Questions tagged [ssl]

SSL/TLS is a cryptographic protocol designed to provide communications security over a computer network. It is the S in HTTPS, IMAPS, SMTPS, etc.

Filter by
Sorted by
Tagged with
0
votes
0answers
8 views

Could not add root certificate to ssl context error with GRPC on Ubtunu 18.04.4 LTS

I'm trying to run a application that uses SSL for license verification. I get the following error and the application does not progress any further [license] License is for an online pool. [license] ...
2
votes
0answers
16 views

How to encrypt messages using TLS encryption and send to sys logger?

I am using following logger command to send message to /var/log/message. logger -n 10.102.5.19 "system shutdown" my question is, how to encrypt the message("system shutdown") using TLS encryption. I ...
0
votes
0answers
7 views

FTP timing out when enabling ufw

I created a FTP server using vsftpd. So far, I've got it working using plain FTP. My next goal is to setup SSL/TLS. I have the configuration ready in the config, but first I wanted to get the firewall ...
1
vote
0answers
7 views

Disable obsolete SSL and TLS in Oracle Enterprise Linux

I intend to disable all versions of SSL and TLS 1.0 and TLS 1.1 from being used due to their insecurity. Can you advise on how i can do this. I have searched online and haven't seen anything of much ...
0
votes
1answer
29 views

Installing Python 3.7 from source with custom openssl installation: test_ssl failed [closed]

To be able to install Python from source without root permission on a Ubuntu server, I had to install openssl, which I did using the following commands: wget https://www.openssl.org/source/openssl-1....
0
votes
1answer
27 views

openssl: local installation caused certificate issue

To install Python from source without root permission, I had to install openssl, which I did using the following commands: wget https://www.openssl.org/source/openssl-1.1.1e.tar.gz tar -xzvf openssl-...
0
votes
1answer
13 views

Why does increasing the encryption policy to FUTURE break some websites?

I edited /etc/crypto-policies/config to change the system-wide crypto policy from DEFAULT to FUTURE, ran update-crypto-policies, and afterwards the RSS/ATOM feed aggregator akregator wasn't loading ...
0
votes
0answers
22 views

On Debian Buster how to get nginx to server to use correct ssl version

I have a home web server on a raspberry pi running Debian Buster and a php application that I wrote to manage my finances served by nginx. I just navigated to the site with Chrome Dev tools open and ...
0
votes
0answers
15 views

Unable to access https enabled internal websites when using private vpn server

I am having issues connecting to SSL enabled websites when connecting to private VPN network. These issues are only for internal HTTPS websites and NOT on the external websites. Below is my system ...
0
votes
0answers
20 views

Using 'Try_TLS:broken.server NO' does not work

sendmail 8.14 configured as "submission-only" on SLES 11 SP3. In submission-only I have: Modified /etc/sysconfig/sendmail and made DAEMON=no Modified /etc/email/submit.cf and pointed D{MTAHost} to ...
2
votes
1answer
48 views

Invalid SSL certificate only on my Linux machine

I'm hosting a website and my DNS server is from NameCheap, I bought an SSL certificate over there and configure it through nginx, everything were fine, but one day chrome started to complain that the ...
1
vote
0answers
55 views

How do I disable zypper's certificate check?

I'm using SLES 2015 behind a firewall. All of my outgoing communications go over a proxy; specifically, zypper tries to use the proxy when I write, say, zypper search-packages foo but the proxy ...
1
vote
1answer
42 views

openssl is not finding any certificates

When I use git or curl I get an error which may be related to certificates: With git: > git clone https://github.com/vim/vim.git Cloning into 'vim'... fatal: unable to access 'https://github.com/...
0
votes
0answers
10 views

Web App for Host Certificate Management

Does the Linux ecosystem have a web application that will take host certificate requests and give an administrator a web interface method of signing them? And manage CRLs/OCSP, as well? Dogtag's ...
0
votes
0answers
28 views

Apache Reverse proxy SSL issues

I have on my hostaname https://servername/phpmyadmin/ installed phpmyadmin. I wanted to change the url and "adopt" the certificate of domain and use it on db.domain.tld, but I can't get it working. ...
0
votes
1answer
38 views

SSL validation fails, after applying SUSE-SLE-Module-Public-Cloud-12-2020-251

Post applying the following OS patch SUSE-SLE-Module-Public-Cloud-12-2020-251 (Security Update for aws-cli) for the month of Feb 2020, AWS CLI was throwing the error SSL validation failed. The command ...
0
votes
1answer
249 views

