The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
1answer
716 views

SSL handshake failure with Shibboleth

I am using Shibboleth for single user authentication and it needs a ssl configuration which facilitates the user authentication process. Before it was working fine but now I am facing a SSL handshake ...
1
vote
1answer
741 views

How can I update certificates on my system to fix wget's error: “Unable to establish SSL connection.”?

Sometimes I notice that I am unable to connect via SSL with curl and wget to websites that have certificates that should be valid. One example might be https://squareup.com/ which has a Verisign ...
0
votes
1answer
563 views

openssl s_client hangs

I am trying to look at some ssl certs with openssl's s_client. For some reason it hangs with the connection open after spitting out the cert info. Here is the command I am using and the output: ...
5
votes
1answer
333 views

vim.googlecode.com SSL certificate change

I am building vim from source and keep having to update the SSL hostfingerprints of my ~/.hgrc file. It's getting a little silly and large – see below. The pattern is the same: run update, ...
0
votes
1answer
539 views

Exim4 as smarthost with SSL?

I want to use exim4 as a smarthost to send email using an smtp mail account over ssl. I've seen the hosts_require_tls option, but I need SSL and not TLS. How should I do this?
1
vote
0answers
2k views

SMTP Auth - SASL on Dovecot, Postfix and CentOS 6.2 (and Open-Xchange)

I am trying to get open SASL to work on CentOS 6.2. I followed this tutorial: http://wiki.centos.org/HowTos/postfix_sasl I suspect it works perfectly for CentOS 5.x so all I really need is an update ...
2
votes
1answer
1k views

Error with fetchmail and SSL certificates

I have a problem configuring my mail client on my Mac OS 10.6.8. These were the steps I did: # touch ~/.fetchmailrc I edited the file and created the contents: poll pop.gmail.com with proto POP3 ...
2
votes
2answers
4k views

FTP over SSL in AIX (UNIX)

Folks over at SO couldn't answer this, so I am posting over here. I need to do an FTP over SSL to a FileZilla Server running on a Windows server from an AIX Unix clien. I have the Host name of the ...
5
votes
1answer
729 views

TLS over unix pipe

Can I use TLS/SSL over Unix pipe with Unix command line? I want the equivalent of $ mkfifo /tmp/spipe $ echo a|openssl s_server -acceptFifo /tmp/spipe & [1] 25563 $ openssl s_client ...
4
votes
1answer
13k views

apache2 Invalid command 'SSLEngine'

Running: CentOS6 x64 When I restart httpd, I get the following error. What am I missing? [root@localhost ~]# service httpd restart Stopping httpd: [ OK ...
1
vote
2answers
449 views

How to “get” a HTTPS website running?

I have a website serving several pages that can be reachable via HTTP. How can I make these sites available via standard HTTPS? (not self-signed). What are the steps? (go to a CA, and then?) Can ...
1
vote
1answer
2k views

Unprettyfied SSL error message?

I am trying to authenticate using my USB smartcard reader to a website. I am running Ubuntu 10.04 LTS, with its most up to date Firefox browser 3.6.24. I get the following error message: Secure ...
1
vote
2answers
152 views

Convergence with Firefox 3.6?

On many Linux distributions by default there is only Firefox 3.6. However, when I try to install Convergence I get: How can I install Convergence on a distro that runs Firefox 3.6 (e.g. ...
2
votes
1answer
4k views

cURL/wget - SSLv3, TLS handshake, CERT hangs

I have problems connecting to https sites using cURL or wget. When I download from a https curl seems to be stuck while doing the TLS handshake, CERT. The problem is independent of the site (I noticed ...
3
votes
3answers
4k views

How can I permanently remove a web browser's SSL warning for HTTPS sites that fail to identify themselves correctly?

I'm using Firefox and Google Chrome under Ubuntu 10.04, and get these warnings: I want to add the site's certificate to "somewhere", so that the browser doesn't show SSL cert errors when visiting ...
4
votes
3answers
7k views

Trust a self signed PEM certificate

I have set up a proxy server with SSL using a PEM certificate. Now, there is a couple of machines of mine that I would like to trust this certificate automatically (without the web browser ...
7
votes
1answer
720 views

How do I extract all subjects of a cacertfile with the openssl command line?

Is there an openssl command to extract all certifacte subjects of a cacertfile (a file containing several certificates like /etc/ssl/certs/ca-certificates.crt)? I tried openssl x509 -in ...
5
votes
2answers
9k views

How can I verify SSL certificates on the command line?

I'm trying to validate/verify that the rsa key, ca-bundle, and certificate stored here are ok. They are not being served by a webserver. How can I verify them?
0
votes
1answer
529 views

Force wget to download only from HTTPS?

wget https://skype.com -O - > /dev/null isn't good. I just want to create a short bash script to check that an HTTPS cert is valid or no. i think wget doesn't connects if the cert is invalid. i ...
1
vote
2answers
848 views

How can I update existing .crt file with new encrypted rsa .key file?

Suppose I have 2 files: an RSA key file client.key and a certification file client.crt. I have created them without pass-phrase and now I have encrypted client.key file with pass-phrase by command: ...
1
vote
2answers
173 views

Enforce site-wide SSL on Debian LAMP

I have a Debian/Linux Lenny LAMP server w/Plesk Panel 10.2. I have a PHP/MySQL webapp deployed in a Plesk "webspace". I want to enforce SSL on site-wide. Do I just forward port 80 to 443? For my ...
8
votes
3answers
19k views

How to encrypt messages/text with RSA? (using openssl?)

I'm Bob. I have Alice's public key. I want to send Alice an -> RSA <- encrypted message. How can I do it using the openssl command? The message is: Hi Alice! Please bring malacpörkölt for dinner! ...
3
votes
3answers
282 views

True HTTPS? How?

/Using Google Chrome/ if i visit: https://secure.wikimedia.org/wikipedia/en/wiki/File:Nokota_Horses_cropped.jpg then the: ...
3
votes
4answers
605 views

How to examine POST request over HTTPS?

I'm trying to automate access to a website via scraping, and I'm trying to determine what parameters are being sent to the server in a POST request. I've currently got Wireshark open, but is there a ...
6
votes
3answers
3k views

Can't access select https sites on Linux over PPPoE

My internet connection used to be a direct LAN connection to my provider. Back then, everything would load fine on both Windows and Ubuntu (dual boot). However, a while ago they started needing me to ...
2
votes
1answer
202 views

Resource needed to manage cert.db7 files for AIX

On AIX to get LDAP authentication working it has wanted to store the LDAP SSL certificate's trusted root in a cert.db7 file. Mozilla stopped supporting it in NSS (Netscape Security Services) a while ...