Questions tagged [ssl]

SSL/TLS is a cryptographic protocol designed to provide communications security over a computer network. It is the S in HTTPS, IMAPS, SMTPS, etc.

Filter by
Sorted by
Tagged with
0 votes
0 answers
32 views

Curl error SSL3_CHECK_CERT_AND_ALGORITHM: dh key too small

When I run a get request from Curl to a web service I get the error SSL3_CHECK_CERT_AND_ALGORITHM: dh key too small. Server is on CentOS 6.6 and web service is a Java application (OpenJDK 1.7) running ...
supmethods's user avatar
0 votes
0 answers
20 views

Unbound dns over tls

I have unbound installed and it works just fine (debian testing). I also have a domain at duckdns.org. I would like to set DoT on my Android phone as xxxxx.duckdns.org, so i can make all requests go ...
murkom's user avatar
  • 1
0 votes
1 answer
32 views

Enable TLS on BIND9

I am trying to enable TLS on my BIND server (9.19.16) which is otherwise working fine. When I add the following code to enable TLS, then my BIND server does not start. named.conf: tls local-tls { ...
M9A's user avatar
  • 101
0 votes
0 answers
12 views

Why does tshark display "TLSv1" despite curl showing TLSv1.3 in the "Client Hello"?

The output from curl indicates TLSv1.3 (OUT), TLS handshake, Client hello (1). Use --tlsv1.3 to force it to use TLSv1.3: $ curl -6 --tlsv1.3 --tls13-ciphers TLS_AES_256_GCM_SHA384 -vL https://...
林果皞's user avatar
  • 4,966
0 votes
1 answer
40 views

wget error: certificate owner does not match hostname

wget command fails to download a file with error "The certificate's owner does not match hostname" Full command output is show below: wget --continue --directory-prefix=/download https://...
Amol's user avatar
  • 109
0 votes
0 answers
49 views

Peer certificate cannot be authenticated with given CA certificates

Running on Alma Linux 8.8 but can't install the package. I get Peer certificate cannot be authenticated with given CA certificates. I have updated all packages with dnf update but the error is still ...
supmethods's user avatar
0 votes
1 answer
19 views

SSL cert recognized by OpenSSL but not geventhttpclient

I have an instance of an NVIDIA Triton Inference Server. Then, there is the Python's client which uses geventhttp Python's package to perform the requests. This is all deployed as microservices, so in ...
bert's user avatar
  • 255
0 votes
1 answer
28 views

How should I modify the Qt5 source code if I want to add back SSLv3 support in the libqt5network5 module?

I am on an Intel x86_64 CPU architecture platform running a Debian Bullseye Linux distro. On that platform runs a custom application. This application is a 32-bit software running as a systemd service ...
Chris Haddad's user avatar
0 votes
0 answers
7 views

TLS conneciton is droped on google compute when call is intiated from docker container

I am using Google cloud compute with docker installed on it and I am trying to connect between 2 nodes with secured connection from the container. When call is performed directly form HOST VM, both ...
swist's user avatar
  • 101
0 votes
1 answer
53 views

LAN drivers causing Layer 4 corruption

I'm relatively sure that my drivers are causing some level 4 packet corruption on my system. I'd like to know how to solve this.. Diagnostics: any form of git clone on large repos will invariably ...
tuskiomi's user avatar
  • 117
0 votes
0 answers
29 views

Fetchmail disconnecting on SSL mismatch

My fetchmail (v6.4.24) is connecting to an MTA that holds mail for many domains, and it has certs for each domain. The MTA (running dovecot) expects the client to use TLS SNI to present the right ...
TSG's user avatar
  • 1,630
0 votes
1 answer
39 views

Firefox does not recognize the sustom SSL via my own CA whereas other browsers do?

