The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
15 views

Download cipher-suite pack in Windows

Is it possible to download and install a cipher-suite pack in Windows, in the same manner as I would for a font suite? Or am I asking too much? Gordon.
-1
votes
3answers
33 views

How is TLS enforced on the receiving client of an email

I am writing an application that must send encrypted email to recipients. The state agency I work for recently installed a feature for outgoing email. If #secure# appears anywhere in the subject, the ...
1
vote
1answer
55 views

Unable to read an email protected by Rights Management Service

My colleague received an email from H company. This email is protected by Microsoft Rights Management Service. His email client is Outlook Express, and he use POP3 to received it to local disk (the ...
-1
votes
0answers
11 views

What is the command to check supported ciphers on a SMTP(TLS) server

What is the command to check supported ciphers on a SMTP(TLS) server I need to check the supported ciphers for SMTP
1
vote
2answers
138 views

Disable SSLv3 in email servers [closed]

After the recent POODLE vulnerability, I would like to disable SSLv3 on my mail servers (for POP, IMAP, and SMTP). My concern is whether that will break my clients' access. I have been looking online ...
5
votes
2answers
2k views

Disabling SSL 3 on 64bit Chrome for Windows [duplicate]

I see lots of different places with the same response for disabling SSL3 on chrome (adding --ssl-version-min=tls1 to the end of the execution of chrome.exe). But apparently this isn't working for my ...
0
votes
1answer
31 views

How do I configure my system to trust a CA for a specific subset of domains?

The company I work for has a number of internal web services accessible over HTTPS. These services use SSL/TLS certificates signed by an internal certificate authority which is only trusted by ...
4
votes
3answers
7k views

Disable SSLv3 in major browsers

As the question suggests: How to disable support of the SSL version 3 and set TLS version 1 as minimum (oldest) protocol supported in order to defend against POODLE. One can test a browser with this ...
0
votes
0answers
274 views

TLS negotiation failed on ldaps:// - sslv3 alert bad record mac

We are facing an issue in one of our openldap environments, while enabling secure queries via ldaps:// our integration environment keeps returning the following error to out ldapsearch command: ...
0
votes
2answers
371 views

curl and sni-enabled server

I am running curl against a sni-enabled server with the following command curl --cacert CustomCA.crt -H "Host: example.com" https://1.2.3.4/foo However, I am not getting the right certificate where ...
0
votes
1answer
48 views

Should TLS be used for email on localhost?

I have an application (written in PHP) which sends email using SMTP and runs on the same system as the email server. Are there any security concerns about using port 25 on localhost rather than port ...
0
votes
0answers
189 views

Don't retry vpn connection after tls-error

I have several cellular devices which establish always-on openvpn tunnels to a server which is always listening for incoming openvpn connection requests. Sometimes the cellular devices are delivered ...
0
votes
0answers
465 views

OpenVPN on a Diskstation TLS Handshake error, Self signed cert, Defaults

I have a DS 1813+ with DSM 5 4493 Update 1 installed (latest) and am having issues setting up OpenVPN I have it working internally, (which is strange in itself) but when I remote from my house or ...
0
votes
2answers
118 views

Can't browse HTTPS pages. TLS error. Outobox virus?

Suddenly I have lost an ability to browse HTTPS pages with all browser. Here is an example of simple Google search with Chrome In other cases it can show blank page, or TLS error message. UPDATE ...
0
votes
1answer
145 views

How to overcome Local Group Policy Editor's 1023 character limit?

I want to reorder the SSL Cipher Suite Order applied as part of KB2919355, prioritizing the forward secrecy suites above all else. Trying to do this with gpedit at Computer Configuration > ...
0
votes
0answers
31 views

How to change cryptography method at TLS protocol on Localhost(XAMPP)?

How do I change the cryptography method at SSL/TLS protocol on Localhost(XAMPP)? I want to use Blowfish as symmetric cypher, and RSA for PKC....
1
vote
0answers
343 views

Disabling TLS protocols for https:// URLs in git

Since my update to Ubuntu 14.04, I cannot connect to the companies git server. It uses https with the SSL protocols only. When running git clone (or any other git command that connects to the server) ...
2
votes
1answer
2k views

Which versions of the Windows TLS/SSL file transfer software like WinSCP and FileZilla are not affected by Heartbleed?

