed certificates in Outlook 2010?

I've just switched from using unencrypted SMTP and IMAP for mail in Outlook 2010. My mail is hosted on a shared hosting setup and not my own, dedicated server. The certificate issued by the server is ...
0
votes
1answer
41 views

Does SSL / HTTPS increase site speed? [closed]

I noticed that our company website loaded incalculably faster once we installed SSL with EV. Is increased speed an expected result after installing SSL? Can I expect the same result if I install a ...
4
votes
2answers
679 views

Where to get certificates for Acrobat PDF

When sending an invoice in PDF format, it is useful (in some countries obligatory) to sign this PDF digitally. Of course, I could create a self-signed certificate via OpenSSL, but a warning "could ...
16
votes
2answers
11k views

Can the Telnet/Netcat client communicate over SSL?

I would like to test client connections with IMAP over SSL, HTTPS, and other secure text-based Internet protocols over SSL/TLS, the same way I would using Telnet or Netcat if they were not tunneled ...
3
votes
1answer
182 views

Expired web/SSL certificate error on only one computer

I have a strange problem with one website's SSL certificate that only affects one computer Windows 7 operating system. The site works fine on other Win 7 computers with no error, pulling valid ...
0
votes
0answers
17 views

No login input in Chrome on SSL (which is “blocking” Anno2070)

I bought anno2070 two days ago on steam but couldn't play since. The game keeps asking me for the activation code which I enter and it accepts but than it redirects me to the activation window. I ...
0
votes
0answers
70 views

IRC over SSL on Weechat

So I'm trying to see up SSL for IRC through weechat, but have been having issues. I've generated a .pem file for my nick and also have installed the ca-bundle.crt, but keep getting a TLS handshake ...