SSL (the predecessor of TLS) is a cryptographic protocol designed to provide communications security over a computer network. It is the S in HTTPS, IMAPS, SMTPS, etc.

learn more… | top users | synonyms (1)

1
vote
1answer
9k views

Apache - Generate private key from an existing .crt file

I have some apache instances running smoothly with a home-made generated certificate. Now I have to use a provided certificate, but what I had sent is only a .crt file. In tried to copy it into the ...
2
votes
1answer
11k views

Apache “RSA server certificate CN does not match server name” error

I have an apache installation with some name-based vhosts and a SSL certficate with CN=maindomain.com and DNS Alternative Names for the all the vhosts (sub)domains. However, this setup gives warnings ...
5
votes
2answers
1k views

How to get server's ssl certificate in a human readable form?

For example, I want to find out when the certificate for encrypted.google.com expires (i.e. Not After date), and what other domains may use it for authentication (Subject Alternative Names).
1
vote
2answers
1k views

Create SSL certificate non-interactively [closed]

I want to silently, non interactively, create an SSL certificate. I.e., without get prompted for any data. The normal way I create the certificate would be: openssl req -x509 -nodes -days 7300 ...
2
votes
2answers
74 views

generating CSR correctly

When generating a CRS for private purposes (non-comercial) which of the fields are mandatory? Country Name (2 letter code) [US]: US State or Province Name (full name) []: Texas Locality Name ...
3
votes
0answers
176 views

Creating a signed subordinate CA for client certificates

I have a root self-signed CA which I've created for myself. With this CA (we'll call it country), I've created a server certificate and key for my webserver, nginx. I now would like to create a ...
1
vote
1answer
1k views

AES-GCM 256bit for SSL on nginx

Does an option exist for AES-GCM 256bit encryption for SSL connections with nginx? If so, how can I configure this as the only cipher used with my server? (I'm hardening my router, so requiring the ...
1
vote
0answers
192 views

Is SMTP over SSL possible in the Balsa email client?

In Balsa 2.5.1 is it possible to connect to SMTP with port 465 with SSL? The IMAP setup has an SSL option which disables the TLS choices, but I do not see anything similar when setting up SMTP. I ...
1
vote
4answers
12k views

Helo command rejected: need fully-qualified hostname Error

My mail server is in some blacklist cause of spams. I reconfugured postfix. Aften then My customers get this error they can't send emails. 404 4.5.2 <PLLAMNAZIFE>: Helo command rejected: need ...
10
votes
2answers
19k views

Adding a self-signed certificate to the “trusted list”

I've generated a self-signed certificate for my build server and I'd like to globally trust the certificate on my machine, as I created the key myself and I'm sick of seeing warnings. I'm on Ubuntu ...
2
votes
1answer
13k views

make fatal error: openssl/sha.h: No such file or directory

I'm trying to compile a program that, according to the documentation, requires the "OpenSSL library". I have OpenSSL installed, and it's still giving me the error openssl/sha.h: No such file or ...
2
votes
2answers
467 views

Dovecot POP3S & IMAPS SSL Certificate that works for all user domains

This may be a really stupid question, but I can't seem to put my head around it. I have a mail server I'm trying to setup to service 6 domains. I will have multiple mail users accessing the server via ...
3
votes
2answers
803 views

WeeChat decryption fails while reading from data socket

I'm using WeeChat for quite a while on different machines now. All instances are using the same settings over and over again. When I connect, everything is fine, like this output from WeeChat, just ...
3
votes
2answers
7k views

How do I install a system-wide SSL certificate on openSUSE?

I have a PEM certificate that I just downloaded from a webserver. I want to install it system-wide so I can curl the server without it complaining about a missing certificate. I tried putting the ...
1
vote
0answers
471 views

ngircd / xchat SSL issues

I'm trying to setup a ngircd IRC server on Fedora 18 (which was installed using yum), but I'm having some SSL issues. I can connect to the server locally and remotely if I choose to "accept invalid ...
-3
votes
1answer
1k views

Red hat enterprise linux how do i install apache with SSL HTTPS? i have CERTIFICATE, KEY, INTERMEDIATE (ROOT CA) from heart internet [closed]

How can i install SSL HTTPS in my apache webserver in Red hat enterprise linux? Only following is installed. And i have tried this website follow up but its not working it fails. $ uname -a ...
1
vote
0answers
394 views

How to add my own created certificate authority to system trusted repositories

I was told that I can add my created CA to trusted repositories/authorities in my system instead of adding it from browser and configuring in in ssl.conf. Yet I can't find anything similar on the ...
5
votes
1answer
8k views

How do I use implicit FTP over TLS

using any FTP client (I'm on Ubuntu 12.04 and tried using lftp), I want to be able to make an implicit TLS connection on a FTP server, but I can't quite manage to successfully connect(All I get is : ...
3
votes
2answers
5k views

How to make ldapsearch working on SLES over tls using certificate?

