Secure Sockets Layer (SSL) is a cryptographic protocol that provides communications security over the Internet.

learn more… | top users | synonyms (2)

2
votes
1answer
1k views

How to prevent “SSL Certificate Chain Not Sorted”

I just got an message SSL Certificate Chain Not Sorted when I scanned my server configuration...I am not sure how to order or sort the certificates. I have a SSL certificate and intermediate ...
2
votes
1answer
132 views

Avoid Comodo certificates?

We are looking at buying an: EV SSL certificate Software signing certificate Comodo seem far cheaper than other providers. However they seem to have bad press. Is there any disadvantage to using ...
2
votes
1answer
384 views

Restrict SSL access for some paths on a apache2 server

I wanted to allow access to www.mydomain.com/login through ssl only. E.g.: Whenever someone accessed http://www.mydomain.com/login, I wanted him to be redirect to https://www.mydomain.com/login so ...
2
votes
2answers
90 views

Issue with security certificate name

I have inherited an old website whose security certificate causes this error when viewed with IE. "The name on the security certificate is invalid or does not match the name of the site" Is there ...
2
votes
1answer
258 views

Advice on buying SSL certificate [duplicate]

Possible Duplicate: SSL certificate provider What are the main things to consider when choosing between SSL certificates from different providers? I find they vary in price incredibly.
2
votes
1answer
1k views

How to set the Bit Length when generating SSL Certificat with Java keytool?

I'm going to create a SSL Certificate so I can use https on my web site. I have to generate a Certificate Signing Request (CSR) and I did generate such a file with the Java keytool following the guide ...
2
votes
1answer
66 views

Apache HTTPS ProxyPass certificate location

I'm trying to set up an Apache server that uses ProxyPass to pass HTTPS requests on to another server. Let's call the proxy server ALPHA and the target server BETA. ALPHA does not run HTTPS, but ...
2
votes
1answer
57 views

SSL certificate that does not verify identity

(I'm fairly sure I know the answer, but just in case...) We want SSL on an internal-use webserver, but the usual ones don't work for the usual reasons (not static IP, subdomain issues etc.). Server ...
2
votes
1answer
23 views

Plesk refuses to let me set a new SSL certificate

I got a problem when I try to update/change a SSL certificate on a PLESK managed server. One problem might be that I am not so confident at this topic. The setup is the following: I use an virtual ...
2
votes
1answer
32 views

Apache mod_rewrite SSL vs Non-SSL

I have my site setup with two conf files (one for SSL and one for Non-SSL ) The two confs are at this gist -> https://gist.github.com/akinsgre/9645179 The Non-SSL configuration works fine. When ...
2
votes
1answer
39 views

Can I get source URL from Google search if I switch to HTTPS myself?

HTTPS cloaks the keywords, but I've read that by enabling HTTPS on my site I may at least get the source URL's - if the browser goes from HTTPS -> HTTPS it does not drop the source url in the packet ...
2
votes
1answer
131 views

How can I make FTP connections secure in WHM?

For security reasons (since FTP transmits passwords and files in plain text), I want to force users of my shared hosting to use FTPS or SFTP instead of regular FTP. I am using WHM but have limited ...
2
votes
2answers
94 views

How can I prevent HTTPS on another domain from wrongly showing on my HTTP-only domain?

So, I have a blog at domain.com. This blog is HTTP-only because I would gain almost nothing from adding SSL support. I have a web service now that I want to enable SSL support on that runs on the same ...
2
votes
1answer
32 views

HTTPS Causes Broken Back Links?

If I change my URL to force https does this effect all of my backlinks to be broken and to be lost one by one? And if so if I change it back will it will this restore the back links on the site? Any ...
2
votes
2answers
1k views

https:// search results appearing on Google for purely http:// site

I started weeding through my site's search results from Google today, using a site: search, to determine if there are any links that cause 404s and thus need redirecting. To my amazement I noticed ...
2
votes
1answer
234 views

Is my .htaccess settings hurting SEO?

I have a site that I have redirecting to HTTPS. I do this to leverage wildcard SSL for my password protected pages. Everything seems to work fine with testing. For example, whether you type in HTTP or ...
2
votes
2answers
142 views

What are the dis-advantages of installing the ssl certificate for the naked domain?

