Problems accesing secure sites (https) SSL/TLS help???

Hello
We have a machine running Mountain Lion 10.8.3 that can`t access a bank`s site. In the same network we also have another machine running Lion 10.7.5 and it connects succesfully to the bank's site.
We did a capture of packets with Wireshark and we see that the following:
Mountain Lion try to uses SSL, without success.
Lion uses TLSv1 and works perfect.
If someone can help me and gives me any idea of this behaivor.
Thanks in advance.
Verny

10.8.4. If you're having problems with certificates only on that one site, try the following.
Back up all data.
Launch the Keychain Access application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Keychain Access in the icon grid.
From the menu bar, select
Keychain Access ▹ Preferences ▹ Certificates
There are three menus in the window. Change the selection in the top two to Best attempt, and in the bottom one to CRL. Log out, log back in, and test.

Similar Messages

Safari and iTunes having problems accessing secure sites

I've been having problems with iTunes not being able to access the iTunes Store. I can browse the store but can not add anything to my shopping cart. I decided it was time to see if Safari was having problems with secure sites and sure enough I discovered that it can not access secure sites either. The only way I've been able to access secure sites is via Firefox.
A typical scenerio is that I can not log onto my Apple ID. As soon as I click on the "sign in ID" link I get a pop-up stating that a secure connection to store.apple.com can not be established.
So far I've tried clearing the Safari cache and deleting site keys from my stored key chains. Nothing helps.
I'm running Safari 1.3.1 and iTunes 4.9.

Can anyone help?

How to invoking secured service(HTTPS/SSL)from bpel Process

Hi all,
i am very new to fusion middle ware. i used jdeveloper 10.1.3.3 and soa-server 10.1.3.1.i need to pass secured wsdl(HTTPS/SSL) from one bpel Process to other. Let me know any certificates are required to do this?
I am looking forward to getting any advice from our forum.
thanks & Reagards,
Hari.

First of all make sure your jdeveloper and soa suite versions match otherwise you will get unpredictable results. I suggest that you upgrade SOA Suite to 10.1.3.4 as this is the latest version.
That aside I'm assuming that the bpel process are on the same instance. If this is the case Yes you do need certificates as you need to implement SSL on your SOA Installation. If you use a common certificate such as verisign then the process is simpler as you don't need to worry about the public key as they are standard with Oracle as they are with your browser. If you want to sign your own certificate then you will need to add your public key.
If your server is already SSL and it is verisign then you should have no issues you will be able to connect.
cheers
James

Cisco RV042 - Dual Wan Load Balancing - Secure Site (HTTPS) Trouble

PID VID :
RV042 V03
Firmware Version :
v4.0.0.07-tm (Aug 19 2010 19:19:50)
Ever since I setup my RV042 with load balancing using the Dual Wan system I have had trouble staying connected to some secure sites. After doing some searching I found that the potential issue is the IP change mid session.
"http://www.broadbandreports.com/forum/r25537589-Cisco-RV042-can-not-use-load-balancing-for-some-web-sites"
Although my interface is significantly different I was able to find the same area in my RV042 admin area however, it doesn't seem to work.
System Management
> Dual Wan
In Wan 1 & Wan 2 I have HTTPS and HTTPS Secondary all forwarded to use Wan 2 under Protocol Binding
This however has not managed to do anything at all for my network and every computer conneceted experiences the same HTTPS irregularities at some websites.
I'm sure I must be doing something wrong, but I don't know what it is.
Both incoming connections are from the same service provider although the plans are different.
Any help with this would greatly help me stop losing my mind trying to fight with my website control panel for 10 minutes to just login and get something done.
Thanks

Any ideas or advice from anyone?

How to fix this problem? Secure Connection Failed, SSL received a record with an incorrect Message Authentication Code. (Error code: ssl_error_bad_mac_read)

Secure Connection Failed
SSL received a record with an incorrect Message Authentication Code. (Error code: ssl_error_bad_mac_read)
I have been receiving this error message recently when I tried to access school elearning websites and other school related websites, I have also tried on internet explorer and it shows page cannot be displayed. I have been trying the available solutions to solve it but none of them work. Is there alternative solutions available? Please advise. Thanks.

It works after I disabled IPv6 in Firefox. Thank you for your help :)

I can't view the security certificate in SSL/TLS sites with Firefox 3.6.10 Win 7 (32)

When I click on the blue or green "secure connection" icon in Firefox 3.6 versions, running Windows 32, and click "more information" button, the view certificate button is locked (does not work). Furthermore the text in this window is a bit garbled in layout terms.
I have another Win 7 machine, which runs on 64 bit, and I don't get the same problem with this configuration.

