SSL questions refer to either the Secure Sockets Layer communications protocol or interacting with signed certificates issued by trusted signing authorities.

learn more… | top users | synonyms

132
votes
3answers
142k views

How do I patch/workaround SSLv3 POODLE vulnerability (CVE­-2014­-3566)?

After the BEAST attack and Heartbleed bug, now I've heard about a new vulnerability in SSL/TLS called POODLE. How do I protect myself against being exploited? Are only servers or also clients ...
28
votes
2answers
28k views

How do I create a self-signed SSL certificate?

I've set up SSL on my webserver, now I need two files: a certificate a certificate Key How do I create a self-signed certificate for testing purposes?
17
votes
7answers
16k views

Python HTTPS requests (urllib2) to some sites fail on Ubuntu 12.04 without proxy

I have an little app I wrote in Python and it used to work... until yesterday, when it suddenly started giving me an error in a HTTPS connection. I don't remember if there was an update, but both ...
10
votes
3answers
3k views

Issues checking out code from Google Code

I've recently upgraded to Ubuntu 11.10 and since then, I haven't been able to checkout code from Google Code. I can't get it with either svn or git, but they were both working before the upgrade (so ...
9
votes
4answers
35k views

nagios- nrpe installation error(configure: error: Cannot find ssl libraries)

i have installed nagios and i want to install nrpe. While installing NRPE, when i execute (/home/abc/nrpe/configure) ./configure it stops after reaching the following line ... checking for type ...
9
votes
1answer
5k views

What is the purpose of the ssl-cert-snakeoil.key

Right now I installed ubuntu 12.04.3 server which I want to access via ssh. For that reason I created a private key which I moved to /etc/ssl/private/ I'm just wondering why there already is ...
8
votes
1answer
985 views

Is there a modern and clear tutorial on setting up SSL for localhost / testing use?

Let's say I'm developing a script for login.example.com. I have absolutely no access to login.example.com, but that page loads a script on assets.example.com (which I have access to). To test how ...
7
votes
5answers
7k views

Enabling SSL in MySQL

I'm running Ubuntu Server 12.04, and I want to enable SSL connections to MySQL. I've generated the following keys/certs files with OpenSSL: ca-cert.pem server-cert.pem server-key.pem I stored ...
7
votes
3answers
9k views

How do I disable SSLv3 in tomcat?

Please provide the fix for How do I patch/workaround SSLv3 POODLE vulnerability (CVE­-2014­-3566)? for Tomcat. I have tried following below link, however it does not help: tomcat-users mailing list ...
6
votes
2answers
10k views

Cannot start XAMPP on Ubuntu 11.10

When I try to start XAMPP with sudo /opt/lampp/lampp start command it gives me a message like this. Starting XAMPP for Linux 1.7.7... XAMPP: Another web server daemon with SSL is already running. ...
6
votes
2answers
1k views

SSL certification is missing

I'm trying to setup an SSL SVN. I got a tutorial, but when I'm trying to run the following command apache2-ssl-certificate I'm getting a command not found error message. My question is how can I fix ...
6
votes
1answer
229 views

Is there a modern tutorial for setting up SSL on apache2?

I've been running apache2 for ages on my ubuntu server without SSL. Now that I want to have some directories delivered by SSL, I can't find any straightforward tutorials that were written recently. ...
5
votes
4answers
15k views

How to verify the SSL fingerprint by command line? (wget, curl, …)

Using a command line website downloader, such as wget, curl or any other one... In a script... I have the SHA-1 and the SHA-256 certficate fingerprint of a website. Due to security concerns (1) (2), ...
5
votes
1answer
152 views

How do I make sure my IM client is using the right SSL certificate?

Google's had fraudulent SSL certificates issued for their domains. So, the question I have is, "How do I make sure Pidgin/Empathy trust the correct certificate?"
4
votes
4answers
2k views

Where does Ubuntu store the SSL certificates for Pidgin?

Since today Pidgin stopped working and the workaround is to "refresh the SSL certificate". Where is it stored?
4
votes
1answer
17k views

How do I setup SSL CRT on my Apache2 server?

