The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
23 views

Unable to authenticate with Client cert in TLS1.0

I have my own application running in Windows machine (server). I am using a browser as a client to do operations. I have multiple users connecting to the server using client certificates as the ...
1
vote
1answer
63 views

Imported CA certificate to Firefox Browser not working

I created Certificate Authority (CA) according to Ubuntu help using openssl. After creating a certificate for Apache2 and adding to certificate to it, I want to import it in Firefox. In the end of ...
1
vote
0answers
23 views

lighttpd complains about ssl.use-compression

I am trying to apply some of the tricks described here, and the problem is having ssl.use-compression = "disable" in lighttpd.conf, because server reports WARNING: unknown config-key: ...
0
votes
0answers
36 views

Programs having trouble connecting to internet resources

I am running Windows 8. Recently, a bunch of my programs such as GitHub for Windows, WebStorm, Chrome, etc.. stopped being able to use internet resources. Many say, that there me bay a firewall or ...
0
votes
1answer
44 views

keytool commands to replace existing SSL certificate?

I've a linux centos server running glassfish 3.1.2 app server. The default certs coming from GlassFish install for ports 4848 and 8181 are 1024 bits. I need to replace these with 2048 bits versions. ...
0
votes
1answer
28 views

SSL certificate for Web App + website

I have a WordPress + WooCommerce online store which is hosted on a managed hosting. I just bought non-wildcard SSL Certificate for that online store. I am also developing a CherryPy Python Web App ...
1
vote
0answers
134 views

How to use Charles as proxy to decrypt HTTPS messages in Wireshark?

I know I can view decrypted HTTPS data directly in Charles. But I want to view lower level SSL messages in Wireshark. So I setup Charles as the SSL proxy, using my own certificate, and I setup SSL ...
0
votes
0answers
52 views

Pure-FTPD certificate not being used

I am using Pure-FTPD from the epel repository on CentOS 6. Now I have configured to enable TLS which works fine however for some reason it wont make use of the certificate file I have placed in ...
0
votes
2answers
49 views

How to disable SSL version 2 on IIS/Window Server?

How to disable SSL version 2 on IIS / Window Server?
0
votes
1answer
422 views

Openvpn TLS 1.2 cipher suites

This is a repost of my original question (openvpn tls 1.2) The problem is split in two because a solution was found for the 128-bit cipher suites. Openvpn can't connect with these cipher suites: ...
0
votes
0answers
98 views

How can I use LibreSSL with nginx?

I've been trying to install LibreSSL and then using it with Nginx for better TLS-support. I foound two guides: https://www.mare-system.de/blog/page/1405201517/ ...
1
vote
2answers
374 views

openvpn tls 1.2

Openvpn cant establish connection with any tls 1.2 cipher. TLS-DHE-RSA-WITH-AES-256-GCM-SHA384 TLS-DHE-RSA-WITH-AES-256-CBC-SHA256 TLS-DHE-RSA-WITH-AES-128-GCM-SHA256 ...
1
vote
0answers
1k views

OpenVPN Linux client - tls key negotiation failed to occur (FrootVPN)

I'm using the free FrootVPN service (works flawlessly on Windows). However on Linux I can't manage to get it to work. FrootVPN's support webpage is broken so I can't message their support. I know ...
0
votes
1answer
762 views

Enable TLS 1.0 using registry

I am trying to enable TLS 1.0 in the client side computer .The client side computer is windows XP with IE 6 and server is windows server 2012 R2. In our server TLS 1.0 is enabled and SSL 3.0 and 2.0 ...
0
votes
1answer
326 views

TLS-auth problems with openvpn on debian

I have a raspberry pi which I intend to use as a vpn proxy while on public networks. I followed this guide (http://www.raspberrypi.org/forums/viewtopic.php?f=36&t=81657) to set up openvpn on the ...
1
vote
1answer
31 views

Download cipher-suite pack in Windows

Is it possible to download and install a cipher-suite pack in Windows, in the same manner as I would for a font suite? Or am I asking too much? Gordon.
-1
votes
3answers
41 views

How is TLS enforced on the receiving client of an email

I am writing an application that must send encrypted email to recipients. The state agency I work for recently installed a feature for outgoing email. If #secure# appears anywhere in the subject, the ...
1
vote
1answer
294 views

Unable to read an email protected by Rights Management Service

My colleague received an email from H company. This email is protected by Microsoft Rights Management Service. His email client is Outlook Express, and he use POP3 to received it to local disk (the ...
0
votes
0answers
113 views

How to disable SSLv3 on a Windows Phone?

