Questions tagged [ssl]

SSL/TLS is a cryptographic protocol designed to provide communications security over a computer network. It is the S in HTTPS, IMAPS, SMTPS, etc.

Filter by
Sorted by
Tagged with
0
votes
0answers
6 views

AWS libcrypto resolve messages seen when using a boto3 library, apparently after an update

I'm using the s4cmd package in Python which in turn uses boto3 to communicate with a (non Amazon) S3 service. I've started seeing these warning messages on stderr. I believe this happened after an ...
1
vote
1answer
19 views

how to access to raw cert chain of an SSL server?

I know how to get the cert chain presented by a server with openssl s_client -showcerts -connect server.domain:portnum <<<'' But, what openssl prints is the "reconstructed" cert ...
0
votes
1answer
17 views

openssl: force no default CA certificates, to verify private signed certificate

I would like to verify that my web-server is configured correctly with my self signed certificate. The web-server also has some regular purchased CA signed certificates. The challenge I have is that I ...
0
votes
1answer
32 views

ftp fails in AIX startup

I have a script in AIX that runs a ftp to make a FTPS connection to another host running vsftpd server. /usr/bin/ftp -snv host 8081 <<END_SCRIPT debug user anonymous pass passive binary debug ...
0
votes
0answers
12 views

Adding a self-signed cert in Linux Mint 20.1?

I'm playing around with aspnetcore in Linux Mint (an Ubuntu derivative), and I've run into issues with the dotnet dev-cert. The dotnet cli's "dotnet dev-certs https --trust" command doesn't ...
1
vote
1answer
4k views

How do I correctly configure exim4 on Debian so I can use `sendmail -t` to send mail via my office365 account?

I'm using Debian stretch (9.4). I have an office365 account. Using Evolution, I can successfully download mail via POP3, and also send mail using the Evolution "Sending E-mail" preferences: Server: ...
120
votes
6answers
327k views

Adding a self-signed certificate to the “trusted list”

I've generated a self-signed certificate for my build server and I'd like to globally trust the certificate on my machine, as I created the key myself and I'm sick of seeing warnings. I'm on Ubuntu ...
1
vote
1answer
3k views

Error using openssl with socat - SSL3_CHECK_CERT_AND_ALGORITHM:dh key too small

Short Version of Question Assuming the existence of the relevant files, why does the following sequence of commands not work? socat tcp-listen:10001,fork exec:'/bin/cat' & socat openssl-listen:...
5
votes
1answer
2k views

Can't disable SSLv3 in Apache + mod_nss

I am trying to implement TLS through mod_nss in Apache (RHEL 7). As per the documentation, I have installed mod_nss and removed mod_ssl. I have followed the steps outlined in the documentation (see ...
0
votes
1answer
1k views

Forwarding syslog-ng logs over TLS

This is the scenario: I have a server that's listening on port 6514 on TCP for logs. I created the .key .crt files on the server as described here: https://www.logzilla.net/2014/10/17/configuring-tls-...
6
votes
1answer
4k views

Ubuntu - lftp will not connect to ftps site (Fatal error: gnutls_handshake: An unexpected TLS packet was received.)

I have a specific ftps site that I cannot connect to with lftp. When I attempt to connect I get the error: Fatal error: gnutls_handshake: An unexpected TLS packet was received When I use gnutls-...
0
votes
1answer
5k views

How can I configure TLS1.1 on LFTP?

I need to configure TLS1.1 for lftp?Also how can I check which version of TLS is running on my Redhat Linux OS ?
-1
votes
0answers
34 views

Error, can not get domain token entry for http-01 when using acme.sh to renew a certificate

Now I am using acme.sh(v2.9.0) to renew a certificate on CentOS 7.6, but when I run this command in terminal, shows this error message: [root@ops001 conf.d]# acme.sh --issue -d "*.poemhub.com&...
0
votes
1answer
639 views

curl with NSS and centos does not work

I am using below command to connect:- curl --cert-type P12 --cert ./my.p12:password --cacert ./my-cert.pem https://host:8443/api/root but getting this ERROR: curl: (58) unable to load client cert: -...
4
votes
1answer
3k views

cURL does not recognize certificate

At our company they enforce a web proxy which breaks SSL connections and replaces the certificate by its own fake certificate. (To be precise it uses a proxy cert which is signed by the company cert.) ...
31
votes
7answers
143k views

Apache SSL: server cert does not include ID which matches server name

I'm trying to set up SSL on my apache2 webserver, but it seems that it does not work at all. I have followed a tutorial to create cert files with openssl and configured the /etc/apache2/sites-...
2
votes
1answer
3k views

How can I install Fiddler ca-certificate on Ubuntu to decrypt HTTPS?

