SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

63
votes
11answers
30k views

Why won't OS X trust GitHub's SSL certificate?

When I go to any github.com page in Chrome, I get a big ugly error: You attempted to reach github.com, but the server presented a certificate issued by an entity that is not trusted by your ...
12
votes
5answers
20k views

How much information can my ISP see?

Is it possible for my ISP to see the passwords that I enter on websites and in chat programs? And what about SSL websites that start with https, do they encrypt my username and password before ...
8
votes
4answers
4k views

Force a browser to load the 'https' edition of a website, not the 'http'?

This is similar to this previous question, but I believe it's a bit different*. Sites like GMail support a preference that pushes all traffic through the SSL edition of the site rather than the ...
27
votes
3answers
40k views

How to create my own certificate chain?

I would like to setup my own OCSP Responder (just for testing purposes). This requires me to have a root certificate and a few certificates generated from it. I've managed to create a self-signed ...
42
votes
5answers
105k views

Add permanent SSL certificate exception in Chrome (Linux)

I have a problem with a website that has an SSL certificate which doesn't correspond to the website domain. Chrome gives me a warning for this website (and rightly so), which I have to ignore ...
116
votes
17answers
119k views

How do I list the SSL/TLS cipher suites a particular website offers?

How can I retrieve a list of the SSL/TLS cipher suites a particular website offers? I've tried openssl, but if you examine the output: $ echo -n | openssl s_client -connect www.google.com:443 ...
23
votes
1answer
27k views

How to easily create a SSL certificate and configure it in Apache2 in Mac OS X?

I'd like to use my Mac OS X with https for local development tests. How can I easily make Apache2 respond to ssl, just for test proposes - I don't want a real certificate, just a fake to make local ...
8
votes
8answers
26k views

Firefox: This connection is untrusted + Behind corporate firewall

I've seen some similar issues strewn throughout Google's results about this, but none seem to be corporate-specific. I continually get the 'This connection is untrusted' screen every time I attempt ...
8
votes
3answers
35k views

Why is chrome slashing my HTTPS?

In Chrome when I view my page the https in the URL has a red slash through it. When I click it, it says: Your connection to www.example.com is encrypted with 256-bit encryption. However, this page ...
5
votes
1answer
3k views

Lion Unable to Load SSL Sites

OS: Mac 10.7.2 (Lion) I've been unable to load any SSL sites on any browser. Chrome gives error 7 (ERR_TIMED_OUT), but this occurs across all browsers. I've tried different DNS, flushing DNS, and ...
8
votes
2answers
865 views

How to tell which resources are loaded “insecurely” with Chrome using https

I understand this is because I'm loading some stuff via http:// but does that mean a single http reference can't appear in the source? Even in examples like <a href="http://...">...</a>? ...
1
vote
1answer
173 views

Thunderbird: Error: imap.server.com : server does not support RFC 5746, see CVE-2009-3555

I'm getting this error when checking my mail, and I can't download my mail. I recently updated Thundirbird yesterday, but it restarted and was working fine for many hours. I saw this question: How to ...
1
vote
3answers
5k views

Disable SSL browsing in Chrome

I need to disable SSL browsing completely in Chrome. If not completely, at least disable https://www.facebook.com and force http://www.facebook.com to load, FOR EXAMPLE (FB is just an example - i ...
0
votes
1answer
183 views

Apache2 server won't restart after replacing server.crt with server.crt from ca

I'm trying to enable ssl (tls?) I ran into these errors and I have these questions. Why did apache not restart? And how do I get it to restart? Replacing restart with start does not work. Could ...
91
votes
4answers
147k views

How to save a remote server SSL certificate locally as a file

I need to download an SSL certificate of a remote server (not HTTPS, but the SSL handshake should be the same as Google Chrome / IE / wget and curl all give certificate check fail errors) and add the ...
24
votes
4answers
16k views

Can the telnet or netcat clients communicate over SSL?

