SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

learn more… | top users | synonyms

75
votes
16answers
75k views

Is there a tool that can test what SSL/TLS cipher suites a particular website offers?

Is there a tool that can test what SSL/TLS cipher suites a particular website offers? I've tried openssl, but if you examine the output: $ echo -n | openssl s_client -connect www.google.com:443 ...
55
votes
4answers
91k views

How to save a remote server SSL certificate locally as a file

I need to download an SSL certificate of a remote server (not HTTPS, but the SSL handshake should be the same as Google Chrome / IE / wget and curl all give certificate check fail errors) and add the ...
54
votes
9answers
20k views

Why won't OS X trust GitHub's SSL certificate?

When I go to any github.com page in Chrome, I get a big ugly error: You attempted to reach github.com, but the server presented a certificate issued by an entity that is not trusted by your ...
42
votes
1answer
2k views

Firefox “Untrusted Connection” warnings when visiting reputable HTTPS sites when using child's account

When using Firefox on Windows, I see an "Untrusted Connection" warning when visiting any HTTPS site, including very reputable ones such as https://www.google.com and https://search.yahoo.com. The ...
33
votes
2answers
3k views

Why do some websites show the company name next to the URL?

Some websites show the company name next to the URL (in Chrome) and some don't. How do I set this up for my website? Is there a reason why or why I wouldn't want to do this?
27
votes
6answers
76k views

Add permanent SSL certificate exception in Chrome (Linux)

I have a problem with a website that has an SSL certificate which doesn't correspond to the website domain. Chrome gives me a warning for this website (and rightly so), which I have to ignore ...
22
votes
8answers
13k views

Is there an HTTPS Everywhere add on for Chrome, MSIE or safari?

I really like this HTTPS Everywhere add-on for Firefox. But I tend to browser hop, so have similar HTTPS-preferring add-ons been released for the other major browsers?
21
votes
3answers
32k views

How to create my own certificate chain?

I would like to setup my own OCSP Responder (just for testing purposes). This requires me to have a root certificate and a few certificates generated from it. I've managed to create a self-signed ...
20
votes
1answer
21k views

How to easily create a SSL certificate and configure it in Apache2 in Mac OS X?

I'd like to use my Mac OS X with https for local development tests. How can I easily make Apache2 respond to ssl, just for test proposes - I don't want a real certificate, just a fake to make local ...
20
votes
2answers
2k views

Paypal.com SSL certificate invalid, issued to BitPay.com

Trying to buy some games from GoG, click Paypal and Chrome shows me this page: I'm not entirely sure how to work out what's going on here. I am a Bitcoin user so my immediate fear is my ...
16
votes
3answers
2k views

Website is securely not secure

I am accessing Pandora via SSL and notice a few icons by the URL. First is the exclamation point in a triangle, indicating the page is not fully secure: Next to it is a shield? This one says ...
15
votes
6answers
2k views

Why is an unsigned SSL cert treated worse than no SSL cert?

If I view a site that has a unsigned or self-signed SSL cert, my browser gives me a warning. Yet the same browser has no problem allowing credentials to be sent across unsecured pages. Why is the ...
14
votes
3answers
9k views

GMail and SSL Encryption - how much is encrypted

It's strangely difficult to find out exactly how SSL works with email, at least insofar as answering my specific question - when I connect to gmail using SSL, I understand that my connected is secure ...
14
votes
9answers
17k views

Mac OS X Lion 10.7.2 update breaks SSL

Summary After updating from 10.7.1 to 10.7.2, neither Safari nor Google Chrome can load GMail. Spinning Beachballs all around. The problem isn't GMail; Firefox loads GMail just fine. The problem ...
13
votes
2answers
34k views

Windows 7 will not install a root certificate

I have a web service that uses a self-signed certificate, so I need to install the certificate as a Trusted Root so that I can avoid all the security errors that having a self-signed certificate ...
13
votes
1answer
455 views

Many websites seem to be switching Root Certificates [closed]

For the past few days, I have been noticing that many websites which use the "GTE CyberTrust Global Root" root certificate have been moved to the "GlobalSign Root CA" root cert. I've noticed this on ...
13
votes
3answers
11k views

How can I disable SSL (https) google search in FireFox?

