SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

0
votes
0answers
9 views

How to set TLS protocols as default after applying KB3140245?

This is about instructions to Windows update KB3140245 on a 64-bit Windows 7 machine. Microsoft released this update some time ago that "allows users to change system-wide default protocols for ...
0
votes
1answer
3k views

Roundcube, php 5.6 and self-signed certificates

I am currently porting one of my servers to another. That server is running Postfix + Dovecot using a self-signed certificate. My web-frontend used to be roundcube. Now is the problem, that the new ...
1
vote
1answer
28 views

How to speed up SSL connection establishment?

I have an OpenSSL setup on my Linux PC using Apache2. NO, I haven't enabled DNS resolving. I have the certificate on the machine, LOCALLY. Still, Chrome devtools tell me that Initial Connection took ...
0
votes
1answer
18 views

Human readable SSL/TLS packets

If I have a protocol-analyzer/packet-sniffer, such as wireshark installed on a particular device.. (or in this case; tcpdump & tshark etc. on my smartphone..) ..should I be able to read ...
0
votes
0answers
33 views

Can't connect with TLS1.2/Client auth from IE/Chrome. Only works with Firefox

I have a client for which I'm developing an app. That app must connect to their server, which sits behind a NetScaler load balancer configured with TLS1.2 only and requires client certificate ...
0
votes
1answer
22 views

How do I access an https site that still uses RC4?

I have an old wireless router that I haven't needed to change the configuration on for years. Recently I ran into some issues with my network and needed to turn on it's dhcp server. When i went to ...
1
vote
2answers
28k views

Self signed certificate is not appearing in Chrome after importing

I have a Synology NAS that creates a self signed certificate for SSL access. I'm using the latest Chrome on Windows 7. Upon visiting the NAS's landing page, Chrome presents a red warning to say that ...
0
votes
2answers
38 views

Chrome ERR_SSL_PROTOCOL_ERROR on known working site

When I connect to https://www.feeguarantee.com, Chrome gives me an ERR_SSL_PROTOCOL_ERROR. Firefox gives SSL_ERROR_RX_RECORD_TOO_LONG. Edge gives some generic error. All other sites appear to ...
-1
votes
0answers
4 views

Secure certificates using TPM in ubuntu

I have a requirement to secure AD machine based certificates(.cert,.pem,.key files) using TPM chip in Ubuntu operating system. The requirements are as follows: The certificates that are downloaded ...
0
votes
0answers
5 views

Courier does not work with courier-ssl installed

I have been trying to enable SSL on my courier IMAP server running Ubuntu 14.04. I installed courier-ssl and courier-imap-ssl. Then the server stopped working completely, with an "authentication ...
0
votes
0answers
14 views

SSL/TLS validation errors on requests

Every single website I try to access is giving me a certificate error. I've tried checking the system's time, but it's correct. Thanks.
-1
votes
1answer
93 views

internet has been intermittently cutting off

So since last week, my internet has been intermittently cutting off. And it wouldn't completely cut off, rather all SSL sites would give me SSL errors, and everything else just wouldn't work. I ...
4
votes
4answers
20k views

How to install a CA key (self signed SSL) on ubuntu? [duplicate]

I have a bunch of machines that need to fetch https: off a server (or collection of servers). I'm operating a CA and self-signing the certificates on the server(s). The client machines are running ...
-1
votes
2answers
59 views

SSL certificate warning error for a website running on http and https

We have the website which is running on both http(80) and https (443). We purchased the SSL certificate and installed. It is working well for the web sites running only on https. If we access the ...
0
votes
0answers
22 views

502 Bad Gateway with Nginx as proxy for Jenkins

I'm using Centos 7 with Nginx and a SSL from letsencrypt to use as a proxy for jenkins on the same droplet. Everything was working up to the point I tried to proxy Jenkins.. which gave a 502 Bad ...
19
votes
4answers
18k views

What is the difference between a certificate and a key with respect to SSL?

Whenever I try to understand anything about SSL I always have a hard time keeping track of what "key" and "certificate" refer to. I fear many people use them incorrectly or interchangeably. Is there ...
0
votes
2answers
4k views

Cannot map Synology WebDAV (HTTPS) share on Windows

I've tried everything from this post that applied as well as the answers from this post. I can connect successfully with Kodi on Android as well as NetDrive on Windows. I cannot connect with Kodi on ...
5
votes
1answer
3k views

How to tell `links` to ignore expired SSL certificate and proceed?

