Secure Sockets Layer (SSL) is a cryptographic protocol that provides communications security over the Internet.

learn more… | top users | synonyms (2)

2
votes
1answer
256 views

Advice on buying SSL certificate [duplicate]

Possible Duplicate: SSL certificate provider What are the main things to consider when choosing between SSL certificates from different providers? I find they vary in price incredibly.
2
votes
1answer
1k views

How to set the Bit Length when generating SSL Certificat with Java keytool?

I'm going to create a SSL Certificate so I can use https on my web site. I have to generate a Certificate Signing Request (CSR) and I did generate such a file with the Java keytool following the guide ...
2
votes
1answer
56 views

Apache HTTPS ProxyPass certificate location

I'm trying to set up an Apache server that uses ProxyPass to pass HTTPS requests on to another server. Let's call the proxy server ALPHA and the target server BETA. ALPHA does not run HTTPS, but ...
2
votes
1answer
56 views

SSL certificate that does not verify identity

(I'm fairly sure I know the answer, but just in case...) We want SSL on an internal-use webserver, but the usual ones don't work for the usual reasons (not static IP, subdomain issues etc.). Server ...
2
votes
1answer
22 views

Plesk refuses to let me set a new SSL certificate

I got a problem when I try to update/change a SSL certificate on a PLESK managed server. One problem might be that I am not so confident at this topic. The setup is the following: I use an virtual ...
2
votes
1answer
28 views

Apache mod_rewrite SSL vs Non-SSL

I have my site setup with two conf files (one for SSL and one for Non-SSL ) The two confs are at this gist -> https://gist.github.com/akinsgre/9645179 The Non-SSL configuration works fine. When ...
2
votes
1answer
39 views

Can I get source URL from Google search if I switch to HTTPS myself?

HTTPS cloaks the keywords, but I've read that by enabling HTTPS on my site I may at least get the source URL's - if the browser goes from HTTPS -> HTTPS it does not drop the source url in the packet ...
2
votes
1answer
128 views

How can I make FTP connections secure in WHM?

For security reasons (since FTP transmits passwords and files in plain text), I want to force users of my shared hosting to use FTPS or SFTP instead of regular FTP. I am using WHM but have limited ...
2
votes
2answers
92 views

How can I prevent HTTPS on another domain from wrongly showing on my HTTP-only domain?

So, I have a blog at domain.com. This blog is HTTP-only because I would gain almost nothing from adding SSL support. I have a web service now that I want to enable SSL support on that runs on the same ...
2
votes
1answer
32 views

HTTPS Causes Broken Back Links?

If I change my URL to force https does this effect all of my backlinks to be broken and to be lost one by one? And if so if I change it back will it will this restore the back links on the site? Any ...
2
votes
1answer
2k views

How can I force a VirtualHost in Apache to not listen for undefined subdomains on 443?

In /etc/apache2/sites-available/example.com: <VirtualHost *:443> ServerName www.example.com DocumentRoot /var/www/example.com/htdocs SSLEngine on ...
2
votes
2answers
1k views

https:// search results appearing on Google for purely http:// site

I started weeding through my site's search results from Google today, using a site: search, to determine if there are any links that cause 404s and thus need redirecting. To my amazement I noticed ...
2
votes
1answer
229 views

Is my .htaccess settings hurting SEO?

I have a site that I have redirecting to HTTPS. I do this to leverage wildcard SSL for my password protected pages. Everything seems to work fine with testing. For example, whether you type in HTTP or ...
2
votes
2answers
142 views

What are the dis-advantages of installing the ssl certificate for the naked domain?

I might buy an SSL certificate for my sie. I know that it will help me in many ways. But will there be dis-advantages also? eg. If I load an image from another server (using plain http), will ...
2
votes
1answer
315 views

Seeking .htaccess help: Converting multiple subdomains (both HTTP and HTTPS) to www.domain.com using .htaccess

I've been trying to get an answer to this question on other forums (the folks at SuperUser thought this was the place I needed to post) and via my connections, but I haven't gotten very far. Hopefully ...
2
votes
2answers
3k views

Apache2: How to host apps at different ports with SSL?

