SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

0
votes
1answer
131 views

Apache HTTPD Configuration Errors During Restart

When I try to relaunch the Apache HTTP Daemon on OS X 10.10.4 'Yosemite' using either apachectl graceful or apachectl restart via Terminal, the software spouts the following error messages: AH00548: ...
0
votes
1answer
17 views

How can I get the list of the currently installed certificate authority on my ubuntu?

If I'm correct, the list of CA can be found in /etc/ssl/certs/ca-certificates.crt, but that's only the certificates. My question is how can I get the name of those CA ? I want to know if the CA my ...
0
votes
1answer
23 views

Apache Upgrade leads to SSL handshake failure with Java client

I have an apache 2.4.10 to upgrade to 2.4.12, underlying openssl 0.9.8, with the following SSL configuration: SSLCipherSuite ...
0
votes
0answers
16 views

Install Tomcat SSL cert in CUCM signed by CA created through openssl

My problem looks like this. I want to install a Tomcat certificate in CUCM signed by CA created by me which exists in my ubuntu operating system.This is what I thought the steps should be: Generate ...
0
votes
1answer
20 views

Deleted “broken” certificate in OS X, need help to fix it

I experienced the Mavericks security update that broke one or more trusted root CAs. At the time I couldn't find any info on this, and in my infinite wisdom (and looming deadline) I tried deleting the ...
0
votes
1answer
43 views

Decrypt SSL at the TCP level

I'm trying to decrypt SSL at the TCP level for data that I'm sending to a remote server. The reason I'm doing this is because the remote host intermittently sends me RSTs, and I'm trying to identify a ...
0
votes
0answers
23 views

Configuring Chrome to Ignore or Accept Specific Untrusted Certificates

There are various personal websites and LAN addresses which I access through https. Obviously they're mine so they can be trusted, but since they all deploy a self-signed certificate, Chrome displays ...
-1
votes
0answers
6 views

Creating a valid cert from a signed one?

Okay, so apparently it is not possible to create (valid) self signed certs using a certificate that has been signed by a trusted CA. These two questions on SU make this clear. The thing is, there is ...
1
vote
2answers
9 views

Nessus on Linux detected SSL version 2 and 3 because of Samba. How to fix it?

We are using Nessus to confirm that our server does not have SSL 2 and 3 supported via any of the ports. We came down to the last product - samba (3.6.25.) This samba version does not support turning ...
1
vote
1answer
9 views

SonicWALL Net Extender, security?

I'm new to SonicWALL. How secure is the SonicWALL Net Extender? It seems to be using PTPP, but calls it SSL VPN, are they different. Am I secure? If its bad, whats better? Thanks
-2
votes
1answer
25 views

Where to get client certificates for Java client that uses TLS? [closed]

I am writing a Java client to consume payment gateway rest services. If I want to create a HTTPS client that uses client certificates, from where to get certificate? Is it is something to ask from the ...
1
vote
2answers
792 views

Export installed certificate and private key from a command line remotely in Windows using something besides the certmgr.MSC tool

I need to be able to remotely export an installed computer certificate with the full certificate chain and private keys on a Windows server. The cert is used for IIS, and I want to use it for an ...
-1
votes
0answers
21 views

Create SSL TCP connection with java code to send string data [closed]

I am trying to performance test a server that uses SSL TCP socket communication. Need to send a string data to the server and validate the response back. Is there any way to perform this with java ...
0
votes
1answer
25 views

Acessing a secure site via Putty SSH Tunnel outside the browser

I wish to access all requests to selected secure domain e.g. https://testdomain.com from anywhere on my pc (not just browsers) via putty ssh tunnel. I tried using a dynamic and this worked when I ...
1
vote
1answer
35 views

Reverse Proxy? For devices(without internet access), in a LAN with an IIS(that has internet) + SSL external website [closed]

I am facing a situation where I have a LAN network, composed of multiples devices that have access to the LAN but not internet and within the LAN there is a computer with IIS 7 that has access to the ...
2
votes
1answer
4k views

Firefox, error when accessing https url

I'm connected through a public wifi hotspot. No problem when using IExplorer. When I use Firefox, I obtain the following error message after asking for any https url, as for example ...
1
vote
4answers
3k views

