SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

-1
votes
2answers
4k views

Windows 7 64-bit SSL untrusted certificate error when visiting any SSL website

I have installed Windows 7 64-bit and I get an untrusted certificate error when visiting any website served via SSL, like Google.com, Gmail.com, etc. I tried this using Firefox, IE and Chrome and it ...
1
vote
2answers
674 views

Firefox 39 - Secure Connection Failed - weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message

As of Firefox 39, connecting to an old administrative interface for some third party software gave the following message: Secure Connection Failed An error occurred during a connection to ...
0
votes
1answer
18 views

Can't open certain websites through SSL

I recently switched to Window 8.1, I have problem in opening certain websites, for example I can't open any Wikipedia page (through Google search or directly), browser fell into an infinite loading ...
0
votes
0answers
100 views

Thunderbird: Error: imap.server.com : server does not support RFC 5746, see CVE-2009-3555

I'm getting this error when checking my mail, and I can't download my mail. I recently updated Thundirbird yesterday, but it restarted and was working fine for many hours. I saw this question: How to ...
8
votes
8answers
25k views

Firefox: This connection is untrusted + Behind corporate firewall

I've seen some similar issues strewn throughout Google's results about this, but none seem to be corporate-specific. I continually get the 'This connection is untrusted' screen every time I attempt ...
8
votes
4answers
581 views

Chrome adds weird HTTPS:1 header to all requests

I've been getting a lot of weird errors on websites that relate to HTTPS. These sites works great in FF and IE, but fail to load in Chrome. It appears that though I'm requesting an unsecured URL ...
3
votes
1answer
5k views

Firefox, error when accessing https url

I'm connected through a public wifi hotspot. No problem when using IExplorer. When I use Firefox, I obtain the following error message after asking for any https url, as for example ...
0
votes
1answer
18 views

Where does Firefox get the HSTS information from?

I have a local server serving HTTPS using a self-signed certificate. It does not serve http. The certificate is issued with cn=host1.subdomain1.domain1. The server is reachable under name host2, too. ...
1
vote
0answers
107 views

Chrome ignores self-signed SSL certificates in MacOS

I'm trying to get a self-signed certificate from a Raspberry Pi accepted by Chrome (42.0.2311.90) in OSX 10.10.2. A method I've found involves: click the (red, crossed) lock symbol left of the URL ...
0
votes
0answers
21 views

Chrome suddenly red HTTPS on mobile but not on desktop

Yesterday I enabled OCSP stapling for my website in nginx. Now when I check my website using Qualys SSL Labs I have 2 trust paths, 1 using a SHA1 root certificate and 1 using a SHA256 root ...
22
votes
4answers
15k views

Can the telnet or netcat clients communicate over SSL?

I would like to test client connections with IMAP over SSL, HTTPS, and other secure text-based Internet protocols over SSL/TLS, the same way I would using telnet or netcat if they were not tunneled ...
0
votes
0answers
11 views

How to install sll for python?

I have a strange problem that is described at SO http://stackoverflow.com/questions/31549052/how-to-interpret-this-traceback We got nearly nowhere trying to solve the problem though it doesn't look ...
1
vote
4answers
3k views

I'm receiving an SSL error in various browsers, but I can't find non-SSL content

I'm receiving an error with my SSL connection. Using google chrome I see the following error: Your connection is encrypted with 128-bit encryption ... however this page includes other ...
0
votes
0answers
37 views

Chrome is showing incomplete or wrong cert info

We've got a webserver (Apache) at work that is using https for our webpage. The thing is that everytime I enter this page from chrome I get: NET::ERR_CERT_AUTHORITY_INVALID I created the certificate ...
1
vote
0answers
43 views

Is it possible to turn on TLS 1.2 in .jnlp file?

is it possible to turn on TLS 1.2 in .jnlp file to download .jar from HTTPS server where only TLS 1.2 is set? I've tried in many ways: <resources> <j2se (...) /> <jar (...) ...
44
votes
2answers
7k views

Firefox “Untrusted Connection” warnings when visiting reputable HTTPS sites when using child's account

When using Firefox on Windows, I see an "Untrusted Connection" warning when visiting any HTTPS site, including very reputable ones such as https://www.google.com and https://search.yahoo.com. The ...
0
votes
0answers
26 views

How do you setup SCM Manager to use SSL, and not run off of port 8080?