I know that Firefox 14 has enabled Secure Sockets Layer (SSL or https) search for its Google search plug-in. How can I disable it? Thanks,
12
votes
1answer
10k views

Can the Telnet/Netcat client communicate over SSL?

I would like to test client connections with IMAP over SSL, HTTPS, and other secure text-based Internet protocols over SSL/TLS, the same way I would using Telnet or Netcat if they were not tunneled ...
11
votes
5answers
17k views

How much information can my ISP see?

Is it possible for my ISP to see the passwords that I enter on websites and in chat programs? And what about SSL websites that start with https, do they encrypt my username and password before ...
11
votes
3answers
28k views

The certificate is not trusted because no issuer chain was provided

Could anyone explain the meaning of this error message in plain English? Should I add an exception or I should not continue on this website? Technical details: the URL is here, the browser is ...
10
votes
2answers
3k views

Do web browsers cache SSL certificates?

Do any web browsers cache SSL server certificates? For example, if I change the SSL certificate on a web server, will all of the web browsers pick up the new certificate when they connect via SSL, or ...
9
votes
1answer
20k views

How do SSL chains work? [closed]

Why are intermediate certificate authorities required? When would an intermediate certificate be used? How do I verify the chain from the intermediate certificate to the root certificate? What are ...
9
votes
1answer
6k views

What makes the address bar in IE turn green?

What aspect of a site's SSL certificate causes IE's address bar to turn green? I'm working on a site which already uses SSL successfully, but am interested to know if there are different levels of ...
9
votes
1answer
5k views

Finding insecure content on the page

When Chrome accesses a page that has some insecure content on the page, it puts a slash through the https:// and says that that is the case. How can I find the content that is not secured without ...
8
votes
4answers
3k views

Force a browser to load the 'https' edition of a website, not the 'http'?

This is similar to this previous question, but I believe it's a bit different*. Sites like GMail support a preference that pushes all traffic through the SSL edition of the site rather than the ...
8
votes
2answers
749 views

How to tell which resources are loaded “insecurely” with Chrome using https

I understand this is because I'm loading some stuff via http:// but does that mean a single http reference can't appear in the source? Even in examples like <a href="http://...">...</a>? ...
8
votes
1answer
8k views

Tortoise SVN Error Validating Server Certificate

I just updated the certificate on one of my sites due to the old one expiring. The new certificate verifies fine in Internet Explorer 9, Chrome, and Firefox 4 - but when trying to browse/check out the ...
7
votes
1answer
8k views

Can self-signed SSL certificate be renewed? How?

I'm fairly new to SSL certificates and would like to know if a self-signed certificate which I use for HTTPS can be renewed to extend its expiry date without all clients of the site having to go ...
7
votes
1answer
4k views

Checking ssh keys have passphrases

I have a bunch of users, who with SSH keys have access to accounts on other servers. Currently I have a script which collects up the ssh public keys and distributes them to the correct account on the ...
7
votes
2answers
2k views

Is there a way in Chrome to use SSL by default?

What I would like to do is have Chrome automatically switch me to SSL connections if a site supports it. So if I type for example: www.somesite.com in the browser I want Chrome to try to connect me ...
7
votes
1answer
314 views

What Trusted Root Certification Authorities should I trust?

After two recent Slashdot articles (#1 #2) about questionable Root Certificates installed on machines, I decided to take a closer look at what I have installed on my machines. (I use current versions ...
7
votes
3answers
30k views

How do you permanently disable the 'This Connection is Untrusted' page on Firefox

I'm going insane. Can someone please help me to COMPLETELY DISABLE the 'This Connection is Untrusted' page on Firefox. Facts: I am running Firefox 23.0 on an Ubuntu machine (downloaded and ...
6
votes
3answers
23k views

Why is chrome slashing my HTTPS?

In Chrome when I view my page the https in the URL has a red slash through it. When I click it, it says: Your connection to www.example.com is encrypted with 256-bit encryption. However, this page ...
6
votes
8answers
22k views

Firefox: This connection is untrusted + Behind corporate firewall

I've seen some similar issues strewn throughout Google's results about this, but none seem to be corporate-specific. I continually get the 'This connection is untrusted' screen every time I attempt ...
6
votes
1answer
6k views

SSL - what's the reason for disabling SSL v2 support?