Sudden “no ”ssl_certificate“ is defined for the ”listen … ssl" error

I have a config like this which has worked for years: server { listen 80; server_name www.domain.com domain.com; return 301 https://domain.com$request_uri; } # !!!! # line ...
0
votes
0answers
44 views

Curl FTPS error:1408F10B:SSL routines:ssl3_get_record:wrong version number

I've looked at the related issues but none of them solved my issue. I'm trying to transfer files via ftp using curl to a server in my dmz from an FTPS server on an EC2 server running vsftpd. $ curl ...
2
votes
4answers
408 views

How can I check currently installed and in use versions of SSL and TLS?

How can I check currently installed and in use versions of SSL and TLS? Strangely I couldn't find an answer online. Using Ubuntu 18.04. Edit: Thanks all! I am asking this as I have trouble connecting ...
1
vote
1answer
92 views

apt certificate chain uses insecure algorithm

we host a local mirror for Ubuntu and Debian packages. root@apt-mirror:~# dpkg -l | grep mirror ii apt-mirror 0.5.4-1 all ...
0
votes
0answers
165 views

postfix lost connection after STARTTLS from unknown

I am trying to build a email server using RHEL 8 which will receive mail from its client servers. When i try to send a mail from the client server i am getting the following error message under ...
0
votes
0answers
19 views

Unable to get vsftpd working with explicit SSL from FileZilla

I am running Debian Buster on my server, and after reading these instructions I have added the following lines to my vsftpd.conf: rsa_cert_file=/etc/letsencrypt/live/***.com/fullchain.pem ...
1
vote
1answer
51 views

Setting up Apache Mutual Authentication

I was asked to setup an Apache webserver to use Mutual Authentication in order to protect access to a specific folder/file. The access to this specific file/folder should be granted only if the ...
0
votes
1answer
48 views

Create certificate with subject alternative names

Creating CA certificate that should contain subject alternative names (SAN). openssl genrsa -des3 -out ca.key 2048 openssl req -new -x509 -days 3650 -key ca.key -out ca.crt -config ca_server.cnf ...
0
votes
0answers
54 views

Where is the SSL certificate configuration in Ubuntu 18.04 - when it's not in the default location?

I set up a server with SSL config from THAWTE a few years ago. Preface, I have no idea what I am doing and managed with online tutorials. But somehow it works! I need to update the SSL certificates ...
0
votes
0answers
150 views

Checkpoint SNX in Ubuntu 18.04 via terminal

I am trying to connect to Checkpoint VPN's snx module, but I am unsuccessful. After entering the password, it no longer returns, not even the error. I followed these steps for installation: getting ...
0
votes
1answer
27 views

How can I add subdomains to letsencrypt using certbots?

I have certbot installed and successfully use it to encrypt my homepage. Now i tried to setup an email system for my website using dovecot and postfix. I got it mostly running, only problem is, ...
0
votes
0answers
972 views

Peer closed connection in SSL handshake

I have a question about nginx. I created a reverse proxy by nginx. Activated SSL encryption with Letsencrypt. All is ok and all requests from client are sent to origin server specified in upstream. ...
0
votes
1answer
25 views

Disable client SSL certificate

I have generated client key certificate on self signed secure Mosquitto server. I have copied CA and client certificate with client key into client machine. Client subscription runs fine: ...
4
votes
2answers
621 views

Downloading from a public server: SSL certificate problem: unable to get local issuer certificate

I want to download a file (https://discovery.ucl.ac.uk/1575442/1/Palmisanoetal.zip) from a public server via the R command temp <- tempfile() utils::download.file(db_url, temp, method = 'curl')...
0
votes
1answer
30 views

HTTPS connections are generating incoming connections

I have a lot of records in my firewall log that are related to HTTPS traffic. For some reason incoming connections are being made to ephemeral ports and they are blocked by my firewall because these ...
0
votes
0answers
18 views

Make https request with HAProxy without explicitly mentioning certificates?

Why? Some app started making annoying authentication verification that work with the region. Every time I travel, and I login from another country, I have to go through a very annoying process of ...
0
votes
1answer
38 views

SSL and login not working after replacing certificate

I am running Webmin on Debian, configured to use SSL. The certificate is about to expire, so I generated a new one and imported it using the GUI (pasted cert and key in PEM format, reused existing ...
0
votes
1answer
211 views

Manually set wpa_supplicant driver?

