The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
2answers
42 views

Apache not listening on port 443

I've purchased an SSL and I'm trying to set it on a browser. The port is forwarded in the router to the server, and I believe that SSL certificate is installed correctly (the apache starts OK). I ...
2
votes
2answers
25 views

Need explanations about SSL issue and installation process

I am trying to install SSL on my server. First of all I wanted to purchase a certificate. They asked me to generate a CSR file. I created it and it resulted with two files: my.website.key ...
1
vote
2answers
58 views

Still vulnerable after disabling SSLv3

I'm trying to disable SSLv3 to avoid the Poodle problem. I'm using the following instructions as a guidleine: https://access.redhat.com/solutions/1232413 I've applied the following line to my config ...
1
vote
1answer
391 views

Disable SSLv3 In cURL?

I'm having a problem connecting to a website that is hosted with CloudFlare using cURL. When I try to connect to the website with HTTPS (using curl -v https://www.xxxxxx.com), it says: * About to ...
13
votes
7answers
6k views

How to disable SSLv3 in Apache?

Everybody seems to be talking about the POODLE vulnerability today. And everybody recommends disabling SSLv3 in Apache using the following configuration directive: SSLProtocol All -SSLv2 -SSLv3 ...
4
votes
1answer
4k views

How do I disable SSLv3 in an OpenSSH SSH server to avoid POODLE?

In wake of the newly-discovered POODLE vulnerability, I'd like to disable SSLv3 on all of my SSH servers. How do I achieve this with OpenSSH?
1
vote
0answers
36 views

cipher suites and disabling weak ciphers in JBoss

Our security audit report says that a number of our JBoss EAP 5.0 servers (on RHEL 6.x) has weak ciphers enabled. Upon doing some research, I found a .jar file (from ...
1
vote
1answer
38 views

“sec_error_unknown_issuer” in Iceweasel 22.0

If I visit a certain web-page with Iceweasel 22.0, then I receive the sec_error_unknown_issuer error. When I check the X.509v3 certificate hierarchy, then the top-most certificate is "DOD CA-28". ...
2
votes
1answer
53 views

FreeBSD 10 root certificate store

Is on a default FreeBSD 10 no root certificate store? When I install one by hand it is in /usr/local/share/certs/ca-root-nss.crt, which I symlink to /etc/ssl/cert.pem and thats the main places I ...
1
vote
1answer
390 views

Chrome does not open Https websites [closed]

I am a corporate user with proxy server. I am working on the Fedora 20 OS and installed Chrome browser. I set proxy settings under Settings -> Network -> Change Proxy settings -> Network Proxy. ...
1
vote
1answer
55 views

svn: SSL is not supported

I am trying to check out code on a Unix box in the Z shell. When I run the following command svn checkout https://svn.example.net/svn/trunk/source build I get the following error message: svn: SSL ...
1
vote
0answers
105 views

What's in the /etc/pki/nssdb database?

So, these files aren't empty... [ root@localhost ] # ls -l total 248 -rw-r--r--. 1 root root 65536 Jan 12 2010 cert8.db -rw-r--r--. 1 root root 65536 Dec 23 2013 cert8.db.orig -rw-r--r--. 1 root ...
3
votes
1answer
59 views

Proper way to handle FTP over SSL with restrictive firewall rules?

Without SSL, FTP works fine over a stateful Firewall, like netfilter (iptables) + the nf_conntrack_ftp kernel module like this: # modprobe nf_conntrack_ftp # iptables -A INPUT -m conntrack --ctstate ...
2
votes
1answer
98 views

Does fetchmail support SSL or TLS when using SMTP to forward email?

I am trying to forward emails that are fetched with fetchmail to another SMTP host, which enforces STARTTLS. I could not find a way to enable TLS in fetchmail. Is this possible at all? If so, how?
0
votes
1answer
373 views

Redhat “httpd” start failed showing “ELinks: Connection refused”

I'm on RHEL 6.5 and Apache 2.2.15. And now applying a trusted SSL on the Server. After adding the respective SSL related Certs and files, my Apache is NOT starting up anymore. Here are some outputs: ...
1
vote
3answers
182 views

specify certificate of CA in Dovecot

In Postfix, I have specified my private key, my certificate, and the certificate of my CA smtpd_tls_CAfile = /etc/ssl/cacert.pem smtpd_tls_key_file = /etc/ssl/server.key smtpd_tls_cert_file = ...
0
votes
0answers
70 views

