Questions tagged [ssl]

Secure Socket Layer - protocol which allows encrypted network traffic using asymmetric key encryption.

Filter by
Sorted by
Tagged with
0 votes
1 answer
129 views

Firefox: SSL_ERROR_RX_RECORD_TOO_LONG

Context For a self-hosted Nextcloud server running over tor, I'm getting the error listed below, after setting: security.enterprise_roots.enabled in about:config to: true as recommended in this post: ...
a.t.'s user avatar
  • 153
2 votes
0 answers
140 views

Is it possible to run an obfs4proxy server and a webserver on the same port simultaneously, á la sslh?

Sslh is a protocol multiplexer that is commonly used to let one log in to a server via SSH on port 443, whilst that server still serves valid HTTPS content on port 443. From its manual, it is ...
Landak's user avatar
  • 121
0 votes
1 answer
157 views

Tor Browser's "new circuit": SSL session, DNS cache, and other details

If I understand correctly Tor Browser's "new circuit" attaches new connections to a new circuit while letting old connections finish in the old circuit. It does not clear out cookies, so ...
user33390's user avatar
0 votes
1 answer
53 views

API to get Tor SSL certificates

Some onion websites, like facebook, have TLS implemented on top of Tor. Is it possible to fetch the certificates and TLS versions of these connections using something like torpy?
Yousuf Badawi's user avatar
0 votes
1 answer
5k views

Tor Browser: "Connection not secure" no matter what site

I get an error "Connection not secure" if I connect to any website using Tor Browser. I get this error only when I use Tor Browser in Manjaro Linux, I have no problem if I use Tor Browser in ...
mooko's user avatar
  • 3
0 votes
2 answers
762 views

TLS and OpenSSL errors

I have just finished setting up a Tor relay and am using nyx for monitoring. I am constantly being warned about the following error: Nov 29 20:49:54.000 [warn] TLS error: internal error (in SSL ...
saurabh000345's user avatar
3 votes
0 answers
4k views

Got a lot of Secure Connection failed errs recently, anyone with similiar experience?

I'm experiencing a lot of Secure Connection Failures using TBB in China recently. The browser has problem loading all plain network webpages, here's the message displayed in the browser window: I ...
Annon35's user avatar
  • 85
1 vote
1 answer
1k views

Setting up a private local tor network

Im trying to set up a fully localised private tor network as a degree project to prove that this network topology can be used within the private business sector to secure internal traffic. I have set ...
Kenneth Hall's user avatar
0 votes
1 answer
1k views

Socks version 22 not recognized. (Tor is not an http proxy.)

Hello everyone. i have a simple question i am using a tor client to connect programmatically to tor via Socks4a. Everything run smoothly but when i tried to add ssl-tls to connect to localhost i got ...
johnminister05 Minister's user avatar
1 vote
1 answer
4k views

Tor Browser import SSL certificate

How import SSL cert in Tor Browser? In Firefox I import my self signed cert in Setting -> Advanced -> Certificates -> Authorities. In TB I can't add cert as in FF, because if I add a cert it is not ...
Jake Michel's user avatar
3 votes
1 answer
577 views

SSL, Mixed Content

https://developer.mozilla.org/en-US/docs/Web/Security/Mixed_content Mixed active content is content that has access to all or parts of the Document Object Model of the HTTPS page. This type of ...
46543653654353's user avatar
4 votes
0 answers
319 views

TorButton Warning and SSL

A little new to Tor, been taking a closer look at how requests happen in the browser. At the top when I open Tools >> Web Developer >> Browser Console and start browsing the web I notice a few things: ...
New Tor User's user avatar
2 votes
1 answer
4k views

Adding Clinet SSL to HIdden Service

I am new to setting up Hidden Services. I have my service up and running, listening on port 80, and redirecting to localhost:8080. I have my web-server anonymized and listening on port 8080 for ...
Joshp.23's user avatar
  • 123
3 votes
1 answer
3k views

SSL certificate for Tor

I have setup a Tor Hidden Service, and have the .onion domain. I wish to setup HTTPS. As I am using a self signed cert when a user visits my site they get a warning, which is extremely off putting. ...
hggj's user avatar
  • 31
0 votes
2 answers
625 views

Possibility with malicious endnode, SSL Strip?

I am wondering about the security with TOR, if an end node setup a proxy like Burp Suite and replaced the certificate, does it mean the end node can still see all the packets that had passed through ...
John's user avatar
  • 111
2 votes
2 answers
2k views

failed to curl https url from Privoxy over tor

I have installed privoxy over TOR on a centos server, I can curl successfully simple http page, but failed to get https page like https://www.google.com. Here is my tor conf: SocksBindAddress 127.0....
user973296's user avatar
1 vote
2 answers
211 views

Is Tor still safe to use if my boss intercepts HTTPS?

