The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
1answer
33 views

lighttpd complains about ssl.use-compression

I am trying to apply some of the tricks described here, and the problem is having ssl.use-compression = "disable" in lighttpd.conf, because server reports WARNING: unknown config-key: ...
0
votes
0answers
20 views

How to troubleshoot “Secure Connection Failed” in Firefox appearing since the version 38?

Since I upgraded Firefox to the version 38 I encounter problem while sending a certain form on the website https://usercenter.checkpoint.com/ Most of the website works normally but sending a form ...
5
votes
1answer
87 views

Why do I get a Secure Connection Error on some sites?

I am using Firefox version 37.0.2 with an ethernet connection at a university in Bangkok. I consider the university a network a hostile environment as the majority of the computers on this network are ...
4
votes
1answer
2k views

Specifying minor TLS version when using curl

Is there a way to specify curl to use a specific TLS version? Like 1.1 or 1.2? I can see only sslv3 and tlsv1 options in command help. I took latest src and compiled it with openssl 1.0.1e. Still dont ...
1
vote
2answers
18 views

How to force a server to use a specific elliptic curve at the beginning of the handshake via openssl?

Is there a possibility or command in openssl to force a server to use a specific elliptic curve that I am requesting with a certificate or key? Can I "ask" the process the curves it is able to use?
3
votes
1answer
15 views

Retaining origin when using Snort with a loadbalancer? Or why it's a bad idea?

Initially I deployed HAProxy so that it would be possible to notice bad traffic going into my web server (rather than it being obscured by TLS), but now I noticed the rather obvious problem that once ...
0
votes
1answer
74 views

Roundcube, php 5.6 and self-signed certificates

I am currently porting one of my servers to another. That server is running Postfix + Dovecot using a self-signed certificate. My web-frontend used to be roundcube. Now is the problem, that the new ...
0
votes
1answer
32 views

Apache: redirect to non SSL page if TLS negotiation fails

How can I configure apache to redirect user to a non ssl page, if the TLS connection negotiation fails (i.e. they don't agree on a common SSL protocol with supported cipher) It is using mod_ssl, ...
0
votes
0answers
25 views

How to Use htaccess to disable SSLv3 and TLS1.0 on shared server

I operate a website on a shared hosting using apache server as the webserver. The operator refuses to disable SSL3 on the server because other customers on the shared server need it. Is there any way ...
19
votes
4answers
14k views

Can the Telnet/Netcat client communicate over SSL?

I would like to test client connections with IMAP over SSL, HTTPS, and other secure text-based Internet protocols over SSL/TLS, the same way I would using Telnet or Netcat if they were not tunneled ...
0
votes
1answer
15 views

UTF8 and T61 strings, how do I see what my SSL cert uses?

How do I use the openssl x509 tool to see whether or not my strings are T61 or UTF8 encoded in the cert? Is there a better way?
95
votes
17answers
99k views

How do I list the SSL/TLS cipher suites a particular website offers? [closed]

Is there a tool that can test what SSL/TLS cipher suites a particular website offers? I've tried openssl, but if you examine the output: $ echo -n | openssl s_client -connect www.google.com:443 ...
0
votes
0answers
29 views

Unable to authenticate with Client cert in TLS1.0

I have my own application running in Windows machine (server). I am using a browser as a client to do operations. I have multiple users connecting to the server using client certificates as the ...
2
votes
3answers
3k views

Thunderbird: SSL/TLS vs. STARTTLS

Following up this question on serverfault "Is STARTTLS more safe than TLS/SSL?" it came up that the question is rather a question about Thunderbird and not about the actual protocols. Also, if you ...
1
vote
1answer
82 views

Imported CA certificate to Firefox Browser not working

I created Certificate Authority (CA) according to Ubuntu help using openssl. After creating a certificate for Apache2 and adding to certificate to it, I want to import it in Firefox. In the end of ...
0
votes
0answers
55 views

Programs having trouble connecting to internet resources

I am running Windows 8. Recently, a bunch of my programs such as GitHub for Windows, WebStorm, Chrome, etc.. stopped being able to use internet resources. Many say, that there me bay a firewall or ...
0
votes
1answer
74 views

keytool commands to replace existing SSL certificate?

