Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ssl]

Secure Socket Layer - protocol which allows encrypted network traffic using asymmetric key encryption.

0
votes
2answers
163 views

TLS and OpenSSL errors

I have just finished setting up a Tor relay and am using nyx for monitoring. I am constantly being warned about the following error: Nov 29 20:49:54.000 [warn] TLS error: internal error (in SSL ...
2
votes
0answers
3k views

Got a lot of Secure Connection failed errs recently, anyone with similiar experience?

I'm experiencing a lot of Secure Connection Failures using TBB in China recently. The browser has problem loading all webpages(plain network and hidden service alike), here's the message displayed in ...
1
vote
1answer
468 views

Setting up a private local tor network

Im trying to set up a fully localised private tor network as a degree project to prove that this network topology can be used within the private business sector to secure internal traffic. I have set ...
0
votes
1answer
288 views

Socks version 22 not recognized. (Tor is not an http proxy.)

Hello everyone. i have a simple question i am using a tor client to connect programmatically to tor via Socks4a. Everything run smoothly but when i tried to add ssl-tls to connect to localhost i got ...
1
vote
1answer
2k views

Tor Browser import SSL certificate

How import SSL cert in Tor Browser? In Firefox I import my self signed cert in Setting -> Advanced -> Certificates -> Authorities. In TB I can't add cert as in FF, because if I add a cert it is not ...
3
votes
1answer
281 views

SSL, Mixed Content

https://developer.mozilla.org/en-US/docs/Web/Security/Mixed_content Mixed active content is content that has access to all or parts of the Document Object Model of the HTTPS page. This type of ...
3
votes
0answers
174 views

TorButton Warning and SSL

A little new to Tor, been taking a closer look at how requests happen in the browser. At the top when I open Tools >> Web Developer >> Browser Console and start browsing the web I notice a few things: ...
1
vote
1answer
1k views

Adding Clinet SSL to HIdden Service

I am new to setting up Hidden Services. I have my service up and running, listening on port 80, and redirecting to localhost:8080. I have my web-server anonymized and listening on port 8080 for ...
1
vote
1answer
953 views

SSL certificate for Tor

I have setup a Tor Hidden Service, and have the .onion domain. I wish to setup HTTPS. As I am using a self signed cert when a user visits my site they get a warning, which is extremely off putting. ...
0
votes
2answers
309 views

Possibility with malicious endnode, SSL Strip?

I am wondering about the security with TOR, if an end node setup a proxy like Burp Suite and replaced the certificate, does it mean the end node can still see all the packets that had passed through ...
2
votes
2answers
756 views

failed to curl https url from Privoxy over tor

I have installed privoxy over TOR on a centos server, I can curl successfully simple http page, but failed to get https page like https://www.google.com. Here is my tor conf: SocksBindAddress 127.0....
1
vote
2answers
151 views

Is Tor still safe to use if my boss intercepts HTTPS?

My boss intercepts all traffic in the corporate network, including HTTPS (by making computers trust the company certificate). Is it still safe to use Tor in those conditions?
0
votes
1answer
47 views

Is there any added value in https over hidden service?

Is there any added value in using https with a hidden service, such as Facebook is doing? Does the SSL provide any more security than regular http?
2
votes
3answers
550 views

Attempting to undertand Tor and it's relationship with SSL

I'm a mathematics student trying to understand Tor. I have little knowledge of networks and how exactly they function. Up to now I (think I) understand the basic functionality of Tor. A route is ...
0
votes
2answers
101 views

Tor connection from 1st to 2nd computer, then from 2nd computer, a 2nd Tor connection to browse web (for increased untraceability)

Requirement: set up a two-leg Tor connection (using Tor twice). End user works on 1st computer, connects thru Tor to a 2nd off-site computer (could go thru VPN, SSH, or SSL as well), and then from ...
1
vote
1answer
83 views

Manually check the SSL cert to avoid MITM on https?

Let's suppose I go to https://www.example.com using Tor. I check that the URL is correct, and the lock icon is present. But the exit node could be run by an adversary who uses a MITM attack and ...
9
votes
3answers
4k views

Do all .onion addresses use SSL/TLS?

Do .onion sites encrypt the information going through the exit node? Because a lot of them start with HTTP and not HTTPS.
1
vote
1answer
787 views

Import a SSL Client Certificate into the Tor Browser

as an extra layer of security, I want to use client site SSL certificates for authentication on my hidden-service webserver. Within the original Firefox (version 36.0) this is already working (with ...
1
vote
0answers
178 views

Since yesterday, I can not access mercadolibre.com.ar anymore [closed]

Thanks for such a good program. Since yesterday, mercadolibre.com.ar does not work for me anymore. It lets me navigate and view the products but it won't let me login to my account: https://www....
1
vote
1answer
586 views

redsocks redirect port 443 -> Tor: Missing mapping for virtual address

I'm trying to redirect some port 443 connections through tor using redsocks. But when redsocks accesses tor, the client connections get dropped, and tor gives this warning: [warn] Missing mapping for ...
2
votes
1answer
125 views

Problems with setting up a non-exit relay

I would like to contribute to the Tor Project and set up a non-exit relay. But there are some problems: Even if self-testing indicates my ORPort and DirPort are reachable from the outside, it doesn't ...
1
vote
2answers
165 views

How to connect via SSL over Tor?

There is a website I want to go to, and the URL looks like this - irc://dsadfasdfgweh.onion:2525 No that is not a real website, I am not giving away the actual website I am trying to access. How do I ...
2
votes
1answer
55 views

Why not update Tor browser to the latest NSS?

Firefox ESR uses an older version of NSS than the standard Firefox. Consequences include TLS 1.2 disabled by default, user can enable it, but it is buggier than the lastest version and it does not ...
4
votes
3answers
193 views

Can Heartbleed in connection with Tor read all my 2GiB ram, or it is limited to the memory already allocated to the SSL process?

If I am using a Tor version that is infected with SSL Heartbleed (CVE-2014-0092) Can someone read my hall 2GiB ram? Or is the damage limited to the memory already allocated to the SSL process? In ...
2
votes
2answers
133 views

As a Tor Browser Bundle user, how concerned should I be about the heartbleed SSL vulnerability?

I've been reading about the 'Heartbleed' SSL/TLS bug (CVE-2014-0160) and it is alarming. Are my communications still secure? Are there any steps I should do to protect my security?
3
votes
1answer
190 views

Does the GnuTLS bug (CVE-2014-0092) affect the Tor Browser Bundle or Tails?

There is a new major security vulnerability in the GnuTLS library (CVE-2014-0092) that undermines SSL on (some?) Linux platforms. What versions of the Tor Browser Bundler or Tails (if any) are ...
6
votes
2answers
999 views

How can I improve my SSL/TLS security?

I recently visited https://www.howsmyssl.com/ with TorBrowser Bundle 3.5 and the rating was alarming. In particular, the site informed me that the cipher SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA was ...
2
votes
1answer
670 views

Vidalia standalone with new TBB errors out

bash-4.1$ start-vidalia This gives an error: ./App/vidalia: error while loading shared libraries: libssl.so.1.0.0: cannot open shared object file: No such file or directory I'm running TBB on ...