I just got from Godaddy a SSL certificate. I downloaded the files... But now I am wandering where I should put them. And is there anything else I need to setup? The reason I am asking because I am ...
4
votes
2answers
1k views

Ubuntu 12.04 LTS, SSL, IRC: Unable to build with OpenSSL

I have a small server running Ubuntu 12.04 LTS. On it I wanted to set up IRC with SSL support. it appears that ircd-hybrid is most popular. I am not married to using it so other options are welcome. ...
4
votes
2answers
2k views

12.04.4 server can't verify common SSL certificates, usual fixes failing

The Problem I've got one server in a farm which is suddenly unable to correctly handle SSL certificates. Attempting to do a curl command like curl -v https://google.com results in: curl -v ...
4
votes
0answers
5k views

POODLE: Disabling SSLv3 in Apache [closed]

Everybody seems to be talking about the POODLE vulnerability today. And everybody recommends disabling SSLv3 in Apache using the following configuration directive: SSLProtocol All -SSLv2 -SSLv3 ...
3
votes
4answers
5k views

Unable to connect to Google Talk using Pidgin (SASL error)

After a fresh install of Ubuntu 11.10, Pidgin stopped connecting to any Jabber service (Google Talk and a local IM). The weird thing is, the same configuration works on a laptop with Ubuntu 11.10, but ...
3
votes
3answers
7k views

How can I fix my WPA-EAP certificate problem?

I'm trying to connect my school's WiFi which has WPA-EAP. Everything else can connect to it except my ubuntu machine. I can connect on my HTC ONE X Android, OS X, Windows XP & 7, and iOS devices. ...
3
votes
2answers
2k views

Can I use nginx and GnuTLS together?

I read that nginx works with OpenSSL. But since GnuTLS is the only software that provides TLS 1.2 support, it would be useful to combine that. So, how can I compile nginx with GnuTLS on Ubuntu? =)
3
votes
1answer
2k views

Apache and SSL Issues

I have my server set up to use SSL in a separate VirtualHost, but when I attempt to use https://my.domain, I get a connection refused error. The following is my config I'm using: <VirtualHost ...
3
votes
2answers
9k views

Forticlient SSL VPN binary not running

I've got a Mac running VMWare fusion with Ubuntu 10.10 in that. I'm currently using the Fortinet client from OSX, but that client is buggy, every time my Mac sleeps I need to reboot to get the ...
3
votes
1answer
512 views

How to run BitTorrent Sync web browser gui via ssl

I have installed BitTorrent Sync on my Ubuntu server, but noticed that the web gui does not use ssl for login (https://server:8888/gui does not work, however http://server:8888/gui does). This is both ...
3
votes
3answers
1k views

How to fix SSL error from Python apps (urllib) when behind HTTPS proxy? [closed]

Example of a failure: ***** Processing account GMail Copying folder structure from Gmail to MappedIMAP Establishing connection to imap.gmail.com:993. WARNING: Error occured attempting to sync account ...
3
votes
3answers
5k views

Where are PEM files stored for validating SSL certificates?

I am writing a SOAP client application on Ubuntu using OpenSSL and C++. I am having trouble getting my code to validate the server certificate even though it is a world famous betting site that I know ...
3
votes
1answer
609 views

Ubuntu One file sync error: SSL Handshake [closed]

Ubuntu One repeatedly tries to sync my files but keeps disconnecting before anything is uploaded. Here are some of the messages from syncdaemon.log: 2012-01-08 12:12:34,068 - ...
3
votes
1answer
3k views

Problems with certificate with wget and github lately

Lately, I have received errors while using wget against github on ubuntu 10.04. ERROR: certificate common name `*.github.com' doesn't match requested host name `github.com'. To connect to github.com ...
3
votes
1answer
2k views

Installing a certificate emitted by Comodo on Apache Ubuntu

I have followed steps outlined in Comodo Knowledge Base Edited my /etc/apache2/apache2.conf and /etc/apache2/mods-available/ssl.conf by adding <VirtualHost 197.***.**.**:443> SSLEngine On ...
3
votes
0answers
78 views

SSL on one domain and not the server ip or any virtual hosts (nginx)

I have a SSL setup on my nginx server and the SSL works perfectly, only problem is it is working on all other virtual hosts and also the server IP which I don't want it to. It should only work in the ...
3
votes
0answers
349 views

How can I add an SSL client certificate/key globally in Ubuntu?

I have a web server which requires a client certificate to establish an SSL connection (SSLVerifyClient require in apache). In firefox or chrome, I simply import the .p12-file containing my ...
2
votes
2answers
5k views

How do I revoke the default snakeoil certificate?

