The tag has no wiki summary.

learn more… | top users | synonyms

3
votes
2answers
147 views

How to troubleshoot “Secure Connection Failed” in Firefox appearing since the version 38?

Since I upgraded Firefox to the version 38 I encounter problem while sending a certain form on the website https://usercenter.checkpoint.com/ Most of the website works normally but sending a form ...
1
vote
2answers
21 views

How to force a server to use a specific elliptic curve at the beginning of the handshake via openssl?

Is there a possibility or command in openssl to force a server to use a specific elliptic curve that I am requesting with a certificate or key? Can I "ask" the process the curves it is able to use?
0
votes
1answer
90 views

Roundcube, php 5.6 and self-signed certificates

I am currently porting one of my servers to another. That server is running Postfix + Dovecot using a self-signed certificate. My web-frontend used to be roundcube. Now is the problem, that the new ...
5
votes
1answer
101 views

Why do I get a Secure Connection Error on some sites?

I am using Firefox version 37.0.2 with an ethernet connection at a university in Bangkok. I consider the university a network a hostile environment as the majority of the computers on this network are ...
3
votes
1answer
17 views

Retaining origin when using Snort with a loadbalancer? Or why it's a bad idea?

Initially I deployed HAProxy so that it would be possible to notice bad traffic going into my web server (rather than it being obscured by TLS), but now I noticed the rather obvious problem that once ...
0
votes
1answer
35 views

Apache: redirect to non SSL page if TLS negotiation fails

How can I configure apache to redirect user to a non ssl page, if the TLS connection negotiation fails (i.e. they don't agree on a common SSL protocol with supported cipher) It is using mod_ssl, ...
0
votes
0answers
32 views

How to Use htaccess to disable SSLv3 and TLS1.0 on shared server

I operate a website on a shared hosting using apache server as the webserver. The operator refuses to disable SSL3 on the server because other customers on the shared server need it. Is there any way ...
0
votes
1answer
17 views

UTF8 and T61 strings, how do I see what my SSL cert uses?

How do I use the openssl x509 tool to see whether or not my strings are T61 or UTF8 encoded in the cert? Is there a better way?
0
votes
0answers
31 views

Unable to authenticate with Client cert in TLS1.0

I have my own application running in Windows machine (server). I am using a browser as a client to do operations. I have multiple users connecting to the server using client certificates as the ...
1
vote
1answer
83 views

Imported CA certificate to Firefox Browser not working

I created Certificate Authority (CA) according to Ubuntu help using openssl. After creating a certificate for Apache2 and adding to certificate to it, I want to import it in Firefox. In the end of ...
1
vote
1answer
36 views

lighttpd complains about ssl.use-compression

I am trying to apply some of the tricks described here, and the problem is having ssl.use-compression = "disable" in lighttpd.conf, because server reports WARNING: unknown config-key: ...
0
votes
0answers
57 views

Programs having trouble connecting to internet resources

I am running Windows 8. Recently, a bunch of my programs such as GitHub for Windows, WebStorm, Chrome, etc.. stopped being able to use internet resources. Many say, that there me bay a firewall or ...
0
votes
1answer
78 views

keytool commands to replace existing SSL certificate?

I've a linux centos server running glassfish 3.1.2 app server. The default certs coming from GlassFish install for ports 4848 and 8181 are 1024 bits. I need to replace these with 2048 bits versions. ...
0
votes
1answer
28 views

SSL certificate for Web App + website

I have a WordPress + WooCommerce online store which is hosted on a managed hosting. I just bought non-wildcard SSL Certificate for that online store. I am also developing a CherryPy Python Web App ...
1
vote
0answers
237 views

How to use Charles as proxy to decrypt HTTPS messages in Wireshark?

I know I can view decrypted HTTPS data directly in Charles. But I want to view lower level SSL messages in Wireshark. So I setup Charles as the SSL proxy, using my own certificate, and I setup SSL ...
0
votes
0answers
89 views

Pure-FTPD certificate not being used

I am using Pure-FTPD from the epel repository on CentOS 6. Now I have configured to enable TLS which works fine however for some reason it wont make use of the certificate file I have placed in ...
0
votes
2answers
62 views

How to disable SSL version 2 on IIS/Window Server?

