The ssl tag has no wiki summary.
1
vote
0answers
33 views
ngircd / xchat SSL issues
I'm trying to setup a ngircd IRC server on Fedora 18 (which was installed using yum), but I'm having some SSL issues. I can connect to the server locally and remotely if I choose to "accept invalid ...
-2
votes
1answer
62 views
Red hat enterprise linux how do i install apache with SSL HTTPS? i have CERTIFICATE, KEY, INTERMEDIATE (ROOT CA) from heart internet [closed]
How can i install SSL HTTPS in my apache webserver in Red hat enterprise linux? Only following is installed. And i have tried this website follow up but its not working it fails.
$ uname -a
...
1
vote
0answers
81 views
How to add my own created certificate authority to system trusted repositories
I was told that I can add my created CA to trusted repositories/authorities in my system instead of adding it from browser and configuring in in ssl.conf.
Yet I can't find anything similar on the ...
0
votes
0answers
38 views
Postfix address resolver + loopback to root problem
Ubuntu Linux 12.04.1 With LAMP stack.
The goal is to setup a web server that can send mail via the PHP mail() function, which uses localhost. The mail must then be relayed to an ISP domain ...
1
vote
1answer
133 views
`openssl`: Subject Alternative Name
I wrote this bit of code to get the Common Name of the subject field in the SSL certificate for a given domain:
$ echo -e "GET / HTTP/1.1\nEOT" | openssl s_client -connect google.com:443 2>&1 ...
2
votes
1answer
63 views
Apache boot without asking for passwd
So I'm maintaining a server which has a verified SSL certificate setup, however there is a password on the private key and so whenever apache is reboot, we get a message asking for the password. This ...
2
votes
1answer
66 views
How to add multiple email adresses to an SSL certificate via the command line?
I know that by adding/modifying the SubjectAltName entry in openssl.cnf this can be achieved, but is there a way to do so without having to modify that file every time?
0
votes
1answer
57 views
apt-get update and package authentication
Sometimes when you try to apt-get install a program, you get a warning message about how some packages couldn't be authenticated.
Doing an apt-get update will sometimes fix the problem, but sometimes ...
2
votes
2answers
153 views
Apache server redirects main domain to https
I have this server with multiple domains running CentOS 6.2 and Apache. This server has a SSL certificate installed and working well.
Every time I browse to the main domain, without adding http:// it ...
-1
votes
1answer
32 views
What is the passphrase-file in apache2? [closed]
I'm referring to this question. What is the 'passphrase-file' mentioned in here? Please clarify.
3
votes
3answers
3k views
invalid SSL_version specified at /usr/share/perl5/IO/Socket/SSL.pm line 332
Since I upgraded my PC from (k)ubuntu 12.04 to 12.10 I receive this error message when trying to send an email using sendemail.
Installing an older version of IO::Socket::SSL is not an option. I ...
1
vote
2answers
104 views
Encrypt IP payload + URL
I need to encrypt IP payload + request URL so that my ISP can't understand my requests. Do you know any project such as zebedee except VPNs?
Tor doesn't work with my ISP, because SSL was banned, so ...
0
votes
1answer
85 views
How to set message validity
I am using Shibboleth for single user authentication and it needs a ssl configuration which facilitates the user authentication process. Before it was working fine but now I am facing a SSL handshake ...
1
vote
1answer
369 views
SSL handshake failure with Shibboleth
I am using Shibboleth for single user authentication and it needs a ssl configuration which facilitates the user authentication process. Before it was working fine but now I am facing a SSL handshake ...
1
vote
1answer
296 views
How can I update certificates on my system to fix wget's error: “Unable to establish SSL connection.”?
Sometimes I notice that I am unable to connect via SSL with curl and wget to websites that have certificates that should be valid.
One example might be https://squareup.com/ which has a Verisign ...
0
votes
1answer
312 views
openssl s_client hangs
I am trying to look at some ssl certs with openssl's s_client. For some reason it hangs with the connection open after spitting out the cert info.
Here is the command I am using and the output:
...
4
votes
1answer
262 views
vim.googlecode.com SSL certificate change
I am building vim from source and keep having to update the SSL hostfingerprints of my ~/.hgrc file. It's getting a little silly and large – see below. The pattern is the same: run update, ...
0
votes
0answers
248 views
Exim4 as smarthost with SSL?
I want to use exim4 as smarthost, mails shall be send using a smtp mail account over ssl. I've seen the hosts_require_tls option, but I need SSL and not TLS!? Thanks for any hint :-)
1
vote
0answers
1k views
SMTP Auth - SASL on Dovecot, Postfix and CentOS 6.2 (and Open-Xchange)
I am trying to get open SASL to work on CentOS 6.2. I followed this tutorial:
http://wiki.centos.org/HowTos/postfix_sasl
I suspect it works perfectly for CentOS 5.x so all I really need is an update ...
2
votes
1answer
551 views
Error with fetchmail and SSL certificates
I have a problem configuring my mail client on my Mac OS 10.6.8. These were the steps I did:
# touch ~/.fetchmailrc
I edited the file and created the contents:
poll pop.gmail.com with proto POP3 ...
