Tag Info

Hot answers tagged

14

This is called a "mixed content" page. If the HTTPS page includes content retrieved through regular, cleartext HTTP, then the connection is only partially encrypted: the unencrypted content is accessible to sniffers and can be modified by man-in-the-middle attackers, and therefore the connection is not safeguarded anymore. ...


3

You need to upgrade the version of OpenSSL on your server. The vulnerability is in the software code itself. You can read more here: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0224 or here: http://www.openssl.org/news/secadv_20140605.txt edit: important text is: OpenSSL 0.9.8 SSL/TLS users (client and/or server) should upgrade to ...


2

CVE-2014-0224 requires an update of openssl. RC4 cipher is used with TLS 1.1 or newer protocols, even though stronger ciphers are available. and The server does not support Forward Secrecy with the reference browsers. are mere webserver configuration issues. Something like this (assuming an apache): SSLCertificateFile server.crt ...


2

Your certificate is for webmail.example.org. If you're connecting to your Exchange server via server.domain, then the name will not match the common name in the certificate, thus the error. You either need a certificate that includes both names or you always have to use the external name (even when on the LAN). To make sure your clients use the external ...


1

There is a theoretical maximum of sessions you can have established to a single web server from a single client. It is possible that you have reached this limit. What identifies a TCP connection are a combination of Source IP Source Port Destination IP Destination Port In this test, 1, 3 and 4 are static. What remains is the source port, which have a ...


1

Yes as Martin mentions, I had the same problem with ESET NOD32 Antivirus 5, that started in Feb '14 too. I got a message from Thunderbird that I may have had too many IMAP connections to GMail. I stand to be corrected, but think just disabling the email client protection for 10 minutes was enough to let Thunderbird connect properly again. I'm not sure if ...


1

You could try adding something like the following to your startup script, assuming Java 1.7: JAVACMD="$JAVACMD -Ddeployment.security.SSLv2Hello=false -Ddeployment.security.SSLv3=false -Ddeployment.security.TLSv1=false -D\ deployment.security.TLSv1.1=true -Ddeployment.security.TLSv1.2=true" Some other suggestions: ...


1

Somebody is inferring with your SSL connection. This might be: Doing SSL interception for security reasons. This is often done in companies. You are behind some capture portal, which intercepts connections for unauthorized users to ask them to login or accept the side policy or similar things. Somebody is trying a man-in-the-middle attack. This might also ...


1

It appears you got infected with some sort of browser hijacker I suggest you to download and scan your pc with malware bytes


1

Had the same SSL/HSTS problem on all computers and phones connected to WiFi today. after checking the computer date and resetting the modem and router, I contacted Suddenlink and found out we had exceeded the monthly usage allowance of 250G. We started using Chromecast a little over a month ago, so I'm betting that's the issue. The CSR gave me this link: ...


1

affected by either browser hijack malware or some nasty plugin that you have installed in chrome. install malware bytes and scan your pc malwarebytes Mirror : FileHippo I also want you to recheck with hitman pro


1

Although you did install a SSL certificate, you did not include any additional certificates that are necessary to build a trust path. See https://www.ssllabs.com/ssltest/analyze.html?d=phrecordr.com About the trust path, the SSL client has some root certificates that are stored. When you buy a certificate C from some CA, they might use some intermediate ...


1

When you visit a website over HTTP, your connection is vulnerable to eavesdropping and man-in-the-middle(MiTM) attacks. Sites that don't pass sensitive information back and forth (Personable Identifiable Information, Social Security Numbers, Credit card, etc). When you visit a page that is fully served over HTTPS (like PayPal and financial institutions), ...


1

You seem to be mixing up several aspects here. What you need to get the final result is your private key the root certificate, which is equal for everybody using the same CA (that is what your ca.crt seems to be) a/some intermediate certificates, usually found on the CA's site the result of the submitted CSR, which then is your certificate. 2-4 make up ...


1

Adron, the privatekey.pem is the private key for the cert that you requested from the CA. the root ca cert will be the certificate from the top of the particular PKI that issued your cert and will be a self signed cert. the intermediate ca certs are from sub-ca's below the root CA. e.g. example.com has a root CA call exampleRootCA and a sub CA called ...



Only top voted, non community-wiki answers of a minimum length are eligible