Linking synergyc: libcurl - undefined reference

I'm trying to compile synergy 1.5.0 on openSUSE 13.1 (Kernel 3.11.10-17). While linking, I get the following error: ... [ 83%] Built target ipc [ 84%] Built target client Linking CXX executable ...
3
votes
1answer
49 views

Add a single key to to CA certificates from an automated script

I'm doing some automation for a local machine in Vagrant using Puppet. I need to add a CA certificate to the trusted list in Ubuntu Trusty 14.04 LTS. I simply add the file to the right place: file ...
2
votes
1answer
68 views

Generate a certificate signing request for an SSL server

I'm running CentOS 6.2 LAMP and I've just purchased an SSL certificate via Namecheap that I'm trying to install on my server. This is the certificate I purchased. How do I complete this process ...
1
vote
1answer
80 views

SSL no certificate

I'm trying to make a bash script who will check the SSL status of my web site client and return the error. But for every IP, wget https://$ip:$port gives me the following error: ERROR: The ...
1
vote
2answers
75 views

Proper options for openssl with simple ciphertext

Last weekend there was a cryptographic challenge where the ciphertext was the following hex: FC 89 BF C2 B0 5F 1C 2E 64 B8 78 43 92 78 3A C9 I know for sure that this is encrypted using ...
0
votes
0answers
224 views

How to add SSL with cURL URL using Ubuntu Terminal

While running a Twitter API from cURL in Ubuntu Terminal it asked me to use SSL. After searching for it, I tried: sudo curl -s https://localhost:8080/tweets/HLaddha sudo curl -k ...
0
votes
0answers
57 views

Deleting ssl.conf a problem in apache set up?

In a desperate attempt to stop warnings from a free ssl cert I set up a while back and not knowing how to undo it I ended up deleting my ssl.conf file in the etc/ssl folder but now I am wondering if ...
3
votes
1answer
185 views

Linux equivalent of “Trusted Root Certification Authorities” on Windows?

Where I live we have a corporate firewall which is configured to need a certificate installed on the computers in the house for it to be able to scan for vulnerabilities in secure connections. Without ...
3
votes
1answer
117 views

Can ssl folder be removed without causing conflict

In /etc/httpd the ssl folder, if that is removed does that mean any site on the server if directed to https:// will not throw warning? I got a certificate a while back but soon realized if not a paid ...
1
vote
0answers
82 views

Ubuntu 12.04 apache2 site shows index of instead of actual site on redmine

I have an Ubuntu 12.04 server that has a successful redmine install on it. I have been using redmine on it for a while, but when I tried to set up the SSL cert using this method, ...
2
votes
0answers
139 views

Problems uploading a file via WebDAV?

I've configured on my Linux server (SLES11) with IHS Webserver with WebDAV enabled. A file upload via curl is successful using a URL like this: $ curl --insecure --upload-file testfile.txt \ ...
1
vote
1answer
306 views

How to remove SSL certificate?

I've been asked to remove certificates from some of our servers, but I don't know anything about httpd configuration. If I have one server where if I do this /usr/sbin/httpd -t -DDUMP_CERTS ...
1
vote
1answer
566 views

Linux openssl CN/Hostname verification against SSL certificate

How does an Enterprise Linux system with openssl 1.0.1+ verify that the CN=hostname value in the cert matches the server it resides on? Does it use a plain old reverse DNS lookup on the IP address of ...
0
votes
1answer
260 views

Install SSL Certificate in Iceweasel

I'm using Kali on Windows. I downloaded the Burp Suite and I'm trying to install its SSL certificate onto the Iceweasel browser. Burp Suite, the leading toolkit for web application security ...
1
vote
2answers
2k views

Thunderbird fails to connect to Dovecot and Postfix

I set up Dovecot and Postfix, but when I try to authenticate with Thunderbird, it gives this error: "Thunderbird failed to find the settings for your email account." ==> /var/log/dovecot-info.log ...
1
vote
2answers
173 views

How to validate X.509 certificate?

I have a following expired X.509 certificate: $ openssl x509 -in openvpn.net -text -noout Certificate: Data: Version: 3 (0x2) Serial Number: 03:fa:55:a7:80:b5:b5 ...
1
vote
1answer
478 views

How to make local system CA certificates known to Firefox?

