SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

14
votes
5answers
23k views

How much information can my ISP see?

Is it possible for my ISP to see the passwords that I enter on websites and in chat programs? And what about SSL websites that start with https, do they encrypt my username and password before ...
67
votes
12answers
37k views

Why won't OS X trust GitHub's SSL certificate?

When I go to any github.com page in Chrome, I get a big ugly error: You attempted to reach github.com, but the server presented a certificate issued by an entity that is not trusted by your ...
2
votes
1answer
2k views

Suppress Google Chrome's “Your Connection is Not Private” for specific Address?

We have an internal website (behind our VPN) which uses https/ssl. Every time I visit it, I get this error message: Your connection is not private Attackers might be trying to steal your ...
8
votes
4answers
5k views

Force a browser to load the 'https' edition of a website, not the 'http'?

This is similar to this previous question, but I believe it's a bit different*. Sites like GMail support a preference that pushes all traffic through the SSL edition of the site rather than the ...
38
votes
3answers
50k views

How to create my own certificate chain?

I would like to setup my own OCSP Responder (just for testing purposes). This requires me to have a root certificate and a few certificates generated from it. I've managed to create a self-signed ...
54
votes
5answers
131k views

Add permanent SSL certificate exception in Chrome (Linux)

I have a problem with a website that has an SSL certificate which doesn't correspond to the website domain. Chrome gives me a warning for this website (and rightly so), which I have to ignore ...
11
votes
8answers
28k views

Firefox: This connection is untrusted + Behind corporate firewall

I've seen some similar issues strewn throughout Google's results about this, but none seem to be corporate-specific. I continually get the 'This connection is untrusted' screen every time I attempt ...
149
votes
19answers
170k views

How do I list the SSL/TLS cipher suites a particular website offers?

How can I retrieve a list of the SSL/TLS cipher suites a particular website offers? I've tried openssl, but if you examine the output: $ echo -n | openssl s_client -connect www.google.com:443 ...
28
votes
1answer
33k views

How to easily create a SSL certificate and configure it in Apache2 in Mac OS X?

I'd like to use my Mac OS X with https for local development tests. How can I easily make Apache2 respond to ssl, just for test proposes - I don't want a real certificate, just a fake to make local ...
8
votes
3answers
42k views

Why is chrome slashing my HTTPS?

In Chrome when I view my page the https in the URL has a red slash through it. When I click it, it says: Your connection to www.example.com is encrypted with 256-bit encryption. However, this page ...
6
votes
1answer
3k views

Lion Unable to Load SSL Sites

OS: Mac 10.7.2 (Lion) I've been unable to load any SSL sites on any browser. Chrome gives error 7 (ERR_TIMED_OUT), but this occurs across all browsers. I've tried different DNS, flushing DNS, and ...
8
votes
2answers
920 views

How to tell which resources are loaded “insecurely” with Chrome using https

I understand this is because I'm loading some stuff via http:// but does that mean a single http reference can't appear in the source? Even in examples like <a href="http://...">...</a>? ...
2
votes
1answer
124 views

How to always allow insecure connection for a certain url in chrome?

For internal usage, we have a system using a self-signed insecure SSL certificate, making Chrome warn me on each session: Your connection is not private Attackers might be trying to steal ...
1
vote
1answer
942 views

Thunderbird: Error: imap.server.com : server does not support RFC 5746, see CVE-2009-3555

I'm getting this error when checking my mail, and I can't download my mail. I recently updated Thundirbird yesterday, but it restarted and was working fine for many hours. I saw this question: How to ...
2
votes
1answer
210 views

What does Subversion use for its CA list?

I'm using SVN on Mac OS X. Often, when I checkout something from SourceForge, I am presented with: $ svn checkout https://svn.code.sf.net/p/cryptopp/code/trunk/c5 cryptopp-ecies Error validating ...
2
votes
3answers
8k views

Disable SSL browsing in Chrome

I need to disable SSL browsing completely in Chrome. If not completely, at least disable https://www.facebook.com and force http://www.facebook.com to load, FOR EXAMPLE (FB is just an example - i ...
2
votes
3answers
3k views

How do add a certificate from a self-signed server to trusted certificates in Chrome?

