Questions tagged [ssl]

SSL/TLS is a cryptographic protocol designed to provide communications security over a computer network. It is the S in HTTPS, IMAPS, SMTPS, etc.

Filter by
Sorted by
Tagged with
0 votes
0 answers
27 views

How to verify the enabled Ciphers through OpenSSL in RHEL 8.5

Our Java Application is functioning on RHEL 8.5 OS platform with TLSv1.2 protocol. Here, to improve the security, We want to enable only a few ciphers and need to block others. CIPHERS TO BE ENABLED: ...
user avatar
  • 21
0 votes
1 answer
20 views

keyUsage command not found (for create certificat in non interactive mode)

I would like to create a certificate files for my website. In the past, I use a non interactive script for doing that and it work perfectly. Now, I want to use again this script but it stop in this ...
user avatar
  • 103
0 votes
0 answers
14 views

SSL Install on Ubuntu for Nextcloud - Apache2 FAILED

I want to express, I am still learning :) This is my first attempt at updating/installing an SSL certificate in any Linux platform. My SSL Cert expired for my Nextcloud server and so I created the CSR/...
user avatar
  • 1
0 votes
1 answer
23 views

How to fix <urlopen error ……. unable to get local issuer certificate (_ssl.c:997)> in Ubuntu?

I am using Ubuntu 22.04 LTS (Only Ubuntu). How can I fix this issue: urlopen error ……. unable to get local issuer certificate (_ssl.c:997) May be because of this issue I can't attach my system to ...
user avatar
  • 11
0 votes
1 answer
35 views

How to enable TLSv1.3 in Apache 2.4.35 with OpenSSL 1.1.1?

My java application was installed on RHEL 8.5 OS Platform which has OpenSSL version 1.1.1. And the application was compiled on RHEL 5.6 OS platform where the OpenSSL version was 0.9.8. Also, the ...
user avatar
  • 21
1 vote
1 answer
18 views

SSL: SAN not populated

I'm trying to create my self-signed certificate: CA private key creation: openssl genrsa -out ca.key 2048 CA certificate creation (see ca.cnf's content bellow): openssl req -x509 -new -key ca.key -...
user avatar
  • 275
0 votes
1 answer
14 views

client-certificate authentication for SSH

My servers are incessantly being brute-force attacked on my SSH port. I am using non-standard SSH port, firewall blacklist for port-scanners, and I am also using custom fail2ban-like script to ban ...
user avatar
0 votes
0 answers
16 views

Oracle Linux 7.9 - SSL Handshake failure

I ran into a weird issue involving 2 Oracle Linux 7.9 machines running on 2 different OCI (Oracle Cloud Infrastructure) tenancies. The source and destination server are in different networks and have ...
user avatar
-1 votes
0 answers
13 views

"Access Error: Unauthorized" when trying to access any of my domains hosted on my home server

My domains (Nextcloud and Bitwarden) were working correctly before I changed ISP. With the new ISP I also got a new modem, that's literally all that's changed in my setup. When trying to connect to ...
user avatar
0 votes
0 answers
8 views

rsyslogd tls one-way authentication configuration

rsyslogd fine manual describes quite well how to set up your client and server in order to get syslog over tls log collection, with mutual authentication. For this, a certificate on the client and on ...
user avatar
  • 101
4 votes
1 answer
149 views

Why is curl, but not wget, having trust issues with software.download.prss.microsoft.com?

The following URL redirects to a microsoft.com subdomain: https://tb.rg-adguard.net/dl.php?go=3dd1ce66 Namely to https://software.download.prss.microsoft.com/db/Win10_20H2_v2_EnglishInternational_x64....
user avatar
  • 677
1 vote
1 answer
60 views

Why are so many strange certificate filenames ending with 0 in /etc/ssl/certs?

As we know that CA certificates locate in /etc/ssl/certs in debian. cd /etc/ssl/certs ls | grep 0$ |wc -l 126 I paset part of them here: f081611a.0 f0c70a8d.0 f249de83.0 f30dd6ad.0 f3377b1b.0 ...
user avatar
  • 35
2 votes
1 answer
34 views

Adding custom field to the subject line in a opensssl X509 certificate via command line

I am attempting to generate a CSR for a certificate and wish to include a unique id as part of the certificate subject line. this information shall be used by the TLS client for some purpose after the ...
user avatar
  • 155
0 votes
0 answers
37 views

Why can't create new certification with acme?

xxxx.xyz is my domain name,i want to create a certification with acme: acme.sh --issue --dns dns_cf -d xxxx.xyz [Tue 05 Apr 2022 04:12:20 PM HKT] Using CA: https://acme.zerossl.com/v2/DV90 [Tue 05 ...
user avatar
  • 35
0 votes
1 answer
57 views

Install gitlab in one VM with docker-compose having a proxy adding https in another vm

I have a server with several virtual machines and one of those is my Proxy that direct the right domains to the right VM on the right port. I used the standard docker-compose file to create gitlab-ce ...
user avatar
  • 24.7k
0 votes
1 answer
68 views

What are the meaning of keys in OVPN file?

