SSL questions refer to either the Secure Sockets Layer communications protocol or interacting with signed certificates issued by trusted signing authorities.

learn more… | top users | synonyms

0
votes
0answers
12 views

What is the difference between an ssh key and a CA Certificate?

My VPS is set up to allow me to use sftp from the command line to transfer files back and forth between my laptop and VPS, so what things will I additionally need to have in place before I put a ...
0
votes
1answer
14 views

Multiple SSL on Single IP

I would like to host multiple sites at Ubuntu 12.04 where each one use separate SSL certificate. I have configured virtualhost for each website with different document root in default_ssl.conf but it ...
0
votes
0answers
12 views

Using iptables to detecting SSLv2 and SSLv3 initial connection packets, drop them, and log them

This is going to sound like an odd issue, but I'm trying to detect SSLv2 and SSLv3 connection attempts, log the packets so I can find the source for those IPs, and then drop the packets silently. Is ...
0
votes
1answer
255 views

davfs - SSL handshake failed: SSL error: sslv3 alert handshake failure

I'm trying to mount a remote WebDAV (OwnCloud) using https on my Ubuntu 12.04 machine. I run this command and it prompts me for a username and password sudo mount -t davfs -o uid=ne,gid=users ...
1
vote
0answers
18 views

How can I protect Midori from poodle [duplicate]

How can I protect midori from poodle? I have found fixes for Firefox and Chrome but not for midori.
0
votes
0answers
25 views

Unable to Install SSL Certificate

I've spent a day trying to install this SSL Certificate I got from Namecheap. Okay, so I already have my .crt and .key files. Now I want to install it, and I figured the configuration file is located ...
0
votes
0answers
36 views

Determine number of SSL 3.0 Connections to Ubuntu Apache Webserver

In light of POODLE I would like to disable SSL 3.0 I'm aware that a number of clients use web services over SSL 3.0 because disabling SSL 3.0 has historically broken their integrations. I would like ...
1
vote
1answer
69 views

How to append arguments to launch an application with specific parameters from Unity Dash or shortcuts?

I need to append parameters to Chromium launch in order to disable SSL v3 due to recent vulnerability refered as Poodle: --ssl-version-min=tls1 How can I add this parameter in order to: Launch ...
4
votes
0answers
5k views

POODLE: Disabling SSLv3 in Apache [closed]

Everybody seems to be talking about the POODLE vulnerability today. And everybody recommends disabling SSLv3 in Apache using the following configuration directive: SSLProtocol All -SSLv2 -SSLv3 ...
0
votes
0answers
154 views

How do I address CVE-2014-3566 (POODLE) for lighttpd (1.4.28) on Ubuntu 12.04? [duplicate]

As most of you know, CVE-2014-3566 (AKA POODLE) involves weaknesses in SSLv3 on clients and servers. See https://securityblog.redhat.com/2014/10/15/poodle-a-ssl3-vulnerability-cve-2014-3566/ for more ...
2
votes
1answer
746 views

Disable SSLv3 in Apache2 on a clean install of ubuntu 14.04.1 Server

I have a new install of ubuntu server version 14.04.1 I have apache2 with SSL enabled. I want to disable SSLv3 (I am aware this is a popular question but I have trawlled all other answers on multiple ...
7
votes
3answers
7k views

How do I disable SSLv3 in tomcat?

Please provide the fix for How do I patch/workaround SSLv3 POODLE vulnerability (CVE­-2014­-3566)? for Tomcat. I have tried following below link, however it does not help: tomcat-users mailing list ...
130
votes
3answers
129k views

How do I patch/workaround SSLv3 POODLE vulnerability (CVE­-2014­-3566)?

After the BEAST attack and Heartbleed bug, now I've heard about a new vulnerability in SSL/TLS called POODLE. How do I protect myself against being exploited? Are only servers or also clients ...
0
votes
0answers
39 views

Apache2 SSL configuration Ubuntu 12.04 LTS

I don't know where my mistake is but I can not get the SSL running. I will explain how I did: sudo cd /root sudo openssl genrsa -out server.key 4096 sudo openssl req -new -key server.key -out ...
0
votes
0answers
12 views

Two SSL Sessions on two different sockets

I am using an Application in which i need to create two sockets for data transfer between server and client. For both these sockets i need secure transfer and for that i am using SSL libraries. I am ...
0
votes
2answers
105 views