I'm using the links browser and trying to connect to an HTTPS site. I then get: Verification failure: certificate has expired this is "fine" (i.e. was decided to be tolerated) for this ...
1
vote
3answers
43 views

self signed certificate with openssl for server at home and no domain name

All of the articles I read online talk about creating a self-signed certificate for a domain you own. I have Apache2 set up on an Ubuntu 16.04 server at home. My ISP gives me a dynamic IP so I use ...
2
votes
1answer
9k views

How to configure GlassFish v3.1 to use SSL?

We are looking for simple step-by-step manuals how to configure GlassFish v3.1 to use SSL. We are running few legacy application under GlassFish and we hope there is no need to change them: so that ...
4
votes
1answer
8k views

Firefox, error when accessing https url

I'm connected through a public wifi hotspot. No problem when using IExplorer. When I use Firefox, I obtain the following error message after asking for any https url, as for example ...
5
votes
3answers
3k views

Mutt will not let me save an SSL certificate

I have just set up Mutt to connect to my firm's IMAP and SMTP server. Everything works; but when I launch mutt, I get a warning about the certificate, and am given the option to: (r)eject, accept ...
0
votes
1answer
18 views

No “Proceed Anyway” option on ERR_CERT_COMMON_NAME_INVALID in Chrome

I want to go to this link. Chrome won't let me as there is no option on the "Privacy Error" screen shown below. I don't care if this connection is private. It's just a forum post that I wanted to ...
1
vote
1answer
293 views

How to bypass ERR_SSL_FALLBACK_BEYOND_MINIMUM_VERSION error?

I am using Chrome v48 and I am getting an error: ERR_SSL_FALLBACK_BEYOND_MINIMUM_VERSION I understand the reason for the error (server is using an unsupported SSL version; SSLv3 I am guessing). ...
1
vote
1answer
747 views

Is it possible to turn on TLS 1.2 in .jnlp file?

is it possible to turn on TLS 1.2 in .jnlp file to download .jar from HTTPS server where only TLS 1.2 is set? I've tried in many ways: <resources> <j2se (...) /> <jar (...) ...
1
vote
1answer
21 views

How to install let's Encrypt on Amazon Linux

How do I install Let's Encrypt Certificates on amazon Linux I already have a WordPress website hosted. Can anyone tell me the steps how do i start with it and what are the commands and what ...
0
votes
1answer
166 views

How to create SSL certificate with multiple DNS entries, signed with my own CA certificate

I need help creating SSL certificate with multiple subjectAltNames, signed with my own selfbrewed CA certificate. What I need: I'm on OSX 10.10.5 I have myCA.cer which I use to sign another SSL ...
0
votes
1answer
34 views

Why are HTTPS connections not slow anymore?

When the web was young, HTTP connections were relatively fast, and HTTPS connections were painfully slow. In the last several years, the speed of HTTPS connections are often very similar to that of ...
0
votes
0answers
32 views

Proxytunnel can connect to ssh server through proxy, but putty fails to connect

I'm trying to connect to a remote SSH server through an SSL tunnel set up with proxytunnel. The proxytunnel command itself works but when I try with putty I have a "server unexpectedly closed ...
-2
votes
1answer
29 views

Let'sEncrypt SSL Doesn't Work

I've got a debian 8 server installed with ispconfig 3, apache2, mysql and php. And recently I've installed (tried) letsencrypt SSL certificates for my website.com. I did everything as tutorial said, ...
0
votes
1answer
5k views

https redirect to virtual host directory and http not working

System configuration ubuntu14.04 (64bit) XAMPP 1.8.3-5 Apache/2.4.10 (Unix) OpenSSL/1.0.1i PHP/5.5.15 mod_perl/2.0.8-dev Perl/v5.16.3 I have read on new features of apache 2.4 ...
13
votes
6answers
63k views

Enable TLS 1.1 and 1.2 for Clients on Java 7

Java 7 disables TLS 1.1 and 1.2 for clients. From Java Cryptography Architecture Oracle Providers Documentation: Although SunJSSE in the Java SE 7 release supports TLS 1.1 and TLS 1.2, neither ...
0
votes
1answer
33 views

Load runner Vugen unable by pass the SSL negotiotion

We are working on POC for service now app whose version name is Fuji and in order to login to this app with different test users we use the SSL certificates. Here the problem we face is an SSL ...
0
votes
0answers
17 views

gnuwin32 wget Unable to locally verify the issuer's authority

I have just installed gnuwin32 wget and have had some issues when running it. I appear to have issues with https sites... I get a "Unable to locally verify the issuer's authority." error. I have very ...
0
votes
0answers
17 views

WatchGuard Firebox VPN will not connect if signed in as a domain user

We are trying to connect to a client's network using their WatchGuard VPN, and we are experiencing a really odd error which some other people seem to have had, but haven't shared their solutions. ...
1
vote
1answer
849 views

Can IPSec (or any other VPN tunnel) hide your IP address while browsing?