I am trying to get my Ubuntu machine to properly recognize and use the certificate from Fiddler as a trusted source so I can decryt HTTPS traffic (specifically to google-analytics). I had this ...
-2
votes
0answers
53 views

OpenSSL: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol

I am trying to connect to a ip port using wget: wget https://VCB-ETT-P67:9001/api/DB/dpc Showing error as It is getting connected but showing ssl connection issue Resolving vcb-ett-p67 (vcb-ett-p67).....
9
votes
3answers
36k views

WARNING: pip is configured with locations that require TLS/SSL, however the ssl module in Python is not available

I'm using Kali Linux 2020.1, I installed Python3.7, then after trying to install modules using pip3 command I keep getting this error message. WARNING: pip is configured with locations that require ...
0
votes
0answers
29 views

SSL: verify certificate and key match

How can I check a SSL certificate and key match in one operation? I'd prefer to use GNUTLS certtool if feasible to keep the tool set consistent. After generating a certificate and getting it signed by ...
0
votes
0answers
15 views

How to add Lets Encrypt to local list of trusted certificates in /etc/ssl/certs/ca-certificates.ctr?

Question How can I add Lets Encrypt to the file /etc/ssl/certs/ca-certificates.crt ? This file is a list of certificates from trusted CA and I want to add Lets Encryt to it. I believe that by doing so ...
3
votes
1answer
4k views

SMTP Auth - SASL on Dovecot, Postfix and CentOS 6.2 (and Open-Xchange)

I am trying to get open SASL to work on CentOS 6.2. I followed this tutorial: http://wiki.centos.org/HowTos/postfix_sasl I suspect it works perfectly for CentOS 5.x so all I really need is an update ...
3
votes
0answers
1k views

Hosting Dovecot and Postfix Behind nginx?

So I'm looking at setting up postfix and dovecot on a server that is currently hosting some web-sites via nginx, and I've stumbled upon the mail {} configuration option for nginx, but I'm having a ...
-2
votes
1answer
270 views

Libera IRC network returns SSL or TLS errors with irssi or weechat [closed]

When I try to connect to Libera chat using IRSSI I get, -!- Irssi: warning SSL handshake failed: Connection timed out When I try to connect it with weechat I get libera =!= | irc: TLS handshake ...
0
votes
2answers
2k views

Manually set wpa_supplicant driver?

I'm using a RaspberryPi 4 (4GB) and I was able to set up /etc/wpa_supplicant/wpa_supplicant.conf with all needed certificates properly, to authenticate at our companys wifi: ctrl_interface=DIR=/var/...
0
votes
0answers
17 views

Redirection of https://example.com to https://www.example.com not working

I am running WordPress on Ubuntu. I am have used let's encrypt SSL. I want to redirect everything to https://www.lifesmile.ae. But it does not work as you can check yourself. I have the following ...
0
votes
1answer
1k views

Session id using curl_7_35

I want to use curl to get the session id. So, please help me if there is any way to get the session id using Curl. Earlier I was using Open SSL to capture the session id. Now, I don't want to use it. ...
51
votes
3answers
168k views

How to extract the Root CA and Subordinate CA from a certificate chain in Linux?

I have an end-entity/server certificate which have an intermediate and root certificate. When I cat on the end-entity certificate, I see only a single BEGIN and END tag. It is the only the end-entity ...
4
votes
1answer
3k views

All TLS requests giving Peer's certificate issuer has been marked as not trusted by the user

When I try an https request to google.com, I just recently started seeing [root@ip-172-31-47-76 ~]# curl -I -v https://google.com * Rebuilt URL to: https://google.com/ * Trying 216.58.193.78... * ...
0
votes
1answer
1k views

sslv3 alert handshake failure – error from feedparser in Python 2.7.6 – with workaround

I've been using a Python script (2.7.6 on Ubuntu 14.04LTS) to pick entries from RSS feeds using the "feedparser" module. This week it stopped working with a particular site. Digging, feedparser....
0
votes
1answer
3k views

Apache Multiple Domains and Multiple SSL to same IP and folder

I am building a system and I need to use the same IP and same folder for a site with multiple domains and a seperate SSL certificate for each one. Also I do not want them to redirect or forward, ...
1
vote
2answers
2k views

Testing stunnel - tcpdump?

I have the following stunnel config on the server: chroot = /var/run/stunnel setuid = nobody setgid = nobody pid = /stunnel.pid cert = /etc/stunnel/stunnel.pem key = /etc/stunnel/stunnel.pem client ...
0
votes
1answer
167 views

Server httpd(OpenBSD), doesn't work server.key

I have tried several methods, but the SSL certificate doesn't work. BSD# curl -vi https://192.168.1.21:443 * Trying 192.168.1.21:443... * Connected to 192.168.1.21 (192....
0
votes
1answer
3k views

Options error: Parameter ca_file can only be specified in TLS-mode

Im currently trying to setup an OpenVPN Client on my Raspberry Pi. I keep on getting some error messages related to TLS. The syslog gives me this: Nov 23 08:34:56 raspberrypi ovpn-ersterclient[1370]...
0
votes
0answers
6 views

Is it possible to transport data from sslyze tool to burp suite?