I made a script that generates a CA file and a SSL signed by the CA: #/usr/bin/env bash # Absolute path to this script, e.g. /home/user/bin/foo.sh SCRIPT=$(readlink -f "${BASH_SOURCE}") # ...
Dimitrios Desyllas's user avatar
0 votes
1 answer
165 views

Openssl output to stdout

I want to extract signer from smime inside node app (child_process.spawn()), semantic : myapp | openssl smime -verify -CAfile c_root.pem -inform DER -signer /proc/self/fd/1 | myapp But i cant ...
eri's user avatar
  • 865
1 vote
1 answer
39 views

Why does Debian require a restart for login to self hosted Docker Repo after new SSL and Ubuntu does NOT x509: certificate signed by unknown authority

I have two servers, one Debian Buster (Debian 4.19.208-1) and the other is Ubuntu 18 (Ubuntu 18.04.6). I recently updated the SSL on a self hosted Docker Image Repo and noticed that on the Ubuntu ...
FreeSoftwareServers's user avatar
0 votes
1 answer
50 views

Adding SSL certificates to HAProxy with certbot

I am trying to configure my Nginx server to act as my primary load balancer. I have done the necessary package installation with certbot but the problem comes in when I try to configure my haproxy.cfg ...
Santagotthejuice's user avatar
0 votes
0 answers
22 views

Can I move the sitename-le-ssl.conf contents into sitename.conf and delete the sitename-le-ssl.conf in my Virtual Host setup on Ubuntu / Apache?

I have this free SSL certificate from Let'sEncrypt and it works just fine. But there's quite many files inside my /etc/apache2/sites-available/ directory and I'd like to delete / merge some of them, ...
michal roesler's user avatar
0 votes
0 answers
22 views

haproxy SSL termination not working for login-page to nginx backend

I have nginx pods running inside K8 on port:18080 exposed on nodePort:32070 Next I have an HAPROXY sitting between nginx and public network. I want to configure SSL termination at haproxy level Below ...
Sollosa's user avatar
  • 1,889
0 votes
0 answers
656 views

Failed to start The Apache HTTP Server

I'm having a problem with an SSL Certificate. I was using a Let's Encrypt certificate and everything was fine. I'm trying to switch to a certificate issued from DigiCert, and can't seem to get it ...
TexasTim's user avatar
0 votes
1 answer
77 views

HAProxy over Tomcat returns Error 403

I have an old server which runs a Tomcat service on port 8080. For various reasons (including securing the access from clients) I had to set up a HAProxy server in front of it, secured with a SSL ...
dr_'s user avatar
  • 28.8k
0 votes
1 answer
132 views

Attempt to connect to ExpressVPN Server fails

for several months, if not weeks, I have had a fully functional connection to an ExpressVPN server via the "NetworkManager" on OpenSuse, but now, suddenly, it reports "failed to ...
Cane's user avatar
  • 1
0 votes
0 answers
286 views

How to configure Privoxy HTTPS inspection?

After following through the docs at www.privoxy.org, I have created a cert and key with openssl, placed them into the CA directory at /usr/local/etc/privoxy/CA/, and given permissions to the privoxy (...
ManSoMean's user avatar
3 votes
1 answer
749 views

Why curl running from a container complains about local issuer certificate when all the certificates are supposedly present?

Here is my docker command line: mark@L-R910LPKW:~$ docker run -v /etc/ssl:/etc/ssl -v /usr/local/share/ca-certificates:/usr/local/share/ca-certificates -v /usr/share/ca-certificates:/usr/share/ca-...
mark's user avatar
  • 387
0 votes
0 answers
129 views

Apache2 does not work with SSL on Debian 1

I need help, because I get 503 Service Unavailable on my website using HTTPS! (Apache/2.4.56 (Debian) Server at mydomain.com Port 443) I followed a tutorial, because I never had worked before with ...
M. Loe's user avatar
  • 1
0 votes
0 answers
46 views

How should a docker container obtain a reference/path to a file which exists outside of the docker container

I have a service running in a docker container which needs to load an SSL certificate that is generated by cerbot. Certbot always puts the files in a directory like /etc/letsencrypt/live/example.com/...
WSC's user avatar
  • 103
0 votes
0 answers
57 views

telnet localhost 25 vs telnet localhost 587

I install a postfix with the following postconf -n:(however I changed my domain to example.com) alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no ...
PersianGulf's user avatar
  • 10.7k
0 votes
1 answer
88 views

