Secure Sockets Layer (SSL) is a cryptographic protocol that provides communications security over the Internet.

learn more… | top users | synonyms (2)

1
vote
3answers
414 views

What books or articles are must reads for learning about SSL management [closed]

I have found it very hard to find any books or articles that assume no understanding and take you from nothing to a master at managing SSL certificates on web servers. Most articles I have found deal ...
2
votes
2answers
2k views

Self signed SSL certificate with a wild card - works for sub domain, fails for the main domain

For development purposes I created a self signed SSL certificate where CN = *.example.com. After installing the certificate, when browsing to any sub domain https://sub.example.com I got the nice ...
3
votes
1answer
97 views

Using RegEx's in Multi-Channel Funnels in Google Analytics

For some reason, I can't get my multichannel funnel which utilizes RegEx's in the path steps to function -- it keeps coming back with no data. There are a few variables which may be holding things up, ...
5
votes
3answers
486 views

https (SSL) instead of http for mobile users

I am building myself a new website, out of privacy and security concerns I am contemplating trying to make it https only. It will be mobile-friendly using media queries but I am concerned--especially ...
1
vote
1answer
147 views

SSL Certificate

I've received the email below from Google about my WordPress site and have no idea how to follow the instructions. Any help out there? Dear Webmaster, The host name of your site, ...
0
votes
3answers
205 views

Need private personal access to ~three PHP pages

I would like secure access to the text output by three PHP scripts (the text output is JavaScript and html) . The security level is much less then financial data but important none-the-less. I have ...
0
votes
1answer
135 views

SEO and search result changes when switching to SSL on Joomla site?

I am thinking about purchasing an SSL certificate for a website. The most noticeable difference for the user would be the http now becomes https and there is that lock icon in most browsers. Will ...
3
votes
1answer
801 views

Does MSIE recognise StartCom as an SSL Certificate Authority?

Ok, so I'm thinking about getting in on the SSL action, so that my sites can be secure etc, and after hours of shopping for the best priced certificate, I find out that StartSSL offer a free one. One ...
4
votes
1answer
342 views

2048 bit SSL overhead [closed]

Can you guys help me learn some ssl networking basics plz? What is a SSL transaction (a full handshake?) Why do people think 2k ssl will melt netscalers (ssl trans/sec exceed netscaler max ssl ...
2
votes
3answers
166 views

Should I get an SGC enabled SSL certificate?

I'm in the market for a new SSL certificate and am wondering if I should get an SGC enabled certificate or not? In the past I have just used cheap SSL certificates but since this is for a new company ...
1
vote
2answers
559 views

How to submit sitemap when your website has partial https? - Error: “Not in Domain”

My website is an eCommerce that is set up to do HTTP for the item browsing portion, but HTTPS for things like shopping cart, contact us, etc.. (anything that has forms on it). I've submitted my ...
1
vote
1answer
456 views

URL Rewrite for SSL

I have SSL configured for a cart directory in my website. I'm having a very difficult time trying to configure SSL for a different directory within the same website. I ask the question on SO, and was ...
1
vote
1answer
524 views

SSL on multiple directories

I have a website that is http, but has a port set up for https for a specific directory that is for the shopping cart. Now I'd like to use our SSL on a different directory in the same site as well. ...
2
votes
2answers
3k views

Apache2: How to host apps at different ports with SSL?

I'm trying to achieve quite simple task actually. I bind application to a port, I enable SSLEngine at each VirtualHost entry for that port. Everything works beside one thing: if you type url that ...
2
votes
3answers
4k views

HTTPS page loading non-https images

I have a https site which links to images from a cdn, as well as user-generated image links that are not https. I get errors like this in console: The page at https://site.com displayed insecure ...
2
votes
1answer
515 views

Using HTTP (insecure) ad providers on HTTPS (secure) site

As more and more browsers adopt stringent checks around preventing insecure content served up on secure sites, there is impact on the use of ad networks which in many cases don't support the secure ...
2
votes
2answers
584 views

