Questions tagged [ssl]

SSL/TLS is a cryptographic protocol designed to provide communications security over a computer network. It is the S in HTTPS, IMAPS, SMTPS, etc.

Filter by
Sorted by
Tagged with
0
votes
1answer
30 views

ftp fails in AIX startup

I have a script in AIX that runs a ftp to make a FTPS connection to another host running vsftpd server. /usr/bin/ftp -snv host 8081 <<END_SCRIPT debug user anonymous pass passive binary debug ...
0
votes
0answers
11 views

Adding a self-signed cert in Linux Mint 20.1?

I'm playing around with aspnetcore in Linux Mint (an Ubuntu derivative), and I've run into issues with the dotnet dev-cert. The dotnet cli's "dotnet dev-certs https --trust" command doesn't ...
-1
votes
0answers
30 views

Error, can not get domain token entry for http-01 when using acme.sh to renew a certificate

Now I am using acme.sh(v2.9.0) to renew a certificate on CentOS 7.6, but when I run this command in terminal, shows this error message: [root@ops001 conf.d]# acme.sh --issue -d "*.poemhub.com&...
-2
votes
0answers
48 views

OpenSSL: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol

I am trying to connect to a ip port using wget: wget https://VCB-ETT-P67:9001/api/DB/dpc Showing error as It is getting connected but showing ssl connection issue Resolving vcb-ett-p67 (vcb-ett-p67).....
0
votes
0answers
15 views

How to add Lets Encrypt to local list of trusted certificates in /etc/ssl/certs/ca-certificates.ctr?

Question How can I add Lets Encrypt to the file /etc/ssl/certs/ca-certificates.crt ? This file is a list of certificates from trusted CA and I want to add Lets Encryt to it. I believe that by doing so ...
0
votes
0answers
29 views

SSL: verify certificate and key match

How can I check a SSL certificate and key match in one operation? I'd prefer to use GNUTLS certtool if feasible to keep the tool set consistent. After generating a certificate and getting it signed by ...
-2
votes
1answer
255 views

Libera IRC network returns SSL or TLS errors with irssi or weechat [closed]

When I try to connect to Libera chat using IRSSI I get, -!- Irssi: warning SSL handshake failed: Connection timed out When I try to connect it with weechat I get libera =!= | irc: TLS handshake ...
0
votes
0answers
17 views

Redirection of https://example.com to https://www.example.com not working

I am running WordPress on Ubuntu. I am have used let's encrypt SSL. I want to redirect everything to https://www.lifesmile.ae. But it does not work as you can check yourself. I have the following ...
0
votes
0answers
6 views

Is it possible to transport data from sslyze tool to burp suite?

I would like to know if it is possible to transport data from sslyze tool to the burp suite. I do not want to use burp suite's extensions. I thought to use Fiddler between sslyze tool and burp but it ...
0
votes
1answer
26 views

httpd not starting with self signed certificates

Trying to start httpd and I see the following in the error log, [Mon Apr 12 21:00:13.398987 2021] [suexec:notice] [pid 155] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec) [Mon Apr 12 21:...
0
votes
0answers
20 views

Disable vulnerability in RHEL7 - TLSv1.2 ciphers

Using RHLE7 and I have been recommended to disable below cipher on TLSv1.2. Can someone please assist how to disable these ciphers? Try to find a config file where i can disable these entries? Please ...
0
votes
1answer
28 views

Tools to investigate how DNS over TLS/HTTPS work / how resolve / if work correctly/ how establish tunnels etc

DoT DNS over TLS https://tools.ietf.org/html/rfc7858 DoH DNS over HTTPs https://tools.ietf.org/html/rfc8484 (nice explanation: https://blog.cloudflare.com/dns-encryption-explained/ - TL;DR- port tcp/...
0
votes
1answer
40 views

Fresh Debian Testing - wget returning GnuTLS errors

Did a fresh install of Debian 10 and tried to run the following: root@siren:/# wget music-server.net/download/install.sh --2021-03-08 15:32:18-- http://music-server.net/download/install.sh Resolving ...
1
vote
1answer
20 views

Listing installed certificates in alpine

I know there are several topics regarding installation of certiciates in alpine. Is there a way however to list the already trusted root CA's in alpine?
0
votes
1answer
34 views

SSL both for web and mail

I have my public web site with EV SSL certificate. I bought new server and configured postfix and dovecot for mail server. Can I use my website's SSL certificate for postfix and dovecot for secure ...
0
votes
0answers
52 views

Postfix TLS no_shared_cipher warnings

I am having weird logs for my Postfix connections and I wonder if there is an issue with my SSL setup Feb 27 22:12:44 krystufek postfix/smtpd[3608789]: connect from a4-14.smtp-out.eu-west-1.amazonses....
-1
votes
1answer
49 views