I have noticed many guides saying you should disable the SSL v2 support while setting up SSL on a web server. I can't understand the reason. Can somebody tell me why, please?
6
votes
2answers
1k views

Are SSL's default snake oil certificates truly snake oil as opposed to being genuine honest-to-good certificates?

SSL generates self-signed "snake oil" certificates by default, for example at /etc/ssl/certs/ssl-cert-snakeoil.pem. As per Wikipedia, snake oil is a cryptographic method or product that is considered ...
6
votes
5answers
11k views

SSL certificate verification failure in Chrome, Heartbleed bug?

For some reasons I'm running into SSL problems since a few days. When trying to clone a git repository for example I receive the following error message: fatal: unable to access ...
6
votes
1answer
453 views

How to know which Certificates to leave in my browser, and which to remove

I would like to tighten up security a bit, so I am disabling unneeded certs from my browsers. For instance, the "WoSign CA Limited" cert from China I obviously don't need, yet "Thawte Consulting cc" I ...
6
votes
1answer
332 views

Code signing issues

I have purchased a certificate from godaddy, which is now in .pfx format. I tried to convert it into .cer using Internet Explorer and Firefox. I tried to to sign midlet using converted .cer, but I get ...
6
votes
1answer
2k views

Why is SMTP over SSL between email servers not so popular? [closed]

In my understanding, most of email servers use SMTP/POP/IMAP over SSL to encrypt the email. It supports encryption when client (UA) send email to server (MTA) and UA receive email from MTA. However, ...
6
votes
1answer
3k views

What and how strong is 128bit RC4?

I notice that services like Gmail use RC4 128 bit as encryption. What is RC4 encryption and how does it work? Is 128-bit RC4 considered strong encryption?
6
votes
1answer
5k views

Can I get around using “pip install --cert”?

Trying to figure out if there is a way that I can avoid using the --cert flag to pip when I am installing packages at work. There is some issue with the proxy that only allows me to download the ...
5
votes
2answers
2k views

Why does https://gmail.com/ produce no SSL error while using a bad certificate?

It looks like https://gmail.com uses an SSL certificate which is for the hostname mail.google.com. As the SSL certificate hostname does not match the browser URL, why does this work? I should get a ...
5
votes
2answers
1k views

Daily Dilbert strip served by https

I have a web site which embeds the Daily Dilbert comic strip by parsing it from the RSS feed that dilbert.com publishes, but said website is SSL encrypted, and the image as published is not. This ...
5
votes
2answers
5k views

Getting a free SSL certificate for a subdomain [closed]

I have a sub domain from no-ip.org. I would like to get a free SSL certifcate for my domain. Is this even possible to do for a subdomain and if so what are my options?
5
votes
2answers
254 views

How Safe Is SSL In a Public Place (Airport/Coffee Shop)

If someone is monitoring all of the traffic on a network, and then I connect to it, and log into a website that is protected with SSL - is there any security risk?
5
votes
1answer
784 views

How do I disable HTTP-level compression?

BREACH, a new attack on SSL that targets HTTP compression, has recently been publicly announced. The emerging advice for how to defend against BREACH seems to be: turn off HTTP compression. So, how ...
5
votes
1answer
539 views

What happened to the Https Lock in Firefox 4?

Previous versions of Firefox used to have a padlock icon in the address bar whenever you browsed to a HTTPS site. Since Firefox 4 it no longer seems to be there. What happened to it? Is there any way ...
5
votes
2answers
508 views

Netflix SSL certificate shows up when trying to visit https://www.google.com

I'm on a hotel Wi-Fi network where occasionally the following message shows up in Chrome when trying to visit any Google sites over HTTPS: The SSL certificate reported when this happens is This ...
5
votes
1answer
1k views

What does the less sign (<) mean in dovecot.conf in front of ssl certificate path?

A couple of years ago I've configured a mail server with exim4 + dovecot 2.2.10 on debian and recently have been tweaking dovecot config. I use a self-signed x509 openSSL certificate, the paths to the ...