I am trying to use SCM Manager to host a Mercurial repository, running off of a CentOS box, and the accessing machines are Windows 7 (if it matters). I have gotten the default setup to work, however I ...
0
votes
0answers
4 views

SMIME cannot assigned in iOS [migrated]

I can send encrypted and signed e-mails from Thunderbird and Outlook eMail Client. I can also decrypt and verify the emails. The problem is that on iOS I can't enable assign my certificates. In ...
0
votes
1answer
2k views

https redirect to virtual host directory and http not working

System configuration ubuntu14.04 (64bit) XAMPP 1.8.3-5 Apache/2.4.10 (Unix) OpenSSL/1.0.1i PHP/5.5.15 mod_perl/2.0.8-dev Perl/v5.16.3 I have read on new features of apache 2.4 ...
1
vote
1answer
52 views

SSL stopped working

My SSL suddenly stopped serving my site. It could have been because I installed nginx on my server, then uninstalled it using apt-get purge nginx* For about 30 minutes it was serving pages ...
27
votes
3answers
39k views

How to create my own certificate chain?

I would like to setup my own OCSP Responder (just for testing purposes). This requires me to have a root certificate and a few certificates generated from it. I've managed to create a self-signed ...
2
votes
1answer
8k views

How to configure GlassFish v3.1 to use SSL?

We are looking for simple step-by-step manuals how to configure GlassFish v3.1 to use SSL. We are running few legacy application under GlassFish and we hope there is no need to change them: so that ...
4
votes
1answer
41 views

How to install a self-signed certificate in chromium under Debian

I have a web server that uses https protocol. I want to create a self signed certificate so I did the following: Issued this command: openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout ...
1
vote
0answers
15 views

Extract Certificate Information automatically [migrated]

In my current setting I have 16 production servers and another 16 to 20 on Dev and QA servers. I also have a lot of certificates in them. We are trying to inventory everything so that we dont miss out ...
1
vote
3answers
3k views

Disable Specific Cipher Suites Apache with WHM/cPanel

We are operating a few web servers that have WHM/cPanel installed so we can easily mange our sites and projects. To ensure our information and users information is secured, we have been running some ...
-1
votes
0answers
40 views

How to fix “disable SSL 3 to mitigate”

I have purchased SSL from here : https://www.ssl2buy.com/comodo-positive-ssl.php Here the SSL domain : https://www.monstermmorpg.com Now when i analyze here it gets grade C ...
1
vote
2answers
1k views

Nginx-Remove WWW from HTTPS

I would like to ask for some help with the following Nginx configuration, so that URLs such as https://www.mywebsite.com get rewritten as https://mywebsite.com. I am currently using the following ...
1
vote
3answers
125 views

My blog, under ssl

I want to have all my content from my blog distributed in a ssl encrypted connection (meaning, I want to go https) What are the drawbacks with respect to an unencrypted, "regular" http connection?
2
votes
1answer
614 views

Mac OS X Yosemite and Client SSL Certificates

Ever since I upgraded from Mavericks to Yosemite, my SSL Client Certificates have stopped working in certain places. They still work in web browsers and in wget, but they have stopped working in curl ...
0
votes
2answers
50 views

Apache Upgrade leads to SSL handshake failure with Java client

I have an apache 2.4.10 to upgrade to 2.4.12, underlying openssl 0.9.8, with the following SSL configuration: SSLCipherSuite ...
1
vote
1answer
37 views

How HTTPs proxies can detect HTTPs packets?

I know the theory about proxies, what they are and their purposes. Sometimes, HTTP(s) proxies are used within a company to filter outgoing network, for example, to prevent anything but HTTP/HTTPs. I ...
0
votes
1answer
12 views

How to daisy chain two web (Apache) servers with one in DMZ and the other in secure zone?

I need to daisy chain two Apache servers for following reason. A server-side application is compiled as a CGI module. It needs to work with databases, which are in secure zones behind firewalls. That ...
0
votes
1answer
36 views

Website “unsafe” on Chrome and other browsers

I recently switches to HTTPS with a free certificate from WoSign (https://buy.wosign.com/free/ definitely recommend it because it provides free SSL for up to 3 year and free renewal and multiple ...
-1
votes
0answers
7 views

Cant connect to mysql ssl with compiled php (ubuntu 12) [migrated]

I have been bashing my head against a wall for a couple of days now. I just cant figure it out. I Run ubuntu 12 with plesk 12 and apache 2.2. I have compiled PHP 5.6.10 and PHP 5.6.11 with these ...
0
votes
0answers
39 views

squid proxy 503 Service Unavailable response for https url

I am using squild-3.5.4 version on centos 6.3 . To support HTTPS url I configured Intercept HTTPS CONNECT messages with SSL-Bump from Squid documentation. But this configuration not working with https ...
-2
votes
0answers
18 views

How do I make a cert and key file?