OpenVPN SSL connected and able to ping remote LAN but unable to access on web

I have installed SSL OpenVPN on CentOS 8.  The client connects successfully and is able to ping the remote LAN but unable to access web server on remote LAN.  Here is my configuration: Server port ...
0
votes
1answer
59 views

Safari does not use the private root CA certificate

I've created a private root CA and issued some SSL certificate for some https websites, (I am not sure whether this should be called as self-signed certificate, in my case, the root ca certificate is ...
0
votes
0answers
24 views

Can XDMCP be encrypted with RSA or AES? Can XDMCP be forwarded over SSL or TLS?

I know XDMCP cannot be forwarded over SSH because XDMCP uses UDP and SSH uses TCP. Can XDMCP be forwarded over SSL or TLS instead? XDMCP is not encrypted by default. Can AES or RSA be added to XDMCP ...
1
vote
0answers
31 views

SMTP Server Mail Alerts using TLS and authentication

i am a bit new in using SMTP server Alert configurations on AIX 7.1 OS . i am currently using below syntax which is running fine : mail -s "Subject" "abc@test.com" < /path/to/my/...
0
votes
1answer
120 views

Why does curl -k -I https://host.example.com not return response headers if certificate is not valid?

Does anyone know why curl with -k (--insecure) option and -I for show headers still shows the html response and not the headers as expected? Working as expected: $ curl -I https://validsslcert.example....
0
votes
1answer
158 views

How can I fix curl that seems to be stuck on NSS initialization?

curl, dnf and other cmd lines tools that depends on https are not working properly $ curl -vvv --insecure https://google.com * Rebuilt URL to: https://google.com/ * Trying 172.217.29.14... * ...
0
votes
1answer
321 views

NRPE Could not complete SSL handshake - Peer did not return a ceritificate

I am getting SSL Handshake errors with NRPE after enabling SSL. It worked perfectly fine without SSL doing check_nrpe. The allowed host is correct and when run without SSL enabled it shows the proper ...
0
votes
0answers
54 views

Enable SSL certificate from Godaddy with Gitlab

getting ssl error fatal: unable to access 'https://vjwoss.xyz/scripts.git/': Peer's Certificate issuer is not recognized. when check on SSL checkerlink, it shows Certificate is not trusted by web ...
0
votes
1answer
728 views

How to add X-Forwarded-for header in reverse proxy with SSL passthrough

Setup as follows: proxy server (RHEL8 apache 2.4) in DMZ contains multiple vhosts each vhost acts as a reverse proxy to a web server in the LAN connections from the proxy to the backend web server ...
0
votes
0answers
30 views

MQTT Mosquitto with TLS - which encryption is used

I've developed a C++ application running on an Embedded Linux device which implements an MQTT client using libmosquitto and mosquittopp.h I am using TLS1.2 for the authentication and encryption ...
0
votes
1answer
31 views

Is my server using SSL encryption to deliver e-mails?

I have deployed a little mail server using sendmail. I think the agent is properly configured to accept delivery requests both with and without encryption. That's because, with the following telnet ...
0
votes
1answer
40 views

Tomcat http to https

I am newbie to tomcat, in that case i had my website to work under http://myserver:8080/path/login/login.html I wanted to activate https with the port 8443 https://myserver:8443/path/login/login.html ...
0
votes
0answers
32 views

How Can I get certificate owner in command line?

I'm trying to get certificate owner from command line. For example, I detect a connection by conntrack from xxx.xxx.xxx.xxx. From surfshark I see on server key exchange packet under SSL->Handshake ...
0
votes
0answers
26 views

How to get vsftpd working with signed SSL certificate

I have vsftpd working with a self-signed certificate, but would like to use our CA signed certificate instead. However, when configuring vsftpd to use the CA signed certificate (.pem file) and private ...
0
votes
1answer
679 views

Dovecot Active:failed because of ssl_cert: can't open file /etc/dovecot/private/dovecot.pem: Permission denied. Why?

Hello I try to follow this Postfix/Dovecot tutorial series: https://www.youtube.com/watch?v=njiNRppQNJw&list=PLibQjquhfgjjosRrZxlDepXfehDXuQJu_&index=5 When I run dovecot: sudo service dovecot ...
1
vote
2answers
117 views

existing x509 certificate how to add extended key usage

I have an existing X509 certificate, can I still add an extended key usage item to it now (codesigning) ? Or do I have to create a new cert? The extended key usage is written to the public key, right? ...
1
vote
1answer
122 views

How Should I Move SSL Certificates (Made With Certbot) From One Ubuntu Server To Another?

