Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ssl]

SSL/TLS is a cryptographic protocol designed to provide communications security over a computer network. It is the S in HTTPS, IMAPS, SMTPS, etc.

0
votes
0answers
12 views

rsyslogd as a syslog forwarder over TLS (certificate based authentication required)

I want to configure a machines rsyslogd (redhat OS7 in this case) to connect via TLS to a central log collector. The resyslogd needs to authenticate with a client certificate. I already have the key, ...
-1
votes
0answers
8 views

Issue with an EV SSL Cert and Nginx [on hold]

I am working in the company facilities. This issue is not related to a hosting provider: The thing is that I am working with a CentOS server and I have finished the cert installation following the ...
-2
votes
1answer
35 views

How to convert a certificate in .pfx format to .jks in HP-UX server

I have a task to convert a .pfx SSL certificate to .jks format in a HP-UX B.11.31 server to be configured in our application's server.xml file, (keystoreFile=) for our 8090 connector port.
1
vote
0answers
73 views

MOZILLA_PKIX_ERROR_REQUIRED_TLS_FEATURE_MISSING

I updated Firefox to version 67.0, and after the customary fights like getting the tabs on the right spot, I found I couldn't connect to stackoverflow anymore (or to the redhat bugzilla). I get ...
1
vote
1answer
30 views

Using Apache's ssl certificates when it is accessed via Nginx reverse proxy

I have been running an Apache webserver on my machine for a long while, serving various sites via https. I had to install a Nginx server on the same box, and set it up to reverse proxy most requests ...
0
votes
1answer
43 views

Unable to connect to remote server using lftp

I'm trying to establish a new ftps connection between two servers, say A and B. Below are the commands I'm using for establishing the connection. I guess i'm able to connect to the remote server but ...
0
votes
0answers
22 views

How to use haproxy for outgoing requests?

I am trying to create a tls link between two haproxy instances. Each instance is installed on a machine which have some apps that need to talk with each other using the proxy. I want the haproxy ...
0
votes
1answer
35 views

Split ssldump output into multiple files for every incoming connection

I am capturing SSL Handshake data using ssldump on the terminal, and using the command sudo ssldump -i enp0s8 -a -A -H -n -x > new_trace to output it into a single file. Currently, the output ...
-1
votes
1answer
22 views

allowing and banning cipher-suites apache2.2

There is a list of banned and recommended cipher-suites that I need to add to ssl.conf file, and I'm facing some problem when trying to configure it: I need to ban all ECDH* and allow 15 cipher-...
0
votes
0answers
13 views

Appache SSL timeout and reqtimeout module

It seems Apache SSL http2 does not honor KeepAliveTimeout Server version: Apache/2.4.29 (Ubuntu) built: 2018-10-10T18:59:25 Searching Stackoverflow, I could find the issue is with ...
0
votes
0answers
25 views

Outgoing HTTPS proxy using apache

I have an HTTP/HTTPS web server running on Apache 2.2.22, and I would like this machine to act as a proxy server as well. So far I have tried to modify the proxy.conf file as follows: ProxyRequests ...
0
votes
2answers
39 views

Wildcard Certificate & XCA

We bought a wildcard certificate (*.example.com). I got an .pem file (included Cert and Key), like "wildcard.example.pem". As Certification Tool, I choosed XCA. The plan is, to import the Wildcard ...
0
votes
0answers
137 views

VSFTPD refuses to list directory when PASV is enabled

I'm configuring VSFTPD on Ubuntu 18.04 and have followed all the guidelines. It's working OK for plain FTP (insecure), however as soon as I enable SSL/TLS and Passive mode, it connects, but I am ...
0
votes
1answer
352 views

sslv3 alert handshake failure – error from feedparser in Python 2.7.6 – with workaround

I've been using a Python script (2.7.6 on Ubuntu 14.04LTS) to pick entries from RSS feeds using the "feedparser" module. This week it stopped working with a particular site. Digging, feedparser....
0
votes
1answer
62 views

is it possible to detect ssh activity on port 443

I would like to detect the usage of ssh on port 443 on a linux gateway. A kind of counter measure against stuff like sslh. I think netfilter and iptables would be the solution, but can't find module ...
0
votes
1answer
35 views

How can I use TLS on a local apache development server (on localhost) [duplicate]

I am trying to set up a development environment that mirrors my live server, but behind the firewall. Until fairly recently my shared hosting site didn't offer TLS/SSL so it wasn't an issue/option, ...
0
votes
1answer
800 views

pip install error: “SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed”

I am getting the following error when I try to do anything in pip. I have tired to upgrade pip as stated below and nothing. Any ideas? Collecting pip Exception: Traceback (most recent call last): ...
0
votes
1answer
147 views

vncviewer fails to connect (fedora-29)

So I already fixed this but thought I'd drop the solution here for posterity. I have 2 fedora-29 boxes. I want to use (tiger-)vncserver and (tiger-)vncviewer in the usual way. Trouble is, it was ...
0
votes
1answer
53 views

SSL Cert in Keystore and Browser cert are different

Bitbucket and Jenkins, in-order to talk to each other we have installed SSL certs in Bitbucket server. Issue started when Jenkins team used to mess up with their configuration and end up changing ...
1
vote
1answer
240 views

aria2c had to connect to the other side using an unknown TLS protocol, why?