2
votes
2answers
2k views
FTP over SSL in AIX (UNIX)
Folks over at SO couldn't answer this, so I am posting over here.
I need to do an FTP over SSL to a FileZilla Server running on a Windows server from an AIX Unix clien. I have the Host name of the ...
5
votes
1answer
440 views
TLS over unix pipe
Can I use TLS/SSL over Unix pipe with Unix command line?
I want the equivalent of
$ mkfifo /tmp/spipe
$ echo a|openssl s_server -acceptFifo /tmp/spipe &
[1] 25563
$ openssl s_client ...
2
votes
1answer
4k views
apache2 Invalid command 'SSLEngine'
Running: CentOS6 x64
When I restart httpd, I get the following error. What am I missing?
[root@localhost ~]# service httpd restart
Stopping httpd: [ OK ...
1
vote
2answers
253 views
How to “get” a HTTPS website running?
I have a website serving several pages that can be reachable via HTTP.
How can I make these sites available via standard HTTPS? (not self-signed). What are the steps? (go to a CA, and then?)
Can ...
1
vote
1answer
1k views
Unprettyfied SSL error message?
I am trying to authenticate using my USB smartcard reader to a website.
I am running Ubuntu 10.04 LTS, with its most up to date Firefox browser 3.6.24.
I get the following error message:
Secure ...
1
vote
2answers
132 views
Convergence with Firefox 3.6?
On many Linux distributions by default there is only Firefox 3.6. However, when I try to install Convergence I get:
How can I install Convergence on a distro that runs Firefox 3.6 (e.g. ...
2
votes
1answer
2k views
cURL/wget - SSLv3, TLS handshake, CERT hangs
I have problems connecting to https sites using cURL or wget. When I download from a https curl seems to be stuck while doing the TLS handshake, CERT.
The problem is independent of the site (I noticed ...
3
votes
3answers
3k views
How can I permanently remove a web browser's SSL warning for HTTPS sites that fail to identify themselves correctly?
I'm using Firefox and Google Chrome under Ubuntu 10.04, and get these warnings:
I want to add the site's certificate to "somewhere", so that the browser doesn't show SSL cert errors when visiting ...
0
votes
1answer
82 views
How to secure a non-ssl http server? [closed]
I have a program (motion) that serves a web page showing a live camera feed. I want to make that feed available via internet, but using SSL and a certificate so the feed can only be seen by those that ...
3
votes
2answers
3k views
Trust a self signed PEM certificate
I have set up a proxy server with SSL using a PEM certificate. Now, there is a couple of machines of mine that I would like to trust this certificate automatically (without the web browser ...
5
votes
1answer
216 views
How do I extract all subjects of a cacertfile with the openssl command line?
Is there an openssl command to extract all certifacte subjects of a cacertfile (a file containing several certificates like /etc/ssl/certs/ca-certificates.crt)?
I tried openssl x509 -in ...
3
votes
2answers
2k views
How can I verify SSL certificates on the command line?
I'm trying to validate/verify that the rsa key, ca-bundle, and certificate stored here are ok. They are not being served by a webserver. How can I verify them?
0
votes
1answer
358 views
Force wget to download only from HTTPS?
wget https://skype.com -O - > /dev/null
isn't good. I just want to create a short bash script to check that an HTTPS cert is valid or no. i think wget doesn't connects if the cert is invalid. i ...
1
vote
2answers
583 views
How can I update existing .crt file with new encrypted rsa .key file?
Suppose I have 2 files: an RSA key file client.key and a certification file client.crt.
I have created them without pass-phrase and now I have encrypted client.key file with pass-phrase by command:
...
1
vote
2answers
155 views
Enforce site-wide SSL on Debian LAMP
I have a Debian/Linux Lenny LAMP server w/Plesk Panel 10.2. I have a PHP/MySQL webapp deployed in a Plesk "webspace".
I want to enforce SSL on site-wide.
Do I just forward port 80 to 443? For my ...
5
votes
3answers
11k views
How to encrypt messages/text with RSA? (using openssl?)
I'm Bob.
I have Alice's public key. I want to send Alice an -> RSA <- encrypted message.
How can I do it using the openssl command?
The message is:
Hi Alice! Please bring malacpörkölt for dinner!
...
3
votes
3answers
263 views
True HTTPS? How?
/Using Google Chrome/
if i visit:
https://secure.wikimedia.org/wikipedia/en/wiki/File:Nokota_Horses_cropped.jpg
then the:
...
3
votes
4answers
505 views
How to examine POST request over HTTPS?
I'm trying to automate access to a website via scraping, and I'm trying to determine what parameters are being sent to the server in a POST request. I've currently got Wireshark open, but is there a ...
5
votes
3answers
2k views
Can't access select https sites on Linux over PPPoE
My internet connection used to be a direct LAN connection to my provider. Back then, everything would load fine on both Windows and Ubuntu (dual boot). However, a while ago they started needing me to ...
2
votes
1answer
179 views
Resource needed to manage cert.db7 files for AIX
On AIX to get LDAP authentication working it has wanted to store the LDAP SSL certificate's trusted root in a cert.db7 file. Mozilla stopped supporting it in NSS (Netscape Security Services) a while ...
