The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
0answers
5 views

How to make Thunderbird log more information?

I often experience weird SSL/TLS connection timeouts to my own Linux mail server. No idea why. How can I tell Thunderbird to log more information about those issues? This either in the Activity ...
0
votes
1answer
21 views

Firefox - any way to override Server Name Indication for troubleshooting?

I use firefox extensively to access and troubleshoot a myriad of webapps, many of them running on apache virtualhost'ed environments. One problem I've been having is that on SSL-enabled servers I ...
0
votes
0answers
15 views

How do I specify a CA certificate and/or client certificate to the links web browser

I have a need to use a local web browser for diagnostics to verify a secure website endpoint within a datacentre. This endpoint is TLS enabled and protected with a client certificate, both of which ...
1
vote
0answers
129 views

Is it possible to turn on TLS 1.2 in .jnlp file?

is it possible to turn on TLS 1.2 in .jnlp file to download .jar from HTTPS server where only TLS 1.2 is set? I've tried in many ways: <resources> <j2se (...) /> <jar (...) ...
1
vote
0answers
43 views

How to use wireshark to decode SSL stream from remote API server?

I'm trying to troubleshoot some issues with what my code is sending to a remote API (over https). I've seen a ton of articles on Wireshark and decoding SSL, but they all make up their own test server ...
1
vote
1answer
77 views

SSL stopped working

My SSL suddenly stopped serving my site. It could have been because I installed nginx on my server, then uninstalled it using apt-get purge nginx* For about 30 minutes it was serving pages ...
5
votes
1answer
107 views

Firebug and cURL

I have been using Firebug and cURL for quite a while. Firebug is amazing to capture HTTPS POST request as opposed to a network analyser as it is aware of SSL/TLS negotiation. And cURL is amazing to ...
-2
votes
1answer
43 views

Where to get client certificates for Java client that uses TLS? [closed]

I am writing a Java client to consume payment gateway rest services. If I want to create a HTTPS client that uses client certificates, from where to get certificate? Is it is something to ask from the ...
1
vote
0answers
95 views

*some* OpenVPN clients won't connect within same network as server (TLS Handshake Failed)

I have an Raspberry Pi running an open VPN server on my LAN. I moved this server from one location to another (at the old location, it was working just fine). NOW my android devices are running on ...
0
votes
0answers
33 views

Windows TLS Client Certificate support?

I'm running an Apache server in my local network which is also reachable from the Internet. Now I've set-up a WebDAV Directory (on this server) and successfully integrated into native Windows 7 using ...
0
votes
0answers
70 views

Can I use iptables to temporarily block FTPS (TLS) server brute-force attempts?

There are couple of similar questions like this (e.g. http://serverfault.com/questions/200539/can-i-use-iptables-rate-limiting-to-temporarily-block-ftp-server-brute-force-att) , but I have a slightly ...
4
votes
2answers
2k views

How to troubleshoot “Secure Connection Failed” in Firefox appearing since the version 38?

Since I upgraded Firefox to the version 38 I encounter problem while sending a certain form on the website https://usercenter.checkpoint.com/ Most of the website works normally but sending a form ...
1
vote
2answers
109 views

How to force a server to use a specific elliptic curve at the beginning of the handshake via openssl?

Is there a possibility or command in openssl to force a server to use a specific elliptic curve that I am requesting with a certificate or key? Can I "ask" the process the curves it is able to use?
0
votes
1answer
594 views

Roundcube, php 5.6 and self-signed certificates

I am currently porting one of my servers to another. That server is running Postfix + Dovecot using a self-signed certificate. My web-frontend used to be roundcube. Now is the problem, that the new ...
5
votes
1answer
548 views

Why do I get a Secure Connection Error on some sites?

I am using Firefox version 37.0.2 with an ethernet connection at a university in Bangkok. I consider the university a network a hostile environment as the majority of the computers on this network are ...
3
votes
1answer
31 views

Retaining origin when using Snort with a loadbalancer? Or why it's a bad idea?