I have a dedicated server with a wiki and want to secure it so nobody can read my articles by sniffing my pages. I do not want to pay for a valid certificate so I created a self-signed certificate. ...
0
votes
1answer
364 views

Apache2 server won't restart after replacing server.crt with server.crt from ca

I'm trying to enable ssl (tls?) I ran into these errors and I have these questions. Why did apache not restart? And how do I get it to restart? Replacing restart with start does not work. Could ...
118
votes
4answers
211k views

How to save a remote server SSL certificate locally as a file

I need to download an SSL certificate of a remote server (not HTTPS, but the SSL handshake should be the same as Google Chrome / IE / wget and curl all give certificate check fail errors) and add the ...
29
votes
3answers
22k views

Can the telnet or netcat clients communicate over SSL?

I would like to test client connections with IMAP over SSL, HTTPS, and other secure text-based Internet protocols over SSL/TLS, the same way I would using telnet or netcat if they were not tunneled ...
13
votes
6answers
59k views

Enable TLS 1.1 and 1.2 for Clients on Java 7

Java 7 disables TLS 1.1 and 1.2 for clients. From Java Cryptography Architecture Oracle Providers Documentation: Although SunJSSE in the Java SE 7 release supports TLS 1.1 and TLS 1.2, neither ...
26
votes
2answers
4k views

What is the superfish SSL certificate and where did it originate

I recently bought a new laptop, every https:// connection I do to any site regardless of browser chain back to a root certificate issued by "superfish, inc". I have had a dig around but I can't seem ...
4
votes
4answers
20k views

How to install a CA key (self signed SSL) on ubuntu? [duplicate]

I have a bunch of machines that need to fetch https: off a server (or collection of servers). I'm operating a CA and self-signing the certificates on the server(s). The client machines are running ...
45
votes
4answers
12k views

Firefox “Untrusted Connection” warnings when visiting reputable HTTPS sites when using child's account

When using Firefox on Windows, I see an "Untrusted Connection" warning when visiting any HTTPS site, including very reputable ones such as https://www.google.com and https://search.yahoo.com. The ...
14
votes
3answers
11k views

GMail and SSL Encryption - how much is encrypted

It's strangely difficult to find out exactly how SSL works with email, at least insofar as answering my specific question - when I connect to gmail using SSL, I understand that my connected is secure ...
14
votes
9answers
18k views

Mac OS X Lion 10.7.2 update breaks SSL

Summary After updating from 10.7.1 to 10.7.2, neither Safari nor Google Chrome can load GMail. Spinning Beachballs all around. The problem isn't GMail; Firefox loads GMail just fine. The problem ...
4
votes
3answers
17k views

Disable SSLv3 in major browsers

As the question suggests: How to disable support of the SSL version 3 and set TLS version 1 as minimum (oldest) protocol supported in order to defend against POODLE. One can test a browser with this ...
2
votes
3answers
14k views

SSLCipherSuite settings in Apache for supporting TLS 1.0, 1.1 and 1.2

I have an Apache 2.4.7 web server running multiple domain names using a single IP address. As a result of the Poodle vulnerability, I added the following SSLCipherSuite line. It worked fine for a ...
5
votes
2answers
15k views

How to disable SSL for some websites in Chrome?

I want to set chrome to load HTTP instead of HTTPS for some websites. So I searched internet but all the solutions was old. They said go to Under the hood tab which doesn't exist in my chrome 22. ...
5
votes
1answer
3k views

How to tell `links` to ignore expired SSL certificate and proceed?

I'm using the links browser and trying to connect to an HTTPS site. I then get: Verification failure: certificate has expired this is "fine" (i.e. was decided to be tolerated) for this ...
4
votes
2answers
375 views

How do I distinguish between these two certificate situations?

Situation 1 (safe): Website was vulnerable to heartbleed and using a certificate not valid before 2012-10-21 Website upgraded to an unvulnerable version of OpenSSL Website re-keyed and got a their ...
3
votes
1answer
3k views

SSL support with Apache and Proxytunnel

I'm inside a strict corporate environment. https traffic goes out via an internal proxy (for this example it's 10.10.04.33:8443) that's smart enough to block ssh'ing directly to ssh.glakspod.org:443. ...
2
votes
1answer
370 views

Determine TLS certificate details with Microsoft Edge

I purchased a new ASUS Q302 laptop from Best Buys for testing some software under the Intel Broadwell architecture (6th Gen i7). It looks like the machine has one of those Proxy/Interception ...
10
votes
3answers
37k views

Can I use another port other than 443 for SSL communication?

