SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

8
votes
1answer
8k views

Tortoise SVN Error Validating Server Certificate

I just updated the certificate on one of my sites due to the old one expiring. The new certificate verifies fine in Internet Explorer 9, Chrome, and Firefox 4 - but when trying to browse/check out the ...
20
votes
1answer
1k views

Firefox “Untrusted Connection” warnings when visiting reputable HTTPS sites when using child's account

When using Firefox on Windows, I see an "Untrusted Connection" warning when visiting any HTTPS site, including very reputable ones such as https://www.google.com and https://search.yahoo.com. The ...
-1
votes
0answers
22 views

Cant access iframe of different origin in the parent jsp [migrated]

Quick example for the kind of functionality required (just for exampple) : http://www.indeed.hk/cmp/Calvin-Klein-Jeans-&-Calvin-Klein-Underwear/jobs/Part-Time-Sales-Associate-1643e24903d9f4c7 If ...
1
vote
1answer
13 views

Iptables: Filtering string encrypted by ssl

I need to filter (send to BANRULES set) incoming http/https packets with a certain string (matchword). I do it easy when ssl is not in use (port 80): iptables -A INPUT -p tcp -m tcp --dport 80 -m ...
0
votes
0answers
5 views

Adding a certificate to be used by MS SQL SERVER

I have MS SQL SERVER 2012 installed on my Windows 8.1. Now I wanted to enable SSL encryption in it. What I did was: 1. Run - > MMC 2. Add snap-in 3. Added certificate (personal) for local computer ...
0
votes
1answer
12 views

Redirect from secure site to non-secure site with wildcard subdomain

I have the following set up in apache2.conf: <Directory /var/www/html> RewriteEngine on RewriteCond %{HTTP_HOST} ^(www\.|)mydomain\.com$ RewriteCond %{SERVER_PORT} !^443$ ...
3
votes
3answers
1k views

SSL/TLS vs SSL/TLS-VPN

Whats the difference between using SSL/TLS in a web browser and an actual SSL/TLS VPN? Is SSL/TLS actually the pure technology and when one uses https:// in a browser this is a vpn connection?
0
votes
0answers
25 views

Mac OS X Yosemite and Client SSL Certificates

Ever since I upgraded from Mavericks to Yosemite, my SSL Client Certificates have stopped working in certain places. They still work in web browsers and in wget, but they have stopped working in curl ...
0
votes
1answer
28 views

Unable to access external HTTPS websites…unable to download windows updates

I need help with two problems I'm having on a Windows 2008 R2 server. I believe they are connected. This server is not able to download windows updates and further checking I found out that I cannot ...
3
votes
2answers
5k views

Tortoise SVN v1.66 - authorization failed: Could not authenticate to server: could not parse

So a co-worker is having an issue with connecting to a SVN repo over HTTPS. Here are the details: OS: Windows 7 Enterprise x64 SVN Client: Tortoise SVN 1.6.6 x64 So, whenever he connects (via a ...
0
votes
1answer
4k views

vsftpd: 500 OOPS: could not bind listening IPv4 socket

I will use vsftpd as a ftp server. I did all changes on /etc/vsftpd.conf. These changes are (according to digitalocean): anonymous_enable=NO write_enable=YES local_enable=YES chroot_local_user=YES ...
0
votes
2answers
21 views

What file to add to nginx certificate

I got a RaspberryPi on which I want to host Owncloud. So I followed this tutorial and it works well except the SSL part. I don't want to use self signed. I set my own subdomain and it works without ...
1
vote
4answers
2k views

I'm receiving an SSL error in various browsers, but I can't find non-SSL content

I'm receiving an error with my SSL connection. Using google chrome I see the following error: Your connection is encrypted with 128-bit encryption ... however this page includes other ...
0
votes
0answers
4 views

Is it safe to use the same RSA key pair at the sender and the recipient?

Most questions on the internet are about using the same certificate on multiple clients, what about using the same certificate between two servers communicating with each other for example? Would that ...
0
votes
1answer
15 views

Using powershell, how do I extract the thumbprint from an SSL Certificate without installing it?