Rename or delete secmod.db (secmod.db.old) and possibly cert8.db (cert8.db.old) in the [http://kb.mozillazine.org/Profile_folder_-_Firefox Profile Folder] in case there is a problem with those files.
Create a new profile as a test to check if your current profile is causing the problems
See [[Basic Troubleshooting#Make_a_new_profile|Basic Troubleshooting: Make a new profile]]
If that new profile works then you can transfer some files from the old profile to that new profile (be careful not to copy corrupted files)
See http://kb.mozillazine.org/Transferring_data_to_a_new_profile_-_Firefox

Problems Accessing Gracenote CDDB: "HTTP Processing Error" Help Please

I'm hoping for a bit of help here people, having a few problems I would be grateful for your assistance with!
I've been having trouble accessing Gracenote for a couple of months now. What was happening was that when I tried to search for the CD info on Mediasource, the gracenote icon would appear in the top left corner, and the screen loading as if obtaining the info, but then nothing happens and the info is left blank.
I have tried everything I know, and everything that has been suggested here! I have altered the ZoneAlarm settings, deleted the cddb file, checked that the settings in Mediasource are correct, downloaded the latest drivers, re-registered for gracenote manually and various other things. None of these have solved the problem.
Finally, I decided to completely re-install Creative Mediasource. After doing this, I tried to access gracenote again, and was asked to re-register. I did this, but then recieved an error message stating "Internal Socket Error". THis happened a couple of times, before the message was replaced with "HTTP Processing Error", whenever I try to access gracenote. It still will not recognise the music!
Basically, I am at the end of my knowledge and the end of my patience!!! I really don't know what more to do and so I'm throwing this open to you guys - any help would be so, so appreciated! The only this I can think is that my dad got an ipod two months ago, and has installed itunes on the PC. From what I understand, that uses gracenote too - are the two programmes clashing? If so, can anyone suggest a way I can alter this?
You're my last hope before I'm condemmed to a lifetime of filling in CD's by hand!!! I'll be really grateful if any of you guys can help me out!
Thanks!
David

Try delete the file "cddb.db" or/and "cddb.ds" (if they exist) under the directory "C:\Documents and Settings\YourName\Application Data\Creative\NetContent\MediaSource". See whether it hel
ps.
If the above does not help, then try the following:- Go to Start->All Programs->Accessories->Command Prompt. - Run the following commands in the command line to unregister the files: cd "C:\Program Files\Creative\Shared Files" CTRegsvr /u CDDBControlCreative.dll CTRegsvr /u CDDBUICreative.dll CTRegsvr /u CTCDDB.nco CTRegsvr /u NetCoMgr.nco- Run the following commands in the command line to register the files: CTRegsvr CDDBControlCreative.dll CTRegsvr CDDBUICreative.dll CTRegsvr CTCDDB.nco CTRegsvr NetCoMgr.nco

Problems with Secure web.show_document! Nimphius Help!!

In my application, every report node in the menu calls a form which loads the parameters for the report. Ive read the secure web.show_document whitepaper, and i've done everything on the white paper and everytime I try to open the form that invokes the java bean "USERID_BEAN" the form crashes the application.
Since no errors can be found on a application crash, I tried to compile it in forms and run it as a stand alone form. This is the error I get.
<img src="http://img143.imageshack.us/img143/5229/pickak8.jpg">
The class path in the reg is intact... here is the entry
FORMS_BUILDER_CLASSPATH:
C:\Oracle\10gDS\forms\java\frmbld.jar;C:\Oracle\10gDS\jlib\importer.jar;C:\Oracle\10gDS\jlib\debugger.jar;C:\Oracle\10gDS\jlib\utj.jar;C:\Oracle\10gDS\jlib\dfc.jar;C:\Oracle\10gDS\jlib\help4.jar;C:\Oracle\10gDS\jlib\oracle_ice.jar;C:\Oracle\10gDS\jlib\jewt4.jar;C:\Oracle\10gDS\jlib\ewt3.jar;C:\Oracle\10gDS\jlib\share.jar;C:\Oracle\10gDS\forms\java\frmwebutil.jar;C:\Oracle\10gDS\forms\java\frmall.jar;C:\Oracle\10gDS\forms\java\frmrwinteg.jar;
At first I thought it might have been the jar file frmrwinteg.jar, but I downloaded the new one at Nimphius' blog. Still no change..
am I missing something? Someone please help me! Thanks!
Mo

If I am remembering correctly, some changes were necessary in order to make this work with 10.1.2.3. So, if you are using the old jar which you used in previous versions, I would recommend obtaining the one specifically updated for 10.1.2.3. Refer back to the OTN page which has the download and choose the link that references the new version:
http://www.oracle.com/technology/products/forms/techlisting10gR2.html
Be sure to clear the client Jar cache before re-testing. This is not the same as the browser cache.