I would like to test client connections with IMAP over SSL, HTTPS, and other secure text-based Internet protocols over SSL/TLS, the same way I would using telnet or netcat if they were not tunneled ...
26
votes
2answers
4k views

What is the superfish SSL certificate and where did it originate

I recently bought a new laptop, every https:// connection I do to any site regardless of browser chain back to a root certificate issued by "superfish, inc". I have had a dig around but I can't seem ...
14
votes
3answers
10k views

GMail and SSL Encryption - how much is encrypted

It's strangely difficult to find out exactly how SSL works with email, at least insofar as answering my specific question - when I connect to gmail using SSL, I understand that my connected is secure ...
4
votes
4answers
16k views

How to install a CA key (self signed SSL) on ubuntu? [duplicate]

I have a bunch of machines that need to fetch https: off a server (or collection of servers). I'm operating a CA and self-signing the certificates on the server(s). The client machines are running ...
14
votes
9answers
18k views

Mac OS X Lion 10.7.2 update breaks SSL

Summary After updating from 10.7.1 to 10.7.2, neither Safari nor Google Chrome can load GMail. Spinning Beachballs all around. The problem isn't GMail; Firefox loads GMail just fine. The problem ...
4
votes
3answers
14k views

Disable SSLv3 in major browsers

As the question suggests: How to disable support of the SSL version 3 and set TLS version 1 as minimum (oldest) protocol supported in order to defend against POODLE. One can test a browser with this ...
4
votes
2answers
13k views

How to disable SSL for some websites in Chrome?

I want to set chrome to load HTTP instead of HTTPS for some websites. So I searched internet but all the solutions was old. They said go to Under the hood tab which doesn't exist in my chrome 22. ...
4
votes
2answers
368 views

How do I distinguish between these two certificate situations?

Situation 1 (safe): Website was vulnerable to heartbleed and using a certificate not valid before 2012-10-21 Website upgraded to an unvulnerable version of OpenSSL Website re-keyed and got a their ...
3
votes
1answer
2k views

SSL support with Apache and Proxytunnel

I'm inside a strict corporate environment. https traffic goes out via an internal proxy (for this example it's 10.10.04.33:8443) that's smart enough to block ssh'ing directly to ssh.glakspod.org:443. ...
5
votes
2answers
6k views

Trust SSL certificate to local system account

I have the following need: A windows service needs to connect to a svn repository through https. The service needs also to run as local system account for IO permissions on the machine. Now when the ...
3
votes
0answers
2k views

How to tell `links` to ignore expired SSL certificate and proceed?

I'm using the links browser and trying to connect to an HTTPS site. I then get: Verification failure: certificate has expired this is "fine" (i.e. was decided to be tolerated) for this ...
2
votes
1answer
2k views

Which versions of the Windows TLS/SSL file transfer software like WinSCP and FileZilla are not affected by Heartbleed?

I noticed that many people still use versions affected by the heartbleed vulnerability of wide spread TLS/SSL enabled Windows clients like WinSCP and Filezilla. To be able to make safe ...
2
votes
3answers
4k views

How to block specific HTTPS traffic?

According to HTTPS description: Hypertext Transfer Protocol Secure (HTTPS) is a combination of Hypertext Transfer Protocol (HTTP) with SSL/TLS protocol. It provides encrypted communication ...
2
votes
1answer
665 views

Chrome says “This page contains some resources that are not secure” in all https websites

When I go to Gmail website (it is https), I see a red https with a line in address bar, and when I click on the icon near the URL, There is a sentence "... However, This page contains some resources ...
2
votes
2answers
2k views

HTTP to HTTPS Tunnel

So the issue is that I have quite a few homebrew scripts/web testing programs that only work with HTTP. The problem is that the website only allows HTTPS connections. Does anyone know of a way to ...
1
vote
3answers
3k views

SSL (imap) doesn't work from some machines - ssl handshake failure - how to narrow down further?

A few days ago our IMAP SSL (port 993) connections stopped working from our home network two Windows 7 PCs in our home network. Two other PCs, one with Windows XP, one also with Win7 professional ...
0
votes
3answers
4k views

SSLCipherSuite settings in Apache for supporting TLS 1.0, 1.1 and 1.2

I have an Apache 2.4.7 web server running multiple domain names using a single IP address. As a result of the Poodle vulnerability, I added the following SSLCipherSuite line. It worked fine for a ...
5
votes
3answers
17k views

Can I use another port other than 443 for SSL communication?