I'm trying to achieve quite simple task actually. I bind application to a port, I enable SSLEngine at each VirtualHost entry for that port. Everything works beside one thing: if you type url that ...
2
votes
1answer
516 views

Using HTTP (insecure) ad providers on HTTPS (secure) site

As more and more browsers adopt stringent checks around preventing insecure content served up on secure sites, there is impact on the use of ad networks which in many cases don't support the secure ...
2
votes
1answer
331 views

DNS name/host-header specific url-pattern/security-constraint, to not require SSL with Tomcat6

I am needing to enable SSL on an application hosted through Tomcat6 and I have added the following to the tomcat web.xml: <security-constraint> <web-resource-collection> ...
2
votes
1answer
214 views

SSL Certificate Works in Monit - But Not in Keystore

I have a situation where there's a keystore file with the various root/intermediate certificates stored in it in a way that it seems to work for most browsers. Problem is that when mobile browsers ...
2
votes
1answer
401 views

Error 500 on phpMyAdmin via https from “self-signed certificate”?

I have used Cpanel to generate and install a self-signed certificate for HTTPS and now that I have installed phpMyAdmin once I access phpMyAdmin via HTTPS it throws out an error 500 message. Why is ...
2
votes
1answer
160 views

Forwarded/custom domain names and SSL

Assume I have a website that offers a web-based service to companies: myservice.com Each company has a subdomain wildcarded via mod_rewrite: client1.myservice.com (This is typical of many ...
2
votes
2answers
654 views

Tool to check non-SSL calls?

Is there a tool that will scan all elements on a webpage and report which item is making a non-SSL call? My webapp keeps showing the mixed use icon and everything I can see is good. :/ Thanks!
2
votes
2answers
295 views

Security - DiscoverCard.com

I have a security, SSL question about http://discovercard.com/ When you first go to Discover Card's Home Page you are able to type in your user name and password without the website being protected ...
2
votes
0answers
25 views

Facebook likes reset after moving to HTTPS

I've got a question regarding the Facebook like button. We worked on a piece recently that embeds a number of social share buttons (please see the source code below). When the piece was released, it ...
2
votes
0answers
17 views

Measuring percentage of visitors connecting over https [duplicate]

Does Google Analytics expose information about the connection protocol used by site visitors? I don't see any option in the customization section... is this something I'd have to use a custom variable ...
2
votes
0answers
116 views

IIS 7.5 and authenticating client certificates

I am trying to understand if the functionality I am seeing is how client certs and SSL is supposed to work, or if I've done something wrong. I have a site running under IIS 7.5 that is using a cert ...
2
votes
0answers
98 views

Has anyone ever claimed a warranty on an SSL certificate? [closed]

SSL certificates often advertise varying amounts of warranties or guarantees, for example $500,000 or $1m. My question is, in the history of SSL, has anyone ever actually successfully claimed one of ...
2
votes
0answers
169 views

Are there any ad networks that serve ads over SSL? [duplicate]

Possible Duplicate: Ad service that supports ssl (secure publishing) I have recently enabled SSL on my site, now my google ads cause some browsers to complain about unsecured content ...
2
votes
2answers
81 views

Verifying that a user comes from a 'partner' site?

We're building a Drupal module that is going to be given to trusted 'corporate partners'. When a user clicks on a link, he should be redirected to our site as if he's a logged in user. How should I ...
1
vote
1answer
209 views

Can I modify an existing certificate to run on multiple hostnames?

I've been investigating and I found instructions on how to create an SSL certificate with multiple hostnames, but I need to know whether I can modify an existing certificate (not create a new ...
1
vote
1answer
407 views

Why isn't HTTP Authentication working on this Apache HTTPS site?

I have set up a private MoinMoin wiki, accessed through HTTPS, but I cannot get Basic HTTP Authentication to work on it. I have it working on another site, using a similar vhosts file, so I cannot ...
1
vote
2answers
184 views

Need HTTPS on web server with plesk. Without buying certificate?

I just want that communication with web server is encrypted. I don't want to by SSL certificate. The server has Plesk installed and as i see, there is some way to add SSL certificate but i don't know ...
1
vote
1answer
56 views

Multiple SSL certificates under one organization?

