SSL questions refer to either the Secure Sockets Layer communications protocol or interacting with signed certificates issued by trusted signing authorities.

learn more… | top users | synonyms

0
votes
0answers
21 views

PHP script works with Ubuntu 12.04.5 but NOT with Ubuntu 14.04

I have the following snippet in my code: $objCurl = curl_init(); curl_setopt($objCurl, CURLOPT_SSL_VERIFYHOST, FALSE); curl_setopt($objCurl, CURLOPT_RETURNTRANSFER, 1); curl_setopt($objCurl, ...
0
votes
0answers
27 views

PHP cURL “Unknown SSL protocol error in connection to”

When I try to run my script using cURL on my computer via XAMPP, everything works perfectly: When I move it onto my server (Ubuntu 14.04 x64), it stops working and I continue to get this type of ...
0
votes
1answer
15 views

Ubuntu 14.04LTS How to generate an a Windows Azure Compatible .cer key

How can I generate a .cer public key certificate file using ubuntu so that I can upload it onto Azure VPN management portal since it doesn't allow any other formats?
0
votes
0answers
14 views

Load Balance Nginx, SSL, MySQL

So I need to load balance Nginx servers, can someone give me a good tutorial or explanation. With SSL is there such thing as load balancing SSL? I've heard of it. And clustering MySQL, how can I do ...
0
votes
0answers
40 views

Ubuntu and squid transparent proxy

I'm using 14.01lts And trying to up http to https or https to https connection. Because destination service is looked on my ip. For get access to it I need proxy. Destination server support only ...
0
votes
0answers
20 views

What is the difference between an ssh key and a CA Certificate?

My VPS is set up to allow me to use sftp from the command line to transfer files back and forth between my laptop and VPS, so what things will I additionally need to have in place before I put a ...
0
votes
1answer
15 views

Multiple SSL on Single IP

I would like to host multiple sites at Ubuntu 12.04 where each one use separate SSL certificate. I have configured virtualhost for each website with different document root in default_ssl.conf but it ...
0
votes
0answers
26 views

Using iptables to detecting SSLv2 and SSLv3 initial connection packets, drop them, and log them

This is going to sound like an odd issue, but I'm trying to detect SSLv2 and SSLv3 connection attempts, log the packets so I can find the source for those IPs, and then drop the packets silently. Is ...
0
votes
1answer
383 views

davfs - SSL handshake failed: SSL error: sslv3 alert handshake failure

I'm trying to mount a remote WebDAV (OwnCloud) using https on my Ubuntu 12.04 machine. I run this command and it prompts me for a username and password sudo mount -t davfs -o uid=ne,gid=users ...
1
vote
0answers
18 views

How can I protect Midori from poodle [duplicate]

How can I protect midori from poodle? I have found fixes for Firefox and Chrome but not for midori.
0
votes
0answers
44 views

Unable to Install SSL Certificate

I've spent a day trying to install this SSL Certificate I got from Namecheap. Okay, so I already have my .crt and .key files. Now I want to install it, and I figured the configuration file is located ...
0
votes
0answers
43 views

Determine number of SSL 3.0 Connections to Ubuntu Apache Webserver

In light of POODLE I would like to disable SSL 3.0 I'm aware that a number of clients use web services over SSL 3.0 because disabling SSL 3.0 has historically broken their integrations. I would like ...
1
vote
1answer
81 views

How to append arguments to launch an application with specific parameters from Unity Dash or shortcuts?

I need to append parameters to Chromium launch in order to disable SSL v3 due to recent vulnerability refered as Poodle: --ssl-version-min=tls1 How can I add this parameter in order to: Launch ...
4
votes
0answers
5k views

POODLE: Disabling SSLv3 in Apache [closed]

Everybody seems to be talking about the POODLE vulnerability today. And everybody recommends disabling SSLv3 in Apache using the following configuration directive: SSLProtocol All -SSLv2 -SSLv3 ...
0
votes
0answers
154 views

How do I address CVE-2014-3566 (POODLE) for lighttpd (1.4.28) on Ubuntu 12.04? [duplicate]

As most of you know, CVE-2014-3566 (AKA POODLE) involves weaknesses in SSLv3 on clients and servers. See https://securityblog.redhat.com/2014/10/15/poodle-a-ssl3-vulnerability-cve-2014-3566/ for more ...
2
votes
1answer
1k views

Disable SSLv3 in Apache2 on a clean install of ubuntu 14.04.1 Server

I have a new install of ubuntu server version 14.04.1 I have apache2 with SSL enabled. I want to disable SSLv3 (I am aware this is a popular question but I have trawlled all other answers on multiple ...
7
votes
3answers
9k views

How do I disable SSLv3 in tomcat?