When I run aria2c https://www.example.com I get 02/24 15:33:38 [WARN] aria2c had to connect to the other side using an unknown TLS protocol. The integrity and confidentiality of the connection ...
0
votes
1answer
324 views

Why “curl -k https://www.google.com” is not work? [closed]

Environment: macOs + iTerm(has be set https_proxy and http_proxy) + shadowsocks(in auto mode) why curl -k https://www.google.com (not http) has no effect, while https://www.google.com is ok in google ...
1
vote
1answer
55 views

How do I create/manage subdomains on my CentoOS nameserver with httpd to reach local running webserver from outside via SSL? [closed]

I would need some kind of workflow for my setup I took over from someone else. Lets name the headless server "example.com". named, dovecot, postfix, selinux and firewall-cmd are in place. I would ...
0
votes
0answers
46 views

Enable SSLV3 request in libcurl 7.52.1

I am using libcurl 7.52.1 to send http request so far I have successfully tried to send TLS request down to TLSV1.0. I need to send SSLV3 requests how can I enable SSLV3 request on my current libcurl ...
0
votes
0answers
80 views

Extracting a CA Certificate from an Enterprise WiFi (EAP) Network

I have a work network which is an EAP enterprise WiFi network using PEAP and MSCHAPv2. I unfortunately don't have the CA certificate for the network, which presumably makes it trivial to harvest my ...
0
votes
2answers
37 views

Varying a certificate based on client TLS version in ClientHello

I've got a scenario where some older clients are only able to support MD5 and SHA1 signatures. Obviously these are generally considered deprecated but I do still need to support them. Upgrading ...
0
votes
0answers
127 views

Curl is not supporting SSL (./configure --with-ssl)

I am trying to install curl in opensuse Leap 15.0. I have downloaded the .zip file from this link (version 7.63.0) I am running this command from the curl root directory: ./configure --with-ssl=/usr/...
-2
votes
1answer
223 views

How to make Google Chrome and work through corporate proxy? Ubuntu LTS 18.04

I'm using RDP Ubuntu LTS 18.04 under corporate proxy. When I'm trying to use google it's doesn't load any web pages: This site can’t be reached www.google.com refused to connect. Try: Checking the ...
1
vote
1answer
143 views

Protocol SSL is not working with Curl

I am trying to clone Wayland repository from git (for a project) but git clone command is throwing me an error. I installed curl (from here). After cloning make && make install. Earlier I had ...
0
votes
0answers
280 views

How to config HTTPS on Apache tomcat

I have installed the Apache Tomcat/7.0.76 on centos7. I want to enable SSL on the tomcat. I have root, intermediate, domain certificate. Like this 85163c004aa3625d.crt gd_bundle-g2-g1.crt gdig2....
0
votes
1answer
123 views

Where to get info about deprecated options of OpenSSL RSAUTIL of Mojave?

It seems that on macOS since Mojave (OSX 10.14.3), the -ssl option had been deprecated from RSA Utils (rsautl command) on it's default OpenSSL. $ sw_vers ProductName: Mac OS X ProductVersion: 10....
1
vote
1answer
298 views

How to install self signed .pem certificate for an application in OpenSuse?

Recently my workplace has updated the internet usage policies and imposed a Sophos security layer to monitor the traffic. I am trying to clone a git repo (using git clone command) but getting this ...
1
vote
1answer
250 views

How to enable TLSv1.3 in Centos with Apache2

I am using CentOS 5 with Apache2. Into an additional config file: /etc/apache2/conf/extra/ssl.conf I have put these lines: SSLHonorCipherOrder On SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 ...
0
votes
0answers
231 views

FTPS - LFTP problem

We have some trouble in my company with ftps access with a provider. Here is our configuration: Ubuntu 14.04 LFTP | Version 4.6.3a Our_cert.crt our_key.key provider.crt AuthorityRoot.crt ...
0
votes
0answers
38 views

google-cloud-print-connector - SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version

I have an ancient CentOS 5.11 installation on an inhouse server. The server is due for upgrade in a few months but till then, I'm stuck with 5.11. I intend to install google-cloud-print-connector but ...
1
vote
0answers
51 views

Nginx proxy_pass + ssl problem with seo friendly url

Below is nginx.conf server { listen 00.00.000.000:80; server_name my_site.com www.my_site.com; return 301 https://www.my_site.com$request_uri; } server { listen 00.00.000.000:443; server_name ...
2
votes
1answer
423 views

What encoding is used for the keys when using `ssh-keygen -t rsa`?

