SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

0
votes
0answers
16 views

Hexchat cannot accept SSL

I've been trying to access an IRC Server recently, which I have been on before. I can access it on Windows but when I get into Ubuntu I cannot access it due to not being able to "Use SSl for all the ...
2
votes
3answers
3k views

How to block specific HTTPS traffic?

According to HTTPS description: Hypertext Transfer Protocol Secure (HTTPS) is a combination of Hypertext Transfer Protocol (HTTP) with SSL/TLS protocol. It provides encrypted communication ...
0
votes
0answers
6 views

Keytool without root access and leiningen

My traffic goes through proxy which replaces SSL certificate. This causes problems when accessing the maven/leiningen packages through HTTPS. I tried to install the cert in my keytool but that ...
0
votes
0answers
14 views

Thunderbird gmail IMAP error

I am trying to setup a gmail account in the Thunderbird and I get the following error: Here are the IMAP settings (I have tried it with imap.gmail.com as well and it doesn't work): Here are the ...
1
vote
0answers
20 views

What is causing warning on a certificate's basicConstraints?

I created a self signed server certificate using OpenSSL's req -x509 command and a CONF file. The CONF file is shown below. When I examine the certificate using Microsoft certificate viewer, its ...
0
votes
1answer
18 views

Cannot reach a SSL site using Internet Explorer 8

I cannot open a website using Internet Explorer 8, but can using either Firefox or Chrome. Under IE the page doesn't even open (as if it cannot be found). My problem is that the app I'm using to ...
0
votes
0answers
10 views

apache ssl configuration - ssllabs how to get A+ [migrated]

I have this configuration SSLCipherSuite AES128+EECDH:AES128+EDH SSLProtocol All -SSLv2 -SSLv3 for apache 2.4.6, openssl 1.0.2a and on ssllabs' ssltest I get A, it suggests (warns) that I have ...
-1
votes
0answers
48 views

After following multiple guides on disabling sslv3 still vulnerable

I have followed many guides on how to disable SSLV3 such as https://scotthelme.co.uk/sslv3-goes-to-the-dogs-poodle-kills-off-protocol/ added the two registry keys for SSLV3 server/client also chrome ...
2
votes
1answer
4k views

Firefox, error when accessing https url

I'm connected through a public wifi hotspot. No problem when using IExplorer. When I use Firefox, I obtain the following error message after asking for any https url, as for example ...
0
votes
2answers
88 views

Probing server in Mozilla Thunderbird won't finish

I am trying to configure an e-mail account in Mozilla Firefox that some months ago used to work. However, when I try to configure it, it will stop when "Probing server", it keeps forever probing the ...
-1
votes
0answers
23 views

Certificate chain, middle certificate error

I have generated a root certificate by this guide, www.akadia.com/services/ssh_test_certificate.html Then I have generated more certificates and signed them to it build a chain, ...
5
votes
3answers
2k views

Are SSL's default snake oil certificates truly snake oil as opposed to being genuine honest-to-good certificates?

SSL generates self-signed "snake oil" certificates by default, for example at /etc/ssl/certs/ssl-cert-snakeoil.pem. As per Wikipedia, snake oil is a cryptographic method or product that is considered ...
3
votes
2answers
6k views

Tortoise SVN v1.66 - authorization failed: Could not authenticate to server: could not parse

So a co-worker is having an issue with connecting to a SVN repo over HTTPS. Here are the details: OS: Windows 7 Enterprise x64 SVN Client: Tortoise SVN 1.6.6 x64 So, whenever he connects (via a ...
0
votes
1answer
48 views

How to fix chrome certificate issues after removing Fiddler root cert

I don't know very much about certificates, and I don't want to break anything trying to resolve this - so asking for some suggestions. At some point agreed to let Fiddler install an HTTPS certificate ...
0
votes
0answers
10 views

Wireshark capture SSL only

I would like to capture SSL or HTTPS traffic only in Wireshark, this is not something that can be filtered after due to the length of the time I would be recording the data after and the size of the ...
0
votes
3answers
3k views

puppetd --test err: Could not request certificate: Connection refused - connect(2) Exiting; failed to retrieve certificate and waitforcert is disabled

I m new to puppet and i m trying to have connection to my puppet server, when i ping to my puppetmaster it runs well but when i run puppetd --test t shows me following error. puppetd --test info: ...
0
votes
2answers
1k views

how to fix if a site is always redirected to another phishing site?