I have an application that communicates via SSL, however, Port 443 is already in use by an IIS instance on that same server. Can I use another port other than 443 for SSL communication?
5
votes
2answers
1k views

Where to get certificates for Acrobat PDF

When sending an invoice in PDF format, it is useful (in some countries obligatory) to sign this PDF digitally. Of course, I could create a self-signed certificate via OpenSSL, but a warning "could ...
4
votes
1answer
599 views

Dynamic images served over HTTPS display broken image in word when opening an HTTP document

We have an application that produces HTML documents which the user opens in word from the web server, so they open: https://ourserver/ourapp/somepath/generateddocument.htm That document contains ...
3
votes
3answers
1k views

SSL/TLS vs SSL/TLS-VPN

Whats the difference between using SSL/TLS in a web browser and an actual SSL/TLS VPN? Is SSL/TLS actually the pure technology and when one uses https:// in a browser this is a vpn connection?
3
votes
1answer
7k views

Configure Apache to serve multiple subdomains via HTTP + HTTPS

I have a virtual server hosted at ISP with 2 public IPv4 addresses. I want to run several subdomains (more than 2) with Apache and serve them via both HTTP and HTTPS. The SSL cert is a wildcard one ...
2
votes
1answer
10k views

How to properly install certificate issued to me?

I tried various ways to install certificate, but it seems it either not being seen by linux or something else is wrong. I got .pfx to be able to connect to another server via vpn (need to use Cisco ...
2
votes
2answers
3k views

How do add a certificate from a self-signed server to trusted certificates in Chrome?

I have a dedicated server with a wiki and want to secure it so nobody can read my articles by sniffing my pages. I do not want to pay for a valid certificate so I created a self-signed certificate. ...
2
votes
1answer
221 views

How to add an account when Thunderbird warns “potentially vulnerable to CVE-2009-3555”?

I just updated to Thunderbird 3.1 and now when I attempt to add in a new email account for one of my domains I get mail.server.example potentially vulnerable to CVE-2009-3555. Now reading up on it ...
2
votes
2answers
1k views

How using ssh/scp between non-public machines

I am often in the following situation: I have two machines, A and B, which are on LANs, and have non-public IP addresses. Machine C is on the same LAN as B, but publicly visible. I would like to copy ...
1
vote
1answer
75 views

What does Subversion use for its CA list?

I'm using SVN on Mac OS X. Often, when I checkout something from SourceForge, I am presented with: $ svn checkout https://svn.code.sf.net/p/cryptopp/code/trunk/c5 cryptopp-ecies Error validating ...
1
vote
2answers
938 views

Links SSL Error

What version of links does the user called "bytepool" have that he's able to find this workaround? Refer to link below. How to tell `links` to ignore expired SSL certificate and proceed? He writes ...
1
vote
1answer
152 views

Using CERT Tapioca on VM

I have been attempting to get CERT Tapioca (http://www.cert.org/blogs/certcc/post.cfm?EntryID=203) running on my Mac so that I can test the SSL/HTTPS security of our Android app. Up to this point, I ...
1
vote
1answer
3k views

Cannot use SSL/TLS on Mac OS X

I'm using a Mac I don't have administration rights on, so I can't create new accounts or anything like that. However, in my account (there's a general account in which everything works fine) I can't ...
0
votes
0answers
240 views

Guacamole, Tomcat, HTTPS-setup fails due to issues with certification

I'm using guacamole (http://guac-dev.org/) to access (parts of) my home (Debian) computer clientless, on the go. From my work computer (University Network) the screen is however not updating and only ...
0
votes
1answer
664 views

IE10: Website security certificate issue + “continue” button missing

I am developing a web app and am using self-signed SSL certificates. I'm trying to test my site on Internet Explorer 10 in a modern.ie VM (in VirtualBox). When I visit the site, ...
0
votes
1answer
491 views

digicert secure server ca signed by unknown authority mac os

Related to: Why won't OS X trust GitHub's SSL certificate? Why when I download this certificate and drag/drop into my Keychain on OSX, it shows as I downloaded from here: ...
0
votes
0answers
74 views

Github stopped working recently, 07/26/2014? [duplicate]

I'm a pro user of github until it stopped working on the last saturday, the 26. of July, 2014. Since then, i'm becoming in my browser following SSL error: My IDE (IntelliJ) is becoming the same ...
0
votes
2answers
280 views

Can't browse HTTPS pages. TLS error. Outobox virus?

Suddenly I have lost an ability to browse HTTPS pages with all browser. Here is an example of simple Google search with Chrome In other cases it can show blank page, or TLS error message. UPDATE ...