After performing apt-get dist-upgrade Perl scripts will no longer ignore invalid SSL certificates on 14.04

Good morning all, Last week I decided to run the commands to upgrade packages on my 14.04 Server to ensure that I was patched for the recently found Bash vulnerabilties. Per the info here ...
-3
votes
1answer
128 views

Access to https sites [closed]

All users on the network that connects to the internet through a linux gateway cannot access https sites. They all get ssl error messages. "Secure Connection Failed An error occurred during a ...
0
votes
1answer
779 views

RSA certificate configured for localhost.localdomain:443 does NOT include an ID which matches the server name

I got this error when setting up ssl on Ubuntu 14.04.1 LTS (apache2, openssl) AH01909: RSA certificate configured for localhost.localdomain:443 does NOT include an ID which matches the server name ...
1
vote
0answers
56 views

twitter.com (ssl) not loading

If I'm trying to go on https://twitter.com it just timeout on Firefox. If I use curl : vayan@vayan-desktop:~$ curl -v https://twitter.com * Rebuilt URL to: https://twitter.com/ * Hostname was NOT ...
0
votes
1answer
683 views

How to enable https support for curl in 14.04?

I have a "curl" program installed on Ubuntu 14.04 Server. Unfortunately, it does not support https. I have googled this problem and found a suggestion to replace "curl" package with "curl-ssl", but ...
1
vote
0answers
83 views

certificate signed pdf

Our Company uses pdf's secured by an .pfx. You must import the .pfx - certificate to read this document. I've tested evince but it can't handle that. It works fine with the latest Adobe Reader for ...
0
votes
2answers
258 views

ldap_bind: Confidentiality required (13)

I want to configure ldap with ssl so I used openssl for certificate and when I enable olcSecurity tls=1 in /etc/ldap/slapd.d/cn=config.ldif and now when I try to use ldapsearch or try to login it ...
1
vote
0answers
187 views

CheckPoint SSL and Ubuntu 14.04

I have the following issue. In our company we use Checkpoint endpoint client. However I started using Ubuntu 14.04 and since there is no client for it I need to log into the SSL Portal. Once I log in ...
1
vote
1answer
70 views

How to add SSL support to Python?

On Ubuntu 14.04, I installed Python 3. Now that I am programming with it, I had a problem with Python and I am told that the error occurred because I did not install Python with SSL support. Is it ...
0
votes
0answers
40 views

no sslvpn directory when starting NetExtender

I'm trying to use NetExtender with Ubuntu 12.04 x64. I've followed the various tutorials out there for making the symbolic links of libssl and libcrypto to the correct libraries. Running the command ...
1
vote
1answer
359 views

How to make Apache 2 stop asking for a password for an SSL certificate?

I just added an SSL certificate to Apache. The problem is that Apache runs on system startup and after my server turns on, Apache runs but doesn't run. I put in the IP address of my computer and my ...
0
votes
1answer
971 views

How can I open port 443?

I'm trying to host a small node application on a digital ocean droplet running ubuntu 14.04. In local development the site works fine over https, however on the server the site doesn't get displayed ...
0
votes
0answers
64 views

Can't connect most of the time for one https site

There have been numbers of posts which are similar to this, but none of them can solve my problem. I have a problem with connecting one site which in only https connection allowed . When I tried to ...
1
vote
1answer
518 views

Fake UserTrust.com Certificates in Chrome?

I was trying to install a SSL certificate, when I digged into Chrome Settings and looked at the installed ones (servers tab). Those are marked as Not Safe, and they are related to mail.google.com, ...
0
votes
0answers
95 views

installing a SSL certificate

I have ISPConfig3 installed on my server. I've never installed an SSL certificate before, especially with ISPConfig3. I am trying to install the default domain certificate and I was given 4 files. I ...
1
vote
1answer
314 views

Ubuntu 12.04 LTS, openssl 1.0.1-4ubuntu5.16 and CVE-2014-0224

I've installed openssl 1.0.1-4ubuntu5.16 on my Ubuntu 12.04 LTS and restarted nginx. I still receive the warning from https://www.ssllabs.com/ssltest Experimental: This server is vulnerable to the ...
1
vote
2answers
2k views

“Connection is Untrusted ” error in Firefox

I have downloaded Ubuntu 14.04 and I have tried it (without installing it). I connected to the internet via DSL and I tried to surf. When I tried to go to an https:// site, it showed me the error ...
0
votes
1answer
25 views

what's the best package to add to an Ubuntu VPS account to get a terminal window?