Every example I've found on StackExchange, and other internet forums, etc all tell me how to get the thumbprint from a certificate already installed into a certificate store. Alternatively, the ...
0
votes
0answers
15 views

How should a wildcard certificate be used? [migrated]

I have a wildcard certificate (pfx file) and I have doubts on how to use that. Should I install that on all of my application servers or alternatively create a new certificate and sign it with the ...
0
votes
0answers
46 views

testing cipher suite using openssl for tomcat server is resulting in wrong manner

I am using tomcat 6.0.28. and I have configured connector with "TLS_ECDHE_RSA_WITH_RC4_128_SHA" but when i am testing whether cipher is suited as follows I am getting following error: > ...
0
votes
1answer
21 views

webdav fails by https but not http

I'm trying to set up a webdav folder on a linux server to be used with a windows client (for now, cyberduck) Using http, everyting is fine. However, when using https, cyberduck warns me that my ...
0
votes
1answer
34 views

Install root certificate authority on Ubuntu [duplicate]

First off I am not sure whether I have the correct terminology. What I mean by certificate authority is a verified certificate distributor such that if I goto a website in my Browser that is HTTPS ...
2
votes
1answer
7k views

How to configure GlassFish v3.1 to use SSL?

We are looking for simple step-by-step manuals how to configure GlassFish v3.1 to use SSL. We are running few legacy application under GlassFish and we hope there is no need to change them: so that ...
0
votes
0answers
13 views

Guacamole, Tomcat, HTTPS-setup fails due to issues with certification

I'm using guacamole (http://guac-dev.org/) to access (parts of) my home (Debian) computer clientless, on the go. From my work computer (University Network) the screen is however not updating and only ...
0
votes
0answers
38 views

Connecting Brother MFC-L2740DW to SMTP via SSL

Its very frustrating to see that I bought this MFC-L2740DW just a few weeks ago and its 2014 released printer with AirPrint support. I'm not able to activate a feature called 'scan to email server', ...
2
votes
2answers
2k views

Thunderbird: SSL/TLS vs. STARTTLS

Following up this question on serverfault "Is STARTTLS more safe than TLS/SSL?" it came up that the question is rather a question about Thunderbird and not about the actual protocols. Also, if you ...
0
votes
2answers
440 views

Mozilla Sync (wsgi via apache) through SSL causes error 500, no log entries

I have been following (among others) these instructions to setup a Mozilla sync server. It runs fine when I connect to http://mydomain.com:5000/ but when I use https instead of http and remove the ...
1
vote
1answer
14 views

Why does firefox still display website ssl to be 128 bit encrypted after changing to 256

I recently renewed an ssl certificate to use SHA-2 but on firefox the website still shows to be SHA-1 and 128 bit encrypted, on all other browsers it show SHA-2 , 256 bit. Can anybody help me with ...
13
votes
1answer
452 views

Many websites seem to be switching Root Certificates [closed]

For the past few days, I have been noticing that many websites which use the "GTE CyberTrust Global Root" root certificate have been moved to the "GlobalSign Root CA" root cert. I've noticed this on ...
0
votes
1answer
131 views

https redirect to virtual host directory and http not working

System configuration ubuntu14.04 (64bit) XAMPP 1.8.3-5 Apache/2.4.10 (Unix) OpenSSL/1.0.1i PHP/5.5.15 mod_perl/2.0.8-dev Perl/v5.16.3 I have read on new features of apache 2.4 ...
55
votes
4answers
91k views

How to save a remote server SSL certificate locally as a file

I need to download an SSL certificate of a remote server (not HTTPS, but the SSL handshake should be the same as Google Chrome / IE / wget and curl all give certificate check fail errors) and add the ...
0
votes
0answers
84 views

openSSL and gnuTLS can't connect to OpenWRT web interface, why not?

I have some weirdness securely connecting to OpenWRT from IceWeasel (debian Firefox). I find recent Firefox's error messages less useful for troubleshooting. So I want some HTTPS tool to run tests ...
-1
votes
0answers
29 views

Encrypted alert with code 21 for connection [closed]

I've got a device that connected to the server and successfully did the handshake and received application data, however later when client sends keep-alive requests server sends back encrypted alert ...
0
votes
1answer
56 views

Exchange 2010 Certificate Renewal

I am still learning how to configure Exchange 2010, so I hope that you can help me on some topics. The certificate for mail.xxxxxx.com has expired. The previous IT guy had OWA set up on the server, ...
2
votes
1answer
3k views

Firefox, error when accessing https url

I'm connected through a public wifi hotspot. No problem when using IExplorer. When I use Firefox, I obtain the following error message after asking for any https url, as for example ...
0
votes
0answers
19 views

Error when start of the apache2 service: version OPENSSL_1.0.1 not defined

I'm using a Debian Wheezy server where I have installed apache2, php5 and libapache2-mod-php5 packages via apt-get. But when I'm trying to start the apache2 the follow error occurs: service apache2 ...
12
votes
1answer
10k views

Can the Telnet/Netcat client communicate over SSL?

