SSL (the predecessor of TLS) is a cryptographic protocol designed to provide communications security over a computer network. It is the S in HTTPS, IMAPS, SMTPS, etc.

learn more… | top users | synonyms (1)

2
votes
1answer
1k views

Unable to locally verify the issuer's authority

I am not able to open any https URLs using wget or curl: $ wget https://www.python.org --2015-04-27 17:17:33-- https://www.python.org/ Resolving www.python.org (www.python.org)... 103.245.222.223 ...
1
vote
1answer
843 views

Exim4 as smarthost with SSL?

I want to use exim4 as a smarthost to send email using an smtp mail account over ssl. I've seen the hosts_require_tls option, but I need SSL and not TLS. How should I do this?
0
votes
0answers
37 views

Why do SSL negotiation fail on Linux? (Asus P5S-MX) (but worked on Windows7)

Can anyone tell give me hints to why the web requests fails in these wireshark/tcpdump traces ? (and perhabs hint to why a linux distro would start with SSLv3 as starting point) I a noob when it comes ...
0
votes
0answers
7 views

Random SSL failures in Kontact [on hold]

A friend of mine runs a server with a CAcert certificate. I have imported his particular certificate into the KDE programs and KOrganizer can usually synchronize my contacts with the ownCloud ...
1
vote
2answers
25 views

Wildcard SSL certificate does not work with naked domain

I have deployed a wildcard certificate (Comodo PlatinumSSL) for *.domain.com on Apache/Ubuntu 14.04. Everything works if the client visits https://www.domain.com but https://domain.com throws up this ...
1
vote
1answer
34 views

Allow specific linux user to bind to port 443

I am in charge of setting up a JBoss web application that runs over SSL, thus should be accessible over port 443. Of course, it can be started up by user with root privileges, but that is something ...
2
votes
1answer
34 views

Generate Private Key for Existing SSL Certificate

I have been provided with a Comodo SSL certificate to deploy with Apache/ModSSL on Ubuntu 14.04. All I got was an email with links like this. I was not provided with a private key. It appears the ...
1
vote
1answer
2k views

How to remove SSL certificate?

I've been asked to remove certificates from some of our servers, but I don't know anything about httpd configuration. If I have one server where if I do this /usr/sbin/httpd -t -DDUMP_CERTS ...
42
votes
7answers
53k views

How to disable SSLv3 in Apache?

Everybody seems to be talking about the POODLE vulnerability today. And everybody recommends disabling SSLv3 in Apache using the following configuration directive: SSLProtocol All -SSLv2 -SSLv3 ...
0
votes
1answer
40 views

NGINX: 400 The plain HTTP request was sent to HTTPS port

i setup nginx for proxypass to docker registry, the protocol http works but if i set https i have: 400 The plain HTTP request was sent to HTTPS port This is my nginx configuration file: upstream ...
0
votes
0answers
19 views

RewriteRule ^/(.*) http://127.0.0.1:5050/$1 [L,P]

What is the full meaning of following line - RewriteRule ^/(.*) http://127.0.0.1:5050/$1 [L,P] There are three application both running by python on ubuntu 14.4. they are visible as below link ...
1
vote
3answers
99 views

Dovecot with CAcert certificates, Outlook can't connect to IMAP

I have quite standard installation of postfix and dovecot on Ubuntu 12.10. I generated my own certificates and got them signed by cacert.org. The process of creating certs was like below: openssl ...
1
vote
2answers
710 views

Nmap script execution to detect heartbleed is failing

Wanting to setup Nmap on my Ubuntu 14.04 LTS system to detect HeartBleed vulnerability. I followed the instructions here: ...
1
vote
1answer
542 views

Sendmail with TLS support changes FROM: address

I have multiple domains on one server and when sending email to server, which supports TLS, server changes FROM field to default domain ($j). What should i do (in .mc level please) to remain primary ...
16
votes
2answers
34k views

apache2 Invalid command 'SSLEngine'

When I restart httpd, I get the following error. What am I missing? [root@localhost ~]# service httpd restart Stopping httpd: [ OK ] Starting httpd: ...
0
votes
0answers
11 views

check_nrpe ssl couldnt complete handshake, in both master and client server it works fine individually

I am getting this check_nrep ssl couldnt complete handshake erro in master server when i try executing the below command. /usr/local/nagios/libexec/check_nrpe -H 10.192.122.234 10.192.122.234 --> ...
-2
votes
1answer
38 views

Is this a violation? using https service in intranet?