Please provide the fix for How do I patch/workaround SSLv3 POODLE vulnerability (CVE­-2014­-3566)? for Tomcat. I have tried following below link, however it does not help: tomcat-users mailing list ...
131
votes
3answers
141k views

How do I patch/workaround SSLv3 POODLE vulnerability (CVE­-2014­-3566)?

After the BEAST attack and Heartbleed bug, now I've heard about a new vulnerability in SSL/TLS called POODLE. How do I protect myself against being exploited? Are only servers or also clients ...
0
votes
0answers
65 views

Apache2 SSL configuration Ubuntu 12.04 LTS

I don't know where my mistake is but I can not get the SSL running. I will explain how I did: sudo cd /root sudo openssl genrsa -out server.key 4096 sudo openssl req -new -key server.key -out ...
0
votes
0answers
12 views

Two SSL Sessions on two different sockets

I am using an Application in which i need to create two sockets for data transfer between server and client. For both these sockets i need secure transfer and for that i am using SSL libraries. I am ...
0
votes
2answers
174 views

After performing apt-get dist-upgrade Perl scripts will no longer ignore invalid SSL certificates on 14.04

Good morning all, Last week I decided to run the commands to upgrade packages on my 14.04 Server to ensure that I was patched for the recently found Bash vulnerabilties. Per the info here ...
-3
votes
1answer
179 views

Access to https sites [closed]

All users on the network that connects to the internet through a linux gateway cannot access https sites. They all get ssl error messages. "Secure Connection Failed An error occurred during a ...
0
votes
1answer
1k views

RSA certificate configured for localhost.localdomain:443 does NOT include an ID which matches the server name

I got this error when setting up ssl on Ubuntu 14.04.1 LTS (apache2, openssl) AH01909: RSA certificate configured for localhost.localdomain:443 does NOT include an ID which matches the server name ...
1
vote
0answers
65 views

twitter.com (ssl) not loading

If I'm trying to go on https://twitter.com it just timeout on Firefox. If I use curl : vayan@vayan-desktop:~$ curl -v https://twitter.com * Rebuilt URL to: https://twitter.com/ * Hostname was NOT ...
0
votes
1answer
954 views

How to enable https support for curl in 14.04?

I have a "curl" program installed on Ubuntu 14.04 Server. Unfortunately, it does not support https. I have googled this problem and found a suggestion to replace "curl" package with "curl-ssl", but ...
1
vote
0answers
112 views

certificate signed pdf

Our Company uses pdf's secured by an .pfx. You must import the .pfx - certificate to read this document. I've tested evince but it can't handle that. It works fine with the latest Adobe Reader for ...
0
votes
2answers
352 views

ldap_bind: Confidentiality required (13)

I want to configure ldap with ssl so I used openssl for certificate and when I enable olcSecurity tls=1 in /etc/ldap/slapd.d/cn=config.ldif and now when I try to use ldapsearch or try to login it ...
1
vote
0answers
218 views

CheckPoint SSL and Ubuntu 14.04

I have the following issue. In our company we use Checkpoint endpoint client. However I started using Ubuntu 14.04 and since there is no client for it I need to log into the SSL Portal. Once I log in ...
1
vote
1answer
89 views

How to add SSL support to Python?

On Ubuntu 14.04, I installed Python 3. Now that I am programming with it, I had a problem with Python and I am told that the error occurred because I did not install Python with SSL support. Is it ...
0
votes
0answers
46 views

no sslvpn directory when starting NetExtender

I'm trying to use NetExtender with Ubuntu 12.04 x64. I've followed the various tutorials out there for making the symbolic links of libssl and libcrypto to the correct libraries. Running the command ...
1
vote
2answers
532 views

How to make Apache 2 stop asking for a password for an SSL certificate?

I just added an SSL certificate to Apache. The problem is that Apache runs on system startup and after my server turns on, Apache runs but doesn't run. I put in the IP address of my computer and my ...
0
votes
1answer
2k views

How can I open port 443?

