Questions tagged [ssl]

SSL/TLS is a cryptographic protocol designed to provide communications security over a computer network. It is the S in HTTPS, IMAPS, SMTPS, etc.

Filter by
Sorted by
Tagged with
120
votes
6answers
327k views

Adding a self-signed certificate to the “trusted list”

I've generated a self-signed certificate for my build server and I'd like to globally trust the certificate on my machine, as I created the key myself and I'm sick of seeing warnings. I'm on Ubuntu ...
133
votes
6answers
324k views

apache2 Invalid command 'SSLEngine'

When I restart httpd, I get the following error. What am I missing? [root@localhost ~]# service httpd restart Stopping httpd: [ OK ] Starting httpd: ...
13
votes
1answer
15k views

The correct way of implementing SSL on localhost

Could anyone suggest a modern way of generating self-signed certificates to be implemented on localhost, which would be accepted by Chrome and Mozilla? I tried the openssl generation, however Mozilla ...
3
votes
1answer
3k views

Generate a certificate signing request for an SSL server

I'm running CentOS 6.2 LAMP and I've just purchased an SSL certificate via Namecheap that I'm trying to install on my server. This is the certificate I purchased. How do I complete this process ...
3
votes
3answers
10k views

How to solve the problem of PostgreSQL service doesn't start?

This is about Metasploit Framework. root@kali:~# service postgresql start [....] Starting PostgreSQL 9.1 database server: main[....] The PostgreSQL server failed to start. Please check the log ...
77
votes
8answers
151k views

How to disable SSLv3 in Apache?

Everybody seems to be talking about the POODLE vulnerability today. And everybody recommends disabling SSLv3 in Apache using the following configuration directive: SSLProtocol All -SSLv2 -SSLv3 ...
15
votes
3answers
40k views

How to convert ssl ciphers to curl format?

The official ssl docs list ciphers in a different format than curl takes. For instance, if I want curl to use the cipher TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, I have to pass it curl --ciphers ...
5
votes
1answer
56k views

How do I list all available SSL CA certificates on CentOS 6?

It's difficult to tell whether I've succeeded in trusting a given certificate, after I have installed it, especially for root CAs. To check whether I have successfully installed a certificate without ...
11
votes
1answer
27k views

Install Self Signed Certificate to Alpine Linux

How do you install a self signed cert chain into Alpine Linux? I've a self signed cert chain that I've been using in Ubuntu, for example: bacon.crt -----BEGIN CERTIFICATE----- 328FjQIFJNVBLAHBLAH --...
9
votes
8answers
39k views

invalid SSL_version specified at /usr/share/perl5/IO/Socket/SSL.pm line 332

Since I upgraded my PC from (k)ubuntu 12.04 to 12.10 I receive this error message when trying to send an email using sendemail. Installing an older version of IO::Socket::SSL is not an option. I ...
1
vote
1answer
20k views

Linux openssl CN/Hostname verification against SSL certificate

How does an Enterprise Linux system with openssl 1.0.1+ verify that the CN=hostname value in the cert matches the server it resides on? Does it use a plain old reverse DNS lookup on the IP address of ...
12
votes
8answers
81k views

Helo command rejected: need fully-qualified hostname Error

My mail server is in some blacklist cause of spams. I reconfugured postfix. Aften then My customers get this error they can't send emails. 404 4.5.2 <PLLAMNAZIFE>: Helo command rejected: need ...
14
votes
2answers
19k views

Is it possible to use TLSv1.3 in Apache 2.4

Is it possible to use TLSv1.3 in Apache2.4? As of October 2015, TLS 1.3 is a working draft, i.e. TLSv1.3.
8
votes
3answers
8k views

How do I extract all subjects of a cacertfile with the openssl command line?

Is there an openssl command to extract all certifacte subjects of a cacertfile (a file containing several certificates like /etc/ssl/certs/ca-certificates.crt)? I tried openssl x509 -in /etc/ssl/...
7
votes
1answer
73k views

Apache - Generate private key from an existing .crt file

I have some apache instances running smoothly with a home-made generated certificate. Now I have to use a provided certificate, but what I had sent is only a .crt file. In tried to copy it into the ...
4
votes
1answer
2k views

Socket reset by peer ever 2 hours

A client connects to a server using ssl (openssl) over a tcp socket. If there is no ongoing communication, 2 hours later (plus a couple of minutes), the client complains "Socket error. Connection ...
4
votes
2answers
1k views

Generate HPKP fingerprints for all certificate chain

From below command able to generate Base64 pin for only first depth certificate. But need to generate pin for all depth of certificate. openssl s_client -servername example.com -connect example.com:...
4
votes
4answers
5k views

Creating a *.local ssl certificate

I am trying to set up a single SSL certificate that will make any *.local website work over https. I have all .local domains pointing back to my local machine. I use these when developing websites. A ...
3
votes
1answer
967 views

Does fetchmail support SSL or TLS when using SMTP to forward email?