I am running Windows XP SP3. Before I used to do online banking using this computer without problem. But recently, when I will visit my bank to do online banking, https://www.mybdo.com.ph , it gives ...
1
vote
4answers
3k views

I'm receiving an SSL error in various browsers, but I can't find non-SSL content

I'm receiving an error with my SSL connection. Using google chrome I see the following error: Your connection is encrypted with 128-bit encryption ... however this page includes other ...
0
votes
1answer
369 views

Webdav between a OS X Server (self-signed certificate) and Windows 7?

Problem data: I have two freshly installed OS X Server 10.8.2 and Windows 7 SP1 (all updates to date). A self signed certificate on the OS X Server generated automatically and working for the exact ...
0
votes
0answers
15 views

Meaning of “dovecot: ssl-params: Error: epoll_ctl(del, 7) failed”?

During dovecot regeneration of ssl-params I noticed this sequence in my log file: Mar 13 10:37:37 mail dovecot: ssl-params: Generating SSL parameters Mar 13 10:37:52 mail dovecot: ssl-params: Error: ...
1
vote
2answers
58 views

One SSL Certificate Two Services

I'm having trouble finding a clear answer to this question: In IIS (7.5 or 8) I plan on hosting a site that will have a bunch of secure HTML eforms (default port 443). They will be performing ajax ...
0
votes
2answers
64 views

export installed certificate and private key from a command line remotely in windows using something besides the certmgr.MSC tool

I need to be able to remotely export with the full cert chain and private keys an installed computer certificate on a windows server. The cert is used for IIS, and I want to use it for an apache ...
0
votes
1answer
255 views

Apache - Disabled SNI

I'm having a bit of trouble with my webserver. Whenever I connect to Apache using SSL, I get a 400 Bad Request. I've looked in Apache's error log, and I see: [ssl:error] [pid 30065] AH02032: ...
0
votes
1answer
44 views

Apache2 Linux Mint URL without trailing slash not working for HTTP to HTTPS redirect/rewrite

I set up an Apache2 server on Linux Mint. I configured the default-ssl site to use a SSL certificate that I bought and the default site works just fine with SSL. However when I try to access a ...
2
votes
3answers
2k views

Thunderbird: SSL/TLS vs. STARTTLS

Following up this question on serverfault "Is STARTTLS more safe than TLS/SSL?" it came up that the question is rather a question about Thunderbird and not about the actual protocols. Also, if you ...
2
votes
1answer
7k views

How to configure GlassFish v3.1 to use SSL?

We are looking for simple step-by-step manuals how to configure GlassFish v3.1 to use SSL. We are running few legacy application under GlassFish and we hope there is no need to change them: so that ...
0
votes
2answers
63 views

Crazy Finished Message in TLS

I'm tried to uderstand what is the content of the Finished Message of TLS. I'm using wireshark to capture the traffic between my browser and the internet. I noticed a "stangeness" when the chosen ...
0
votes
1answer
106 views

Beaglebone Black OpenSSl crypto acceleration

I'm running Debian Wheezy at my Beaglebone Black. Is OpenSSL using the hardware crypto accelerator by default? If no, how can I enable it?
0
votes
1answer
59 views

My Chrome “jumps” to non-existant HTTPS protocol

My Chrome (40.0.2214.115m) jumps to inexistant https : I type in http://johnwhitech.homeip.net:8080/ And Chrome redirect to http s ://johnwhitech.homeip.net:8080/ which does not exist. I ...
0
votes
0answers
52 views

How to use .pfx in certificate store in CURL for Windows 7

I want to use cURL to access a remote server, and I need to identify myself using a private key or the remote server gives a 401 "Unauthorized". I'm on Windows 7 (work machine, not my choice) and my ...
26
votes
2answers
3k views

What is the superfish SSL certificate and where did it originate

I recently bought a new laptop, every https:// connection I do to any site regardless of browser chain back to a root certificate issued by "superfish, inc". I have had a dig around but I can't seem ...
1
vote
1answer
63 views

Filezilla can't connect with TLS on one domain name

I've two websites: one hosting by OVH, and I have no problems with connection with Filezilla (I can use FTP connexion with TLS) one another not hosting by OVH, and when I'm trying to connect with ...
-1
votes
2answers
117 views

In light of the discovered vulnerabilities in SSL/TLS, is legacy RDP encryption or SSL more secure? [duplicate]

Windows offers the option of using either RDP encryption or SSL (TLS 1.0) to secure a remote desktop connection. Which option is more secure? Given the recent discoveries, is TLS 1.0 still secure in ...
0
votes
1answer
41 views