I'm trying to host a small node application on a digital ocean droplet running ubuntu 14.04. In local development the site works fine over https, however on the server the site doesn't get displayed ...
0
votes
0answers
76 views

Can't connect most of the time for one https site

There have been numbers of posts which are similar to this, but none of them can solve my problem. I have a problem with connecting one site which in only https connection allowed . When I tried to ...
1
vote
1answer
718 views

Fake UserTrust.com Certificates in Chrome?

I was trying to install a SSL certificate, when I digged into Chrome Settings and looked at the installed ones (servers tab). Those are marked as Not Safe, and they are related to mail.google.com, ...
0
votes
0answers
99 views

installing a SSL certificate

I have ISPConfig3 installed on my server. I've never installed an SSL certificate before, especially with ISPConfig3. I am trying to install the default domain certificate and I was given 4 files. I ...
1
vote
1answer
332 views

Ubuntu 12.04 LTS, openssl 1.0.1-4ubuntu5.16 and CVE-2014-0224

I've installed openssl 1.0.1-4ubuntu5.16 on my Ubuntu 12.04 LTS and restarted nginx. I still receive the warning from https://www.ssllabs.com/ssltest Experimental: This server is vulnerable to the ...
1
vote
2answers
3k views

“Connection is Untrusted ” error in Firefox

I have downloaded Ubuntu 14.04 and I have tried it (without installing it). I connected to the internet via DSL and I tried to surf. When I tried to go to an https:// site, it showed me the error ...
0
votes
1answer
31 views

what's the best package to add to an Ubuntu VPS account to get a terminal window?

For my Pair Networks VPS (running Ubuntu 10.04 on AMD64), and working install details with its illustrious support team, I am interested in suggestions for a robust terminal quasi-GUI'd window package ...
0
votes
0answers
148 views

SSL certificate common name is invalid

I generated ssl certificate and installed it according to How do I install a root certificate? then I configured Nginx to use this certificate. But wget https://mysite.com shows me the following: ...
0
votes
0answers
90 views

Permanently add or remove alert to trust “SSL Certificate”?

As of recently, when I try to user Air app for the service Elance.com, I get this warning in Ubuntu 14.04. The only option I have is to trust for the current session. There is not permanently trust ...
1
vote
1answer
84 views

apt server certificate verification with a valid certificate

I'm attempting to make a private apt repo. Its going to be served over https and its located at https://repo.signalvine.com. It is also going to be using basic auth, which I setup as deb ...
0
votes
1answer
278 views

Self-signed server certificate for Postfix TLS

I'm trying to create the self-signed server certificate for the Postfix user: thufir@dur:~$ thufir@dur:~$ sudo ./tls.script Error opening Private Key 3073578684:error:02001002:system ...
0
votes
0answers
166 views

apt-cacher for ubuntu 12.04 need to cache from https repos

I need to use apt-cacher or some other similar item to avoid the download of the same package from my https central repository. This is the configuration: there is a central server with a repository ...
0
votes
0answers
178 views

postfix Self-signed server certificate syntax ( versus snakeoil)

The Postfix quick start guide on TLS gives: Self-signed server certificate The following commands (credits: Viktor Dukhovni) generate and install a private key and 10-year self-signed certificate ...
0
votes
0answers
59 views

postfix smtpd.key creation

The ubuntu documentation on postfix gives: Generate certificates to be used for TLS encryption and/or certificate Authentication: touch smtpd.key chmod 600 smtpd.key openssl genrsa 1024 > ...
0
votes
0answers
67 views

Apache2 SSL cert, shows contents of redmine directory

I have an Ubuntu 12.04 server where I have successfully installed redmine. I tried setting up an SSL cert on the server using this tutorial: ...
2
votes
2answers
68 views

SSL Connection to Apache web server

I follow up on setting up SSL connection to my Apache2 It works well when I access my website from a local IP address but if I use a Dynamic DNS service with HTTPS in the beginning than I doesn't get ...
2
votes
0answers
133 views

What is the difference between libcurl3 and libcurl4

I was setting up an Ubuntu 14.04 development environment and went to install libcurl but noticed that there are two different version in my aptitude caches. What are the main differences between the ...
2
votes
0answers
34 views

Command line failing with https

I'm a bit new when it comes to networking. As a disclaimer, I installed Chrubuntu. The OS was able to connect fine, but it had an unrelated error and required an install and upgrade from 13.10 to ...
0
votes
0answers
17 views

Questions about setting up SSL

I have a subdomain on a server that is pointing to an IP hosting an application. I need to enable SSL on the application. The way I understand it is that because SSL is domain specific the ...