I am trying to forward emails that are fetched with fetchmail to another SMTP host, which enforces STARTTLS. I could not find a way to enable TLS in fetchmail. Is this possible at all? If so, how?
1
vote
1answer
394 views

TLS tunnel for Outlook 365

We have here an old helpdesk software that only speaks imaps using the now obsolete SSLv3. Obviously, such protocol is no longer accepted by Outlook 365. I proposed to install a TLS tunnel/...
1
vote
0answers
742 views

How to add my own created certificate authority to system trusted repositories

I was told that I can add my created CA to trusted repositories/authorities in my system instead of adding it from browser and configuring in in ssl.conf. Yet I can't find anything similar on the web....
1
vote
1answer
625 views

Images and Stylesheets not loading from squid due to a bad certificate?

I just setup Gate Sentry on a Raspberry PI 3, and it contains Squid 3 as part of it's proxy chain. It also utilizes ssl bump and certain websites that use SSL (usually big ones, like Facebook and ...
8
votes
1answer
26k views

What do I do if I can't find ssl.conf file in a CentOS server?

I'm preparing a new CentOS Linux server, one of many. When I try to configure SSL on this server, I noticed there is no ssl.conf file. Not in /etc/httpd/conf.d/ssl.conf and not in /etc/httpd/conf/ssl....
2
votes
1answer
130 views

How to use curl/git in Debian Squeeze with modern HTTPS?

I need to test a debugging tool on a variety of outdated distributions. I managed to install build-essential package on Debian Squeeze. The problem though is now that it's impossible to download ...
1
vote
1answer
2k views

Changing IPTables to Allow FTP over TLS Using Passive Ports

I am using Arch Linux. I followed a tutorial to change /etc/iptables/iptables.rules to allow only the basic ports for my web server. I also used /etc/modules-load.d/nf_conntrack_ftp.conf to enable ...
1
vote
1answer
116 views

Trying to add SSL certificate to my site but getting an error

I've been following this tutorial to add SSL certificates to my site, however it returns this error: Client with the currently selected authenticator does not support any combination of challenges ...
1
vote
1answer
471 views

Installing Python 3.7 from source with custom openssl installation: test_ssl failed [closed]

To be able to install Python from source without root permission on a Ubuntu server, I had to install openssl, which I did using the following commands: wget https://www.openssl.org/source/openssl-1....
0
votes
1answer
741 views

openssl: local installation caused certificate issue

To install Python from source without root permission, I had to install openssl, which I did using the following commands: wget https://www.openssl.org/source/openssl-1.1.1e.tar.gz tar -xzvf openssl-...
0
votes
2answers
250 views

What ports are advised to use for secure mail?

I have installed postfix and dovecot mail server. My clients use The Bat software to send/receive mails. They use standart 25 and 110 ports. Now I want to secure my connection, and I want to ask ...
0
votes
1answer
2k views

Install SSL Certificate in Iceweasel

I'm using Kali on Windows. I downloaded the Burp Suite and I'm trying to install its SSL certificate onto the Iceweasel browser. Burp Suite, the leading toolkit for web application security testing ...
0
votes
2answers
5k views

Stunnel Error - Cannot open Log File

Using the following stunnel config file: chroot = /var/run/stunnel setuid = nobody setgid = nobody debug = 7 output = /var/log/stunnel/stunnel.log pid = /stunnel.pid cert = /etc/stunnel/stunnel....
0
votes
0answers
63 views

Squid filters some of Bugzilla HTTPs URLs

I am trying to finetune web filtering with squid, but meeting ununderstandable behaviour (for me). For example, if I open the following address: https://bugzilla.mozilla.org/ It goes fine. But if I ...
0
votes
1answer
37 views

Ensure TLS communication security in Mosquitto

I have simple MQTT Mosquitto server that I'm trying to make secure. Mosquitto.conf: log_type all password_file /etc/mosquitto/mosquitto_users.txt pid_file /var/run/mosquitto.pid persistence true ...
0
votes
1answer
1k views

wget TLSv1 behaves the same as TLSv1_2

I used wireshark to compare curl --tlsv1.0 vs --tlsv1.2 The server handshake obediently uses TLSv1.0 for servers that support it (the point is to check to validate they don't): wget url --no-check-...
-1
votes
1answer
549 views

Combining Certbot with an Nginx server block maker

I have an Ubuntu 16.04 environment with a pure Nginx server and I use the following Bash script to automate creation of server blocks and corresponding (self-signed) SSL certifications. It allows me ...