I have CentOS 7 servers in the cloud which is offering HTTPS services. Now this Enterprise cant use our services from cloud, so they wanted a local intranet solution, same like i am running in the ...
3
votes
2answers
42 views

How to generate a CSR for attaching SSL certificate to the site? [duplicate]

How can I generate a CSR for attaching SSL certificate to the site? In various articles about installing SSL certificates are described different ways of generating private key and CSR. That's like ...
4
votes
4answers
2k views

`openssl`: Subject Alternative Name

I wrote this bit of code to get the Common Name of the subject field in the SSL certificate for a given domain: $ echo -e "GET / HTTP/1.1\nEOT" | openssl s_client -connect google.com:443 2>&1 ...
2
votes
0answers
17 views

Adding nssdb certificate from an install script

I am trying to write an script (postinst for a .deb package) that will install a secure websockets (wss:) application and a certificate that allows access from the Chrome browser. The developer has ...
1
vote
2answers
111 views

How to convert ssl ciphers to curl format?

The official ssl docs list ciphers in a different format than curl takes. For instance, if I want curl to use the cipher TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, I have to pass it curl --ciphers ...
1
vote
1answer
125 views

How to see list of curl ciphers?

My understanding is that during ssl negotiation, the client (i.e. curl) sends a list of ciphers to the server, and the server replies with its preferred choice. How do I see the list of ciphers that ...
1
vote
4answers
14k views

Helo command rejected: need fully-qualified hostname Error

My mail server is in some blacklist cause of spams. I reconfugured postfix. Aften then My customers get this error they can't send emails. 404 4.5.2 <PLLAMNAZIFE>: Helo command rejected: need ...
0
votes
0answers
172 views

Cannot send mail to gmail account using ssmtp

I have the following ssmtp.conf file: root=test@gmail.com mailhub=smtp.gmail.com:587 hostname=ed424cef9b52 UseTLS=Yes UseStartTTLS=Yes AuthMethod=LOGIN AuthUser=test AuthPass=test ...
1
vote
2answers
2k views

Create SSL certificate non-interactively [closed]

I want to silently, non interactively, create an SSL certificate. I.e., without get prompted for any data. The normal way I create the certificate would be: openssl req -x509 -nodes -days 7300 ...
0
votes
1answer
90 views

wget: force no default certificates

I'm having trouble with verification of custom server SSL certificates and wget. wget -O- --ca-certificate=myservercert.pem https://www.google.com This should fail but does not, as wget does ...
0
votes
1answer
26 views

A question about sendmail macros and tls

http://docs.oracle.com/cd/E19120-01/open.solaris/819-1634/fvbqm/index.html Here i read some sendmail macros must be edited on mc file to work I want tls use version 1 and strong cipher How to put ...
2
votes
2answers
7k views

How to fix curl sslv3 alert handshake failure?

I'm trying to curl HTTPS website in the following way: $ curl -v https://thepiratebay.se/ However it fails with the error: * About to connect() to thepiratebay.se port 443 (#0) * Trying ...
10
votes
2answers
23k views

Adding a self-signed certificate to the “trusted list”

I've generated a self-signed certificate for my build server and I'd like to globally trust the certificate on my machine, as I created the key myself and I'm sick of seeing warnings. I'm on Ubuntu ...
1
vote
2answers
70 views

Can I make davfs ignore untrusted certificates?

My server provides WebDAV over HTTPS only, so that other machines can access the DAV. Say the certificate is issued for www.myserver.com and the WebDAV is at https://www.myserver.com/webdav. For ...
2
votes
2answers
1k views

How to display server's TLS certicicate details in terminal?