My boss intercepts all traffic in the corporate network, including HTTPS (by making computers trust the company certificate). Is it still safe to use Tor in those conditions?
tails's user avatar
  • 11
0 votes
1 answer
79 views

Is there any added value in https over hidden service?

Is there any added value in using https with a hidden service, such as Facebook is doing? Does the SSL provide any more security than regular http?
Karel Bílek's user avatar
2 votes
3 answers
968 views

Attempting to undertand Tor and it's relationship with SSL

I'm a mathematics student trying to understand Tor. I have little knowledge of networks and how exactly they function. Up to now I (think I) understand the basic functionality of Tor. A route is ...
Sertii's user avatar
  • 21
0 votes
2 answers
330 views

Tor connection from 1st to 2nd computer, then from 2nd computer, a 2nd Tor connection to browse web (for increased untraceability)

Requirement: set up a two-leg Tor connection (using Tor twice). End user works on 1st computer, connects thru Tor to a 2nd off-site computer (could go thru VPN, SSH, or SSL as well), and then from ...
Vatva's user avatar
  • 1
1 vote
1 answer
165 views

Manually check the SSL cert to avoid MITM on https?

Let's suppose I go to https://www.example.com using Tor. I check that the URL is correct, and the lock icon is present. But the exit node could be run by an adversary who uses a MITM attack and ...
allyfoyer8's user avatar
11 votes
3 answers
7k views

Do all .onion addresses use SSL/TLS?

Do .onion sites encrypt the information going through the exit node? Because a lot of them start with HTTP and not HTTPS.
Glenn's user avatar
  • 111
1 vote
1 answer
1k views

Import a SSL Client Certificate into the Tor Browser

as an extra layer of security, I want to use client site SSL certificates for authentication on my hidden-service webserver. Within the original Firefox (version 36.0) this is already working (with ...
meamy's user avatar
  • 13
1 vote
0 answers
201 views

Since yesterday, I can not access mercadolibre.com.ar anymore [closed]

Thanks for such a good program. Since yesterday, mercadolibre.com.ar does not work for me anymore. It lets me navigate and view the products but it won't let me login to my account: https://www....
sofi's user avatar
  • 11
1 vote
1 answer
1k views

redsocks redirect port 443 -> Tor: Missing mapping for virtual address

I'm trying to redirect some port 443 connections through tor using redsocks. But when redsocks accesses tor, the client connections get dropped, and tor gives this warning: [warn] Missing mapping for ...
arvee's user avatar
  • 11
2 votes
1 answer
156 views

Problems with setting up a non-exit relay

I would like to contribute to the Tor Project and set up a non-exit relay. But there are some problems: Even if self-testing indicates my ORPort and DirPort are reachable from the outside, it doesn't ...
Craw's user avatar
  • 21
1 vote
2 answers
240 views

How to connect via SSL over Tor?

There is a website I want to go to, and the URL looks like this - irc://dsadfasdfgweh.onion:2525 No that is not a real website, I am not giving away the actual website I am trying to access. How do I ...
user1833's user avatar
2 votes
1 answer
101 views

Why not update Tor browser to the latest NSS?

Firefox ESR uses an older version of NSS than the standard Firefox. Consequences include TLS 1.2 disabled by default, user can enable it, but it is buggier than the lastest version and it does not ...
user1747's user avatar
  • 103
4 votes
3 answers
207 views

Can Heartbleed in connection with Tor read all my 2GiB ram, or it is limited to the memory already allocated to the SSL process?

If I am using a Tor version that is infected with SSL Heartbleed (CVE-2014-0092) Can someone read my hall 2GiB ram? Or is the damage limited to the memory already allocated to the SSL process? In ...
miuea's user avatar
  • 51
2 votes
2 answers
149 views

As a Tor Browser Bundle user, how concerned should I be about the heartbleed SSL vulnerability?

I've been reading about the 'Heartbleed' SSL/TLS bug (CVE-2014-0160) and it is alarming. Are my communications still secure? Are there any steps I should do to protect my security?
Ivar's user avatar
  • 1,630
3 votes
1 answer
215 views

Does the GnuTLS bug (CVE-2014-0092) affect the Tor Browser Bundle or Tails?

There is a new major security vulnerability in the GnuTLS library (CVE-2014-0092) that undermines SSL on (some?) Linux platforms. What versions of the Tor Browser Bundler or Tails (if any) are ...
Ivar's user avatar
  • 1,630
6 votes
2 answers
1k views

How can I improve my SSL/TLS security?

I recently visited https://www.howsmyssl.com/ with TorBrowser Bundle 3.5 and the rating was alarming. In particular, the site informed me that the cipher SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA was ...
Ivar's user avatar
  • 1,630
2 votes
1 answer
741 views

Vidalia standalone with new TBB errors out

bash-4.1$ start-vidalia This gives an error: ./App/vidalia: error while loading shared libraries: libssl.so.1.0.0: cannot open shared object file: No such file or directory I'm running TBB on ...
a7b's user avatar
  • 31