Curl Error 60 After Accidentally Deleting known_hosts file

I have a couple of Raspberry Pies that upload webcam images to a web host using a bash shell script. This is the upload code, which is identical on each Pi: curl -s -S -u myname: \ --...
Buadhai's user avatar
  • 237
0 votes
0 answers
40 views

Enabling TLS1.1 on Tomcat9

On Ubuntu 22.04 I am trying to enable TLSv1.1 on Tomcat9 and openjdk-8-jdk I have added TLSv1.1 to Connector <Connector port="443" protocol="org.apache.coyote....
yurtesen's user avatar
  • 528
0 votes
0 answers
38 views

Need to be able to specify IP address of IMAP server on local network

I have an IMAP server that can be accessed from a public address that is behind a firewall. It has correct SSL certificates for the public name. It is easy to test this server from the private ...
EdHorton's user avatar
1 vote
2 answers
172 views

Is my connection to my Postfix server encrypted?

I would like to use my Thunderbird client to send mails trough my Postfix server running on port 25 (SMTP). I would like an authenticated and encrypted connection. I followed these documentations: ...
YuGiOhJCJ's user avatar
  • 113
0 votes
0 answers
41 views

How can I measure how long cURL is taking to decrypt traffic?

How can I measure how long SSL decryption is taking during a cURL request on command line? I would've thought %{time_starttransfer} would be the time of the first byte before being decrypted (in a ...
Cherona's user avatar
  • 142
0 votes
1 answer
242 views

How to see details of TLS telnet?

Debian (and other distro if you recompile the source) can use a ssl version of telnetd. telnet-ssl -z cacert=/etc/ssl/certs/mydomain.crt -z cert=/etc/ssl/certs/client.mydomain.crt -z key=/etc/ssl/...
elbarna's user avatar
  • 12.1k
0 votes
0 answers
78 views

Newly created SSL certificate will not update

I have a self-hosted website and recently my SSL certificate expired. Tried creating a new one with the command sudo certbot certonly -d 'example.com,*.example.com' --manual --preferred-challenges dns....
leevii's user avatar
  • 1
1 vote
1 answer
109 views

NOQUEUE: reject: Helo command rejected: need fully-qualified hostname

I am running 3 x Win11 and 1 x Win10 all with Office 365 Outlook. 3 of the Outlook clients connect to a postfix/dovecot server just fine on my home NAT, and can tunnel through my router from the ...
Deepstop's user avatar
  • 111
0 votes
1 answer
128 views

Dovecot is showing the wrong expiration date for the imap certificate

I am running dovecot dovecot-2.3.8-9.el8.x86_64 on CentOS Linux release 8.5.2111 I have nagios checks warning me if the imap certificate in about to expire. Recently I got just such an alert. However, ...
Aditya K's user avatar
  • 1,950
0 votes
1 answer
68 views

laravel not execute after adding SSL

I'm trying to run laravel on EC2(AWS linux 2) and apache server. And I recently bought a domain from Namecheap And I installed laravel to var/www/html folder. My /etc/httpd/conf/httpd.conf has those ...
vimuth's user avatar
  • 101
0 votes
0 answers
341 views

vsftpd throws "Auth command is not supported"

I have been trying to configure vsftpd to support explicit TLS, with no luck so far. the relevant part of vsftpd.conf reads: ssl_enable=YES debug_ssl=YES allow_anon_ssl=YES force_anon_data_ssl=YES ...
Alien Life Form's user avatar
1 vote
1 answer
2k views

Linux RDP client: Connect to machine with self-signed certificate

I can remote into a Windows machine using Windows' default RDP client, but I would like to do it from Linux. The clients I have tried so far complain about a self-signed certificate, although Windows ...
user2394284's user avatar
0 votes
1 answer
968 views

How to disable TLS certificate validation in lynx?