I'm receiving an SSL error in various browsers, but I can't find non-SSL content

I'm receiving an error with my SSL connection. Using google chrome I see the following error: Your connection is encrypted with 128-bit encryption ... however this page includes other ...
0
votes
0answers
10 views

Enforcing RC4 cipher and testing enabled ciphers with OpenSSL

I am trying to enable and enforce the RC4 cipher on Apache 2.4. I checked the Apache SSL HOWTO. It says the RC4 cipher can be enabled in the two ways below: SSLCipherSuite ...
0
votes
0answers
44 views

Thunderbird: Error: imap.server.com : server does not support RFC 5746, see CVE-2009-3555

I'm getting this error when checking my mail, and I can't download my mail. I recently updated Thundirbird yesterday, but it restarted and was working fine for many hours. I saw this question: How to ...
2
votes
2answers
6k views

SSL https (http secure) sites won't display is client or server side?

Oddly, python.org has suddenly become unreachable for me through the Archlinux repo version of Firefox (v27 and v28.0 update): Secure Connection Failed An error occurred during a connection ...
0
votes
1answer
34 views

Configuring Chrome to Ignore SSL Warning on Specific Addresses

I guess there no need to introduce the "Privacy error" page in Chrome that appears whenever one uses SSL to access an uncertified website that has no signed certificate (red "X" on the lock icon). ...
0
votes
2answers
27 views

Windows can't find the issuer of a client certificate

Hello and sorry about my bad english. I have a problem about a PKI which I did on Ubuntu using OpenSSL: when I installed the root certificate on Windows (it's a simple hierarchy: ROOT -> Intermediate ...
3
votes
5answers
16k views

Enable TLS 1.1 and 1.2 for Clients on Java 7

Java 7 disables TLS 1.1 and 1.2 for clients. From Java Cryptography Architecture Oracle Providers Documentation: Although SunJSSE in the Java SE 7 release supports TLS 1.1 and TLS 1.2, neither ...
0
votes
1answer
74 views

Google Chrome gives “SHA1 for message authentication” with new GeoTrust certificates

I purchased the GeoTrust QuickSSL Premium certificate from ssls.com and installed it on my web server which is running Linux Apache on CentOS 6.5. Google Chrome on Windows 7 said "The connection ...
2
votes
1answer
8k views

How to properly install certificate issued to me?

I tried various ways to install certificate, but it seems it either not being seen by linux or something else is wrong. I got .pfx to be able to connect to another server via vpn (need to use Cisco ...
0
votes
0answers
39 views

Unable to open two (so far) SSL sites, all others work normally

I have tried IE, Chrome, and FF. I have turned off WiFi on my mobile device and the connection goes through normally. From my computers connected to my internet, I'm unable to load the pages, it just ...
2
votes
1answer
7k views

Every website is showing untrusted certificate warning on all browsers

I'm on windows 7. Every website is showing untrusted security warning. I tried every browser that I have. I tried using https. This is extremely odd, it never happened before, well it could happen ...
0
votes
0answers
31 views

Configuring offlineimap for gmail: SSL error

I'm trying to configure offlineimap to download my gmail but am getting the error: OfflineIMAP 6.5.7 Licensed under the GNU GPL v2 or any later version (with an OpenSSL exception) Account sync ...
105
votes
17answers
108k views

How do I list the SSL/TLS cipher suites a particular website offers?

How can I retrieve a list of the SSL/TLS cipher suites a particular website offers? I've tried openssl, but if you examine the output: $ echo -n | openssl s_client -connect www.google.com:443 ...
6
votes
3answers
8k views

How do you fix an incomplete SSL chain

I have a Go Daddy SSL cert installed, and works fine everywhere except Android. https://www.ssllabs.com/ssltest/analyze.html says the chain is incomplete, and I read on stack overflow that an SSL ...
0
votes
1answer
20 views

script a list of websites to determine ciphers

Have a list of websites I would like to check the ciphers. We will be using SSL decryption and want to see if I can in advance check the sites that will not support our decipher. We have some ...
2
votes
1answer
8k views

How to configure GlassFish v3.1 to use SSL?

We are looking for simple step-by-step manuals how to configure GlassFish v3.1 to use SSL. We are running few legacy application under GlassFish and we hope there is no need to change them: so that ...
1
vote
0answers
36 views

Running two FTP sites both with SSL on the same server?