I have a Nokia Lumia phone that runs Windows Phone 8. However, simple test on the browser tells me I'm vulnerable for POODLE attacks. I use the phone for internet and email access a lot and I need it ...
2
votes
2answers
377 views

Disable SSLv3 in email servers [closed]

After the recent POODLE vulnerability, I would like to disable SSLv3 on my mail servers (for POP, IMAP, and SMTP). My concern is whether that will break my clients' access. I have been looking online ...
5
votes
2answers
2k views

Disabling SSL 3 on 64bit Chrome for Windows [duplicate]

I see lots of different places with the same response for disabling SSL3 on chrome (adding --ssl-version-min=tls1 to the end of the execution of chrome.exe). But apparently this isn't working for my ...
2
votes
2answers
59 views

How do I configure my system to trust a CA for a specific subset of domains?

The company I work for has a number of internal web services accessible over HTTPS. These services use SSL/TLS certificates signed by an internal certificate authority which is only trusted by ...
4
votes
3answers
11k views

Disable SSLv3 in major browsers

As the question suggests: How to disable support of the SSL version 3 and set TLS version 1 as minimum (oldest) protocol supported in order to defend against POODLE. One can test a browser with this ...
1
vote
1answer
339 views

TLS negotiation failed on ldaps:// - sslv3 alert bad record mac

We are facing an issue in one of our openldap environments, while enabling secure queries via ldaps:// our integration environment keeps returning the following error to out ldapsearch command: ...
0
votes
2answers
1k views

curl and sni-enabled server

I am running curl against a sni-enabled server with the following command curl --cacert CustomCA.crt -H "Host: example.com" https://1.2.3.4/foo However, I am not getting the right certificate where ...
0
votes
1answer
50 views

Should TLS be used for email on localhost?

I have an application (written in PHP) which sends email using SMTP and runs on the same system as the email server. Are there any security concerns about using port 25 on localhost rather than port ...
0
votes
1answer
249 views

Don't retry vpn connection after tls-error

I have several cellular devices which establish always-on openvpn tunnels to a server which is always listening for incoming openvpn connection requests. Sometimes the cellular devices are delivered ...
0
votes
0answers
638 views

OpenVPN on a Diskstation TLS Handshake error, Self signed cert, Defaults

I have a DS 1813+ with DSM 5 4493 Update 1 installed (latest) and am having issues setting up OpenVPN I have it working internally, (which is strange in itself) but when I remote from my house or ...
0
votes
2answers
191 views

Can't browse HTTPS pages. TLS error. Outobox virus?

Suddenly I have lost an ability to browse HTTPS pages with all browser. Here is an example of simple Google search with Chrome In other cases it can show blank page, or TLS error message. UPDATE ...
0
votes
1answer
330 views

How to overcome Local Group Policy Editor's 1023 character limit?

I want to reorder the SSL Cipher Suite Order applied as part of KB2919355, prioritizing the forward secrecy suites above all else. Trying to do this with gpedit at Computer Configuration > ...
0
votes
0answers
63 views

How to change cryptography method at TLS protocol on Localhost(XAMPP)?

How do I change the cryptography method at SSL/TLS protocol on Localhost(XAMPP)? I want to use Blowfish as symmetric cypher, and RSA for PKC....
1
vote
0answers
472 views

Disabling TLS protocols for https:// URLs in git

Since my update to Ubuntu 14.04, I cannot connect to the companies git server. It uses https with the SSL protocols only. When running git clone (or any other git command that connects to the server) ...
2
votes
1answer
2k views

Which versions of the Windows TLS/SSL file transfer software like WinSCP and FileZilla are not affected by Heartbleed?

I noticed that many people still use versions affected by the heartbleed vulnerability of wide spread TLS/SSL enabled Windows clients like WinSCP and Filezilla. To be able to make safe ...
1
vote
1answer
109 views

How can i setup a webserver with TLS and DH_anon?