I would like to test client connections with IMAP over SSL, HTTPS, and other secure text-based Internet protocols over SSL/TLS, the same way I would using Telnet or Netcat if they were not tunneled ...
1
vote
3answers
6k views

Decrypting SSL traffic in Wireshark. Only headers get decrypted

I'm trying to decrypt SSL traffic in Wireshark, and it partially works because I'm able to view the decrypted headers. The problem is that I don't see any of the packet contents, only their headers. ...
6
votes
1answer
446 views

How to know which Certificates to leave in my browser, and which to remove

I would like to tighten up security a bit, so I am disabling unneeded certs from my browsers. For instance, the "WoSign CA Limited" cert from China I obviously don't need, yet "Thawte Consulting cc" I ...
0
votes
0answers
128 views

Dropbox SSL Certificate issue on OS X in both Chrome and Safari

Currently unable to connect to www.dropbox.com via https. This is only happening on one machine on the network. The machine is running OS X 10.6.8. Safari gives - When trying to connect in chrome ...
1
vote
1answer
37 views

Why isn't openssl s_client passing my private key to proxytunnel?

I currently have HAProxy set up on my home PC and I am attempting to access it through a HTTP proxy. Currently I am accessing the SSH logon prompt like so: openssl ...
0
votes
0answers
2k views

SSL https (http secure) sites won't display is client or server side?

Oddly, python.org has suddenly become unreachable for me through the Archlinux repo version of Firefox (v27 and v28.0 update): Secure Connection Failed An error occurred during a connection ...
1
vote
2answers
71 views

Links SSL Error

What version of links does the user called "bytepool" have that he's able to find this workaround? Refer to link below. How to tell `links` to ignore expired SSL certificate and proceed? He writes ...
0
votes
1answer
27 views

Importing StartSSL Key

A few months ago I signed up for a Free StartSSL certificate but I didn't realize that you needed to install that certificate if you wanted to later log in to the control panel. Now I'm stuck trying ...
0
votes
1answer
88 views

ftp-client works fine. ftp-tls-client fails on one computer and works on another

Connecting to ftp - from a Windows Server 2012 - it works both secure (-over tls) and unsecure. From a Windows 7 it succeeds unsecure but fails when secure. (Using explicit TLS and passive mode.) ...
0
votes
1answer
99 views

Apache OpenSSL httpd-ssl.conf config stops Apache, no error except when httpd-ssl.conf include disabled

I followed directions to setup SSL on my custom WAPP stack (Windows/Apach/PHP/PostgreSQL) here... http://www.tehuber.com/article.php?story=20110315153800545 After back-tracking I discovered when ...
6
votes
8answers
22k views

Firefox: This connection is untrusted + Behind corporate firewall

I've seen some similar issues strewn throughout Google's results about this, but none seem to be corporate-specific. I continually get the 'This connection is untrusted' screen every time I attempt ...
0
votes
0answers
26 views

Probing server in Mozilla Thunderbird won't finish

I am trying to configure an e-mail account in Mozilla Firefox that some months ago used to work. However, when I try to configure it, it will stop when "Probing server", it keeps forever probing the ...
2
votes
1answer
3k views

How to properly install certificate issued to me?

I tried various ways to install certificate, but it seems it either not being seen by linux or something else is wrong. I got .pfx to be able to connect to another server via vpn (need to use Cisco ...
0
votes
1answer
2k views

Email without SSL

I have been trying to setup LabTech Email settings. Unfortunately, it accepts only email settings that are not encrypted; no SSL/TLS i.e POP 110 and SMTP 25. Tried to setup SMTPSSL in the same, but no ...
1
vote
0answers
37 views

Force browser to use HTTP because of HTTP proxy

I have a lot of HTTP proxies and I cannot access websites that are using SSL through those proxies. I have no access to configuring the proxies, so is it possible to force Firefox (in my case) to ...
1
vote
3answers
5k views

Enable TLS 1.1 and 1.2 for Clients on Java 7

Java 7 disables TLS 1.1 and 1.2 for clients. From Java Cryptography Architecture Oracle Providers Documentation: Although SunJSSE in the Java SE 7 release supports TLS 1.1 and TLS 1.2, neither ...
0
votes
1answer
49 views

different ssl_protocols for seperate domains

I tried to configure one server for a specific domain to use TLSv2.0 only. Others should use TLSv1, TLSv1.1, and TLSv2.0. The configuration is valid, as nginx loads correctly, but the site with ...