I am writing a python program using ssl for the first time. I am wanting my program to send info to and back from the client in an encrypted manner. I was following the example for server-side code ...
-3
votes
0answers
25 views

how to redirect https to http

A Linux laptop is used as a wifi hotspot during conferences. Audience can connect to consult a webpage with broadcastinglive scientific data. It's captive, nobody can surf the web, all is redirected ...
0
votes
1answer
152 views

Apache HTTPD Configuration Errors During Restart

When I try to relaunch the Apache HTTP Daemon on OS X 10.10.4 'Yosemite' using either apachectl graceful or apachectl restart via Terminal, the software spouts the following error messages: AH00548: ...
0
votes
1answer
22 views

How can I get the list of the currently installed certificate authority on my ubuntu?

If I'm correct, the list of CA can be found in /etc/ssl/certs/ca-certificates.crt, but that's only the certificates. My question is how can I get the name of those CA ? I want to know if the CA my ...
0
votes
0answers
47 views

Install Tomcat SSL cert in CUCM signed by CA created through openssl

My problem looks like this. I want to install a Tomcat certificate in CUCM signed by CA created by me which exists in my ubuntu operating system.This is what I thought the steps should be: Generate ...
0
votes
1answer
22 views

Deleted “broken” certificate in OS X, need help to fix it

I experienced the Mavericks security update that broke one or more trusted root CAs. At the time I couldn't find any info on this, and in my infinite wisdom (and looming deadline) I tried deleting the ...
0
votes
1answer
49 views

Decrypt SSL at the TCP level

I'm trying to decrypt SSL at the TCP level for data that I'm sending to a remote server. The reason I'm doing this is because the remote host intermittently sends me RSTs, and I'm trying to identify a ...
0
votes
0answers
47 views

Configuring Chrome to Ignore or Accept Specific Untrusted Certificates

There are various personal websites and LAN addresses which I access through https. Obviously they're mine so they can be trusted, but since they all deploy a self-signed certificate, Chrome displays ...
-1
votes
0answers
13 views

Creating a valid cert from a signed one?

Okay, so apparently it is not possible to create (valid) self signed certs using a certificate that has been signed by a trusted CA. These two questions on SU make this clear. The thing is, there is ...
1
vote
2answers
11 views

Nessus on Linux detected SSL version 2 and 3 because of Samba. How to fix it?

We are using Nessus to confirm that our server does not have SSL 2 and 3 supported via any of the ports. We came down to the last product - samba (3.6.25.) This samba version does not support turning ...
1
vote
1answer
18 views

SonicWALL Net Extender, security?

I'm new to SonicWALL. How secure is the SonicWALL Net Extender? It seems to be using PTPP, but calls it SSL VPN, are they different. Am I secure? If its bad, whats better? Thanks
-2
votes
1answer
32 views

Where to get client certificates for Java client that uses TLS? [closed]

I am writing a Java client to consume payment gateway rest services. If I want to create a HTTPS client that uses client certificates, from where to get certificate? Is it is something to ask from the ...
1
vote
2answers
1k views

Export installed certificate and private key from a command line remotely in Windows using something besides the certmgr.MSC tool

I need to be able to remotely export an installed computer certificate with the full certificate chain and private keys on a Windows server. The cert is used for IIS, and I want to use it for an ...
0
votes
1answer
30 views

Acessing a secure site via Putty SSH Tunnel outside the browser

I wish to access all requests to selected secure domain e.g. https://testdomain.com from anywhere on my pc (not just browsers) via putty ssh tunnel. I tried using a dynamic and this worked when I ...
1
vote
1answer
51 views

Reverse Proxy? For devices(without internet access), in a LAN with an IIS(that has internet) + SSL external website [closed]

I am facing a situation where I have a LAN network, composed of multiples devices that have access to the LAN but not internet and within the LAN there is a computer with IIS 7 that has access to the ...