No email download, can access only secure sites

I have a weird problem.
I have a 2010 MacBook Pro with 10.6.8 updated on all Apple apps. I started not being able to access "normal" websites (http://....). However, I have no problem accessing secure sites (https://....). I also have the same problem regardless of browser (Safari, Chrome, Firefox). I also am not able to download any email to "Mail" app (tho thankfully am able to view it in my Spammarrest account--a "secure" site). I backed up my hard drive, repaired permissions, verified and repaired disk (got one message that originally said "The volume...was found corrupt and needs to be repaired."). Repaired permissions. Have since run Verify (in Disk Utility) and three times it shows "OK". Does anyone have ANY ideas? I think it must be software related, perhaps doing with permissions (have reparied permissions twice).
My wife has no such problems on her iMac, so likely not router related (of course, I have rebooted everything several times).
Thanks anyone!

The problem is not solved yet.
Please read this whole message before doing anything.
This procedure is a diagnostic test. It won’t solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
Third-party system modifications are a common cause of usability problems. By a “system modification,” I mean software that affects the operation of other software — potentially for the worse. The following procedure will help identify which such modifications you've installed. Don’t be alarmed by the complexity of these instructions — they’re easy to carry out and won’t change anything on your Mac.
These steps are to be taken while booted in “normal” mode, not in safe mode. If you’re now running in safe mode, reboot as usual before continuing.
Below are instructions to enter some UNIX shell commands. The commands are harmless, but they must be entered exactly as given in order to work. If you have doubts about the safety of the procedure suggested here, search this site for other discussions in which it’s been followed without any report of ill effects.
Some of the commands will line-wrap or scroll in your browser, but each one is really just a single line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, and you can then either copy or drag it. The headings “Step 1” and so on are not part of the commands.
Note: If you have more than one user account, Step 2 must be taken as an administrator. Ordinarily that would be the user created automatically when you booted the system for the first time. The other steps should be taken as the user who has the problem, if different. Most personal Macs have only one user, and in that case this paragraph doesn’t apply.
Launch the Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.
When you launch Terminal, a text window will open with a line already in it, ending either in a dollar sign (“$”) or a percent sign (“%”). If you get the percent sign, enter “sh” and press return. You should then get a new line ending in a dollar sign.
Step 1
Triple-click the line of text below to select it:
kextstat -kl | awk '!/com\.apple/{printf "%s %s\n", $6, $7}'
Copy (command-C) the selected text to the Clipboard. Then click anywhere in the Terminal window and paste (command-V). Post the lines of output (if any) that appear below what you just entered. You can do that by copy-and-paste as well. Omit the final line ending in “$”. No typing is involved in this step.
Step 2
Repeat with this line:
sudo launchctl list | sed 1d | awk '!/0x|com\.(apple|openssh|vix)|edu\.mit|org\.(amavis|apache|cups|isc|ntp|postfix|x)/{print $3}'
This time you'll be prompted for your login password, which you do have to type. It won't be displayed when you type it. Type it carefully and then press return. You may get a one-time warning not to screw up. You don't need to post the warning. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.
Note: If you don’t have a login password, you’ll need to set one before taking this step. If that’s not possible, skip to the next step.
Step 3
launchctl list | sed 1d | awk '!/0x|com\.apple|edu\.mit|org\.(x|openbsd)/{print $3}'
Step 4
ls -1A /e*/mach* {,/}L*/{Ad,Compon,Ex,Fram,In,Keyb,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Spo,Sta}* L*/Fonts 2> /dev/null
Important: If you formerly synchronized with a MobileMe account, your me.com email address may appear in the output of the above command. If so, anonymize it before posting.
Step 5
osascript -e 'tell application "System Events" to get name of every login item' 2> /dev/null
Remember, steps 1-5 are all copy-and-paste — no typing, except your password. Also remember to post the output.
You can then quit Terminal.

The full exception text is: Could not establish trust relationship for the SSL/TLS secure channel with authority :32844'.

Hi I am getting this error,
The Secure Store Service application Secure Store Service is not accessible
The full exception text is: Could not establish trust relationship for the SSL/TLS secure channel with authority 'sp:32844'.
Any help will be appreciated

You may need to add the SSL to the SharePoint Trusted Root Authority.Get the root cert for the site you are securing with HTTPS/SSL and add in SharePoint Trusted Root Authority. As explained here -
https://social.technet.microsoft.com/Forums/office/en-US/2aed19c6-24df-4646-b946-f4365a05e32f/secure-store-service-stops-working-once-or-twice-every-day-could-not-establish-trust-relationship?forum=sharepointadmin
http://brainlitter.com/2012/03/13/sharepoint-2010-and-cert-trust-could-not-establish-trust-relationship-for-the-ssltls-secure-channel/
Thanks
Ganesh Jat [My Blog |
LinkedIn | Twitter ]
Please click 'Mark As Answer' if a post solves your problem or 'Vote As Helpful' if it was useful.