I have an ubuntu bionic server on which I set up ssl with my own domain name by following this guide. I would now like to decommission this server and move the ssl domain name to a different ubuntu ...
2
votes
1answer
187 views

openldap: is possible to force the starttls from a client?

I don't explain how to configure tls-ldap on server, on google there is a lot of stuff to configure it(create tls certs, create ldif, import ldif, try ldapsearch -ZZ, etc..). Is also easy to force the ...
0
votes
1answer
164 views

Server httpd(OpenBSD), doesn't work server.key

I have tried several methods, but the SSL certificate doesn't work. BSD# curl -vi https://192.168.1.21:443 * Trying 192.168.1.21:443... * Connected to 192.168.1.21 (192....
0
votes
0answers
46 views

TLS/SSL handshake timeout with Apple push notification service

I'm deploying a PHP application on a RHEL7 server. This PHP application sends push notifications to Apple and Google. While testing the push notifications, the notifications sent to Google work fine, ...
0
votes
1answer
82 views

Access to webserver behind nginx reverse-proxy from outside fails with SSL handshaking error

I have a setup where there are a number of Apache web servers behind a common Nginx reverse proxy server. But I can not access the web servers from the Internet. The access works fine on my local ...
0
votes
1answer
284 views

Error — KIO Client Could not connect to host … SSL negotiation failed

An alternate title might be: PlayOnLinux LOTRO install: Open Store In External Browser Fails This question concerns a Linux installation of Lord Of The Rings Online using Wine 5.2 in a PlayOnLinux ...
0
votes
0answers
45 views

Jellyfin alongside Nextcloud snap on one PC

I have running Nextcloud snap instance with all SSL certs, domain and etc. but also I have Jellyfin running on the same PC and I want to access it via the domain not like now with the PC IP. My ...
0
votes
0answers
450 views

Tomcat error for missing APR library, even though it's installed

I'm running Tomcat 8.0.49, and set up an SSL connector. This is a connector that works in my other Tomcat instances, which are at version 7.x. Connecting to the instance via a web browser hangs, and ...
0
votes
0answers
110 views

After installing SSL Certificate VTiger is giving an error?

We recently installed the latest available version of vtiger Kernal version : 2.6.32-954.3.5.lve1.4.78.el6.x86_64 Version used : VTiger CRM 7.3 (Open Source) Hosting : GoDaddy Deluxe Linux Hosting ...
0
votes
0answers
858 views

Handshake Failure when cloning a git repository which requires a certificate

The Problem I have been having issues connecting to a Atlassian Stash which requires a certificate issued by my company. When I connect using Firefox (which has the certificate) it will allow me to go ...
1
vote
1answer
690 views

Use socat as https to http proxy

Based on https://superuser.com/questions/1583159/secure-connection-failed-to-old-printer-with-https I was thinking: Can socat (or similar) be used to connect to the printer with an old https version ...
0
votes
1answer
633 views

curl with NSS and centos does not work

I am using below command to connect:- curl --cert-type P12 --cert ./my.p12:password --cacert ./my-cert.pem https://host:8443/api/root but getting this ERROR: curl: (58) unable to load client cert: -...
0
votes
0answers
330 views

How to create a oracle wallet with chain certificates?

I have three certificates, root, intermediate and server. Intermediate certificate is signed by root certificate and server certificate is signed by intermediate certificate. What are the steps to ...
2
votes
1answer
130 views

How to use curl/git in Debian Squeeze with modern HTTPS?

I need to test a debugging tool on a variety of outdated distributions. I managed to install build-essential package on Debian Squeeze. The problem though is now that it's impossible to download ...
0
votes
0answers
49 views

Self signed SSL in Zeroshell

I have been trying to update the expired SSL certificate in Zeroshell. However, updating manually using Zeroshell script resulted in the following error # bash /root/kerbynet.cgi/scripts/...
1
vote
1answer
748 views

LibreSSL: SSL_ERROR_SYSCALL on MacOS

I’ve got a MacBook Pro running Catalina 10.15.6. I started it up this morning and noticed that Safari “failed to establish a secure connection” with any site I attempted to visit. I’m connected to ...
0
votes
1answer
326 views

How do I verify the certificate of a specific computer when the DNS gives me one of many IP addresses?

I have a cloud setup with 6 front end computers using Apache. I installed a new SSL certificate. Now I want to verify that all the machines have the certificate. The problem is if I just use https://...
3
votes
1answer
1k views

What is the difference between /usr/lib and /usr/local/lib?

I am on Void Linux. I installed libressl through the Void package manager. It put libssl.so.48.0.1 in /usr/lib. with this setup I was getting errors and https would not work properly in my apps. So i ...

1
2 3 4 5
12