I have an application that communicates via SSL, however, Port 443 is already in use by an IIS instance on that same server. Can I use another port other than 443 for SSL communication?
6
votes
2answers
2k views

Where to get certificates for Acrobat PDF

When sending an invoice in PDF format, it is useful (in some countries obligatory) to sign this PDF digitally. Of course, I could create a self-signed certificate via OpenSSL, but a warning "could ...
5
votes
2answers
5k views

Prevent Internet Explorer from caching SSL client certificates

I use a particular HTTPS website, but I have to separate client certificates that I use to authenticate (sometimes I use one account, which requires certificate A and sometimes a different one, which ...
5
votes
2answers
8k views

Trust SSL certificate to local system account

I have the following need: A windows service needs to connect to a svn repository through https. The service needs also to run as local system account for IO permissions on the machine. Now when the ...
4
votes
1answer
15k views

How to properly install certificate issued to me?

I tried various ways to install certificate, but it seems it either not being seen by linux or something else is wrong. I got .pfx to be able to connect to another server via vpn (need to use Cisco ...
2
votes
1answer
2k views

Which versions of the Windows TLS/SSL file transfer software like WinSCP and FileZilla are not affected by Heartbleed?

I noticed that many people still use versions affected by the heartbleed vulnerability of wide spread TLS/SSL enabled Windows clients like WinSCP and Filezilla. To be able to make safe ...
2
votes
3answers
5k views

How to block specific HTTPS traffic?

According to HTTPS description: Hypertext Transfer Protocol Secure (HTTPS) is a combination of Hypertext Transfer Protocol (HTTP) with SSL/TLS protocol. It provides encrypted communication ...
2
votes
1answer
854 views

Chrome says “This page contains some resources that are not secure” in all https websites

When I go to Gmail website (it is https), I see a red https with a line in address bar, and when I click on the icon near the URL, There is a sentence "... However, This page contains some resources ...
2
votes
2answers
3k views

HTTP to HTTPS Tunnel

So the issue is that I have quite a few homebrew scripts/web testing programs that only work with HTTP. The problem is that the website only allows HTTPS connections. Does anyone know of a way to ...
1
vote
3answers
4k views

SSL (imap) doesn't work from some machines - ssl handshake failure - how to narrow down further?

A few days ago our IMAP SSL (port 993) connections stopped working from our home network two Windows 7 PCs in our home network. Two other PCs, one with Windows XP, one also with Win7 professional ...
4
votes
1answer
696 views

Dynamic images served over HTTPS display broken image in word when opening an HTTP document

We have an application that produces HTML documents which the user opens in word from the web server, so they open: https://ourserver/ourapp/somepath/generateddocument.htm That document contains ...
3
votes
1answer
4k views

What is NSS error -5961 (PR_CONNECT_RESET_ERROR)

Can someone enlighten me the meaning of "NSS error -5961 (PR_CONNECT_RESET_ERROR)"? I am trying to connect to bitbucket.org with "https" protocol but got a refuse from the server. Then, I try to use ...
3
votes
3answers
2k views

SSL/TLS vs SSL/TLS-VPN

Whats the difference between using SSL/TLS in a web browser and an actual SSL/TLS VPN? Is SSL/TLS actually the pure technology and when one uses https:// in a browser this is a vpn connection?
3
votes
1answer
438 views

How does SSL work? Isn't there a hole?

I was reading this article, specifically the "SSL in action" part. It says: When Client connects to company.com on its SSL-secured port, the company sends back its public key (and some other ...
3
votes
1answer
8k views

Configure Apache to serve multiple subdomains via HTTP + HTTPS

I have a virtual server hosted at ISP with 2 public IPv4 addresses. I want to run several subdomains (more than 2) with Apache and serve them via both HTTP and HTTPS. The SSL cert is a wildcard one ...
2
votes
3answers
890 views

SSL Root CA certificate is not recognized, although present in the trust store. Why?

Background: Ubuntu Server 14.10 64-bit on aws.amazon.com/ec2 Cheap PositiveSSL server certificate from COMODO 1 server certificate, 2 intermediate CA certificates and 1 Root CA certificate as ZIP ...
2
votes
1answer
211 views

Using CERT Tapioca on VirtualBox

I'm attempting to use Cert Tapioca (http://www.cert.org/blogs/certcc/post.cfm?EntryID=203) in Virtual Box so that I can test the SSL/HTTPS security of all the sites I have browsed. What I did is, ...