SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

3
votes
0answers
606 views

MITM the Android emulator

I am trying to man-in-the-middle the Android emulator so I can decrypt the SSL-traffic with sslsniff. The problem is that the traffic doesn't seem to get routed through sslsniff, even when I have ...
3
votes
0answers
1k views

SSL timeout on some sites, across all browsers, on Mac OS X Snow Leopard

For the past several weeks, I've been receiving "Error 7 (net::ERR_TIMED_OUT): The operation timed out" when I attempt to connect to either Twitter or Paypal via SSL. I get this specific error in ...
2
votes
0answers
14 views

How to instruct SVN print its CA list?

This is related to What does Subversion use for its CA list?. I want to have SVN tell me the CAs its using. svn help does not appear to discuss it (but I may have missed it, since its not obvious in ...
2
votes
0answers
365 views

Mac OS X Yosemite and Client SSL Certificates

Ever since I upgraded from Mavericks to Yosemite, my SSL Client Certificates have stopped working in certain places. They still work in web browsers and in wget, but they have stopped working in curl ...
2
votes
0answers
96 views

Strange null bytes in CN from openssl req

I need to send CSR (certificate signing request) to the SSL authority for our wildcard domain SSL certificate. I see strange values in the CN (common name) field, for example ...
2
votes
0answers
17 views

Unable to browse to certain sites

I have a few guests on a XenServer host, and some sites ( both SSL and non SSL ) cannot be accessed by the XenHost and the Guests. Other machines on the same network can access these sites just fine, ...
2
votes
0answers
29 views

How does one know if the Mail app on OSX is using SSL to connect to your email account or not?

I set up an email account, which is supposed to use SSL. But while setting it up Mail said that it "Could not send the password securely" to the server, and that If I send the password other people ...
2
votes
0answers
248 views

Why doesn't Firefox accept different Ports for SSL encryption other than 443

There is an IIS Webserver with different Sites (SSL Binding) because I can't configure IIS to listen on same Address and Port with different Certificates so I set the SSL Port direction in the ...
2
votes
0answers
82 views

SSL cert owner != localhost after creating SSH tunnel

I use an SSH tunnel to connect to my work's mail server, then tell my mail client to connect to server "localhost" on port "1993" (the port I chose for the tunnel). I have two different Ubuntu Precise ...
2
votes
0answers
721 views

Chrome ignores some imported certificates

On Windows 7 with Chrome 30. I have a few websites running on localhost over SSL. Visiting them always displays the standard "The site's security certificate is not trusted!" message from Chrome. I ...
2
votes
0answers
1k views

Establish https on nonstandard port

I'm trying to estamblish https on port 55434 (different than standard 443). My nginx configuration looks like this: server { server_name example.org; listen 55434 ssl; ssl ...
2
votes
0answers
364 views

Decode SSL packets in WireShark

I have cert.cer, base64 x509 and a Wireshark dump in .pcap format. The packets are encoded, so how do I decode them? Now: [site-ip],443,http,xe.cer but it's still not working.
2
votes
0answers
3k views

Disable SSL hostname check in Chrome

How I disable SSL certificate error when CN does not match DNS name in Chrome? In IE, this is done by Tools -> Internet Options -> Advanced (tab) -> Scroll down to section "Security" -> checkbox: ...
1
vote
0answers
41 views

What is causing warning on a certificate's basicConstraints?

I created a self signed server certificate using OpenSSL's req -x509 command and a CONF file. The CONF file is shown below. When I examine the certificate using Microsoft certificate viewer, its ...
1
vote
0answers
25 views

lighttpd complains about ssl.use-compression

I am trying to apply some of the tricks described here, and the problem is having ssl.use-compression = "disable" in lighttpd.conf, because server reports WARNING: unknown config-key: ...
1
vote
0answers
119 views

I destroyed my Mac's PHP setup: SSL certification fails

Long story short, I deleted the PHP symlink on my Mac, and replaced it with a symlink from XAMPP. Now it seems that there's a problem with my SSL configuration or what seems to me, a lack thereof. ...
1
vote
0answers
19 views

ApacheDS: Where is the CA certificate?