I have built an internal ftp server on our network and am having it be accessed from the outside. The server is running 2012 R2 and has IIS 8.5. When I set up the sites I have the data channel open ...
2
votes
0answers
66 views

MAMP in MAC Yosemite SSL,WSGI

I installed MAMP after testing with XAMPP , I require to install Openssl or generate SSL certificates and a controller in wsgi run in XAMPP not make it but I wonder if someone can help me configure ...
7
votes
8answers
25k views

Firefox: This connection is untrusted + Behind corporate firewall

I've seen some similar issues strewn throughout Google's results about this, but none seem to be corporate-specific. I continually get the 'This connection is untrusted' screen every time I attempt ...
1
vote
1answer
34 views

Creating PEM public key for Google App Engine

I am running a small company and unfortunately my IT support just quit. I am running a site on GAE. My SSL expired and I ordered a new one, receiving the following files: 3 .cer files in an SHA-1 ...
12
votes
5answers
19k views

How much information can my ISP see?

Is it possible for my ISP to see the passwords that I enter on websites and in chat programs? And what about SSL websites that start with https, do they encrypt my username and password before ...
2
votes
0answers
32 views

SSL issue: The private key did not match the public key provided

I followed the instructions outlined here by amazon. A quick summary: Created a private key openssl genrsa -out my-private-key.pem 2048 Created a CSRopenssl req -sha256 -new -key ...
1
vote
2answers
103 views

Disable Chrome from checking SSL certificates completely

I have to enter a website that has an invalid certificate and I can't because Chrome won't let me (to protect me, how hilarious!). I don't want or need to be protected, so I just want to completely ...
0
votes
1answer
39 views

Unable to access github, getting ERR_SSL_PROTOCOL_ERROR error

When I access github.com from my office I am getting this error on https://assets-cdn.github.com, SSL connection error ERR_SSL_PROTOCOL_ERROR Unable to make a secure connection to the server. This ...
0
votes
0answers
23 views

Configure nginx to forward SSL to Apache

I'm trying to configure NGINX as a reverse proxy for Apache, and I want Apache to handle the SSL part of things, but I keep getting 204 (no content). Here are my configuration files so far: ...
62
votes
11answers
28k views

Why won't OS X trust GitHub's SSL certificate?

When I go to any github.com page in Chrome, I get a big ugly error: You attempted to reach github.com, but the server presented a certificate issued by an entity that is not trusted by your ...
6
votes
6answers
13k views

SSL certificate verification failure in Chrome, Heartbleed bug?

For some reasons I'm running into SSL problems since a few days. When trying to clone a git repository for example I receive the following error message: fatal: unable to access ...
5
votes
2answers
1k views

Can I be a root certificate authority for my local network?

This may sound crazy, but can I be the root certificate authority? I mean, I have many computers and smart devices in my home. Remote Desktop warns for the certificate not being trusted, because it ...
0
votes
0answers
20 views

Multi hop SSH with certificate on bastion server

I have this situtation: my local machine a login server (with token implementation) a set of machines accessible only with another authentication from login server (token implementation too) this ...
0
votes
0answers
53 views

Apache fails to start with TLSv1 disabled and does not recognize TLSv1.1 and TLSv1.2

I'm having issues trying to disable TLS 1.0 on apache as described here: http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslprotocol $ apache2 -v Server version: Apache/2.2.22 (Ubuntu) Server ...
3
votes
2answers
784 views

How to troubleshoot “Secure Connection Failed” in Firefox appearing since the version 38?

Since I upgraded Firefox to the version 38 I encounter problem while sending a certain form on the website https://usercenter.checkpoint.com/ Most of the website works normally but sending a form ...
0
votes
0answers
26 views

How do I manage trust exceptions in Firefox?

Through the course of using Firefox over the years, I've had to manually trust certificates for a number of HTTPS sites for various reasons. I'm trying to find a way to view the list of these sites, ...
1
vote
1answer
53 views

lighttpd complains about ssl.use-compression

I am trying to apply some of the tricks described here, and the problem is having ssl.use-compression = "disable" in lighttpd.conf, because server reports WARNING: unknown config-key: ...
3
votes
1answer
88 views

Apache serves an old SSL certificate

I'm hosting a webpage with Apache on a Raspberry Pi (Debian), and can't seem to get the server to issue the current certificate. I generated a self-signed SSL certificate in /home/pi/ssl/ with: ...