Implement SSL in website

Our company have purchased SSL certificate and installed in linux on Host Server. Can you plz tell me how to make use of this in our website. How to configure it in Website.Is there any need to write ...
4
votes
2answers
1k views

running multiple name-based web applications on a single ip address with SSL

I'm working on web projects. My scenario is I have two web applications running on one single web server (Apache). Due to my company policy, they ask me to put both of them on SSL (Port #443), no ...
2
votes
1answer
328 views

DNS name/host-header specific url-pattern/security-constraint, to not require SSL with Tomcat6

I am needing to enable SSL on an application hosted through Tomcat6 and I have added the following to the tomcat web.xml: <security-constraint> <web-resource-collection> ...
0
votes
2answers
506 views

SSL Integration issue

We have a godaddy VPS account and purchased an ssl certificate.We downloaded a .zip file that contains a .cert file. When we are trying to setup ssl, they are asking .key file with the .cert file, we ...
3
votes
1answer
716 views

SSL between customer's domain having CNAME to our secured server?

We're setting up a payment service -- a few pages to collect credit cards, and do other stuff that needs to be secure. We would like to offer the service to customers via a cobranded page we serve ...
2
votes
1answer
4k views

Redirect HTTPS request to HTTP in Apache

Can an HTTPS request be redirected to an HTTP request in Apache? If so, how?
1
vote
2answers
4k views

How to find unsecured content on a webpage [duplicate]

Possible Duplicate: Identify “non-secure” content IE warns about Firefox reports HTTPS page to contain non-secure elements My webpage is running SSL and it's showing that ...
5
votes
2answers
10k views

Redirect Permanent and https

I just set up HTTPS on my server, and I have an issue with redirect permanent. Example http://domain.com/index.html it redirect me to http://www.domain.comindex.html The / (tail ending slash) is ...
16
votes
6answers
13k views

Why is godaddy HTTPS/SSL certification so much cheaper than digicert, thawte, and verisign?

I am a novice on HTTPS/SSL but GoDaddy charges $12.99 and Digicert, thawte, and Verisign charge $100-1000+ for SSL certificates. I must be missing something on the quality of the encryption or ...
7
votes
2answers
4k views

How to prevent access to website without SSL connection?

I have a website that has an SSL certificate installed, so that if I access the website using https instead of http I will be able to connect using a secure connection. However, I have noticed that I ...
13
votes
1answer
571 views

Cost of using SSL

I am wondering on the cost of using SSL sitewide. It would be for a standard LAMP site. I know that this will be dependent on the many factors but, can some give me an 'average' or 'guesstimate!'. By ...
12
votes
3answers
17k views

IIS 7 Require SSL automatically redirect to https://

I've configured IIS 7 to require SSL. I'm wondering if I can automatically redirect non-ssl requests to be encrypted. For example, if a user types in http://domain.com, can IIS redirect the request ...
2
votes
1answer
1k views

How to prevent “SSL Certificate Chain Not Sorted”

I just got an message SSL Certificate Chain Not Sorted when I scanned my server configuration...I am not sure how to order or sort the certificates. I have a SSL certificate and intermediate ...
3
votes
4answers
3k views

How can I set the default page for an https request?

We have a website which has a Virtual Directory containing the secure portion of the website. If users come to http://www.mydomain.com, they should get directed to default.aspx of the main site, but ...
4
votes
2answers
359 views

How to use the private and public keys?

I am new to ssl certificates, i wanted to learn about ssl certificates, and I generated private and public keys myself while logged into cpanel, I wonder how to use those and generate a secured ...
1
vote
2answers
755 views

Cache a resource across HTTP and HTTPS

Is there a way to specify that a resource should be cached when accessed over both HTTP and HTTPS? We have lots of static content that is initially served over HTTP and then re-served over SSL when ...
1
vote
3answers
2k views

How to avoid basic authentication warning when using protected directory?