We need to connect our php script to LDAP over tls using a certificate. LDAP connection works nicely without tls. More details here ...
2
votes
3answers
2k views

`openssl`: Subject Alternative Name

I wrote this bit of code to get the Common Name of the subject field in the SSL certificate for a given domain: $ echo -e "GET / HTTP/1.1\nEOT" | openssl s_client -connect google.com:443 2>&1 ...
5
votes
1answer
3k views

mutt SMTP TLS error sending mail

When I try to send a mail, I get the following error: gnutls_handshake: An unexpected TLS packet was received. This is my .muttrc (myname, myaddress and mymail are placeholders): # Automatically ...
2
votes
1answer
2k views

Apache boot without asking for passwd

So I'm maintaining a server which has a verified SSL certificate setup, however there is a password on the private key and so whenever apache is reboot, we get a message asking for the password. This ...
2
votes
1answer
247 views

How to add multiple email adresses to an SSL certificate via the command line?

I know that by adding/modifying the SubjectAltName entry in openssl.cnf this can be achieved, but is there a way to do so without having to modify that file every time?
0
votes
1answer
133 views

apt-get update and package authentication

Sometimes when you try to apt-get install a program, you get a warning message about how some packages couldn't be authenticated. Doing an apt-get update will sometimes fix the problem, but sometimes ...
2
votes
2answers
509 views

Apache server redirects main domain to https

I have this server with multiple domains running CentOS 6.2 and Apache. This server has a SSL certificate installed and working well. Every time I browse to the main domain, without adding http:// it ...
7
votes
5answers
14k views

invalid SSL_version specified at /usr/share/perl5/IO/Socket/SSL.pm line 332

Since I upgraded my PC from (k)ubuntu 12.04 to 12.10 I receive this error message when trying to send an email using sendemail. Installing an older version of IO::Socket::SSL is not an option. I ...
1
vote
2answers
148 views

Encrypt IP payload + URL

I need to encrypt IP payload + request URL so that my ISP can't understand my requests. Do you know any project such as zebedee except VPNs? Tor doesn't work with my ISP, because SSL was banned, so ...
0
votes
1answer
139 views

How to set message validity

I am using Shibboleth for single user authentication and it needs a ssl configuration which facilitates the user authentication process. Before it was working fine but now I am facing a SSL handshake ...
1
vote
1answer
1k views

SSL handshake failure with Shibboleth [closed]

I am using Shibboleth for single user authentication and it needs a ssl configuration which facilitates the user authentication process. Before it was working fine but now I am facing a SSL handshake ...
1
vote
1answer
960 views

How can I update certificates on my system to fix wget's error: “Unable to establish SSL connection.”?

Sometimes I notice that I am unable to connect via SSL with curl and wget to websites that have certificates that should be valid. One example might be https://squareup.com/ which has a Verisign ...
0
votes
1answer
962 views

openssl s_client hangs

I am trying to look at some ssl certs with openssl's s_client. For some reason it hangs with the connection open after spitting out the cert info. Here is the command I am using and the output: ...
5
votes
1answer
366 views

vim.googlecode.com SSL certificate change

I am building vim from source and keep having to update the SSL hostfingerprints of my ~/.hgrc file. It's getting a little silly and large – see below. The pattern is the same: run update, ...
1
vote
1answer
777 views

Exim4 as smarthost with SSL?