I might buy an SSL certificate for my sie. I know that it will help me in many ways. But will there be dis-advantages also? eg. If I load an image from another server (using plain http), will ...
2
votes
1answer
318 views

Seeking .htaccess help: Converting multiple subdomains (both HTTP and HTTPS) to www.domain.com using .htaccess

I've been trying to get an answer to this question on other forums (the folks at SuperUser thought this was the place I needed to post) and via my connections, but I haven't gotten very far. Hopefully ...
2
votes
2answers
3k views

Apache2: How to host apps at different ports with SSL?

I'm trying to achieve quite simple task actually. I bind application to a port, I enable SSLEngine at each VirtualHost entry for that port. Everything works beside one thing: if you type url that ...
2
votes
1answer
527 views

Using HTTP (insecure) ad providers on HTTPS (secure) site

As more and more browsers adopt stringent checks around preventing insecure content served up on secure sites, there is impact on the use of ad networks which in many cases don't support the secure ...
2
votes
1answer
335 views

DNS name/host-header specific url-pattern/security-constraint, to not require SSL with Tomcat6

I am needing to enable SSL on an application hosted through Tomcat6 and I have added the following to the tomcat web.xml: <security-constraint> <web-resource-collection> ...
2
votes
1answer
214 views

SSL Certificate Works in Monit - But Not in Keystore

I have a situation where there's a keystore file with the various root/intermediate certificates stored in it in a way that it seems to work for most browsers. Problem is that when mobile browsers ...
2
votes
1answer
403 views

Error 500 on phpMyAdmin via https from “self-signed certificate”?

I have used Cpanel to generate and install a self-signed certificate for HTTPS and now that I have installed phpMyAdmin once I access phpMyAdmin via HTTPS it throws out an error 500 message. Why is ...
2
votes
1answer
167 views

Forwarded/custom domain names and SSL

Assume I have a website that offers a web-based service to companies: myservice.com Each company has a subdomain wildcarded via mod_rewrite: client1.myservice.com (This is typical of many ...
2
votes
2answers
666 views

Tool to check non-SSL calls?

Is there a tool that will scan all elements on a webpage and report which item is making a non-SSL call? My webapp keeps showing the mixed use icon and everything I can see is good. :/ Thanks!
2
votes
2answers
296 views

Security - DiscoverCard.com

I have a security, SSL question about http://discovercard.com/ When you first go to Discover Card's Home Page you are able to type in your user name and password without the website being protected ...
2
votes
0answers
45 views

Facebook likes reset after moving to HTTPS

I've got a question regarding the Facebook like button. We worked on a piece recently that embeds a number of social share buttons (please see the source code below). When the piece was released, it ...
2
votes
0answers
17 views

Measuring percentage of visitors connecting over https [duplicate]

Does Google Analytics expose information about the connection protocol used by site visitors? I don't see any option in the customization section... is this something I'd have to use a custom variable ...
2
votes
0answers
116 views

IIS 7.5 and authenticating client certificates

I am trying to understand if the functionality I am seeing is how client certs and SSL is supposed to work, or if I've done something wrong. I have a site running under IIS 7.5 that is using a cert ...
2
votes
0answers
98 views

Has anyone ever claimed a warranty on an SSL certificate? [closed]

SSL certificates often advertise varying amounts of warranties or guarantees, for example $500,000 or $1m. My question is, in the history of SSL, has anyone ever actually successfully claimed one of ...
2
votes
0answers
169 views

Are there any ad networks that serve ads over SSL? [duplicate]

Possible Duplicate: Ad service that supports ssl (secure publishing) I have recently enabled SSL on my site, now my google ads cause some browsers to complain about unsecured content ...
2
votes
2answers
82 views

Verifying that a user comes from a 'partner' site?

We're building a Drupal module that is going to be given to trusted 'corporate partners'. When a user clicks on a link, he should be redirected to our site as if he's a logged in user. How should I ...
1
vote
1answer
522 views

HTTP over HTTPS speed

I did some a lot of reading around HTTP and HTTPS and suggested that my client implement HTTPS only. Site is on Alpha testing and URL is IP restricted, but on load testing we see that HTTPS takes ...
1
vote
1answer
213 views

Can I modify an existing certificate to run on multiple hostnames?