Safari Question marks on secure sites

I have Safari 4 installed on my Windows laptop. I am having a problem viewing secure sites. All that appears is the text and then blue question marks where the images/tables should be. This is not a problem when using Firefox, Chrome, or IE.
This is also not a problem on my other windows computers nor on my Mac.
I've tried resetting Safari, I've tried uninstalling and reinstalling Safari, nothing is working.
Any idea how to fix this?
I was able to fix it on a home computer by uninstalling and trashing Safari, then creating a new user and reinstalling. Unfortunately I can't do this on my work computer.

I would normally think it was that too but 3 accounts on the computer have the problem.
Okay ... that suggests a program files issue rather than preference files.
When you uninstalled Safari, did you also uninstall Apple Application Support?
If not, try the technique from the following post:
http://discussions.apple.com/thread.jspa?messageID=10598385&#10598385

Secure sites

I'm having a problem loading secure site with Safari. I just updated it to 5.0.6, and since I can't load any https sites. I tried disabling extensions to no avail, Could the update have messed something up?

PhotographerJim wrote:
Ok I have keychain access open, now what? I don't see anything for safari. I don't have it saving passwords or anything.
Then that would be why you cannot open secure sites that require a password, although in many cases (like banks) these are stored in cookies.

Safari not showing secure site images (blue question marks)

I have Safari 4 installed on my Windows laptop. I am having a problem viewing secure sites. All that appears is the text and then blue question marks where the images/tables should be. This is not a problem when using Firefox, Chrome, or IE.
This is also not a problem on my other windows computers nor on my Mac.
I've tried resetting Safari, I've tried uninstalling and reinstalling Safari, nothing is working.
Any idea how to fix this?

I too am having this problem. I cannot access my gmail, ebay, facebook, or other login sites. If I attempt to access any site that requests user and password information, a safari dialogue stating "safari can't verify the identity of the website "...."". So far I've assumed that all of my certificates are comprimised. I don't know how to delete my certificates to get new ones as this information is not posted anywhere.

In version 3.* I got a security icon (HTTPS) in the statusbar. How get it back in version v4?

in ver 3.* I got an Icon (padlock) in the statusbar.
Since I have installed ver 4.... it is gone?
How I get it back? ....is it necessary for safety internet use (secure websites).
Fred54

Padlock is no longer shown; it can give users a false sense of security. You need to become familiar with the Site Identity Button colors and how to use it to get more information about secure sites:
*https://support.mozilla.com/en-US/kb/Site+Identity+Button
*http://www.dria.org/wordpress/archives/2008/05/06/635/

Secure FTP using FTPS (SSL/TLS) - need help!

I am trying to use an FTP Sender Channel using Secure FTP. I am currently getting a "java.net.ConnectException: Connection timed out: connect" error.
I am on XI 3.0 with SP13.
Settings are FTPS (FTP Using SSL/TLS for Control and Data)
Command Order Auth TLS, USER, PASS, PBSZ, PROT.
I am able to connect from my pc using WSFTP Pro which looks to be using the same command order. I made sure WSFTP Pro was set for passive connections as XI only supports this until SP15.
I have asked our Basis support to make sure the proper ports are open that are used for the connection and file transfer. They have deployed the Java Cryptographic Toolkit on XID, and changed the startup mode for SSL runtime from 'manual' to 'always'. The site I will connect to uses a certificate from Equifax which was added to the TrustedCAs keystore view. After still not being able to get a file, I also added the certificate of the site, which I was able to export from WSFTP Pro and import onto XI with STRUST.
I have increased the J2EE trace for com.sap.aii.adapter.file to Debug, but I haven't been able to get much out of the log. I see entries, such as some SSL activity and the timeout, but nothing that points me to an answer. Of course, I really don't know what to look for.
I have tried to connect to the remote server by name or ip with the same connection timeout.
I currently don't have it set to use X.509 certificate for Client Auth, but I did try a few of those options with no luck.
Any pointers would be appreciated.
Thanks,
Eric Peterson

Eric,
Did you ever solve the problem ? I am having the same issue.
Cheers
Jon

Problems accesing secure sites (https) SSL/TLS help???

Similar Messages

Maybe you are looking for