Windows XP keeps using the snakeoil certificate that Ubuntu shipped with, despite the fact that it has never been used in any virtual host ever. The certificate is located at ...
2
votes
5answers
1k views

How can I set up an authenticated encrypted SMTP server? [closed]

I'd like to set up authenticated, encrypted SMTP on my remote Ubuntu server, how do I do that? It's just a personal server, so I'd like a cheap option, i.e. not buying SSL certs - self-signed will ...
2
votes
3answers
2k views

How do I turn on SSL for test server?

I have a LAMP stack running. My the web root is /var/www. So if I go to http://linux-server/some/page.php It renders the page located at /var/www/some/page.php If I use https I get page not found. ...
2
votes
1answer
911 views

how to export an ssl certificate from one to another server? Server migration

I have an ssl certificate on one server and i am migrating this machine. Can I simply copy paste that certificate? When I have ssl mods installed and enabled? On the old server I use apache and on ...
2
votes
1answer
559 views

How do I build mongodb with SSL support on saucy?

The mongodb packages in ubuntu do not contain SSL support (this is due to a restriction from 10gen, the makers of mongo). However, you're supposed to be able to build it yourself... but the ...
2
votes
4answers
14k views

Can't connect to certain HTTPS sites

I've just moved to a new apartment and with internet connection via a router and I'm finding that I can't connect to quite a few sites that use SSL. For example trying to connect to PayPal: curl -v ...
2
votes
1answer
2k views

Nginx with SSL package

I'm trying to install nginx using the package manager. Usually I'd do this: sudo apt-get install nginx but I need nginx to have SSL support. I could compile nginx from source with SSL support, but ...
2
votes
1answer
1k views

Disable SSLv3 in Apache2 on a clean install of ubuntu 14.04.1 Server

I have a new install of ubuntu server version 14.04.1 I have apache2 with SSL enabled. I want to disable SSLv3 (I am aware this is a popular question but I have trawlled all other answers on multiple ...
2
votes
2answers
294 views

Encrypting and decrypting single file with master password and passphrase

Last night my system shutdown unexpectedly and when i restart it, it gave me superblock error. will then i fixed a little but. i was able to retrive my encrypted files which i encrypted my pgp public ...
2
votes
2answers
69 views

SSL Connection to Apache web server

I follow up on setting up SSL connection to my Apache2 It works well when I access my website from a local IP address but if I use a Dynamic DNS service with HTTPS in the beginning than I doesn't get ...
2
votes
1answer
2k views

Problems importing own CA Certificate

So, I have created my own little CA for my own purposes (inside my network, etc) and I know that the setup works (I can directly import the key into applications, and they connect to the server using ...
2
votes
1answer
2k views

trouble getting apt-get to work with https

I have a (private) apt repository setup on a server. I'm only allowing access to this repository over SSL, and only with a client certificate. I have tested the connection using curl: $ curl ...
2
votes
0answers
133 views

What is the difference between libcurl3 and libcurl4

I was setting up an Ubuntu 14.04 development environment and went to install libcurl but noticed that there are two different version in my aptitude caches. What are the main differences between the ...
2
votes
0answers
34 views

Command line failing with https

I'm a bit new when it comes to networking. As a disclaimer, I installed Chrubuntu. The OS was able to connect fine, but it had an unrelated error and required an install and upgrade from 13.10 to ...
2
votes
0answers
18 views

SSL is not in use on MySQL server [duplicate]

I installed MySQL server and I want to allow SSL support. I added these lines to my.cnf [client] ssl-ca=/etc/mysql/ca-cert.pem ssl-cert=/etc/mysql/client-cert.pem ssl-key=/etc/mysql/client-key.pem ...
2
votes
0answers
2k views

Private key not found

I have tried to generate server certificate for apache2 earlier.... I have noticed one error in apache server. Which means that Apache can't find the private key component of new SSL certificate. Now ...
2
votes
0answers
392 views

Python requests SSL version

I am using the python requests module on Ubuntu 13.04. I keep getting the error: requests.exceptions.SSLError: [Errno 1] _ssl.c:504: error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert ...
2
votes
0answers
643 views

ircd-hybdrid, SSL, and Ubuntu 12.04 LTS

I have a small server running Ubuntu 12.04 LTS. On it I wanted to set up IRC with SSL support. it appears that ircd-hybrid is most popular. I am not married to using it so other options are welcome. ...