I have ovpn file, which allows me to connect to remote server successfully from desktop OpenVPN GUI. Now I want to copy content of this file to OpenVPN client of pfSense. The problem is that fields ...
user avatar
  • 2,517
1 vote
1 answer
49 views

Local transparent proxy SSLSplit causes forwarding loop

I am trying to debug an application which sends RPCs via HTTPS. In order to read the actual RPC content, I am trying to use SSLSplit on the same machine as the application to MITM the connection. To ...
user avatar
  • 113
0 votes
3 answers
571 views

How to update SSL components on server too old to actually download the packages over SSL

Seems like a catch 22 here. Updating the server to a newer version is out of the question. I simply need to update Apache to a specific (older version). The server is CentOS 6.3. The base repo is ...
user avatar
0 votes
1 answer
75 views

Install *.domain.com SSL certificate in openSUSE Leap 15.2

I have the budle, the .key/.pem and everything else. How should I install it on the local machine?
user avatar
0 votes
1 answer
61 views

Localhost does not honor installed NOT SELF-SIGNED wildcard cert

Linux: Ubuntu 21.10 HTTP Server: Apache/2.4.48 (Ubuntu) SSL Certificate Type: Wildcard SSL Certification Issued By: Sectigo Limited (i.e. NOT SELF-SIGNED) The problem: Mediawiki does an internal ...
user avatar
  • 203
1 vote
0 answers
17 views

Apache httpd not enforcing cipher order

I have an httpd server with the following options SSLCipherSuite 'EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA256:EECDH:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!P SK:!...
user avatar
  • 9,316
0 votes
1 answer
281 views

curl -- via proxy -- how to ignore self signed certificate

I can access insecure sites: curl -k https://self-signed.badssl.com I can access a site with mitmproxy: curl --proxy 127.0.0.1:8080 --cacert ~/.mitmproxy/mitmproxy-ca-cert.pem https://google.com ...
user avatar
  • 264
0 votes
0 answers
77 views

How to add trusted certificates to openssl on LFS

I have an LFS system (11.0) with openssl. Whenever I use wget, I get an error that the certificate is not trusted. Where do I get and put trusted certificates?
user avatar
0 votes
1 answer
48 views

Linux From Scratch 11 can not verify any SSL certificates

I have built an LFS 11.0 system and installed wget from the BLFS book. I also have openssl and gnutls installed, but whenever do wget for a site with ssl, it says it can't verify the cert. It does ...
user avatar
0 votes
0 answers
43 views

LDAP bind with TLS: Start TLS request accepted but not working

I am trying in vain to do a LDAP bind from a linux based device to a ldap server with TLS. The server supports both simple authentication and TLS authentication. First, I successfully bind without TLS ...
user avatar
0 votes
1 answer
285 views

openssl verify - how to verify a single combined certificate bundle file

I maintain/enhance a product that uses a browser-based admin interface. We're late to the party and are only now looking to support HTTPS between browser and our backend (Apache httpd in front of ...
user avatar
1 vote
0 answers
61 views

Why wasn't curl able to connect to bit.ly?

I was trying to install Hyperledger Fabric and the sample code and examples they have, following the instructions on their page. However, when I tried to execute the following command: curl -sSL https:...
user avatar
  • 111
2 votes
0 answers
108 views

nginx: SSL (default) endpoint with multiple certificates

I'm using nginx as SSL terminated TCP endpoint for multiple domains (let's say 100). There's no need to treat incoming connections differently (they all get proxy'ed to the same backend), however for ...
user avatar
  • 21
0 votes
1 answer
116 views

Is there some kind of hack that I can do to upgrade my Apache openssl from 0.9.8 to 1.1.1 ? Perhaps implement / recompile my own mod_ssl.so module?

I'm in desperate need for help. I've purchased a SSL certificate but my Apache server is running an old version of OpenSSL. Unfortunately I cannot re-install or re-compile Apache. It was installed ...
user avatar
0 votes
0 answers
48 views

Proftp Virtual Hosts Settings

i'm trying to set up proftpd with virtual server settings, but there are always problems during connection. I have two domains which are pointing to the same External IP Address: ftp.domain.tld -> ...
user avatar
  • 15
1 vote
1 answer
104 views

Nginx Caching SSL Certificate?

Previously(successfully), I had updated my SSL certificates in the same fashion as I tried to do this time. Like 2 files I have, domain.chained.crt and domain.key. Then ran sudo service nginx restart, ...
user avatar
  • 111
0 votes
0 answers
73 views

curl command get many ` TLSv1.3 (IN), TLS app data, [no content] (0):` information

When I execute a cmd: curl -vo 1 'https://suapk-auto-us.demo.com/sau-apk/21/08/19/4e3e6e84f68747d1a575b0dd758c7610.apk' --resolve suapk-auto-us.demo.com:443:1.1.1.1 I get many TLSv1.3(IN) app data, [...
user avatar
0 votes
1 answer
256 views

nmap & ssl-enum-ciphers

I am trying to check for the offered ciphers with nmap: $ nmap -Pn --script ssl-enum-ciphers host1.example.org -p 443 Starting Nmap 7.92 ( https://nmap.org ) at 2021-12-13 14:52 CET Nmap scan report ...
user avatar
  • 9,316
0 votes
0 answers
286 views