How to disable SSL version 2 on IIS / Window Server?
0
votes
1answer
655 views

Openvpn TLS 1.2 cipher suites

This is a repost of my original question (openvpn tls 1.2) The problem is split in two because a solution was found for the 128-bit cipher suites. Openvpn can't connect with these cipher suites: ...
0
votes
0answers
139 views

How can I use LibreSSL with nginx?

I've been trying to install LibreSSL and then using it with Nginx for better TLS-support. I foound two guides: https://www.mare-system.de/blog/page/1405201517/ ...
1
vote
2answers
616 views

openvpn tls 1.2

Openvpn cant establish connection with any tls 1.2 cipher. TLS-DHE-RSA-WITH-AES-256-GCM-SHA384 TLS-DHE-RSA-WITH-AES-256-CBC-SHA256 TLS-DHE-RSA-WITH-AES-128-GCM-SHA256 ...
2
votes
0answers
1k views

OpenVPN Linux client - tls key negotiation failed to occur (FrootVPN)

I'm using the free FrootVPN service (works flawlessly on Windows). However on Linux I can't manage to get it to work. FrootVPN's support webpage is broken so I can't message their support. I know ...
0
votes
1answer
1k views

Enable TLS 1.0 using registry

I am trying to enable TLS 1.0 in the client side computer .The client side computer is windows XP with IE 6 and server is windows server 2012 R2. In our server TLS 1.0 is enabled and SSL 3.0 and 2.0 ...
0
votes
1answer
427 views

TLS-auth problems with openvpn on debian

I have a raspberry pi which I intend to use as a vpn proxy while on public networks. I followed this guide (http://www.raspberrypi.org/forums/viewtopic.php?f=36&t=81657) to set up openvpn on the ...
1
vote
1answer
34 views

Download cipher-suite pack in Windows

Is it possible to download and install a cipher-suite pack in Windows, in the same manner as I would for a font suite? Or am I asking too much? Gordon.
-1
votes
3answers
43 views

How is TLS enforced on the receiving client of an email

I am writing an application that must send encrypted email to recipients. The state agency I work for recently installed a feature for outgoing email. If #secure# appears anywhere in the subject, the ...
1
vote
1answer
394 views

Unable to read an email protected by Rights Management Service

My colleague received an email from H company. This email is protected by Microsoft Rights Management Service. His email client is Outlook Express, and he use POP3 to received it to local disk (the ...
0
votes
0answers
119 views

How to disable SSLv3 on a Windows Phone?

I have a Nokia Lumia phone that runs Windows Phone 8. However, simple test on the browser tells me I'm vulnerable for POODLE attacks. I use the phone for internet and email access a lot and I need it ...
2
votes
2answers
457 views

Disable SSLv3 in email servers [closed]

After the recent POODLE vulnerability, I would like to disable SSLv3 on my mail servers (for POP, IMAP, and SMTP). My concern is whether that will break my clients' access. I have been looking online ...
5
votes
2answers
2k views

Disabling SSL 3 on 64bit Chrome for Windows [duplicate]

I see lots of different places with the same response for disabling SSL3 on chrome (adding --ssl-version-min=tls1 to the end of the execution of chrome.exe). But apparently this isn't working for my ...
2
votes
2answers
61 views

How do I configure my system to trust a CA for a specific subset of domains?

The company I work for has a number of internal web services accessible over HTTPS. These services use SSL/TLS certificates signed by an internal certificate authority which is only trusted by ...
4
votes
3answers
12k views

Disable SSLv3 in major browsers

As the question suggests: How to disable support of the SSL version 3 and set TLS version 1 as minimum (oldest) protocol supported in order to defend against POODLE. One can test a browser with this ...
1
vote
1answer
352 views

TLS negotiation failed on ldaps:// - sslv3 alert bad record mac

We are facing an issue in one of our openldap environments, while enabling secure queries via ldaps:// our integration environment keeps returning the following error to out ldapsearch command: ...
0
votes
2answers
1k views

curl and sni-enabled server

I am running curl against a sni-enabled server with the following command curl --cacert CustomCA.crt -H "Host: example.com" https://1.2.3.4/foo However, I am not getting the right certificate where ...
0
votes
1answer
50 views

Should TLS be used for email on localhost?