I want to use exim4 as a smarthost to send email using an smtp mail account over ssl. I've seen the hosts_require_tls option, but I need SSL and not TLS. How should I do this?
1
vote
1answer
476 views

Sendmail with TLS support changes FROM: address

I have multiple domains on one server and when sending email to server, which supports TLS, server changes FROM field to default domain ($j). What should i do (in .mc level please) to remain primary ...
2
votes
0answers
3k views

SMTP Auth - SASL on Dovecot, Postfix and CentOS 6.2 (and Open-Xchange)

I am trying to get open SASL to work on CentOS 6.2. I followed this tutorial: http://wiki.centos.org/HowTos/postfix_sasl I suspect it works perfectly for CentOS 5.x so all I really need is an update ...
2
votes
1answer
2k views

Error with fetchmail and SSL certificates

I have a problem configuring my mail client on my Mac OS 10.6.8. These were the steps I did: # touch ~/.fetchmailrc I edited the file and created the contents: poll pop.gmail.com with proto POP3 ...
2
votes
2answers
971 views

How to display server's TLS certicicate details in terminal?

Having TLS certificate in local file, I can display its details using syntax like: openssl x509 -text -noout -in cert_filename Is there any way to display remote SMTP/POP3/HTTP server's TLS ...
2
votes
2answers
6k views

FTP over SSL in AIX (UNIX)

Folks over at SO couldn't answer this, so I am posting over here. I need to do an FTP over SSL to a FileZilla Server running on a Windows server from an AIX Unix clien. I have the Host name of the ...
5
votes
1answer
995 views

TLS over unix pipe

Can I use TLS/SSL over Unix pipe with Unix command line? I want the equivalent of $ mkfifo /tmp/spipe $ echo a|openssl s_server -acceptFifo /tmp/spipe & [1] 25563 $ openssl s_client ...
11
votes
2answers
29k views

apache2 Invalid command 'SSLEngine'

When I restart httpd, I get the following error. What am I missing? [root@localhost ~]# service httpd restart Stopping httpd: [ OK ] Starting httpd: ...
1
vote
2answers
539 views

How to “get” a HTTPS website running?

I have a website serving several pages that can be reachable via HTTP. How can I make these sites available via standard HTTPS? (not self-signed). What are the steps? (go to a CA, and then?) Can ...
1
vote
1answer
3k views

Unprettyfied SSL error message?

I am trying to authenticate using my USB smartcard reader to a website. I am running Ubuntu 10.04 LTS, with its most up to date Firefox browser 3.6.24. I get the following error message: Secure ...
1
vote
2answers
158 views

Convergence with Firefox 3.6?

On many Linux distributions by default there is only Firefox 3.6. However, when I try to install Convergence I get: How can I install Convergence on a distro that runs Firefox 3.6 (e.g. ...
3
votes
2answers
6k views

cURL/wget - SSLv3, TLS handshake, CERT hangs

I have problems connecting to https sites using cURL or wget. When I download from a https curl seems to be stuck while doing the TLS handshake, CERT. The problem is independent of the site (I noticed ...
3
votes
3answers
5k views

How can I permanently remove a web browser's SSL warning for HTTPS sites that fail to identify themselves correctly?

I'm using Firefox and Google Chrome under Ubuntu 10.04, and get these warnings: I want to add the site's certificate to "somewhere", so that the browser doesn't show SSL cert errors when visiting ...
6
votes
3answers
11k views

Trust a self signed PEM certificate

I have set up a proxy server with SSL using a PEM certificate. Now, there is a couple of machines of mine that I would like to trust this certificate automatically (without the web browser ...
7
votes
1answer
1k views

How do I extract all subjects of a cacertfile with the openssl command line?

Is there an openssl command to extract all certifacte subjects of a cacertfile (a file containing several certificates like /etc/ssl/certs/ca-certificates.crt)? I tried openssl x509 -in ...
8
votes
2answers
21k views

How can I verify SSL certificates on the command line?

I'm trying to validate/verify that the rsa key, ca-bundle, and certificate stored here are ok. They are not being served by a webserver. How can I verify them?
0
votes
1answer
617 views

Force wget to download only from HTTPS?

wget https://skype.com -O - > /dev/null isn't good. I just want to create a short bash script to check that an HTTPS cert is valid or no. i think wget doesn't connects if the cert is invalid. i ...
1
vote
2answers
981 views

How can I update existing .crt file with new encrypted rsa .key file?

Suppose I have 2 files: an RSA key file client.key and a certification file client.crt. I have created them without pass-phrase and now I have encrypted client.key file with pass-phrase by command: ...