I would like to know if it is possible to transport data from sslyze tool to the burp suite. I do not want to use burp suite's extensions. I thought to use Fiddler between sslyze tool and burp but it ...
3
votes
1answer
5k views

Create HTTPS server with socat

Currently I am trying to setup a toy https server with socat I am doing the following: As described here: EXAMPLE FOR OPENSSL CONNECTION USING SOCAT cert() { openssl genrsa -out $1.key 2048 ...
26
votes
7answers
74k views

Unable to locally verify the issuer's authority

I am not able to open any https URLs using wget or curl: $ wget https://www.python.org --2015-04-27 17:17:33-- https://www.python.org/ Resolving www.python.org (www.python.org)... 103.245.222.223 ...
1
vote
1answer
1k views

How to get the IETF RFC7919 recommended DH parameter file on board of a router (for Nginx)?

According to Mozilla server side TLS should use the pre-defined DH groups ffdhe2048, ffdhe3072 or ffdhe4096 recommended by the IETF in RFC 7919. My router is running Nginx (and Linux), thus ...
0
votes
1answer
603 views

Apache Reverse proxy SSL issues

I have on my hostaname https://servername/phpmyadmin/ installed phpmyadmin. I wanted to change the url and "adopt" the certificate of domain and use it on db.domain.tld, but I can't get it working. ...
0
votes
0answers
57 views

Postfix TLS no_shared_cipher warnings

I am having weird logs for my Postfix connections and I wonder if there is an issue with my SSL setup Feb 27 22:12:44 krystufek postfix/smtpd[3608789]: connect from a4-14.smtp-out.eu-west-1.amazonses....
0
votes
1answer
288 views

Error — KIO Client Could not connect to host … SSL negotiation failed

An alternate title might be: PlayOnLinux LOTRO install: Open Store In External Browser Fails This question concerns a Linux installation of Lord Of The Rings Online using Wine 5.2 in a PlayOnLinux ...
0
votes
1answer
26 views

httpd not starting with self signed certificates

Trying to start httpd and I see the following in the error log, [Mon Apr 12 21:00:13.398987 2021] [suexec:notice] [pid 155] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec) [Mon Apr 12 21:...
76
votes
4answers
389k views

How can I verify SSL certificates on the command line?

I'm trying to validate/verify that the rsa key, ca-bundle, and certificate stored here are ok. They are not being served by a webserver. How can I verify them?
0
votes
0answers
20 views

Disable vulnerability in RHEL7 - TLSv1.2 ciphers

Using RHLE7 and I have been recommended to disable below cipher on TLSv1.2. Can someone please assist how to disable these ciphers? Try to find a config file where i can disable these entries? Please ...
1
vote
1answer
2k views

How to enable TLSv1.3 in Centos with Apache2

I am using CentOS 5 with Apache2. Into an additional config file: /etc/apache2/conf/extra/ssl.conf I have put these lines: SSLHonorCipherOrder On SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 ...
4
votes
3answers
3k views

Downloading from a public server: SSL certificate problem: unable to get local issuer certificate

I want to download a file (https://discovery.ucl.ac.uk/1575442/1/Palmisanoetal.zip) from a public server via the R command temp <- tempfile() utils::download.file(db_url, temp, method = 'curl')...
0
votes
1answer
28 views

Tools to investigate how DNS over TLS/HTTPS work / how resolve / if work correctly/ how establish tunnels etc

DoT DNS over TLS https://tools.ietf.org/html/rfc7858 DoH DNS over HTTPs https://tools.ietf.org/html/rfc8484 (nice explanation: https://blog.cloudflare.com/dns-encryption-explained/ - TL;DR- port tcp/...
0
votes
1answer
42 views

Fresh Debian Testing - wget returning GnuTLS errors

Did a fresh install of Debian 10 and tried to run the following: root@siren:/# wget music-server.net/download/install.sh --2021-03-08 15:32:18-- http://music-server.net/download/install.sh Resolving ...
2
votes
1answer
3k views

sssd not working over ldap_id_use_start_tls

Have a weird situation going on. Trying to setup sssd, but I am having issues when I set ldap_id_use_start_tls on sssd.conf. In sssd.conf I have the following config: [domain] ldap_id_use_start_tls =...
1
vote
1answer
20 views

Listing installed certificates in alpine

I know there are several topics regarding installation of certiciates in alpine. Is there a way however to list the already trusted root CA's in alpine?

1
2 3 4 5
12