I noticed that many people still use versions affected by the heartbleed vulnerability of wide spread TLS/SSL enabled Windows clients like WinSCP and Filezilla. To be able to make safe ...
1
vote
1answer
62 views

How can i setup a webserver with TLS and DH_anon?

I need to setup a test web server with TLS and DH_anon . Apache or nginx is preferred, but not mandatory. OS is als not important. I already tried a google search, but there seems to be very limited ...
0
votes
1answer
91 views

How to see the handshaking messages of SSL/TLS in firefox using firebug?

I am trying to understand the internals/working of SSL. I would like to view the handshaking, key exchange, cypher exchange, session key, etc. messages communicated. So, I thought if I enable firebug ...
0
votes
0answers
25 views

TLS on exchange

Basically I need to sign all emails going out of exchange 2007 on one domain while leaving all others unsigned. Can anyone give me a quick how to or point me in the right direction for some ...
1
vote
1answer
131 views

What does my internet provider know about my online activities?

What does my internet service provider know about my online activites in these cases? plain server (www, ftp, whatever) connection and provider's DNS secured (e.g. TLS) server connection and ...
0
votes
1answer
2k views

how to disable TLS 1.0 and checking enabling SSl 3.0 in Firefox 27.0.1?

How to disable TLS 1.0 and checking enabling SSL 3.0 in Firefox 27.0.1 (new Version) ? I suppose I can find it at the Encryption tab. I followed below path Tools -> Options -> Advanced but there ...
1
vote
1answer
947 views

Inspecting websocket traffic with proxy

I'm using Charles Proxy to inspect traffic from my Android apps. I have the phone configured to proxy all traffic through Charles, which is installed on my PC. Everything has worked thus far ...
1
vote
1answer
162 views

Wireshark TLS communication shows green HTTP packets when using CCProxy proxy server?

Client <--> CCProxy <--> Server I have IE configured to use a proxy server for HTTP and Secure connections. I also have a proxy server is set up with CCProxy. It is my understanding that ...
0
votes
0answers
57 views

All https requests are goes as TLS (windows 7 64bit)

I have installed a version of windows 7 64bit on my laptop. After it all software that are going to send request to https has failed because the OS are using TLS instead of SSL3. I find it because all ...
2
votes
1answer
6k views

NOQUEUE: reject: Relay access denied

I recently setup a mail server following the instructions on linode.com (https://library.linode.com/email/postfix/postfix2.9.6-dovecot2.0.19-mysql) except I am using postgreSQL instead of mySQL. ...
0
votes
2answers
368 views

What I must do to add SHA-2 MAC TLS ciphers to Firefox?

I tested the latest Firefox beta using https://cc.dcsec.uni-hannover.de/ and all ciphers supported by Firefox 25 use MAC SHA1; none of them allow SHA-2. Can this be changed? Do Mozilla have plans to ...
0
votes
1answer
254 views

What I must do to get TLSv1.2 support in Google Chrome 30?

Here one can read that Google Chrome 30 support TLSv1.2, but I can't access a server using it on Ubuntu 13.04. The server just support TLSv1.2 and have cipher TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 ...
2
votes
1answer
2k views

Thunderbird: SSL/TLS vs. STARTTLS

Following up this question on serverfault "Is STARTTLS more safe than TLS/SSL?" it came up that the question is rather a question about Thunderbird and not about the actual protocols. Also, if you ...
4
votes
0answers
1k views

Specifying minor TLS version when using curl

Is there a way to specify curl to use a specific TLS version? Like 1.1 or 1.2? I can see only sslv3 and tlsv1 options in command help. I took latest src and compiled it with openssl 1.0.1e. Still dont ...
1
vote
0answers
131 views

Authenticate WiFi with certificate instead of password

Is it possible (read done without a massive amount of work) to set up a wireless network that checks for a certificate instead of asking for a password? To be clear: I would like to download a ...
1
vote
2answers
2k views

ldap authentication not working with start_tls option after certificate upgrade

Ubuntu ldap authentication is not working on my client with ssl start_tls option enabled in the ldap.conf file. I can authenticate when I comment out ssl start_tls. I upgraded the ldap servers ...
3
votes
2answers
1k views

Postfix TLS configuration

I am in the middle of setting up a postfix server on Arch Linux. It seems to be working ok so far - I can successfully speak to it via telnet localhost 25. However, when I try to connect using ...
0
votes
1answer
1k views

use postfix with ssl certificate that has a password

i have gone through a couple of tutorials on how to set up postfix on ubuntu with support for my ssl certificate: https://help.ubuntu.com/community/Postfix ...
6
votes
2answers
3k views

Windows 8’s Mail application does not support TLS/STARTTLS for IMAP accounts?