Now that I have my LLC formed, I intend to purchase several EV SSL certificates for a few of my popular online stores. My question is if it is possible to purchase and set up several EV SSL ...
1
vote
2answers
40 views

SSL issues on my website

I'm running a XenForo website and I am now getting SSL security issues. I'm not so experienced in SSL, so I'm hoping you guys can provide some clarity on them. I was thinking that they probably had ...
1
vote
1answer
84 views

Is a security seal or EV SLL more important?

Does anybody know of a survey or study that compares site visitor attitudes/perceptions to security between an EV SSL cert and a security seal? The EV SSL cert will show up green in the URL (like a ...
1
vote
2answers
293 views

Email not sending to/from all Microsoft domains after adding dedicated IP and SSL (Hotmail, Outlook, Yahoo!)

I have never experienced this type of issue before, so I don't know where to begin searching to be able to troubleshoot or fix the problem. Also, I hope this is the correct SE website for this type of ...
1
vote
1answer
368 views

Getting fingerprint from Apache certificate (combined with key)

I have just created a certificate for my Apache SSL host using: make-ssl-cert /usr/share/ssl-cert/ssleay.cnf /etc/ssl/private/myhost.crt Now what is the correct way to get the fingerprint out of ...
1
vote
1answer
148 views

SSL Certificate

I've received the email below from Google about my WordPress site and have no idea how to follow the instructions. Any help out there? Dear Webmaster, The host name of your site, ...
1
vote
2answers
761 views

Cache a resource across HTTP and HTTPS

Is there a way to specify that a resource should be cached when accessed over both HTTP and HTTPS? We have lots of static content that is initially served over HTTP and then re-served over SSL when ...
1
vote
2answers
116 views

SSL Certification on both www and no-www domains

We've got our website running and HTTPS / SSL works just great. EXCEPT: when users enter http://www.mydomain.com and then enter the secure area and get directed to https://www.mydomain.com it works ...
1
vote
1answer
192 views

Do you want to include your registrant information in third party Bulk Whois requests?

I'm buying a SSL certificate online for the first time. I have this option... Include your registrant information in third party Bulk Whois requests? What does it exactly mean ? What's Buil Whois ...
1
vote
1answer
212 views

High traffic by “doin' nothing”

We have set up on a VPS a WordPress blog. But, after we work a while, if we leave the tabs open in our browsers, there is upload traffic, in small chunks but quite often. We thought that it might be ...
1
vote
1answer
38 views

Google is re-indexing pages after redirecting URLs from HTTP to HTTPS incorrectly

I upgraded my site so that all pages have gone from using HTTP to HTTPS. I didn't consider that Google treats HTTPS pages differently than HTTP. I recreated my sitemap to so that all links now ...
1
vote
1answer
36 views

Secure Image is being called Insecure?

I have an image using the secure protocol (https://) but the image is being called insecurely from our homepage using the protocol (http://) - How is this possible? Our SSL Certificate is installed ...
1
vote
2answers
91 views

Search for my web site returns HTTPS results

My home page is set to Google and Google adds ?gws_rd=ssl to it. When I type search term form my site into search box Google returns bunch of indexes (different pages within my site) that starts with ...
1
vote
1answer
72 views

What's the catch with a 4.99$ ssl certificate

I was browsing the web in search of a cheap SSL certificate just for domain validation. Then I came across a site that sells a certificate for 5 year in a ridicules price of 4.99$ and the one year is ...
1
vote
2answers
26 views

eCommerce checkout security

I'm developing an eCommerce site and using SagePay as a card processor. Customers will enter their delivery/invoice details into a form which is then submitted to a checkout page. This page encrypts ...
1
vote
1answer
75 views

Does the server type matter when purchasing an SSL certificate from Network Solutions for NodeJS?

I am running an instance of ExpressJS using NodeJS and wish to have it start using HTTPS. My company purchases SSL certificates through Network Solutions. When trying to give them my CSR, Network ...
1
vote
3answers
505 views

URL without trailing slash makes Apache look in non-SSL DocumentRoot

I have configured a virtual host in Apache for serving content over SSL/TLS. Since I also want to allow other sites on my domain to use regular http, I have two document roots, one at /home/www/html ...
1
vote
2answers
568 views

Automatic redirection from http to https with .htaccess authentication in virtual hosting

Hi I have configured Virtual host on apache with .htaccess authentication with SSL. It's working fine when I typed url https://www.example.com:9004/test.php but when I typed ...