I need to setup a test web server with TLS and DH_anon . Apache or nginx is preferred, but not mandatory. OS is als not important. I already tried a google search, but there seems to be very limited ...
0
votes
1answer
134 views

How to see the handshaking messages of SSL/TLS in firefox using firebug?

I am trying to understand the internals/working of SSL. I would like to view the handshaking, key exchange, cypher exchange, session key, etc. messages communicated. So, I thought if I enable firebug ...
0
votes
0answers
26 views

TLS on exchange

Basically I need to sign all emails going out of exchange 2007 on one domain while leaving all others unsigned. Can anyone give me a quick how to or point me in the right direction for some ...
1
vote
1answer
175 views

What does my internet provider know about my online activities?

What does my internet service provider know about my online activites in these cases? plain server (www, ftp, whatever) connection and provider's DNS secured (e.g. TLS) server connection and ...
0
votes
1answer
2k views

how to disable TLS 1.0 and checking enabling SSl 3.0 in Firefox 27.0.1?

How to disable TLS 1.0 and checking enabling SSL 3.0 in Firefox 27.0.1 (new Version) ? I suppose I can find it at the Encryption tab. I followed below path Tools -> Options -> Advanced but there ...
1
vote
1answer
2k views

Inspecting websocket traffic with proxy

I'm using Charles Proxy to inspect traffic from my Android apps. I have the phone configured to proxy all traffic through Charles, which is installed on my PC. Everything has worked thus far ...
1
vote
1answer
210 views

Wireshark TLS communication shows green HTTP packets when using CCProxy proxy server?

Client <--> CCProxy <--> Server I have IE configured to use a proxy server for HTTP and Secure connections. I also have a proxy server is set up with CCProxy. It is my understanding that ...
0
votes
0answers
60 views

All https requests are goes as TLS (windows 7 64bit)

I have installed a version of windows 7 64bit on my laptop. After it all software that are going to send request to https has failed because the OS are using TLS instead of SSL3. I find it because all ...
2
votes
1answer
9k views

NOQUEUE: reject: Relay access denied

I recently setup a mail server following the instructions on linode.com (https://library.linode.com/email/postfix/postfix2.9.6-dovecot2.0.19-mysql) except I am using postgreSQL instead of mySQL. ...
0
votes
2answers
418 views

What I must do to add SHA-2 MAC TLS ciphers to Firefox?

I tested the latest Firefox beta using https://cc.dcsec.uni-hannover.de/ and all ciphers supported by Firefox 25 use MAC SHA1; none of them allow SHA-2. Can this be changed? Do Mozilla have plans to ...
0
votes
1answer
285 views

What I must do to get TLSv1.2 support in Google Chrome 30?

Here one can read that Google Chrome 30 support TLSv1.2, but I can't access a server using it on Ubuntu 13.04. The server just support TLSv1.2 and have cipher TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 ...
2
votes
3answers
3k views

Thunderbird: SSL/TLS vs. STARTTLS

Following up this question on serverfault "Is STARTTLS more safe than TLS/SSL?" it came up that the question is rather a question about Thunderbird and not about the actual protocols. Also, if you ...
4
votes
1answer
2k views

Specifying minor TLS version when using curl

Is there a way to specify curl to use a specific TLS version? Like 1.1 or 1.2? I can see only sslv3 and tlsv1 options in command help. I took latest src and compiled it with openssl 1.0.1e. Still dont ...
1
vote
0answers
154 views

Authenticate WiFi with certificate instead of password

Is it possible (read done without a massive amount of work) to set up a wireless network that checks for a certificate instead of asking for a password? To be clear: I would like to download a ...
1
vote
2answers
2k views

ldap authentication not working with start_tls option after certificate upgrade

Ubuntu ldap authentication is not working on my client with ssl start_tls option enabled in the ldap.conf file. I can authenticate when I comment out ssl start_tls. I upgraded the ldap servers ...
3
votes
2answers
2k views

Postfix TLS configuration

I am in the middle of setting up a postfix server on Arch Linux. It seems to be working ok so far - I can successfully speak to it via telnet localhost 25. However, when I try to connect using ...
1
vote
1answer
2k views

use postfix with ssl certificate that has a password

i have gone through a couple of tutorials on how to set up postfix on ubuntu with support for my ssl certificate: https://help.ubuntu.com/community/Postfix ...