Configure vsftpd for specsific Cipher Suites and TLS version

There is a device that I do IoT development needs to connect FTP server to download a file. I'm using vsftpd as an FTP server. The device that I'm using has some limitations. It supports TLS 1.2 and ...
user avatar
  • 101
0 votes
0 answers
156 views

Empty SSLKEYLOGFILE

I want to decrypt TLS connection in wireshark and I have set SSLKEYLOGFILE env variable to ~/key.log, but it is always empty. I have also restarted the browser and system multiple times. I set the env ...
user avatar
0 votes
1 answer
38 views

Managing ssl ciphersuites in Linux

Are the ciphersuites and encryption protocols allowed by an application managed only at the application, or can they be managed at the OS level? Note: My experience with ssl is at the application ...
user avatar
0 votes
1 answer
307 views

Default ssl_dhparam file used by nginx

Where is the default dhparam file used by the nginx web server after a fresh install of Debian 11? Let's say I do a fresh install of nginx on Debian 11: apt install nginx And I do not have any ...
user avatar
0 votes
1 answer
31 views

Default ssl_dhparam file used by nginx in RHEL/CentOS

Where is the default dhparam file used by the nginx web server after a fresh install of CentOS 8? Let's say I do a fresh install of nginx on CentOS 8: yum install nginx And I do not have any ...
user avatar
0 votes
1 answer
229 views

Adding multiple user inputs into comma separated line in shell script

I have to get user inputs of multiple domain names until the user is done with inputs. Input can be just one domain name or more than one. and the domain name should be separated by a comma ,. How can ...
user avatar
  • 5
1 vote
0 answers
305 views

Create a Self-Signed SSL Certificate for Apache in Ubuntu

I want to create A self-signed certificate to encrypt communication between my server and any clients: I create a self-signed key and certificate pair with OpenSSL in a single command: sudo openssl ...
user avatar
0 votes
1 answer
70 views

SSL/TLS on linux mint using XAMPP?

I have a basic website that I want to get HTTPS on. It's like the crowning jewel to me. However, I am using linux mint for the server. All the tutorials I can find for it are on windows, using a ...
user avatar
  • 15
0 votes
0 answers
35 views

How to test starttls+sasl config?

I have a requirement to provision SMTP authentication services running in the cloud. I have setup postfix and confirmed that it does not allow relaying without authentication (tested with telnet) and ...
user avatar
  • 4,225
2 votes
1 answer
524 views

mutt error sending mail: gnutls_handshake: An unexpected TLS packet was received

I keep on getting an error as indicated by the title sending email in neomutt, This is what I put in my muttrc: set from = "myemail@domain.ca" set realname = "my name" set ...
user avatar
0 votes
2 answers
1k views

Detect if TLS version prior 1.2 has been disabled on RHEL 7

Situation: I have a RHEL 7 Virtual Machine and I have installed ActiveMQ (v5.16.0) on it (in /opt/...) Since few days some of my clients cannot connect anymore on the openwire SSL port (61617) with ...
user avatar
  • 1,545
0 votes
0 answers
29 views

How force cache large static file over ssl (nginx)?

I have 2 nginx: nginx with ssl and without ssl. Nginx with SSL - https://github.com/fsouza/docker-ssl-proxy/blob/main/nginx.conf.template Nginx without SSL - https://github.com/Drill4J/admin-ui/blob/...
user avatar
0 votes
0 answers
157 views

Bazel Remote Cache not working with certificates/TLS

I'm runnig Bazel remote cache from https://github.com/buchgr/bazel-remote inside docker, by runnig the following commands to start the http and grpc server: docker pull buchgr/bazel-remote-cache ...
user avatar
  • 101
0 votes
0 answers
15 views

openldap authentication with sssd redhat 7

I did setup an ldap server with a tls certificate. (auth-001) I have a test machine (auth-002) that successfully uses the openldap to authenticate. Therefore the server works fine I did setup a second ...
user avatar
  • 1
2 votes
1 answer
947 views

Unable to get local issuer certificate (but my trusted CA-certificate store seems OK)

This has kept me busy for a good number of hours. I have read a good deal other articles and Stackexchange-questions, and tried other things, but no positive result so far. Running Ubuntu20/Nginx/...
user avatar
0 votes
0 answers
53 views

SSL configuration CentOS 7

When trying to start httpd service the following error is shown Job for httpd.service failed because the control process exited with error code. See "systemctl status httpd.service" and &...
user avatar
0 votes
1 answer
311 views

RSYSLOG force only TLS 1.3 version

Debian: 10.10 rsyslog-gnutls: 8.1901.0-1 libgnutls: 30.6.7 I search in where path and name file insert this var "gnutlsPriorityString". What is her path? And her Name file? to put this var &...
user avatar
  • 5

1
2 3 4 5
13