I have an application (written in PHP) which sends email using SMTP and runs on the same system as the email server. Are there any security concerns about using port 25 on localhost rather than port ...
0
votes
1answer
258 views

Don't retry vpn connection after tls-error

I have several cellular devices which establish always-on openvpn tunnels to a server which is always listening for incoming openvpn connection requests. Sometimes the cellular devices are delivered ...
0
votes
0answers
681 views

OpenVPN on a Diskstation TLS Handshake error, Self signed cert, Defaults

I have a DS 1813+ with DSM 5 4493 Update 1 installed (latest) and am having issues setting up OpenVPN I have it working internally, (which is strange in itself) but when I remote from my house or ...
0
votes
2answers
214 views

Can't browse HTTPS pages. TLS error. Outobox virus?

Suddenly I have lost an ability to browse HTTPS pages with all browser. Here is an example of simple Google search with Chrome In other cases it can show blank page, or TLS error message. UPDATE ...
0
votes
1answer
413 views

How to overcome Local Group Policy Editor's 1023 character limit?

I want to reorder the SSL Cipher Suite Order applied as part of KB2919355, prioritizing the forward secrecy suites above all else. Trying to do this with gpedit at Computer Configuration > ...
2
votes
0answers
500 views

Disabling TLS protocols for https:// URLs in git

Since my update to Ubuntu 14.04, I cannot connect to the companies git server. It uses https with the SSL protocols only. When running git clone (or any other git command that connects to the server) ...
2
votes
1answer
2k views

Which versions of the Windows TLS/SSL file transfer software like WinSCP and FileZilla are not affected by Heartbleed?

I noticed that many people still use versions affected by the heartbleed vulnerability of wide spread TLS/SSL enabled Windows clients like WinSCP and Filezilla. To be able to make safe ...
1
vote
1answer
123 views

How can i setup a webserver with TLS and DH_anon?

I need to setup a test web server with TLS and DH_anon . Apache or nginx is preferred, but not mandatory. OS is als not important. I already tried a google search, but there seems to be very limited ...
1
vote
1answer
148 views

How to see the handshaking messages of SSL/TLS in firefox using firebug?

I am trying to understand the internals/working of SSL. I would like to view the handshaking, key exchange, cypher exchange, session key, etc. messages communicated. So, I thought if I enable firebug ...
0
votes
0answers
26 views

TLS on exchange

Basically I need to sign all emails going out of exchange 2007 on one domain while leaving all others unsigned. Can anyone give me a quick how to or point me in the right direction for some ...
1
vote
1answer
181 views

What does my internet provider know about my online activities?

What does my internet service provider know about my online activites in these cases? plain server (www, ftp, whatever) connection and provider's DNS secured (e.g. TLS) server connection and ...
0
votes
1answer
2k views

how to disable TLS 1.0 and checking enabling SSl 3.0 in Firefox 27.0.1?

How to disable TLS 1.0 and checking enabling SSL 3.0 in Firefox 27.0.1 (new Version) ? I suppose I can find it at the Encryption tab. I followed below path Tools -> Options -> Advanced but there ...
1
vote
1answer
2k views

Inspecting websocket traffic with proxy

I'm using Charles Proxy to inspect traffic from my Android apps. I have the phone configured to proxy all traffic through Charles, which is installed on my PC. Everything has worked thus far ...
1
vote
1answer
222 views

Wireshark TLS communication shows green HTTP packets when using CCProxy proxy server?

Client <--> CCProxy <--> Server I have IE configured to use a proxy server for HTTP and Secure connections. I also have a proxy server is set up with CCProxy. It is my understanding that ...
0
votes
0answers
61 views

All https requests are goes as TLS (windows 7 64bit)

I have installed a version of windows 7 64bit on my laptop. After it all software that are going to send request to https has failed because the OS are using TLS instead of SSL3. I find it because all ...
2
votes
1answer
10k views

NOQUEUE: reject: Relay access denied

I recently setup a mail server following the instructions on linode.com (https://library.linode.com/email/postfix/postfix2.9.6-dovecot2.0.19-mysql) except I am using postgreSQL instead of mySQL. ...
0
votes
2answers
447 views

What I must do to add SHA-2 MAC TLS ciphers to Firefox?

I tested the latest Firefox beta using https://cc.dcsec.uni-hannover.de/ and all ciphers supported by Firefox 25 use MAC SHA1; none of them allow SHA-2. Can this be changed? Do Mozilla have plans to ...