Cannot connect to internal IP address from external IP address

I just installed the Apache2 webserver on my Raspberry Pi, and tried to forward port 80 & 443 to it. It has the internal IP 10.0.0.11. The Raspberry Pi is behind two routers. (router-IP ...
0
votes
2answers
5k views

vsftpd: 500 OOPS: could not bind listening IPv4 socket

I will use vsftpd as a ftp server. I did all changes on /etc/vsftpd.conf. These changes are (according to digitalocean): anonymous_enable=NO write_enable=YES local_enable=YES chroot_local_user=YES ...
0
votes
3answers
207 views

SSLCipherSuite settings in Apache for supporting TLS 1.0, 1.1 and 1.2

I have an Apache 2.4.7 web server running multiple domain names using a single IP address. As a result of the Poodle vulnerability, I added the following SSLCipherSuite line. It worked fine for a ...
2
votes
2answers
2k views

How do add a certificate from a self-signed server to trusted certificates in Chrome?

I have a dedicated server with a wiki and want to secure it so nobody can read my articles by sniffing my pages. I do not want to pay for a valid certificate so I created a self-signed certificate. ...
0
votes
0answers
55 views

nginx http to https proxy with self-signed certificate

I have an nginx proxy to redirect http requests with a specified port to another https url. Here is my configuration so far: server { listen 59848; location / { resolver 8.8.8.8; ...
1
vote
0answers
17 views

lighttpd complains about ssl.use-compression

I am trying to apply some of the tricks described here, and the problem is having ssl.use-compression = "disable" in lighttpd.conf, because server reports WARNING: unknown config-key: ...
0
votes
1answer
32 views

Can’t connect to Apache webserver via HTTPS (HTTP works just fine)

I’m running a XAMPP 5.6.3 installation on my desktop Windows 8.1 system, and I have an issue with connecting to the Apache webserver. I can still connect normally through port 80 and HTTP, but if I ...
1
vote
0answers
80 views

I destroyed my Mac's PHP setup: SSL certification fails

Long story short, I deleted the PHP symlink on my Mac, and replaced it with a symlink from XAMPP. Now it seems that there's a problem with my SSL configuration or what seems to me, a lack thereof. ...
0
votes
0answers
29 views

SSL succesfully installed but not working - Private server public domain name

I'm working on a private Centos server with a private IP (10.x.x.x) linked also to a domain name. DNS are correctly configured. Yesterday the sysadmin installed a SSL certificate, and got the ...
-1
votes
1answer
3k views

Windows 7 64-bit SSL untrusted certificate error when visiting any SSL website

I have installed Windows 7 64-bit and I get an untrusted certificate error when visiting any website served via SSL, like Google.com, Gmail.com, etc. I tried this using Firefox, IE and Chrome and it ...
0
votes
1answer
36 views

Firefox giving SSL error message after installing new certs

Firefox users are getting the message This connection is untrusted when going to our web site. under the technical details section it lists the reason as "The certificate is not trusted because the ...
0
votes
1answer
156 views

openSSL and gnuTLS can't connect to OpenWRT web interface, why not?

I have some weirdness securely connecting to OpenWRT from IceWeasel (debian Firefox). I find recent Firefox's error messages less useful for troubleshooting. So I want some HTTPS tool to run tests ...
11
votes
3answers
4k views

Do web browsers cache SSL certificates?

Do any web browsers cache SSL server certificates? For example, if I change the SSL certificate on a web server, will all of the web browsers pick up the new certificate when they connect via SSL, or ...
15
votes
7answers
2k views

Why is an unsigned SSL cert treated worse than no SSL cert?

If I view a site that has a unsigned or self-signed SSL cert, my browser gives me a warning. Yet the same browser has no problem allowing credentials to be sent across unsecured pages. Why is the ...
2
votes
1answer
176 views

dyld: Library not loaded: /usr/lib/libcurl.4.dylib curl SSL error

I'm not sure what happened to my system but I am having an issue with dyld/curl, affecting my overall computer performance. I am on Yosemite. I have a feeling it's the Conda openssl. How do I just ...
1
vote
2answers
56 views

Make Chrome use SSL tunnel as a proxy (HTTP CONNECT) for HTTP requests

I want to make Chrome use SSL for all outgoing requests to a proxy (which I control). The proxy can accept a plain HTTPS connection (as a transparent proxy), and it also supports a non-encrypted HTTP ...
0
votes
0answers
180 views

Nginx/SNI: Return 444 if there's no certificate available for a specific domain hosted on the same IP

I'm stuck with configuring nginx regarding SSL and SNI support. In order to simplify my case let's say I have two domains, foo.com and bar.com. I have only one IP and both domains are mapped to this ...