The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
25 views

OpenVPN TLS Error

I'm having trouble getting OpenVPN to work. I have installed and configured OpenVPN on my centos machine and it seemed to be going fine. I followed the instructions in the following link ...
0
votes
0answers
35 views

How to log failed username and plaintext passwords in dovecot server using PAM authentication?

I am configuring web mail honeypot in centOS 6.6 using SquirrelMail, postfix and Dovecot. I need to log all the entered user name and plain text passwords for web mail login. Modifications done to ...
0
votes
2answers
46 views

Implementing TLS 1.2 when I SSH into a box as a measure against POODLE

Is it possible to edit sshd_config or ssh_config, such that the SSH connection into a machine configured to use TLS1.2 is successful and rejects connections configured to use TLS1.1 and below, as well ...
0
votes
0answers
10 views

Enable TLS-SRP for, say, courier-imap

I want to use TLS-SRP for the services that I run on my server, because I don't want to leak credentials, not even on the server's disk. There are several articles on setting up TLS-SRP either with ...
0
votes
1answer
63 views

Installing Restund on AWS EC2 Ubuntu

I have successfully installed Restund on a Vagrant Machine running Ubuntu. But when I tried to install it on AWS EC2 Instance running Ubuntu, I get an error when starting Restund. Error Message: tls ...
3
votes
2answers
316 views

How to globally configure secure clients using OpenSSL on Oracle Linux 5/RHEL 5?

My workplace recently patched one of our servers to address the POODLE vulnerability. Since then older Oracle Linux 5 clients (based on RHEL 5) can no longer securely connect to the server with any ...
1
vote
1answer
5k views

Disable SSLv3 In cURL?

I'm having a problem connecting to a website that is hosted with CloudFlare using cURL. When I try to connect to the website with HTTPS (using curl -v https://www.xxxxxx.com), it says: * About to ...
1
vote
1answer
42 views

When would CUPS use TLS?

I'm running Debian Testing on amd64, with the apt-listbugs feature that tells me if bugs are present before upgrading. Now the package libgnutls-deb0-28 has a serious bug to the effect that "CUPS ...
0
votes
0answers
70 views

Can Postfix inbound TLS (smtpd) use a policy map to not enforce TLS for some hosts?

I have a Postfix server running submission on port 587 with mandatory TLS and SASL authentication. I want to allow clients on localhost to connect without using TLS and without authenticating. By ...
0
votes
1answer
25 views

TLS and Packet Filtering

I want to set up a client wit BSD packet filtering that only allows outgoing 443 connections. Would this do the trick in my pf.conf? block out block in pass out on eth0 inet proto tcp from (eth0) ...
3
votes
1answer
163 views

Does fetchmail support SSL or TLS when using SMTP to forward email?

I am trying to forward emails that are fetched with fetchmail to another SMTP host, which enforces STARTTLS. I could not find a way to enable TLS in fetchmail. Is this possible at all? If so, how?
0
votes
2answers
391 views

phpldapadmin with STARTTLS

I'm trying to configure OpenLDAP on Ubuntu using the the Ubuntu server guide. I have enabled Start TLS with a certificate generated using my own CA certificate (since it is for internal use). I ...
2
votes
3answers
1k views

specify certificate of CA in Dovecot

In Postfix, I have specified my private key, my certificate, and the certificate of my CA smtpd_tls_CAfile = /etc/ssl/cacert.pem smtpd_tls_key_file = /etc/ssl/server.key smtpd_tls_cert_file = ...
1
vote
1answer
505 views

How to turn off STARTTLS for internal relaying of emails?

I read with interest from sendmail guide that it is possible to disable TLS. I tried doing so for internal mails by adding the following lines in /etc/mail/access: Try_TLS:my.server NO ...
1
vote
0answers
116 views

Please help diagnose very slow Remmina session for VirtualBox VM

I'm using Remmina 0.9.99.1 with CrunchBang VMs on a remote server (VirtualBox 4.3.4 on Debian 7.2.0 x64). I'm using RDP with TLS security, and connect through a UDP-mode VPN. With freshly-installed ...
0
votes
2answers
210 views

Trying to use TLS SMTP against Exim, getting Security Error back; what's wrong?

OS: FreeBSD9 64 Bit MTA: EXIM4 with TLS with Self Signed Certificate. I am using telnet myserver.com 25 EHLO dummy@dummy.com STARTTLS It says TLS go ahead And then I issue MSG FROM: ...
3
votes
3answers
979 views

How to record an interactice socat TCP/TLS session?

Socat is great for interactively testing line based human readable protocols like HTTP or IMAP. For example: $ socat -d -d READLINE,history=$HOME/s.hist openssl:host:port,crnl,cafile=some.ca For ...
1
vote
2answers
1k views

Create SSL certificate - Silent [closed]

I want to create a SSL certificate without get prompt for the data. The normal way to create the certificate would be: openssl req -x509 -nodes -days 7300 -newkey rsa:2048 -keyout ...
3
votes
2answers
747 views

WeeChat decryption fails while reading from data socket

I'm using WeeChat for quite a while on different machines now. All instances are using the same settings over and over again. When I connect, everything is fine, like this output from WeeChat, just ...
4
votes
1answer
7k views

How do I use implicit FTP over TLS

using any FTP client (I'm on Ubuntu 12.04 and tried using lftp), I want to be able to make an implicit TLS connection on a FTP server, but I can't quite manage to successfully connect(All I get is : ...
3
votes
2answers
5k views

How to make ldapsearch working on SLES over tls using certificate?

We need to connect our php script to LDAP over tls using a certificate. LDAP connection works nicely without tls. More details here ...
3
votes
1answer
3k views

mutt SMTP TLS error sending mail

When I try to send a mail, I get the following error: gnutls_handshake: An unexpected TLS packet was received. This is my .muttrc (myname, myaddress and mymail are placeholders): # Automatically ...
1
vote
1answer
422 views

Sendmail with TLS support changes FROM: address

I have multiple domains on one server and when sending email to server, which supports TLS, server changes FROM field to default domain ($j). What should i do (in .mc level please) to remain primary ...
1
vote
1answer
819 views

How to display server's TLS certicicate details in terminal?

Having TLS certificate in local file, I can display its details using syntax like: openssl x509 -text -noout -in cert_filename Is there any way to display remote SMTP/POP3/HTTP server's TLS ...
5
votes
1answer
927 views

TLS over unix pipe

Can I use TLS/SSL over Unix pipe with Unix command line? I want the equivalent of $ mkfifo /tmp/spipe $ echo a|openssl s_server -acceptFifo /tmp/spipe & [1] 25563 $ openssl s_client ...