I used cpanel on my hosted site to set up a password protected directory to allow downloads of specific files. I send people a link to the file by email and include their username and password so ...
2
votes
1answer
214 views

SSL Certificate Works in Monit - But Not in Keystore

I have a situation where there's a keystore file with the various root/intermediate certificates stored in it in a way that it seems to work for most browsers. Problem is that when mobile browsers ...
1
vote
1answer
61 views

HTTPS security issue [closed]

I want to learn if my ISP or any Firewall or anybody else can see the links I browse which has ssl support ? for exemple: when I browse google using secure search (https://google.com) ...
3
votes
3answers
2k views

DNS configuration to force root domain to www

we have an app running on heroku. the dns setup is like this: A record for domain.com -> heroku front end ip addresses CNAME for www.domain.com -> specific host name for our app provided by heroku ...
3
votes
1answer
102 views

Do I need an SSL Certificate?

I'm thinking about building an app that lets users upload images to sites like Flickr. They would need to enter their password to do this. I would send the data through PHP, do I need to get a SSL ...
1
vote
1answer
410 views

SSL is not enabled in Heroku

Since Heroku has integrated the piggybank_ssl addon by default, trying: heroku addons:add piggyback_ssl or heroku addons:add ssl:piggyback results in: ! This add-on is now a standard ...
1
vote
2answers
907 views

cname forward from https to http

We are migrating web host and I wonder if it is possible in the migration phase to do a CNAME forward from https://address1.com to http://address2.com. Would the certificate still work even if the new ...
1
vote
1answer
534 views

How is Facebook avoiding mixed content (SSL/non-SSL) warnings?

I signed up to Farmville and I get a URL like: https://apps.facebook.com/onthefarm/index.php?ref=tab At the bottom of the page are ads which are served not using ssl - they are pulling in regular ...
2
votes
2answers
846 views

SSL 128bit… Why not 256bit

Have set up an SSL certificate for a new site, and in checking with the browser, the SSL states it's encrypted with 128bit encryption. I have tried with the latest versions of Chrome, IE9 and FF, all ...
0
votes
1answer
312 views

connection partially encrypted, SSL for perl app

I am getting error on FireFox "connection partially encrypted" other browsers show that's not encrypted... When I setup apache with ssl I use "/var/www/html/" for default directory, but all scripts ...
2
votes
1answer
2k views

How can mixed content compromise an entire HTTPS session?

Google Chrome is probably one of the stricter browsers out there in terms of highlighting SSL errors. Most browsers will point out when you are viewing an HTTPS page which loads insecure ...
4
votes
3answers
3k views

Will a simple domain validated SSL certificate show a 'green lock'?

I'm looking into buying an SSL certificate for my domain. I'm considering buying: https://www.ssl.nu/en/products/regular+ssl/ssl+basic/ which is just a domain validation certificate I think. Will ...
6
votes
1answer
2k views

How can I set Webmaster Tools to “Fetch as Google Bot” using SSL?

I have page which requires SSL so the page is https://. I want to fetch this page as google bot inside of google webmasters' diagnostic tools however Google, from what I can tell, only allows http ...
1
vote
2answers
164 views

How to setup SSL to protect secure information

At the moment I have a website running in quite an insecure way, I'll refer to it as example.com. To add better security we're starting to store passwords using bcrypt but we are currently not using ...
2
votes
3answers
374 views

What is necessary to implement HTTPS?

I'm an iPhone Developer and I've recently got into web development. At the moment I have two sites on the internet, and on one of them, I have a very simplistic CMS I've made. Firstly, do I need to ...
2
votes
2answers
652 views

rel=canonical required for HTTPS?

I'm offering a page through HTTP and HTTPS, both with the same URL scheme. I.e., a page is available as http://www.example.com/page1.html as well as https://www.example.com/page1.html. Should I add ...
1
vote
1answer
120 views

Extra configuration needed after installing SSL certificate?

We recently developed two rather simple PHP applications for AXA (European bank). URL's are axa.tfo.be/incentives/cipres and axa.tfo.be/incentives/zrkk (access to both sites is restricted to visitors ...
0
votes
1answer
96 views

Making a site available at http and https after installing an SSL certificate

I just had hostgator install an SSL certificate on my site. As a result, my site is only available (right now) at https://mysite.com. Based on the answer to this question, it sounds like it's possible ...