I'm using a RaspberryPi 4 (4GB) and I was able to set up /etc/wpa_supplicant/wpa_supplicant.conf with all needed certificates properly, to authenticate at our companys wifi: ctrl_interface=DIR=/var/...
0
votes
0answers
29 views

Is it possible to encrypt traffic if I have only CA certificate?

I have simple secure (I guess) Mosquitto sever described in my previous question. Client machine has no any keys or certificate installed except single ca.crt certificate file generated and taken ...
0
votes
1answer
26 views

Ensure TLS communication security in Mosquitto

I have simple MQTT Mosquitto server that I'm trying to make secure. Mosquitto.conf: log_type all password_file /etc/mosquitto/mosquitto_users.txt pid_file /var/run/mosquitto.pid persistence true ...
0
votes
0answers
14 views

Secure Mosquitto service

Trying to configure secure Moscuitto service on Linux. mosquitto.conf: log_type all allow_anonymous false password_file /etc/mosquitto/mosquitto_users.txt pid_file /var/run/mosquitto.pid ...
0
votes
1answer
13 views

How to distinct parts of a ssl CA bundle

I have a .pem file with four distinct sections. The first is obviously the private key because it says so. The latter three parts however I don't know which is which. This cert has been provided to me ...
1
vote
1answer
710 views

How to connect securely to VNC server? (x11vnc)

I'm using Manjaro / Arch Linux distribution. I'm trying to connect securely to my VNC server, but I'm not able to configure it. I'm using x11vnc, because It's much optimal than TigerVNC for streaming ...
0
votes
1answer
30 views

Is TLS-level compression with Apache possible?

Apache2 can transfer compressed data by using the deflate filter. However, it does a HTTP-level compression: it sends back a compressed response, and it shows in the response headers to the clients to ...
0
votes
0answers
243 views

stracing youtube-dl to find what is the SSL wong signature type is

I had shared an error I find many a times with youtube-dl where it says, ERROR: unable to download video data: <urlopen error [SSL: WRONG_SIGNATURE_TYPE] wrong signature type (_ssl.c:1076)> ...
0
votes
0answers
46 views

How to do ldapsearch using TLS1.2 from linux

I am trying to establish a connection to an AD/ENT group using ldapsearch. i am unable to connect and getting below error. Error: ldap_bind: Can't contact LDAP server Syntax Used: /opt/oracle/...
0
votes
0answers
26 views

OCSP stapling + CRL on Apache

Please imagine an architecture with a root certificate authority (CA) and a subordinate CA. Is it possible for a client: to connect to an https server verify the validity of the server's ...
0
votes
0answers
18 views

OCSP: multi stapling on Apache

I am very interested in setting up multi stapling and I can not find a lot of documentation on it, or in any case, recent information. I have a certificate authority (CA) and a root CA above. They ...
1
vote
0answers
28 views

Secure way to update Date & Time of a Linux Embedded Device

I have a Linux (4.9.171) machine running on ARM Cortex-A processor. The system has internet connection and talks to my server over SSL. At the first boot, I can configure the date and time to it. ...
0
votes
1answer
64 views

http server with ssl does not work with nc

If run: cat index.html | nc --ssl --broker --keep-open -l 443 on the client side browser keeps on trying to connect with no success. I mean, the html page does not load. Besides, curl output is: ...
0
votes
1answer
85 views

Enable OCSP stapling with Freeipa - Apache

I have 3 machines with Centos 7. I have FreeIPA server installed on the first machine. This serves as a certificate authority in my network; it's my CA. I have an other machine with FreeIPA client ...
1
vote
0answers
87 views

Setup TLS in postfix for local/internet mail in a LAN

I am on Ubuntu 18.04, last updates of today. postfix: 3.3.0-1ubuntu0.2 openssh: 1:7.6p1-4ubuntu0.3 I have a small local network with 1 PC (P), 2 laptops (L1/L2) all running Ubuntu, a tablet and 2 ...
0
votes
1answer
25 views

tuxad-php repo problem

I try to update PHP with the tuxad-php repo as I need TLS 1.2 support which centos 5 doesn't offer. Upgrading the linux version is not currently feasible. I run into a dependency problem with php-api,...
3
votes
2answers
188 views

Bugzilla error: Can't locate object method quit via package “Net::SMTP::SSL” line 365

I installed Bugzilla on my CentOS 7 web server VPS. The install went smoothly, however when I went to set up email, I received the following error: Can't locate object method "quit" via package "...

1
2 3 4 5
11