When I run: ssh-keygen -t rsa to generate a public/private key pair in files e.g. id_rsa.pub and id_rsa, my understanding is that the public key encodes a prime number p, and the private key encodes ...
0
votes
0answers
11 views

After SLES Migration LDAP does not start with TLS error

We had to migrate an existing physical Server running SLES to a virtual machine running on ESXi 6.5. The migration was done with VMware vCenter Converter. All the data was copied without problems - ...
11
votes
1answer
2k views

how to make Gnu/Linux trust a certificate that's trusted by Windows out-of-the-box?

There is a server with a broken SSL chain, as reported by this SSL check: I know this is a problem that should be solved on the server itself, but sometimes this is hard to have fixed (I'm not the ...
0
votes
0answers
36 views

Generate KeyStore and TrustStore for SSL 1.2

I need to understand the process to generate keystore and truststore to setup a webservice with mutual ssl authentication. I generated a key and CSR openssl genrsa –out mykey.key 2048 openssl req -...
0
votes
1answer
357 views

How to configure the Certbot not to include options-ssl-apache.conf into my VirtualHosts?

# cat /etc/letsencrypt/options-ssl-apache.conf # Baseline setting to Include for SSL sites using Let's Encrypt certificates SSLEngine on # Intermediate configuration, tweak to your needs ...
2
votes
0answers
52 views

How to tell Kerberos where to find the root certificate for LDAP with TLS?

I run two Debian servers with MIT Kerberos and OpenLDAP backend. I would like to enforce TLS and encrypt replication. So I created and added certificates… dn: cn=config changetype: modify add: ...
1
vote
1answer
131 views

How to inspect decrypted TLS/SSL traffic in Wireshark from program not supporting SSLKEYLOGFILE?

TL;DR: I feel I'm pretty close to doing so by using sslsplit's interface mirroring, but I ran into an issue where the kernel is not replying to ARP requests that sslsplit is sending out on the ...
1
vote
2answers
507 views

Using Checkpoint VPN SSL Network Extender CLI with certificate

I'm trying to use the command line tool from Checkpoint to set up an SSL Network Extender VPN using a certificate (P12) rather than a password. I tried the solution mentioned in getting Checkpoint ...
-1
votes
1answer
1k views

CA certificates location in Ubuntu 18.04

Can you please point to me where can I locate the CA certificates file in Ubuntu 18.04? I have a program that needs the path that point to the CAs directory for certs. validation.
0
votes
1answer
632 views

Options error: Parameter ca_file can only be specified in TLS-mode

Im currently trying to setup an OpenVPN Client on my Raspberry Pi. I keep on getting some error messages related to TLS. The syslog gives me this: Nov 23 08:34:56 raspberrypi ovpn-ersterclient[1370]...
-3
votes
1answer
2k views

Can not download from an HTTPS site (ssl) with wget?

I know my version of wget is very old, but I can't get a download to work with it, # wget https://github.com/radare/radare2/archive/master.zip --2018-11-05 00:07:51-- https://github.com/radare/...
2
votes
0answers
2k views

Add LDAP server certificate to trusted list and enable certificate verification

I am trying to use a secure LDAP connection via TLS ldaps://<server_name>:<port> for various applications (e.g. Gitlab). However, the connection raises certificate errors which is due to ...
1
vote
3answers
54 views

Certbot does not force Apache2 to read newly generated certificates

System: GNU/Linux Debian 9.5 headless. Situation & Question I have just caught the Let's Encrypt Certbot to re-generate the SSL certificate but did not reload Apache2. This has resulted in a ...
0
votes
1answer
452 views

EVP_CIPHER_CTX in openssl 1.1.x

error: storage size of 'ctx' isn't known EVP_CIPHER_CTX ctx; I am getting this error with openssl -1.1.1. Compared openssl-1.0.* and openssl-1.1.1 and this EVP_CIPHER_CTX struture has not been made ...
1
vote
0answers
79 views

https server hello missing

I've setup an nginx server, and config it with a https certificate. But I cannot access my server through https occasionally . In some rare cases, it works well, but no server hello in most cases. ...