I've been investigating and I found instructions on how to create an SSL certificate with multiple hostnames, but I need to know whether I can modify an existing certificate (not create a new ...
1
vote
1answer
410 views

Why isn't HTTP Authentication working on this Apache HTTPS site?

I have set up a private MoinMoin wiki, accessed through HTTPS, but I cannot get Basic HTTP Authentication to work on it. I have it working on another site, using a similar vhosts file, so I cannot ...
1
vote
2answers
184 views

Need HTTPS on web server with plesk. Without buying certificate?

I just want that communication with web server is encrypted. I don't want to by SSL certificate. The server has Plesk installed and as i see, there is some way to add SSL certificate but i don't know ...
1
vote
1answer
57 views

Multiple SSL certificates under one organization?

Now that I have my LLC formed, I intend to purchase several EV SSL certificates for a few of my popular online stores. My question is if it is possible to purchase and set up several EV SSL ...
1
vote
1answer
35 views

Secure and non-secure Schema.org Markup?

Is it possible to have schema.org itemtypes for both secure and insecure ports? I run a static-ish site made in Jekyll, and am implementing Schema.org on the individual pages. As a result, I'm ...
1
vote
2answers
41 views

SSL issues on my website

I'm running a XenForo website and I am now getting SSL security issues. I'm not so experienced in SSL, so I'm hoping you guys can provide some clarity on them. I was thinking that they probably had ...
1
vote
1answer
86 views

Is a security seal or EV SLL more important?

Does anybody know of a survey or study that compares site visitor attitudes/perceptions to security between an EV SSL cert and a security seal? The EV SSL cert will show up green in the URL (like a ...
1
vote
2answers
301 views

Email not sending to/from all Microsoft domains after adding dedicated IP and SSL (Hotmail, Outlook, Yahoo!)

I have never experienced this type of issue before, so I don't know where to begin searching to be able to troubleshoot or fix the problem. Also, I hope this is the correct SE website for this type of ...
1
vote
1answer
385 views

Getting fingerprint from Apache certificate (combined with key)

I have just created a certificate for my Apache SSL host using: make-ssl-cert /usr/share/ssl-cert/ssleay.cnf /etc/ssl/private/myhost.crt Now what is the correct way to get the fingerprint out of ...
1
vote
1answer
148 views

SSL Certificate

I've received the email below from Google about my WordPress site and have no idea how to follow the instructions. Any help out there? Dear Webmaster, The host name of your site, ...
1
vote
2answers
772 views

Cache a resource across HTTP and HTTPS

Is there a way to specify that a resource should be cached when accessed over both HTTP and HTTPS? We have lots of static content that is initially served over HTTP and then re-served over SSL when ...
1
vote
2answers
116 views

SSL Certification on both www and no-www domains

We've got our website running and HTTPS / SSL works just great. EXCEPT: when users enter http://www.mydomain.com and then enter the secure area and get directed to https://www.mydomain.com it works ...
1
vote
1answer
192 views

Do you want to include your registrant information in third party Bulk Whois requests?

I'm buying a SSL certificate online for the first time. I have this option... Include your registrant information in third party Bulk Whois requests? What does it exactly mean ? What's Buil Whois ...
1
vote
1answer
213 views

High traffic by “doin' nothing”

We have set up on a VPS a WordPress blog. But, after we work a while, if we leave the tabs open in our browsers, there is upload traffic, in small chunks but quite often. We thought that it might be ...
1
vote
1answer
18 views

Domain, SSL Certificate and Webhost in from different providing companies

I am planning to migrate from godaddy to another webhosting company but not including my domain registrations. I have two domain names and I am planning to get one free domain name from the webhosting ...
1
vote
1answer
36 views

Secure Image is being called Insecure?

I have an image using the secure protocol (https://) but the image is being called insecurely from our homepage using the protocol (http://) - How is this possible? Our SSL Certificate is installed ...
1
vote
2answers
96 views

Search for my web site returns HTTPS results

My home page is set to Google and Google adds ?gws_rd=ssl to it. When I type search term form my site into search box Google returns bunch of indexes (different pages within my site) that starts with ...