The built-in Mail application does not seem to support TLS using STARTTLS for IMAP on standard IMAP port 143. This is the only option my email server offers, and it works for every other email client ...
1
vote
1answer
7k views

Unable to connect to FTP server using Filezilla with router in-between

While connecting to my web server using filezilla, i am getting this error: Status: Resolving address of ftp.mysite.org.in Status: Connecting to 199.199.199.18:21... Status: Connection established, ...
1
vote
1answer
421 views

connect to windows vpn (peap) from linux

Our admin just changed the vpn stuff to something different and I'd like to know how to connect to the windows vpn from a linux (debian testing) box. a certificate file (in p7b format, which I was ...
2
votes
1answer
350 views

Relation of IPSec and IPv6 to SSL/TLS

My understanding is that IPSec is a security layer added inside the IP protocol to make IP itself a secure transport. My understanding of IPv6 is that it is the newest version of IP that will (for ...
0
votes
2answers
535 views

Encrypt rsync using TLS

How do I encrypt the rsync connection using TLS? I don't have SSH access on the server and can't set up any services so stunnel is not an option, right? My provider simply to me to "Use a TLS ...
0
votes
2answers
201 views

Is TLS secure enough to prevent eavesdropping carried out by an ISP?

I would like to "secure" my email, http servers and desktop client by connecting exclusively over TLS, be it email, in/out:80 or just regular "web surfing" traffic. Will that prevent ISP and ...
3
votes
2answers
2k views

How to configure Emacs smtp for using a secure server (gmail)

This is a question originally posed on https://answers.launchpad.net/vm/+question/108267 on 2010-04-26. It asks how one should configure Emacs mail sending packages on MS Windows for use with secure ...
1
vote
0answers
92 views

Installing a custom Root authority certificate for a Service Application

I have an Windows service application, that executes under a specific user account, that calls a remote web service via HTTPS. The certificate the remote server uses is issued by a Root authority ...
0
votes
0answers
638 views

How does SSL-VPN tunneling and encryption work?

I have a few questions on SSL-VPN (Tunnel, not portal version). Question 1 is probably the one I'd like answered the most, out of my four questions. How exactly does SSL-VPN tunneling work (Feel ...
2
votes
1answer
142 views

SSL/TLS and VPN-SSL?

As I understand it, SSL/TLS is used when we visit a website using https. However, using this method only encrypts the data and not the IP address of the website we're requesting. If you use a VPN ...
1
vote
3answers
236 views

SSL/TLS would it make http requests invisible?

Just wondering, if you use SSL/TLS at the application layer would this make anybody trying to sniff between my client and the router unable to see which websites I am requesting to see? Same with a ...
3
votes
3answers
1k views

SSL/TLS vs SSL/TLS-VPN

Whats the difference between using SSL/TLS in a web browser and an actual SSL/TLS VPN? Is SSL/TLS actually the pure technology and when one uses https:// in a browser this is a vpn connection?
12
votes
1answer
9k views

Can the Telnet/Netcat client communicate over SSL?

I would like to test client connections with IMAP over SSL, HTTPS, and other secure text-based Internet protocols over SSL/TLS, the same way I would using Telnet or Netcat if they were not tunneled ...
2
votes
1answer
139 views

Does changing cipher defaults on a client PC make a difference when using SSL/TLS?

If I am running Windows 7 and change the default ciphers on the PC, does this affect the connection between the client and server? If a similar change is only made on the server, does it affect the ...
0
votes
1answer
69 views

What would happen if a server (Windows 2008) is updated to use TLS 1.2?

If a user using Firefox browses to a website on a server (Windows 2008) that has been updated to use TLS 1.2, what would happen? As I am a newbie to this can someone explain what the process is when a ...