I need to access some webpage for which the TLS certificate is invalid, but lynx refuses to connect. Is there an option similar to curl -k for lynx? Here's config file as request .h1 Auxiliary ...
ychaouche's user avatar
  • 945
0 votes
1 answer
683 views

How to install an SSL Certificate on a subdomain where the domain points to a Hostinger VPS Apache Server running Ubuntu 20.04

Using Certbot, I installed a letsencrypt SSL Certificate for my domain which points a Hostinger Apache Server running Ubuntu 20.04. I am having trouble installing a certificate for my subdomain. I ...
Len's user avatar
  • 1
0 votes
1 answer
75 views

Is there a way someone can read arrays of bytes which I send with java sockets while using TLS 1.2?

If anyone can answer me pls I just need an anwer. I know thus isn't maybe right place for this question I created chatting app with sockets in Java 8 and i use TLS 1.2 My question is: Is there any way ...
GM dz0ji's user avatar
0 votes
0 answers
48 views

How to make GIO accept company's TLS certificate?

My company has recently decided to enable SSL Inspection on the network. As I am on Manjaro, I added the certificate using the following commands: sudo trust anchor --store certificate.crt sudo update-...
Cezary Drożak's user avatar
0 votes
0 answers
86 views

pem certificate for ldap TLS

I am trying to link a LDAP client (RHEL 7.6) with the LDAP server. The LDAP It is build as Active Directory TLS over 636 port but right now I am trying to understand if I have the Root.pem file how it ...
sticletele's user avatar
2 votes
1 answer
344 views

OpenBSD, relayd and acme-client: Unable to read TLS-certs for subdomains: "Empty reply from server"

OpenBSD server with relayd/httpd/acme-client. Attempting to run https://mydomain.com (app server on port 32489), https://webmail.mydomain.com (48293) and https://forum.mydomain.com (28192). All three ...
Mark Boulder's user avatar
0 votes
0 answers
196 views

Trying to use sendmail to a relay that runs on port 25, with no luck (bad dh value)

In my organization, I have a GitLab server that needs to have the ability to send emails. My organization has a mail relay that we must use to send email out to users. I have a RHEL 8 box with GitLab ...
Rankler's user avatar
1 vote
1 answer
6k views

SSL Medium Strength Cipher Suites Supported (SWEET32) vulnerability of https in RHEL

Just got a result from the Tenable Nessus scan and it showed that a RHEL 7.5 host is vulnerable to plugin 42873: "SSL Medium Strength Cipher Suites Supported (SWEET32)", on TCP port 443. The ...
user53815's user avatar
0 votes
0 answers
2k views

curl(28) : ssl connection timeout

I try to tell only the details My browsers have no problem with https sites. But when they get to tools like links, wget and curl, they run into trouble, sites like gitlab, github, google, etc. are ...
ahmadreza1383's user avatar
2 votes
1 answer
113 views

Can I install a Let'sEncrypt ssl certificate before I configure a virtual host?

Assuming I am not close on which web server to use, Apache or Nginx but I still want to be over with the SSL certification procedure, can I install a Let'sEncrypt ssl certificate before I configure a ...
automation's user avatar
0 votes
0 answers
72 views

How to set a free (gratis) SSL certificate?

I have the following set of instructions on how to bootstrap a website hosting environment #!/bin/bash apt update -y apt upgrade ufw sshguard unattended-upgrades wget curl git zip unzip tree -y ufw --...
automation's user avatar
0 votes
0 answers
131 views

Regenerate SSL certificate?

Recently I'm dealing with a RHEL 7.8 host's Tenable Nessus Plugin #51192 issue which is "SSL Certificate Cannot Be Trusted". The Tenable Nessus report said this vulnerability was caused by &...
user53815's user avatar
1 vote
0 answers
822 views

curl SSL certificate problem: MITM proxy's self signed certificate in certificate chain

Problem: $ curl https://github.com/ curl: (60) SSL certificate problem: self signed certificate in certificate chain More details here: https://curl.se/docs/sslcerts.html curl failed to verify the ...
xpt's user avatar
  • 1,232

1
2 3 4 5
14