For my Pair Networks VPS (running Ubuntu 10.04 on AMD64), and working install details with its illustrious support team, I am interested in suggestions for a robust terminal quasi-GUI'd window package ...
0
votes
0answers
118 views

SSL certificate common name is invalid

I generated ssl certificate and installed it according to How do I install a root certificate? then I configured Nginx to use this certificate. But wget https://mysite.com shows me the following: ...
0
votes
0answers
83 views

Permanently add or remove alert to trust “SSL Certificate”?

As of recently, when I try to user Air app for the service Elance.com, I get this warning in Ubuntu 14.04. The only option I have is to trust for the current session. There is not permanently trust ...
1
vote
1answer
76 views

apt server certificate verification with a valid certificate

I'm attempting to make a private apt repo. Its going to be served over https and its located at https://repo.signalvine.com. It is also going to be using basic auth, which I setup as deb ...
0
votes
1answer
210 views

Self-signed server certificate for Postfix TLS

I'm trying to create the self-signed server certificate for the Postfix user: thufir@dur:~$ thufir@dur:~$ sudo ./tls.script Error opening Private Key 3073578684:error:02001002:system ...
0
votes
0answers
141 views

apt-cacher for ubuntu 12.04 need to cache from https repos

I need to use apt-cacher or some other similar item to avoid the download of the same package from my https central repository. This is the configuration: there is a central server with a repository ...
0
votes
0answers
161 views

postfix Self-signed server certificate syntax ( versus snakeoil)

The Postfix quick start guide on TLS gives: Self-signed server certificate The following commands (credits: Viktor Dukhovni) generate and install a private key and 10-year self-signed certificate ...
0
votes
0answers
49 views

postfix smtpd.key creation

The ubuntu documentation on postfix gives: Generate certificates to be used for TLS encryption and/or certificate Authentication: touch smtpd.key chmod 600 smtpd.key openssl genrsa 1024 > ...
0
votes
0answers
56 views

Apache2 SSL cert, shows contents of redmine directory

I have an Ubuntu 12.04 server where I have successfully installed redmine. I tried setting up an SSL cert on the server using this tutorial: ...
2
votes
2answers
58 views

SSL Connection to Apache web server

I follow up on setting up SSL connection to my Apache2 It works well when I access my website from a local IP address but if I use a Dynamic DNS service with HTTPS in the beginning than I doesn't get ...
1
vote
0answers
122 views

What is the difference between libcurl3 and libcurl4

I was setting up an Ubuntu 14.04 development environment and went to install libcurl but noticed that there are two different version in my aptitude caches. What are the main differences between the ...
2
votes
0answers
33 views

Command line failing with https

I'm a bit new when it comes to networking. As a disclaimer, I installed Chrubuntu. The OS was able to connect fine, but it had an unrelated error and required an install and upgrade from 13.10 to ...
0
votes
0answers
17 views

Questions about setting up SSL

I have a subdomain on a server that is pointing to an IP hosting an application. I need to enable SSL on the application. The way I understand it is that because SSL is domain specific the ...
0
votes
0answers
455 views

Nginx Load-Balacing node.js, SSL Not Working

I'm running 12.04 and using Nginx to load-balance node.js and I'm having an issue getting SSL to work. The Problem Using the configuration below, when I send any requests via https I get no response ...
0
votes
1answer
80 views

Enabling SSL on Squid

I installed Squid server and I am trying to secure it. In many searches, I see that is possible to enable SSL for squid. Is there any security benefits for squid server to enable SSL on it?
3
votes
0answers
69 views

SSL on one domain and not the server ip or any virtual hosts (nginx)

I have a SSL setup on my nginx server and the SSL works perfectly, only problem is it is working on all other virtual hosts and also the server IP which I don't want it to. It should only work in the ...
0
votes
1answer
39 views

apache private key encryption

I have a web server with SSL, and I was wondering if encrypting the private key on the disk ( -des3 flag when creating it) was really useful, or if setting permissions to 400 on it was enough? (If ...
1
vote
1answer
2k views

Cannot Activate Apache SSL (HTTPS Configuration)

I've newly installed my private web server with Ubuntu 14.04 and I installed already Apache 2.4.7. When I open via Firefox http://xxx.xxx.xxx.xxx (my IP adress) I see the "Apache2 Ubuntu Default ...