I've a linux centos server running glassfish 3.1.2 app server. The default certs coming from GlassFish install for ports 4848 and 8181 are 1024 bits. I need to replace these with 2048 bits versions. ...
0
votes
2answers
61 views
0
votes
1answer
28 views

SSL certificate for Web App + website

I have a WordPress + WooCommerce online store which is hosted on a managed hosting. I just bought non-wildcard SSL Certificate for that online store. I am also developing a CherryPy Python Web App ...
1
vote
0answers
218 views

How to use Charles as proxy to decrypt HTTPS messages in Wireshark?

I know I can view decrypted HTTPS data directly in Charles. But I want to view lower level SSL messages in Wireshark. So I setup Charles as the SSL proxy, using my own certificate, and I setup SSL ...
0
votes
0answers
85 views

Pure-FTPD certificate not being used

I am using Pure-FTPD from the epel repository on CentOS 6. Now I have configured to enable TLS which works fine however for some reason it wont make use of the certificate file I have placed in ...
0
votes
1answer
607 views

Openvpn TLS 1.2 cipher suites

This is a repost of my original question (openvpn tls 1.2) The problem is split in two because a solution was found for the 128-bit cipher suites. Openvpn can't connect with these cipher suites: ...
1
vote
2answers
570 views

openvpn tls 1.2

Openvpn cant establish connection with any tls 1.2 cipher. TLS-DHE-RSA-WITH-AES-256-GCM-SHA384 TLS-DHE-RSA-WITH-AES-256-CBC-SHA256 TLS-DHE-RSA-WITH-AES-128-GCM-SHA256 ...
0
votes
0answers
134 views

How can I use LibreSSL with nginx?

I've been trying to install LibreSSL and then using it with Nginx for better TLS-support. I foound two guides: https://www.mare-system.de/blog/page/1405201517/ ...
2
votes
0answers
1k views

OpenVPN Linux client - tls key negotiation failed to occur (FrootVPN)

I'm using the free FrootVPN service (works flawlessly on Windows). However on Linux I can't manage to get it to work. FrootVPN's support webpage is broken so I can't message their support. I know ...
0
votes
1answer
1k views

Enable TLS 1.0 using registry

I am trying to enable TLS 1.0 in the client side computer .The client side computer is windows XP with IE 6 and server is windows server 2012 R2. In our server TLS 1.0 is enabled and SSL 3.0 and 2.0 ...
1
vote
1answer
350 views

TLS negotiation failed on ldaps:// - sslv3 alert bad record mac

We are facing an issue in one of our openldap environments, while enabling secure queries via ldaps:// our integration environment keeps returning the following error to out ldapsearch command: ...
2
votes
2answers
61 views

How do I configure my system to trust a CA for a specific subset of domains?

The company I work for has a number of internal web services accessible over HTTPS. These services use SSL/TLS certificates signed by an internal certificate authority which is only trusted by ...
1
vote
1answer
34 views

Download cipher-suite pack in Windows

Is it possible to download and install a cipher-suite pack in Windows, in the same manner as I would for a font suite? Or am I asking too much? Gordon.
0
votes
0answers
117 views

How to disable SSLv3 on a Windows Phone?

I have a Nokia Lumia phone that runs Windows Phone 8. However, simple test on the browser tells me I'm vulnerable for POODLE attacks. I use the phone for internet and email access a lot and I need it ...
3
votes
3answers
1k views

SSL/TLS vs SSL/TLS-VPN

Whats the difference between using SSL/TLS in a web browser and an actual SSL/TLS VPN? Is SSL/TLS actually the pure technology and when one uses https:// in a browser this is a vpn connection?
0
votes
1answer
258 views

Don't retry vpn connection after tls-error

I have several cellular devices which establish always-on openvpn tunnels to a server which is always listening for incoming openvpn connection requests. Sometimes the cellular devices are delivered ...
0
votes
1answer
414 views

TLS-auth problems with openvpn on debian

I have a raspberry pi which I intend to use as a vpn proxy while on public networks. I followed this guide (http://www.raspberrypi.org/forums/viewtopic.php?f=36&t=81657) to set up openvpn on the ...
-1
votes
3answers
42 views

How is TLS enforced on the receiving client of an email

I am writing an application that must send encrypted email to recipients. The state agency I work for recently installed a feature for outgoing email. If #secure# appears anywhere in the subject, the ...
1
vote
1answer
382 views