Initially I deployed HAProxy so that it would be possible to notice bad traffic going into my web server (rather than it being obscured by TLS), but now I noticed the rather obvious problem that once ...
0
votes
1answer
105 views

Apache: redirect to non SSL page if TLS negotiation fails

How can I configure apache to redirect user to a non ssl page, if the TLS connection negotiation fails (i.e. they don't agree on a common SSL protocol with supported cipher) It is using mod_ssl, ...
0
votes
0answers
86 views

How to Use htaccess to disable SSLv3 and TLS1.0 on shared server

I operate a website on a shared hosting using apache server as the webserver. The operator refuses to disable SSL3 on the server because other customers on the shared server need it. Is there any way ...
0
votes
1answer
38 views

UTF8 and T61 strings, how do I see what my SSL cert uses?

How do I use the openssl x509 tool to see whether or not my strings are T61 or UTF8 encoded in the cert? Is there a better way?
0
votes
0answers
46 views

Unable to authenticate with Client cert in TLS1.0

I have my own application running in Windows machine (server). I am using a browser as a client to do operations. I have multiple users connecting to the server using client certificates as the ...
1
vote
1answer
146 views

Imported CA certificate to Firefox Browser not working

I created Certificate Authority (CA) according to Ubuntu help using openssl. After creating a certificate for Apache2 and adding to certificate to it, I want to import it in Firefox. In the end of ...
1
vote
1answer
82 views

lighttpd complains about ssl.use-compression

I am trying to apply some of the tricks described here, and the problem is having ssl.use-compression = "disable" in lighttpd.conf, because server reports WARNING: unknown config-key: ...
0
votes
0answers
97 views

Programs having trouble connecting to internet resources

I am running Windows 8. Recently, a bunch of my programs such as GitHub for Windows, WebStorm, Chrome, etc.. stopped being able to use internet resources. Many say, that there me bay a firewall or ...
0
votes
1answer
180 views

keytool commands to replace existing SSL certificate?

I've a linux centos server running glassfish 3.1.2 app server. The default certs coming from GlassFish install for ports 4848 and 8181 are 1024 bits. I need to replace these with 2048 bits versions. ...
0
votes
1answer
37 views

SSL certificate for Web App + website

I have a WordPress + WooCommerce online store which is hosted on a managed hosting. I just bought non-wildcard SSL Certificate for that online store. I am also developing a CherryPy Python Web App ...
2
votes
1answer
565 views

How to use Charles as proxy to decrypt HTTPS messages in Wireshark?

I know I can view decrypted HTTPS data directly in Charles. But I want to view lower level SSL messages in Wireshark. So I setup Charles as the SSL proxy, using my own certificate, and I setup SSL ...
0
votes
1answer
182 views

Pure-FTPD certificate not being used

I am using Pure-FTPD from the epel repository on CentOS 6. Now I have configured to enable TLS which works fine however for some reason it wont make use of the certificate file I have placed in ...
0
votes
2answers
103 views

How to disable SSL version 2 on IIS/Window Server?

How to disable SSL version 2 on IIS / Window Server?
0
votes
1answer
1k views

Openvpn TLS 1.2 cipher suites

This is a repost of my original question (openvpn tls 1.2) The problem is split in two because a solution was found for the 128-bit cipher suites. Openvpn can't connect with these cipher suites: ...
0
votes
0answers
212 views

How can I use LibreSSL with nginx?

I've been trying to install LibreSSL and then using it with Nginx for better TLS-support. I foound two guides: https://www.mare-system.de/blog/page/1405201517/ ...
1
vote
2answers
1k views

openvpn tls 1.2

Openvpn cant establish connection with any tls 1.2 cipher. TLS-DHE-RSA-WITH-AES-256-GCM-SHA384 TLS-DHE-RSA-WITH-AES-256-CBC-SHA256 TLS-DHE-RSA-WITH-AES-128-GCM-SHA256 ...
2
votes
0answers
2k views

OpenVPN Linux client - tls key negotiation failed to occur (FrootVPN)

I'm using the free FrootVPN service (works flawlessly on Windows). However on Linux I can't manage to get it to work. FrootVPN's support webpage is broken so I can't message their support. I know ...
0
votes
1answer
3k views

Enable TLS 1.0 using registry

I am trying to enable TLS 1.0 in the client side computer .The client side computer is windows XP with IE 6 and server is windows server 2012 R2. In our server TLS 1.0 is enabled and SSL 3.0 and 2.0 ...
0
votes
1answer
702 views