ApacheDS auto-installs with an automatically generated certificate. For testing purposes, I'd like to just use this for now, but in order to trust it, I need the CA cert ...
1
vote
0answers
49 views

Force browser to use HTTP because of HTTP proxy

I have a lot of HTTP proxies and I cannot access websites that are using SSL through those proxies. I have no access to configuring the proxies, so is it possible to force Firefox (in my case) to ...
1
vote
0answers
581 views

IIS 8.5 TLS 1.2 not working

I have Windows 8.1 with IIS 8.5 and have run the script from http://www.hass.de/content/setup-your-iis-ssl-perfect-forward-secrecy-and-tls-12 to enable TLS 1.2, but Qualys SSLLabs says my server ...
1
vote
0answers
36 views

Why does Thunderbird permanently asks to “verify xb7481.xb7.serverdomain.org:143”?

After using Thunderbird for 5+ years now, I suddenly get this weird popup asking to "Verify this security exception rule" [translated from german]. This happens without any reason, without looking at ...
1
vote
0answers
301 views

GnuTLS error -15: An unexpected TLS packet was received when setting up vsftpd with SSL

I have an Ubuntu 14.04 on EC2 with vsftpd 3.0.2 I have set up the SSL certs and my vsftpd.conf is: listen=YES anonymous_enable=NO local_enable=YES write_enable=YES dirmessage_enable=YES ...
1
vote
0answers
145 views

Not using CONNECT for SSL with Squid proxy

I want to disable encryption between my browser and my Squid so that I can get Squid to cache the pages. As using my own server and SSH port forw I'm not that worried about security. I already tried ...
1
vote
0answers
9 views

How to control SSL automatic activities in Wordpress php files

I have domain with one sub-domain. The domain has installed SSL with valid certificate but sub-domain doesn't have it. I installed two Wordpress, one for domain and one for sub-domain (clone it to ...
1
vote
0answers
252 views

nginx - ssl and www redirect configuration

this is related to: http://stackoverflow.com/questions/24538973/django-allowed-hosts-error-for-www-domain-and-ip-address i'm attempting to redirect www and non-ssl requests to ssl non-www domain for ...
1
vote
0answers
1k views

How to properly configure SSL certificates on a Synology NAS?

While Synology DSM is a wonderful product, that was designed to be easy to be used, it seems that there a few areas where it lacks documentation (even from online sources). In fact most of the ...
1
vote
0answers
135 views

Java keyTool - append primary/secondary intermediate certificates to key store

I have already created a keystore (server.jks in the image) having imported the relevant key-pair. keytool -importkeystore -srckeystore server.p12 -destkeystore server.jks -srcstoretype pkcs12 I ...
1
vote
0answers
47 views

Is there a way to quickly disable all root certificates in Windows 7?

I'd like to temporarily disable all trusted root certificates and wondering if there is a quicker way than going through every single one of them, right-click Properties and selecting "Disable all ...
1
vote
0answers
809 views

SSL connection error when browsing Facebook and Twitter

I get this error not always but most of the times I try to go to Facebook or Twitter: SSL connection error Unable to make a secure connection to the server. This may be a problem with the ...
1
vote
0answers
26 views

Remote management on WRT630N via HTTPS

I have a Linksys WRT630N wireless router and am trying to configure remote management via HTTPS. I've chosen a nonstandard port and can successfully connect and manage the router remotely via HTTP, ...
1
vote
0answers
148 views

GnuTLS test 'chat' equivalent of OpenSSL s_client s_server

How can I set up a test encrypted "chat" with GnuTLS, equivalent to the OpenSSL s_client and s_server using GPG credentials? I would like to tell GnuTLS-serv and -cli to use keys generated with GPG ...
1
vote
0answers
2k views

Chrome and Outlook can only make secure connections when user account has admin privileges

I have a co-worker who is set up as an admin user under Win XP SP3 and I'm trying to switch her to being a restricted user. The short story is that when I switch her account to restricted, Chrome ...
1
vote
0answers
120 views

Apache configured for HSTS, but SSLLabs/Chrome not acknowledging

I'm setting up a webserver and I've been checking it against SSLLabs and Chrome 31 to make sure the security is up to snuff. However neither Chrome nor SSLLabs seems to believe that strict transport ...
1
vote
0answers
109 views

SSL certificate for CNAME record

I have the CNAME record images.bob.com, which points to the images.susan.co.uk (images.bob.com. 1800 IN CNAME images.susan.co.uk.). I would like to ask for issuing SSL certificate for the ...
1
vote
0answers
1k views

SSL Error after upgrading to Windows 8.1

After upgrade my Windows 8 to Windows 8.1, I got this SSL Error: ...and this I have did some research and tried to change my system time up to date, reset my modem and use wireshark to see if ...
1
vote
0answers
657 views

CIFS share via LDAP + SSL

I have NAS drive which is bound to an Open Directory LDAP server for authentication with SSL enabled. The NAS allows for CIFS shares to be accessed via LDAP authentication. (in this case the NAS is a ...
1
vote
0answers
43 views

How to only accept certificates issued by user-specified CA per domain?