Having TLS certificate in local file, I can display its details using syntax like: openssl x509 -text -noout -in cert_filename Is there any way to display remote SMTP/POP3/HTTP server's TLS ...
0
votes
0answers
338 views

libssl undefined reference to symbol 'SSL_load_error_strings@@OPENSSL_1.0.0'

With the following CMakeLists.txt (I tried to snip it AMAP) https://gist.github.com/pbertoni/29200833dc562ab6ee2c I got this error from make at linking time: /usr/bin/ld: ...
5
votes
1answer
104 views

How to find more details on Invalid Certificates

Setup I am following this blog post to set up ASP.net MVC5 on Linux. When I get to the part that adds the Microsoft certificates, I am warned that they are invalid. For example, this command: ...
1
vote
1answer
497 views

Multiple RSA server certificates not allowed

I purchased a multidomain certificate, and I was trying to install it on my server. I put the following information inside the virtual host for one of my sites: <VirtualHost *:443> ... ...
0
votes
1answer
171 views

Script timed out before returning headers: iredadmin.py

I am trying to access my iRedMail backend at https://domain.com/iredadmin However, it keeps timing out with a 500 error. I check my error log, and I see the following: [Sat Apr 11 16:53:41 2015] ...
0
votes
1answer
20 views

Apache ReverseProxy ssl

I have the following ReverseProxy set up which works for http requests: NameVirtualHost *:80 <VirtualHost *:80> ServerName sub.domain.com ProxyRequests Off ProxyVia Off <Proxy *> Order ...
1
vote
1answer
240 views

Mplayer fails to play network stream

I'm trying to play youtube streams with mplayer. On running mplayer -cache 2048 https://www.youtube.com/watch?v=USUA_1WVM8I, I get the following output and the video does not play at all. MPlayer ...
0
votes
1answer
397 views

Does Apache 2.2.3 support TLSv1.1 and TLSv1.2?

How can I find out if Apache 2.2.3 supports TLSv1.1 and TLSv1.2? If possible how can I implement it?
0
votes
1answer
42 views

Looking for an email server that supports mysql ssl connection

I am trying to secure connections to my MySQL server. I have SSL set up but I am looking for programs that support a SSL connection to MySQL. Specifically I am currently looking for an email server ...
0
votes
1answer
115 views

Configure KVM/QEMU with TLS?

New to virtualization and kvm and I have a problem when i try to create a virtual machine with spice: virt-install --name Windows-7-x64 --ram 2048 --disk path=~/kvm/images/win7.img,size=50 --vcpus=1 ...
1
vote
1answer
75 views

When would CUPS use TLS?

I'm running Debian Testing on amd64, with the apt-listbugs feature that tells me if bugs are present before upgrading. Now the package libgnutls-deb0-28 has a serious bug to the effect that "CUPS ...
0
votes
0answers
111 views

OpenVPN TLS Error

I'm having trouble getting OpenVPN to work. I have installed and configured OpenVPN on my centos machine and it seemed to be going fine. I followed the instructions in the following link ...
0
votes
1answer
409 views

How to check mod_ssl.so version?

I'm running Apache 2.2.3 and would like to find out, how to check version of mod_ssl.so and if this module can support TLSv1.1 and TLSv1.2. Regards
0
votes
2answers
156 views

Implementing TLS 1.2 when I SSH into a box as a measure against POODLE

Is it possible to edit sshd_config or ssh_config, such that the SSH connection into a machine configured to use TLS1.2 is successful and rejects connections configured to use TLS1.1 and below, as well ...
0
votes
0answers
20 views

Enable TLS-SRP for, say, courier-imap

I want to use TLS-SRP for the services that I run on my server, because I don't want to leak credentials, not even on the server's disk. There are several articles on setting up TLS-SRP either with ...
0
votes
0answers
301 views

open ssl client giving error routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188:

On connecting to my application (a ssl server) by using command openssl s_client -host 127.0.0.1 -port 5028 -cipher EXPORT -debug -state I am getting error like CONNECTED(00000003) ...
0
votes
0answers
273 views

Cant use https on localhost

I am unable to use https on my localhost testmachine. I cant figure out the problem on my own so here is what i did: I placed the following to files in sites-available : 000-default.conf ...
1
vote
0answers
173 views

cURL does not recognize certificate

At our company they enforce a web proxy which breaks SSL connections and replaces the certificate by its own fake certificate. (To be precise it uses a proxy cert which is signed by the company cert.) ...
2
votes
1answer
397 views

CURL won't connect to self

I'm having a weird issue where CURL cannot connect to its own server. For example if I'm on server example.com wget https://example.com/ <--- WORKS FIND curl https://example.com gets error: 35 ...
2
votes
1answer
2k views

postfix smtp connection timed out, why?

A CentOS 7 web server has postfix, dovecot, and mailx installed. I have been able to make an IMAP connection to the server in order to read inbox mail using a remote Thunderbird client, but I am not ...