Unable to read an email protected by Rights Management Service

My colleague received an email from H company. This email is protected by Microsoft Rights Management Service. His email client is Outlook Express, and he use POP3 to received it to local disk (the ...
2
votes
2answers
449 views

Disable SSLv3 in email servers [closed]

After the recent POODLE vulnerability, I would like to disable SSLv3 on my mail servers (for POP, IMAP, and SMTP). My concern is whether that will break my clients' access. I have been looking online ...
1
vote
2answers
2k views

ldap authentication not working with start_tls option after certificate upgrade

Ubuntu ldap authentication is not working on my client with ssl start_tls option enabled in the ldap.conf file. I can authenticate when I comment out ssl start_tls. I upgraded the ldap servers ...
4
votes
3answers
12k views

Disable SSLv3 in major browsers

As the question suggests: How to disable support of the SSL version 3 and set TLS version 1 as minimum (oldest) protocol supported in order to defend against POODLE. One can test a browser with this ...
5
votes
2answers
2k views

Disabling SSL 3 on 64bit Chrome for Windows [duplicate]

I see lots of different places with the same response for disabling SSL3 on chrome (adding --ssl-version-min=tls1 to the end of the execution of chrome.exe). But apparently this isn't working for my ...
0
votes
2answers
445 views

What I must do to add SHA-2 MAC TLS ciphers to Firefox?

I tested the latest Firefox beta using https://cc.dcsec.uni-hannover.de/ and all ciphers supported by Firefox 25 use MAC SHA1; none of them allow SHA-2. Can this be changed? Do Mozilla have plans to ...
2
votes
1answer
11k views

Unable to connect to FTP server using Filezilla with router in-between

While connecting to my web server using filezilla, i am getting this error: Status: Resolving address of ftp.mysite.org.in Status: Connecting to 199.199.199.18:21... Status: Connection established, ...
1
vote
1answer
179 views

What does my internet provider know about my online activities?

What does my internet service provider know about my online activites in these cases? plain server (www, ftp, whatever) connection and provider's DNS secured (e.g. TLS) server connection and ...
0
votes
2answers
1k views

curl and sni-enabled server

I am running curl against a sni-enabled server with the following command curl --cacert CustomCA.crt -H "Host: example.com" https://1.2.3.4/foo However, I am not getting the right certificate where ...
0
votes
1answer
50 views

Should TLS be used for email on localhost?

I have an application (written in PHP) which sends email using SMTP and runs on the same system as the email server. Are there any security concerns about using port 25 on localhost rather than port ...
0
votes
2answers
210 views

Can't browse HTTPS pages. TLS error. Outobox virus?

Suddenly I have lost an ability to browse HTTPS pages with all browser. Here is an example of simple Google search with Chrome In other cases it can show blank page, or TLS error message. UPDATE ...
0
votes
0answers
678 views

OpenVPN on a Diskstation TLS Handshake error, Self signed cert, Defaults

I have a DS 1813+ with DSM 5 4493 Update 1 installed (latest) and am having issues setting up OpenVPN I have it working internally, (which is strange in itself) but when I remote from my house or ...
0
votes
1answer
402 views

How to overcome Local Group Policy Editor's 1023 character limit?

I want to reorder the SSL Cipher Suite Order applied as part of KB2919355, prioritizing the forward secrecy suites above all else. Trying to do this with gpedit at Computer Configuration > ...
0
votes
1answer
2k views

how to disable TLS 1.0 and checking enabling SSl 3.0 in Firefox 27.0.1?

How to disable TLS 1.0 and checking enabling SSL 3.0 in Firefox 27.0.1 (new Version) ? I suppose I can find it at the Encryption tab. I followed below path Tools -> Options -> Advanced but there ...
2
votes
1answer
2k views

Which versions of the Windows TLS/SSL file transfer software like WinSCP and FileZilla are not affected by Heartbleed?

I noticed that many people still use versions affected by the heartbleed vulnerability of wide spread TLS/SSL enabled Windows clients like WinSCP and Filezilla. To be able to make safe ...
2
votes
0answers
496 views

Disabling TLS protocols for https:// URLs in git

Since my update to Ubuntu 14.04, I cannot connect to the companies git server. It uses https with the SSL protocols only. When running git clone (or any other git command that connects to the server) ...