Question Is it possible in Chromium or Firefox to only accept SSL certificates issued by a user-specified CA for a specific domain? Background When you have set up your own certificate authority ...
1
vote
0answers
87 views

Using Apache as a debug proxy for https traffic

I know that I should be using mitmproxy (or Charles, or Fiddler, or Burp Proxy), and that I can use Squid, but is it possible to use Apache to debug out going https traffic from my computer? That is, ...
1
vote
0answers
222 views

How to run secure voip traffic without using vpn

I use quintum tenor for voip traffic using VPN SSL Tunnel. VPN server is based in another country. VPN used enough bandwidth, and we need to reduce bandwidth consumption. Is there any SECURE way to ...
1
vote
0answers
172 views

Weird redirection caused by SSL in all browsers

I have 2 websites, mydomain.com and mydomain.co. Here is the comparison of the 2 websites. mydomain.com | production site | purchased SSL certification from GoDaddy mydomain.co | development site ...
1
vote
0answers
1k views

Redirect IP to url for ISPConfig 3 administration

I am running a debian machine with ISPConfig 3.0.4.3. Yesterday I purchased a RapidSSL wildcard certficate and want to make sure my IPSConfig always loads the admin.mydomain.net url. Even if the user ...
1
vote
0answers
93 views

Installing a custom Root authority certificate for a Service Application

I have an Windows service application, that executes under a specific user account, that calls a remote web service via HTTPS. The certificate the remote server uses is issued by a Root authority ...
1
vote
0answers
461 views

Preventing Internet Explorer from “remembering” an old SSL certificate

A website I'm using has switched recently from a GoDaddy SSL certifcate to a StartCom certificate, which works fine in most cases. The original GoDaddy certificate expired last year. However, in ...
1
vote
0answers
392 views

Self-Signed Certificate and IIS 6.0, How to generate a Client Certificate

I am looking at generating a self-signed certificate, and only allow users who has client certificate installed on my web server. I am using IIS 6.0 with selfSSL to generate my .pfx web server ...
0
votes
0answers
6 views

Android Browsers Bypass SSL Security Error

I'm using an Android device and trying to test my local website that has SSL enabled (but of course not real or verified because it's local and only for testing), but I cannot, for the life of me, ...
0
votes
0answers
5 views

Is there a way for Nginx to load certificates from URL?

I want to store the SSL certificates for Nginx externally to the server. Thus it would load its SSL certificates not from the file system, but probably via HTTPS from some URL. Is this possible?
0
votes
0answers
11 views

Non-domain log forwarding certificate types

I'm trying to set up a source initiated subscription (Log forwarding) where the event source server is not in the same domain as the event collector server. I'm following these steps. It states that ...
0
votes
0answers
13 views

converting 'cacert.crt' file to pks 12

This is the third or so in a chain of questions to implement ssl certificates. To date the public and private keys are created in the server and are operational, however the browsers do not recognize ...
0
votes
0answers
9 views

How to properly install SSL on CPanel or WHM

How do you properly set up a SSL certificate to be able to use https:// without the weird chrome warnings via CPanel or WHM? Also, does it matter where you purchase the SSL from?
0
votes
0answers
8 views

How to get https on my AWS EC2 hosted website after uploading SSL Certificate to AWS

I have already followed the tutorial below: http://docs.aws.amazon.com/IAM/latest/UserGuide/InstallCert.html And I have uploaded and verified by certified SSL certificate to my AWS iAM. I am ...
0
votes
0answers
31 views

Endless Loop going to self signed https site in Chrome only?

A client I am working for has a site running under SSL using a self signed certificate. When I navigate to the site in Chrome, I get the Err_Cert_Authority_Invalid error. I click Advanced and the ...