TLS-auth problems with openvpn on debian

I have a raspberry pi which I intend to use as a vpn proxy while on public networks. I followed this guide (http://www.raspberrypi.org/forums/viewtopic.php?f=36&t=81657) to set up openvpn on the ...
1
vote
1answer
45 views

Download cipher-suite pack in Windows

Is it possible to download and install a cipher-suite pack in Windows, in the same manner as I would for a font suite? Or am I asking too much? Gordon.
-1
votes
3answers
47 views

How is TLS enforced on the receiving client of an email

I am writing an application that must send encrypted email to recipients. The state agency I work for recently installed a feature for outgoing email. If #secure# appears anywhere in the subject, the ...
1
vote
1answer
692 views

Unable to read an email protected by Rights Management Service

My colleague received an email from H company. This email is protected by Microsoft Rights Management Service. His email client is Outlook Express, and he use POP3 to received it to local disk (the ...
0
votes
0answers
148 views

How to disable SSLv3 on a Windows Phone?

I have a Nokia Lumia phone that runs Windows Phone 8. However, simple test on the browser tells me I'm vulnerable for POODLE attacks. I use the phone for internet and email access a lot and I need it ...
2
votes
2answers
686 views

Disable SSLv3 in email servers [closed]

After the recent POODLE vulnerability, I would like to disable SSLv3 on my mail servers (for POP, IMAP, and SMTP). My concern is whether that will break my clients' access. I have been looking online ...
5
votes
2answers
2k views

Disabling SSL 3 on 64bit Chrome for Windows [duplicate]

I see lots of different places with the same response for disabling SSL3 on chrome (adding --ssl-version-min=tls1 to the end of the execution of chrome.exe). But apparently this isn't working for my ...
2
votes
2answers
67 views

How do I configure my system to trust a CA for a specific subset of domains?

The company I work for has a number of internal web services accessible over HTTPS. These services use SSL/TLS certificates signed by an internal certificate authority which is only trusted by ...
4
votes
3answers
14k views

Disable SSLv3 in major browsers

As the question suggests: How to disable support of the SSL version 3 and set TLS version 1 as minimum (oldest) protocol supported in order to defend against POODLE. One can test a browser with this ...
1
vote
1answer
405 views

TLS negotiation failed on ldaps:// - sslv3 alert bad record mac

We are facing an issue in one of our openldap environments, while enabling secure queries via ldaps:// our integration environment keeps returning the following error to out ldapsearch command: ...
1
vote
2answers
2k views

curl and sni-enabled server

I am running curl against a sni-enabled server with the following command curl --cacert CustomCA.crt -H "Host: example.com" https://1.2.3.4/foo However, I am not getting the right certificate where ...
0
votes
1answer
55 views

Should TLS be used for email on localhost?

I have an application (written in PHP) which sends email using SMTP and runs on the same system as the email server. Are there any security concerns about using port 25 on localhost rather than port ...
0
votes
1answer
304 views

Don't retry vpn connection after tls-error

I have several cellular devices which establish always-on openvpn tunnels to a server which is always listening for incoming openvpn connection requests. Sometimes the cellular devices are delivered ...
0
votes
0answers
791 views

OpenVPN on a Diskstation TLS Handshake error, Self signed cert, Defaults

I have a DS 1813+ with DSM 5 4493 Update 1 installed (latest) and am having issues setting up OpenVPN I have it working internally, (which is strange in itself) but when I remote from my house or ...
0
votes
2answers
281 views

Can't browse HTTPS pages. TLS error. Outobox virus?

Suddenly I have lost an ability to browse HTTPS pages with all browser. Here is an example of simple Google search with Chrome In other cases it can show blank page, or TLS error message. UPDATE ...
1
vote
1answer
580 views

How to overcome Local Group Policy Editor's 1023 character limit?

I want to reorder the SSL Cipher Suite Order applied as part of KB2919355, prioritizing the forward secrecy suites above all else. Trying to do this with gpedit at Computer Configuration > ...
2
votes
0answers
557 views

Disabling TLS protocols for https:// URLs in git

Since my update to Ubuntu 14.04, I cannot connect to the companies git server. It uses https with the SSL protocols only. When running git clone (or any other git command that connects to the server) ...