Tag Info

Hot answers tagged

3

The "DigiCert Secure Server CA" is clearly marked as an intermediate certificate at the page of digicert you referenced. You need to download the root certificate, not an intermediate certificate. You get this warning because this intermediate certificate is signed by the root certificate "DigiCert Global Root CA" which you did not import into the keychain.


2

Firefox has moved some time ago to use only OCSP and no longer CRL: As of Firefox 24, the user-interface for importing CRLs via Firefox has been removed. Auto-importing/updating of CRLs through Firefox has also been removed. NSS still supports CRLs, but Firefox is moving away from checking CRLs, and moving towards using a revocation list push mechanism. ...


1

Something in Netstat with a local IP of 0.0.0.0 in listening mode means it's listening on all IPs that are assigned to the machine. Stop IIS -- If something is still listening on 443, then use the PID reported by Netstat to determine which process is listening on port 443. Once you know which service/program it is, reconfigure it to use a different port ...


1

From the messages your provide it looks like the problem is in the SSL handshake, but for a better analysis more detailed would be necessary. What I've seen so far on problems in this area are: Cipher problems. If the FTP server can only do ciphers which are deemed insecure by Windows 7 but are considered secure by Windows 2012 the handshake will fail. But ...


1

It's convenience, mostly. A pure PGP-like web-of-trust only works if there is a path of trust between the verifying client and the signed certificate. With PKI, it starts with the list of trusted root CAs that all operating systems (and often web browsers) have built in, and that list can be used to verify 99% of all server certificates encountered. With ...


1

Short answer : "no". Long answer : "No, not really - XP is an outdated, unstable and insecure operating system, please switch to a newer version." Sources : http://support.microsoft.com/kb/968730/ http://blogs.technet.com/b/pki/archive/2010/09/30/sha2-and-windows.aspx http://www.digicert.com/sha-2-ssl-certificates.htm also : ...


1

SSL encryption is done at the application layer, so you would either need to modify the application you want to sniff (e.g. the browser) or you need to mount a man-in-the-middle attack (like with mitmproxy or burp suite). Passive SSL sniffing and decryption is only possible if you have the private key of the target server and if RSA key exchange is used, but ...


1

Windows binaries A few old versions can be found in the official repository. Here are some of the newest binaries compatible with Windows XP and later, both official and unofficial: Version 3.14.22 Built from source code released on February 1, 2013.3 ...



Only top voted, non community-wiki answers of a minimum length are eligible