Is there a VPN/tunnelling method which you can use to browse the web, but will also prevent somebody from seeing your IP address if they were sniffing the network? I wasn't sure if the IP address ...
0
votes
0answers
361 views

Unable to access Amazon webs with Chrome

When going to a secure Amazon page over HTTPS, using either Chrome and MS Edge, the following Error comes up: This site can’t provide a secure connection www.amazon.com uses an unsupported protocol. ...
3
votes
3answers
15k views

SSLCipherSuite settings in Apache for supporting TLS 1.0, 1.1 and 1.2

I have an Apache 2.4.7 web server running multiple domain names using a single IP address. As a result of the Poodle vulnerability, I added the following SSLCipherSuite line. It worked fine for a ...
0
votes
0answers
48 views

(Setting up SSL) invalid number of arguments in “ssl_certificate” directive in /etc/nginx/nginx.conf

I am trying to setup SSL on my server. I purchased my SSL certificate from Comodo. I am following the tutorial they have made here: ...
0
votes
1answer
65 views

Browser (any) on Windows 7 loads bad (localhost) https certificate

On Windows 7 in Chrome, but also in any other browser, for one particular (external) website a bad HTTPS certificate is loaded. When I open the certificate it says that Windows does not have enough ...
151
votes
19answers
174k views

How do I list the SSL/TLS cipher suites a particular website offers?

How can I retrieve a list of the SSL/TLS cipher suites a particular website offers? I've tried openssl, but if you examine the output: $ echo -n | openssl s_client -connect www.google.com:443 ...
0
votes
2answers
16 views

Why is the non-ssl version of my ssl-enabled Apache host serving content from a different host?

I have a couple of web sites running on localhost with Apache/Ubuntu. I just successfully installed self-signed certificates for one of these, call it securesite.local. Another non-ssl site, call it ...
0
votes
1answer
26 views

Trouble connecting to some HTTPS urls

I am having trouble connecting to some websites using https. wget and curl complain about not being able to verify the certificate. I presume this is to missing root certificates on my NAS. For ...
2
votes
3answers
3k views

How do add a certificate from a self-signed server to trusted certificates in Chrome?

I have a dedicated server with a wiki and want to secure it so nobody can read my articles by sniffing my pages. I do not want to pay for a valid certificate so I created a self-signed certificate. ...
0
votes
1answer
46 views

Firefox doesn't ask me for a certificate when visiting a site that needs one

I use Firefox 44.0.2 on a Linux Xubuntu system. I'm trying to access a company website that requires a certificate. I can confirm I have the correct certificate in ...
0
votes
2answers
44 views

Apache certificate chain is not being sent

Good day! I've searched google high and low. Goodness, I've never gone past page 2 of search results before! But this one stumps me. I've got a website that I am securing with a certificate signed ...
1
vote
0answers
926 views

Windows 10 + WebDAV: Mutual authentication failed: The server's password is out of date at the domain controller

We have an existing WebDAV installation with an Apache mod_dav was WebDAV drive hosted at an SSL protected URL with CA issued certificate and basic authentication. MacOSX and Windows < 10 have been ...
4
votes
4answers
22k views

Disabling RC4 in the SSL cipher suite of an Apache server

I'm trying to disable RC4 for an Apache 2.2.29 server running on a CentOS 6.5 VPS and I can't seem to succeed. A recently purchased business-validated certificate is installed and SSL connections are ...
3
votes
1answer
321 views

Where to get root SSL certificates for Opera 12.17?

Approximately six months ago several web sites began to lose their styles gradually and finally some of them entirely stopped working in Opera although they work in other browsers. All this seemed to ...
0
votes
0answers
38 views

Configuring rabbitmq web stomp plugin to work over SSL connection

I am trying to setup a ssl connection for a rabbitmq web stomp plugin, but I can not figure it out. I have gotten valid certificates from letsencrypt and i would like to reuse those for the web-stomp ...