Recently, the CAcert root certificates have been removed from Debian (more precisely, from the ca-certificates package). Since I want to keep them, I backed up the directory ...
0
votes
1answer
43 views

Extend validity time of APACHE certificate

I have in /etc/httpd/ssl subdir two files: apache.crt and apache.key. How can I extend time of validity of APACHE http server, without creating new certificate and without necessity of interaction ...
3
votes
1answer
549 views

squid - ssl bump

I have squid configured to bump SSL connections; however, when I configure my browser to use squid as a proxy, it doesn't actually do any SSL bumping. When I check the certificate, I can see it is ...
0
votes
1answer
176 views

Use curl to download from a Url

I am trying to download a file from a url using curl: $ curl -3 -v "https://atl1mmsget.msg.eng.t-mobile.com/mms/wapenc?location=XXXXXXXXXXX_14zbwk&rid=027" Where the X is a digit in the phone ...
4
votes
1answer
2k views

How can I start Apache on Arch Linux w/systemd using passphrase protected SSL keys?

I'm relatively new to using Arch Linux and think I must be missing the obvious way to do this correctly, but –short of starting the daemon on my own– I can't figure out how to get passphrase protected ...
2
votes
1answer
955 views

stunnel - how to setup stunnel to handle ssl and attach http with it?

I am running Google App Engine which is a http web server with some redirecting and other real-time stuff. But it does not have SSL to include so its unable to make HTTPS. Therefore, i was trying ...
2
votes
2answers
351 views

ssldump: PCAP: syntax error

I'm using: # uname -ro FreeBSD 9.0-RELEASE-p3 And the latest ssldump: # pkg_info | grep ssldump ssldump-0.9b3_4 SSLv3/TLS network protocol analyzer When I try starting it with decryption - I ...
7
votes
2answers
4k views

adding SSL certificate for Github only (not all certificates from ca-certificates package)

I get the following error when accessing Github over HTTPS: error: server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none This is because I don't have any ...
1
vote
1answer
4k views

Apache - Generate private key from an existing .crt file

I have some apache instances running smoothly with a home-made generated certificate. Now I have to use a provided certificate, but what I had sent is only a .crt file. In tried to copy it into the ...
1
vote
1answer
5k views

Apache “RSA server certificate CN does not match server name” error

I have an apache installation with some name-based vhosts and a SSL certficate with CN=maindomain.com and DNS Alternative Names for the all the vhosts (sub)domains. However, this setup gives warnings ...
5
votes
2answers
432 views

How to get server's ssl certificate in a human readable form?

For example, I want to find out when the certificate for encrypted.google.com expires (i.e. Not After date), and what other domains may use it for authentication (Subject Alternative Names).
1
vote
2answers
532 views

Create SSL certificate - Silent [closed]

I want to create a SSL certificate without get prompt for the data. The normal way to create the certificate would be: openssl req -x509 -nodes -days 7300 -newkey rsa:2048 -keyout ...
2
votes
2answers
63 views

generating CSR correctly

When generating a CRS for private purposes (non-comercial) which of the fields are mandatory? Country Name (2 letter code) [US]: US State or Province Name (full name) []: Texas Locality Name ...
3
votes
0answers
103 views

Creating a signed subordinate CA for client certificates

I have a root self-signed CA which I've created for myself. With this CA (we'll call it country), I've created a server certificate and key for my webserver, nginx. I now would like to create a ...
1
vote
1answer
840 views

AES-GCM 256bit for SSL on nginx

Does an option exist for AES-GCM 256bit encryption for SSL connections with nginx? If so, how can I configure this as the only cipher used with my server? (I'm hardening my router, so requiring the ...
1
vote
0answers
128 views

Is SMTP over SSL possible in the Balsa email client?

In Balsa 2.5.1 is it possible to connect to SMTP with port 465 with SSL? The IMAP setup has an SSL option which disables the TLS choices, but I do not see anything similar when setting up SMTP. I ...
1
vote
3answers
5k views

Helo command rejected: need fully-qualified hostname Error

My mail server is in some blacklist cause of spams. I reconfugured postfix. Aften then My customers get this error they can't send emails. 404 4.5.2 <PLLAMNAZIFE>: Helo command rejected: need ...
7
votes
2answers
7k views

Adding a self-signed certificate to the “trusted list”

I've generated a self-signed certificate for my build server and I'd like to globally trust the certificate on my machine, as I created the key myself and I'm sick of seeing warnings. I'm on Ubuntu ...